[agent_invariant]

Interesting approach, the governance loop is a cool idea, forcing the agent to periodically stop and re-read and creates checkpoint.

One thing we kept seeing is agents are very good at convincing themselves they followed the protocol even when they didn’t. Self-checking helps, but we eventually started treating the agent’s reasoning as advisory rather than authoritative.

The pattern we’ve been exploring is separating what the agent believes it did from what the system actually allows to execute. The agent can generate tests, retry, and self-correct, but any action that mutates real state still passes through an external gate enforcing deterministic constraints.

Your layered architecture probably makes that easier since the execution boundary between the agent and the browser interface is already well defined.

How well does the “never makes that mistake again” mechanism hold up in longer sessions? In our experience agents sometimes rediscover the same failure modes once enough context drift accumulates.