This account's POST /api/refill is protected by the real requireKYA() middleware. Anonymous or over-cap agent traffic is blocked with a 403 KYA required. Verified agents refill and get a co-signed receipt. Drive it from Claude Code via the passport_refill_demo MCP tool, the passport-agent refill CLI, or npm run demo.