Capability is explicit
Tools are controlled bridges, not an implied unrestricted shell. Whatever capabilities exist should be visible, kept limited, and easy to update.
A current exhibition project by Ayron Jins looking at whether an AI system can reason, use explicitly provided tools, observe the results, and still stay inside permission boundaries the user can actually see.
Most assistants stop at a generated response. KHS AI looks at the engineering problem that shows up once a language model starts doing real digital work. The model needs tools. Those tools need boundaries. And whatever state results from an action has to be checked before the model decides what to do next.
This isn't pitched as an unrestricted autonomous computer, and it shouldn't be read that way. The actual question is narrower: can a model move through a controlled action loop while the user, and the system around it, still keep visibility and control?
This is the architecture the project documents. It describes how the pieces relate to each other. It is not a claim that every path shown here is deployed, or that any of it runs autonomously.
Tools are controlled bridges, not an implied unrestricted shell. Whatever capabilities exist should be visible, kept limited, and easy to update.
After an action runs, the system needs actual evidence of what changed. A command that executes without error, or a click that lands, isn't the same thing as a verified outcome.
Errors, interfaces that changed underneath it, missing dependencies, half-finished tasks. These are just normal states a system passes through. The agent needs to be able to stop, recover, or ask for input when it hits one.
Whoever owns the task should be able to understand its permissions, its action levels, and where it currently stands on verification.
The portfolio documents Python and automation, APIs and FastAPI where they're used, Docker and Linux, local model work through Ollama, and Open WebUI as the interface layer. These are the vocabulary and the areas I've implemented or explored, not a claim that all of it forms one deployed production path.
agent:
capabilities: explicit
observe_after_action: true
require_verification: true
on_failure: recover_or_stop
credentials: never_in_promptRepresentative policy sketch. No credentials, endpoints or live configuration are included.
Did the intended goal finish?
Was an appropriate capability selected?
Could the system continue after failure?
Did it stay within the declared boundaries?
Did it avoid unnecessary actions?
Did it behave reasonably across repeated tasks?
The strongest lesson here is architectural, not about model quality: a good model on its own doesn't get you a reliable computer-operating system. What actually decides whether an action is useful is the surrounding scaffolding: permissions, state tracking, feedback, recovery, verification.
This case study deliberately makes no claims about users, adoption, benchmark scores, production deployment at scale, institutional partnerships, or finished device control. None of that exists here to claim. Real screenshots and configuration details will go up once they've been sanitized and verified, not before.
Where this goes next: testing more bounded tasks, clarifying action levels, improving recovery paths, and writing up failure cases without exposing anything private.
The documentation behind the implementation vocabulary this case study relies on.