Recipe: Stop Budget Runaway
Goal
Prevent an agent from entering a recursive loop that burns tokens and budget.Threats / failures this prevents
- Token runaway (infinite planning / tool loops)
- Unexpected budget spikes
- Reliability collapse due to long-running sessions
Policy intent (high level)
- If budget class is
freeand requested tokens exceed limit → TRANSFORM (clamp) - If estimated spend exceeds remaining budget → DENY
- If required cost signals are missing → DEGRADE to conservative defaults
Recommended Decisions
TRANSFORMfor token clampsDEGRADEfor conservative defaultsDENYwhen spend would exceed hard limits
Recommended reason codes (examples)
COST_TOKEN_CLAMP_FREE_TIERCOST_BUDGET_EXCEEDEDREL_SAFE_DEFAULTS_APPLIED
Audit evidence to capture
- original vs effective values (clamped tokens)
- decision + reason codes
- correlation identifiers
- cost metadata (estimated_usd, tokens)
Golden corpus cases should include boundary values (exactly at limit) and missing-input cases.
Related reading
- /policy/golden-corpus
- /policy/risk-scores
- /audit/cost-metadata

