# fak · try it: an agentic chat

kernel-gated · no model · no key hardware: …
A try-it agentic chat: type a message and a tiny tool-using agent answers — but every tool call it makes is adjudicated by the real fak kernel first. Ask for the time or the weather and it answers; ask it to delete your account or paste a prompt injection and watch the destructive call get refused at the safety floor, while the safe answer still comes back. The planner is a deterministic keyword router — no model — so this runs anywhere; a latest-model planner is a drop-in upgrade.
Each tool call is a real verdict from the fak kernel (the same `kernel.Fold` path `fak preflight` uses), not a scripted reply: the read-only tools are allowed, a destructive `delete_account` is an explicit floor deny, and an off-floor `wipe_disk` falls to fail-closed `DEFAULT_DENY`. Self-contained, no model weights. Headless self-check: `go run ./cmd/trychatdemo -selfcheck`.