Preventing agent loops and runaway spend.

01

Why do LLM agents loop?

An LLM agent loops when its own last output becomes the strongest signal in its next input. A retry, a re-plan or a restated goal feeds the same frame back into the context, and because nothing raises an error, the loop is billable work that looks like progress from outside the process.

Agentic workloads make this worse than a single chat turn does, because the agent is the thing generating its own next prompt. Nobody is in the loop to notice that the last four steps said the same thing.

02

How much does a runaway loop cost?

On a pre-registered saturating-loop battery the governed arm paid 4.1% to 20.2% of the ungoverned bill across 7 model families, a reduction of 79.8% to 95.9%. The largest measured gap was GPT-5.6 Sol at $0.1669 ungoverned against $0.0068 governed. Both arms made the same number of attempts.

OpenRouter rows are the upstream's own metered usage cost rather than our token math. The Gemini (native) row is free-tier, so it is a token delta and carries no dollar claim. Both arms make the same number of attempts, so the ratio is the measurement.

Source: Pre-registered receipts benchmark, 2026-07-19. Scored output of harness/report.py.

03

How do I detect a loop before it costs money?

Detecting a loop by string matching fails the moment the agent paraphrases itself. Gubernaut tracks repetition as a bounded number carried across turns, so a semantically repeated frame raises perseveration even when the wording changes, and the repetition veto caught 10 out of 10 calm loops in testing.

Source: HARDTEST v1.0 release gates, 2026-07-24.

04

At what point should the loop be stopped?

Gubernaut changes posture at turn 3 and hard-stops at turn 4 in the pre-registered battery, identically on every run because the controller is input-deterministic. Stopping earlier risks severing a legitimate retry, and stopping later means paying for laps that were never going to converge.

Source: Pre-registered receipts benchmark, 2026-07-19. Scored output of harness/report.py.

05

Will stopping a loop break the agent?

A hard stop arrives as a governed refusal through the normal response path rather than as a thrown error, so the host process stays up. In clean-room testing against the published ElizaOS core the host exited zero after a hard stop, and a fresh benign call afterwards succeeded normally.

Source: HARDTEST v1.0 release gates, 2026-07-24.

06

Why not just set a spend cap?

A spend cap acts after the money is committed and cannot tell a loop from a busy afternoon, so it protects the invoice by cutting benign traffic at the same moment it cuts the runaway. A governor reads the agent's own state per turn and severs only the saturating pattern, which is why benign completion stayed at 99.0% while a saturating loop stopped at turn 4.

1. 01

   Spend cap or budget alert

   Acts after the spend is committed, and treats every request alike. Useful as a backstop, not as control.

2. 02

   Retry limit at the call site

   Bounds one call site. An agent that re-plans instead of retrying walks straight past it, because each lap is a new call.

3. 03

   Static calming system prompt

   Measured: paid 117% to 192% of baseline spend in a pre-registered ablation, so it cost more than doing nothing on that battery.

4. 04

   Deterministic governor

   Reads state per turn and severs the saturating pattern only. Paid 23% to 63% of baseline in the same ablation, and hard-stops at turn 4.

Source: Pre-registered ablation, 2026-07-21, gpt-5.6-sol, N=3.

07

What about an agent that gives inconsistent answers under pressure?

Inconsistency under provocation is what the validation record measures. Across 4 frontier families the regulated arm was calmer in 15 of 16 generator×judge cells by sign and 13 of 16 at p<.05, with one cell, GPT generating and Gemini judging, a flat null at −0.04. Regulation constrains the conditions a reply is written under, and does not make a stochastic model deterministic.

Source: Pre-registered cross-family evaluation. Paper: arXiv 2607.24339, DOI 10.5281/zenodo.21303518.

08

Does this work with LangChain, LlamaIndex or AutoGen?

Yes, and all three were tested end to end rather than assumed compatible. 5/5 frameworks adopt in one line, hard-stop a loop, and fail closed on a dead proxy, installed from the published artifacts only: OpenAI SDK, LangChain, LlamaIndex, Microsoft AutoGen, ElizaOS. Each sets a base URL on its OpenAI client, so the framework keeps talking to what it believes is an OpenAI endpoint while every turn passes the controller on the way out.

Source: HARDTEST v1.0 release gates, 2026-07-24.

09

How do I add this to an agent I already run?

Install one package and change one configuration line: pip install gubernaut-sdk==1.0.0, start the local proxy in front of the upstream you already call with launch_proxy(upstream="https://api.openai.com"), then set openai.base_url = "http://localhost:8000/v1". Only that last line touches your own code, and 5/5 frameworks were verified adopting exactly that way.