Proves what it did,
or refuses to say.
Every coding agent ends its turn with assertions. This one ends with evidence — or with an honest refusal to assert.
$ omnis-key claims verify --refuse-demo ⊘ REFUSED_NO_VERIFIER "this is faster" ⊘ REFUSED_NO_VERIFIER "this is secure now" · UNGROUNDED "more idiomatic"
No benchmark was run. The absence of a vulnerability is unprovable. “Idiomatic” is not falsifiable. So none of the three are asserted — and you know which claims to trust.
Claims about your codebase are certified by real tools — git, build, tests — or visibly refused. Stage-3 verification never calls a model. Every mutating action lands in a hash-chained ledger, redacted by default: shape and hashes, never raw secrets.
A refusal is a successful turn. It is the product working, not failing.