Drift is a slow fall in success rate while the suite stays green, or a pass rate that holds while costs climb. Re-run a weekly sample of held-out tasks and plot it against the baseline.
Treat tool, data, and model updates as suspects first. A tendency to blame the prompt wastes weeks when a tool change moved the numbers.
baseline success: 0.78; week 4 sample: 0.61
drift = 0.78 - 0.61 = 0.17
review gate (EXAMPLE): drop of 0.10 or more -> review
0.17 >= 0.10, so the gate trips and the week gets a written reviewThe program below recomputes the drift check from EXAMPLE weekly scores. It uses plain integer points, with no model involved.
import sys
baseline_pts = 78
weekly_pts = [78, 74, 66, 61]
review_gate_pts = 10
drop_pts = baseline_pts - weekly_pts[-1]
review = drop_pts >= review_gate_pts
if drop_pts != 17:
print("FAIL: drift arithmetic off")
sys.exit(1)
if not review:
print("FAIL: gate should trip")
sys.exit(1)
print("PASS: drift gate trips on a 17 point drop from 78 to 61")Every gate trip or bad agent action gets a short written review. The table below fixes the fields so reviews stay comparable.
Least privilege keeps incidents small: narrow file and tool permissions, keep secrets out of prompts and send proprietary RTL only to deployments approved for it, and treat files and logs as untrusted input. Risky actions wait for human approval.
Field | What it records |
|---|---|
What happened | The agent action and the task it came from. |
Impact | Wrong files touched, bad verdicts sent, time lost. |
Cause | Prompt, tool, data, permission, or model change behind it. |
Fix and owner | The change that stops recurrence, with a named owner. |
Shutoff rules are numeric and owned: when a limit breaks, a named owner switches the agent off. Debate happens when writing the rule, not during the incident.
The calc block below checks EXAMPLE shutoff gates against this topic numbers. Success 0.61 stays on under watch; the other gates stay clear.
shutoff gate (EXAMPLE): success below 0.60 for two weeks running, or any unapproved write
week 4 success 0.61 is above 0.60, so the agent stays on under watch
one more weekly drop trips the success gate
cost gate (EXAMPLE): cost per resolved task above 0.20 units pauses rollout
0.09 is below 0.20, so the cost gate stays clearGate (EXAMPLE) | Trips when | Action |
|---|---|---|
Success floor | Below 0.60 for two weeks running. | Switch off, then review. |
Unapproved action | Any write outside the permission set. | Switch off at once. |
Cost ceiling | Above 0.20 units per resolved task. | Pause rollout, then review. |
The gate trips on a 0.17 drop. The week gets a written review while the agent stays on under watch.
Switch it off at once. Unapproved writes trip the shutoff gate without waiting for a second week.