v0.23.0 — Rule-Based Kill Switch for Runaway Sessions
Rule-Based Kill Switch for Runaway Sessions
Agents can go off the rails — burning tokens, modifying files they should not touch, or looping on failing tests. This release adds a declarative rules engine to agent-strace watch that can pause, kill, or alert when a session crosses a threshold.
agent-strace watch --rules .watch-rules.json
agent-strace watch --rules .watch-rules.json --dry-runRule conditions:
files_modified— number of distinct paths writtencost_usd— estimated spend so farconsecutive_test_failures— repeated test failures in a rowduration_minutes— wall-clock session lengthfile_path— glob match on any file touched
Actions:
pause— SIGSTOP the agent process (resume with SIGCONT)kill— SIGTERM, then SIGKILL after 5s; auto-generates a postmortemalert— log only, no interruption
--dry-run evaluates rules without acting — useful for tuning thresholds before going live.