Get started
Amygdala

QuoxGuard implant

The safety net that enables trust.

Inspired by the amygdala · Part of QuoxMind

What it does

Independent, and always watching

Threat readout

AlertWarns, self-corrects · Free
PauseWarns, self-corrects · Free
Abort taskStops execution · Pro
Abort objectiveStops execution · Complete
Enforcement rules6
Loop detection3+ identical failures
Circuit breakersSSH · LLM · collector (Beta)
Ships withQuoxCORE

Much as the amygdala processes incoming stimuli for potential danger and can trigger protective responses before conscious awareness catches up, QuoxGuard monitors continuously and intervenes when risk is detected.

It enforces six rules: stall detection, error cascade recognition, budget burn rate monitoring, objective staleness checks, known failure pattern matching, and loop detection. Loop detection fingerprints errors and catches three or more identical failures in sequence, preventing agents from repeating the same broken action indefinitely.

Guard operates across four authority levels: alert, pause, abort task, and abort objective. At the lower levels, it warns and gives the system a chance to self-correct. At the higher levels, it stops execution outright.

Per-resource circuit breakers (SSH, LLM, collector) trip after repeated failures at the execution chokepoints and fail fast while open, with a half-open probe before recovery, so cascading failures stop propagating across the fleet. Guard also queries the wisdom store for known dangerous patterns, applying institutional memory to threat assessment.

Guard is deliberately independent. It does not take direction from Executive or any other implant in the action chain. This separation ensures that the safety system cannot be overridden by the system it monitors. Trust in autonomous operations depends on this independence.

Shipped, tier-gated

Shipped: the six enforcement rules and the autonomy_decisions trail run on every tier. The authority ceiling itself is tier-gated and server-enforced, not a UI badge: Free stops at pause/escalate (L2), QuoxMind Pro enables single-task aborts (L3), Complete enables whole-objective aborts (L4).

The per-resource circuit breakers are Beta: wired into the primary execution chokepoints on 2026-09-02 with fail-fast and half-open recovery under test; the paths not yet covered are named in the automation status doc.

Before / after

What changes when Guard is active

Before

Dangerous operations proceed without warning unless you catch them yourself.

After

Execution has a safety net. Known failure patterns trigger warnings before actions are taken.

Before

Policy enforcement happens after the fact, or not at all.

After

Policies enforced at the point of action. Guard intervenes before damage occurs, not after.

Before

Trusting autonomous agents requires faith and monitoring.

After

Trusted autonomy. Guard enables you to delegate with confidence because oversight is built in.

Before

Risk assessment is manual and inconsistent.

After

Continuous risk monitoring. Every action evaluated against threat models, policies, and historical failure data.

Watch list

Connected implants

Guard sits outside the action chain, watching what the other implants do without taking orders from them. These five faculties feed it context or receive its interventions.

Part of QuoxMind

Alert and pause enforcement ship free with every QuoxCORE installation. Aborting a single task needs QuoxMind Pro; aborting a whole objective needs Complete.

Explore QuoxMind