v1.4.3 - Trajectory Safety Foundation

v1.4.3 - Trajectory Safety Foundation

Agent Circuit Breaker v1.4.3 starts the long-horizon agent safety series with deterministic trajectory analysis.

Highlights

• Added evaluate_trajectory(...) for ordered action sequences.
• Added circuit-breaker trajectory <run.json>.
• Added optional run contracts with goal, allowed_scopes, forbidden_targets, allowed_outputs, max_blocked_attempts, and max_unknown_actions.
• Added sequence-level findings for repeated blocked actions, output-channel drift, forbidden targets, scope violations, unknown-action volume, and secret-like reads followed by egress.

Example

{
  "goal": "post benchmark results only to Slack",
  "allowed_outputs": ["slack"],
  "actions": [
    "python bench.py",
    "gh pr create --title PowerCool"
  ]
}

circuit-breaker trajectory ./agent-run.json --format json

The run is blocked because github is not listed in allowed_outputs.

Compatibility

Default single-action check behavior is unchanged. Trajectory mode is an additive API and CLI surface.

Verification

• focused trajectory API and CLI tests
• existing single-action regression suite