\section{Risks and Boundaries}

Kungfu's opportunity depends on preserving several distinctions under product
pressure.

\subsection{The Demo Trap}

A five-minute continuity result can make the value legible, but it cannot
prove multi-day durability, arbitrary provider behavior, or reduced
coordination cost in real Work. The product must lead from the bounded Agent
Work Lab result into matched longitudinal use without inflating the first
claim.

\subsection{Ontology Before Value}

The internal model is precise because responsibility and authority are hard.
Exposing that model as first-use navigation would make users learn the
implementation before experiencing the product. Project, Work, and Agent must
remain the complete first layer; deeper terms should appear only when they
explain a visible need.

\subsection{Evidence Becoming Authority}

A trusted publisher, first-party package, KFD declaration, passing test,
provider identity, model confidence, or green build can be valuable evidence.
None automatically grants authority to act or complete Work. The ecosystem
fails if a convenient upper layer can bypass receiver-owned assessment,
Warrant, admission, or settlement.

\subsection{Local Complexity Without Compression}

Local-first software can transfer deployment, storage, provider, and recovery
complexity to the user. Kungfu's architecture is justified only if the product
compresses that complexity into a clearer Project and Work experience. A
technically correct runtime with an unreliable install, opaque error, or
provider-specific ritual has not completed the product job.

\subsection{Premature Ecosystem Claims}

One founding implementation, one exact artifact, or one first-party Hub-shaped
adapter does not establish an industry standard, marketplace, or independent
adoption. Public language must distinguish protocol possibility, first-party
qualification, and external production use.

\subsection{The Machine-Life Category Error}

Work continuity is a prerequisite for a persistent machine subject, not proof
that one exists. Replaceable Agents, qualified KFX capabilities, recursive
dogfood, and successor cuts make a machine-life experiment plausible. They do
not establish biological life, sentience, intrinsic desire, unrestricted
autonomy, or completed self-maintenance.

The product should remain valuable even if the stronger research hypothesis is
falsified.
