A defendable AI agent leaves a written, checkable receipt for everything it does โ what it reads, the playbook it runs, what it concludes, what it does, and what it spends. Walk the whole animal, one organ at a time. Every verdict below is computed live in your browser by KCP's real decision logic โ the same conformance, grounding, planner, confidence and compliance-export code, lifted from source โ and signed so you can check it.
A stale policy is refused at runtime โ with a reason. Flip its validity and watch the gate.
02the playbookAn unsigned or tampered skill is refused before it can run. Break the signature; watch it fail closed.
03what it doesGrounding for actions โ a read outside the skill's declared paths is held before it executes.
04what it concludesEvery claim must map to a source the agent actually loaded. Unsupported ones surface as gaps.
05what it concludesDrag the confidence past the threshold โ a shaky answer is halted instead of shipped.
06what it remembersRetention and a right-to-forget gate what may be recalled. Expire it; watch it vanish.
07autonomousTurn a loose agent loose. Two in-scope steps pass; the third hits the wall and opens a ticket.
08what it spendsA purchase checked against a spend envelope โ vendor, currency, amount โ before the wallet signs.
09one adjudicatorThe same action, checked at the MCP proxy and inside the runtime loop โ one shared verdict.
10the enablerBounded, an autonomous agent runs at full speed with zero blocks โ and still leaves a full trail.
11the trailOne run exports itself as SOC 2 / ISO 27001 / ISO 42001 / EU AI Act evidence. Press "it's Thursday."
Eleven interactive stations, each running KCP's real decision logic โ lifted from kcp-agent / kcp-harness โ in your browser and signing its verdict with genuine crypto.subtle. Nothing here is scripted; drag the controls and the adjudicator re-decides. (Two organs โ memory and playbook-signing โ are faithfully modeled where a browser can't hold the project's keys.) Apache-2.0, by eXOReaction under Cantara. The manifesto: why a defendable agent.