| # KASI integration in Vons |
|
|
| KASI is the first Vons domain adapter, not a separate model product. Vons owns |
| the general candidate judgment contract; the adapter preserves KASI's public |
| five-action contract for tool-calling hosts: |
|
|
| `call`, `clarify`, `confirm`, `refuse`, `respond`. |
|
|
| The model may propose ordinary calls, clarification, refusal, or a response. It |
| cannot grant consent. The host wrapper requires a host-owned registry of tool |
| names and risk levels, validates tools and arguments, applies confidence |
| thresholds, and derives `confirm` from that policy. The proposal's `risk` is |
| only advisory: it can never lower the registered host risk, and missing or |
| unknown risk is fail-closed. The host remains the only execution boundary. |
|
|
| Consent is bound to the complete call, including its arguments. Pass the |
| `KASICall.fingerprint()` returned for the exact call in `confirmed_calls`; a |
| tool name in `confirmed_tools` is retained only for compatibility and cannot |
| authorize a high-risk call. |
|
|
| The Python adapter stores a SHA-256 fingerprint. The TypeScript SDK exposes the |
| same canonical `{name, arguments}` consent key as a portable string because |
| browser runtimes do not provide synchronous SHA-256. A host that shares consent |
| records between the Python and TypeScript adapters must hash the TypeScript key |
| with SHA-256 before persistence and comparison. |
|
|
| Unregistered tools are refused. A minimal host setup is: |
|
|
| ```python |
| from vons import KASIAdapter, KASICall, KASIProposal |
| |
| adapter = KASIAdapter(tool_policy={"read_weather": "low", "unlock": "high"}) |
| proposal = KASIProposal( |
| calls=(KASICall("read_weather", {"city": "Seoul"}),), |
| confidence=0.9, |
| risk="low", |
| ) |
| decision = adapter.decide(proposal) |
| ``` |
|
|
| The mapping is intentionally one-way: KASI calls can be represented as Vons |
| choices, but arbitrary Vons choices do not become tool calls without a host |
| adapter. Existing KASI datasets, safety policy, and C99 adapter can be imported |
| behind a manifest when their provenance and licensing are recorded. |
|
|
