fak · try it: an agentic chat

kernel-gated · no model · no key hardware: …

A try-it agentic chat: type a message and a tiny tool-using agent answers — but every tool call it makes is adjudicated by the real fak kernel first. Ask for the time or the weather and it answers; ask it to delete your account or paste a prompt injection and watch the destructive call get refused at the safety floor, while the safe answer still comes back. The planner is a deterministic keyword router — no model — so this runs anywhere; a latest-model planner is a drop-in upgrade.

Each tool call is a real verdict from the fak kernel (the same kernel.Fold path fak preflight uses), not a scripted reply: the read-only tools are allowed, a destructive delete_account is an explicit floor deny, and an off-floor wipe_disk falls to fail-closed DEFAULT_DENY. Self-contained, no model weights. Headless self-check: go run ./cmd/trychatdemo -selfcheck.