QuoxGuard implant
The safety net that enables trust.
Independent, and always watching
Threat readout
Much as the amygdala processes incoming stimuli for potential danger and can trigger protective responses before conscious awareness catches up, QuoxGuard monitors continuously and intervenes when risk is detected.
It enforces six rules: stall detection, error cascade recognition, budget burn rate monitoring, objective staleness checks, known failure pattern matching, and loop detection. Loop detection fingerprints errors and catches three or more identical failures in sequence, preventing agents from repeating the same broken action indefinitely.
Guard operates across four authority levels: alert, pause, abort task, and abort objective. At the lower levels, it warns and gives the system a chance to self-correct. At the higher levels, it stops execution outright.
Per-resource circuit breakers (SSH, LLM, collector) trip after repeated failures at the execution chokepoints and fail fast while open, with a half-open probe before recovery, so cascading failures stop propagating across the fleet. Guard also queries the wisdom store for known dangerous patterns, applying institutional memory to threat assessment.
Guard is deliberately independent. It does not take direction from Executive or any other implant in the action chain. This separation ensures that the safety system cannot be overridden by the system it monitors. Trust in autonomous operations depends on this independence.
Shipped: the six enforcement rules and the autonomy_decisions trail run on every tier. The authority ceiling itself is tier-gated and server-enforced, not a UI badge: Free stops at pause/escalate (L2), QuoxMind Pro enables single-task aborts (L3), Complete enables whole-objective aborts (L4).
The per-resource circuit breakers are Beta: wired into the primary execution chokepoints on 2026-09-02 with fail-fast and half-open recovery under test; the paths not yet covered are named in the automation status doc.
What changes when Guard is active
Dangerous operations proceed without warning unless you catch them yourself.
Execution has a safety net. Known failure patterns trigger warnings before actions are taken.
Policy enforcement happens after the fact, or not at all.
Policies enforced at the point of action. Guard intervenes before damage occurs, not after.
Trusting autonomous agents requires faith and monitoring.
Trusted autonomy. Guard enables you to delegate with confidence because oversight is built in.
Risk assessment is manual and inconsistent.
Continuous risk monitoring. Every action evaluated against threat models, policies, and historical failure data.
Connected implants
Guard sits outside the action chain, watching what the other implants do without taking orders from them. These five faculties feed it context or receive its interventions.
QuoxExecutive
Monitors and regulates all planned actions
QuoxSense
Receives threat-relevant observations
QuoxValue
Risk-weighted importance informs threat severity
QuoxPredict
Forecast data flags pre-emptive risk signals
QuoxTemporal
Timing anomalies trigger safety checks
Part of QuoxMind
Alert and pause enforcement ship free with every QuoxCORE installation. Aborting a single task needs QuoxMind Pro; aborting a whole objective needs Complete.
Explore QuoxMind