KASI integration in Vons

KASI is the first Vons domain adapter, not a separate model product. Vons owns the general candidate judgment contract; the adapter preserves KASI's public five-action contract for tool-calling hosts:

call, clarify, confirm, refuse, respond.

The model may propose ordinary calls, clarification, refusal, or a response. It cannot grant consent. The host wrapper requires a host-owned registry of tool names and risk levels, validates tools and arguments, applies confidence thresholds, and derives confirm from that policy. The proposal's risk is only advisory: it can never lower the registered host risk, and missing or unknown risk is fail-closed. The host remains the only execution boundary.

Consent is bound to the complete call, including its arguments. Pass the KASICall.fingerprint() returned for the exact call in confirmed_calls; a tool name in confirmed_tools is retained only for compatibility and cannot authorize a high-risk call.

The Python adapter stores a SHA-256 fingerprint. The TypeScript SDK exposes the same canonical {name, arguments} consent key as a portable string because browser runtimes do not provide synchronous SHA-256. A host that shares consent records between the Python and TypeScript adapters must hash the TypeScript key with SHA-256 before persistence and comparison.

Unregistered tools are refused. A minimal host setup is:

from vons import KASIAdapter, KASICall, KASIProposal

adapter = KASIAdapter(tool_policy={"read_weather": "low", "unlock": "high"})
proposal = KASIProposal(
    calls=(KASICall("read_weather", {"city": "Seoul"}),),
    confidence=0.9,
    risk="low",
)
decision = adapter.decide(proposal)

The mapping is intentionally one-way: KASI calls can be represented as Vons choices, but arbitrary Vons choices do not become tool calls without a host adapter. Existing KASI datasets, safety policy, and C99 adapter can be imported behind a manifest when their provenance and licensing are recorded.