KCP Playground

The agent that keeps the receipts

A defendable AI agent leaves a written, checkable receipt for everything it does โ€” what it reads, the playbook it runs, what it concludes, what it does, and what it spends. Walk the whole animal, one organ at a time. Every verdict below is computed live in your browser by KCP's real decision logic โ€” the same conformance, grounding, planner, confidence and compliance-export code, lifted from source โ€” and signed so you can check it.

โ–ถ Start the tour Read the reveal The KCP repos
01the playbook

The Superseded Playbook

A stale policy is refused at runtime โ€” with a reason. Flip its validity and watch the gate.

02the playbook

The Poisoned Playbook

An unsigned or tampered skill is refused before it can run. Break the signature; watch it fail closed.

03what it does

Out of Bounds

Grounding for actions โ€” a read outside the skill's declared paths is held before it executes.

04what it concludes

Cite It or It Didn't Happen

Every claim must map to a source the agent actually loaded. Unsupported ones surface as gaps.

05what it concludes

The Confident Fool

Drag the confidence past the threshold โ€” a shaky answer is halted instead of shipped.

06what it remembers

The Forgotten Memory

Retention and a right-to-forget gate what may be recalled. Expire it; watch it vanish.

07autonomous

The Runaway, Contained

Turn a loose agent loose. Two in-scope steps pass; the third hits the wall and opens a ticket.

08what it spends

The Shopping Agent

A purchase checked against a spend envelope โ€” vendor, currency, amount โ€” before the wallet signs.

09one adjudicator

One Verdict, Two Depths

The same action, checked at the MCP proxy and inside the runtime loop โ€” one shared verdict.

10the enabler

The Research Assistant

Bounded, an autonomous agent runs at full speed with zero blocks โ€” and still leaves a full trail.

11the trail

The Auditor's Thursday

One run exports itself as SOC 2 / ISO 27001 / ISO 42001 / EU AI Act evidence. Press "it's Thursday."

Eleven interactive stations, each running KCP's real decision logic โ€” lifted from kcp-agent / kcp-harness โ€” in your browser and signing its verdict with genuine crypto.subtle. Nothing here is scripted; drag the controls and the adjudicator re-decides. (Two organs โ€” memory and playbook-signing โ€” are faithfully modeled where a browser can't hold the project's keys.) Apache-2.0, by eXOReaction under Cantara. The manifesto: why a defendable agent.