See what an agent can reach, then watch KIFF hold the line
The moment an agent is wired to real systems it can trigger consequential actions; you need to see the blast radius and know the wrong move is stopped.
A scan surfaces every action the agent's code can reach, then live: the safe fix runs, a high-blast-radius action waits for a human, and a schema migration mid-incident is blocked, the move that has wiped live databases this year.