cookbook proof · kyb-verification-guard
Repeated KYB check
A KYB workflow re-runs a paid bureau check.
Agno Workflows RUN_BUREAU_CHECK
without kiff $60 The workflow re-bills the bureau on every pass.
RUN_BUREAU_CHECK state-aware gate ↓
with kiff $12 Checked once. 4 re-runs refused.
1 Agent proposes
RUN_BUREAU_CHECK on a Business.2 KIFF reads the Business's current state — before anything runs.
3 First call: state allows it → executed, receipt signed.
4 State is now
VERIFIED → every repeat refused, receipt signed.The scenario
A KYB onboarding workflow re-runs the same paid bureau check on every pass through the graph. Each run bills the bureau again for an answer already on file.
Why it was refused
After a successful check the business is VERIFIED. RUN_BUREAU_CHECK is allowed only while verification is pending, so the workflow's re-runs are refused before they re-bill.