惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

H
Help Net Security
T
ThreatConnect
SecWiki News
SecWiki News
F
Future of Privacy Forum
AWS News Blog
AWS News Blog
C
Cisco Blogs
A
Arctic Wolf
Vercel News
Vercel News
The GitHub Blog
The GitHub Blog
Scott Helme
Scott Helme
V
V2EX
博客园 - 叶小钗
阮一峰的网络日志
阮一峰的网络日志
K
Kaspersky official blog
G
Google Developers Blog
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
P
Privacy International News Feed
C
Cyber Attacks, Cyber Crime and Cyber Security
N
News | PayPal Newsroom
Schneier on Security
Schneier on Security
NISL@THU
NISL@THU
Microsoft Azure Blog
Microsoft Azure Blog
量子位
The Hacker News
The Hacker News
Stack Overflow Blog
Stack Overflow Blog
Security Latest
Security Latest
M
Microsoft Research Blog - Microsoft Research
Google Online Security Blog
Google Online Security Blog
博客园_首页
C
CXSECURITY Database RSS Feed - CXSecurity.com
I
InfoQ
Google DeepMind News
Google DeepMind News
Y
Y Combinator Blog
The Cloudflare Blog
Microsoft Security Blog
Microsoft Security Blog
Martin Fowler
Martin Fowler
Cisco Talos Blog
Cisco Talos Blog
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
T
Troy Hunt's Blog
F
Fox-IT International blog
S
Security @ Cisco Blogs
博客园 - 司徒正美
cs.CV updates on arXiv.org
cs.CV updates on arXiv.org
C
Comments on: Blog
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
L
LINUX DO - 最新话题
GbyAI
GbyAI
Project Zero
Project Zero
腾讯CDC
T
Tailwind CSS Blog

DEV Community

Per-Key Rate Limiting for Agent Tool Calls: Stop One User From Breaking Everything Composable Output Guardrails: Filter Agent Responses Before They Reach Users Sanitize Your LLM Message Lists Before Every API Call Thread a Run ID Through Every Agent Call So You Can Debug Anything Normalize Provider Error JSON So Your Agent Can Actually Handle Failures Priority Queue for Agent Sub-Tasks: Stop Processing Low-Priority Work First Static Lint Rules for Your LLM Prompts (Before They Hit Production) tool-call-budgets: Stop Runaway Agent Loops Before They Hit Your Invoice Step Through Your Agent's Failures Like a Debugger Score Your Agent's Responses With a 0.0-1.0 Rubric (No LLM Judge Required) Fix Bad Structured Output by Feeding the Error Back to the Model Building an effective Storyblok Tool Plugin with SvelteKit How to Get Your Renault / Dacia Radio Code for Free RAG 시스템 실전 구축 (v39) Retraction — scrml’s Living Compiler I built a fitness app where the AI roasts you for eating pizza (and hypes you when you PR) The Top SaaS Founder Communities on Discord (Beyond the AI Hype) I Built a Production-Grade Async Job Queue from Scratch — Here's Everything That Actually Happened How to watch SMS from multiple Android phones in one iOS app We Didn’t Want Another AI Wrapper — So We Explored a High-Speed Hermes Orchestrator for Engineering Crews Multi-tenant além do TenantId: problemas reais e aprendizados em sistemas .NET After failing 23 times, I am sharing How I Actually Prepare for a Tech Interview Every Single Time Now. I built an app that works like a nutritionist for your brain. Here's what happened in 7 days. GoBadge Dynamic: From Module Stats to Universal Badges LangGraph 워크플로우 템플릿 (v39) The git Commands You Forgot Exist (And Why AI Workflows Make Them Relevant Again) Six Levels of MCP Servers One container to replace Grafana + Loki + Tempo + Prometheus The Request/Response Cycle, HTTP, Auth, JWT, OAuth & Sessions — Explained Properly Python Week 3: We Stopped Repeating Ourselves (Loops!) Creating a Custom Grid Editor tool in Unreal Engine 我做了个付费 Telegram bot。Telegram Stars 实际给开发者多少钱,我算了一笔账。 I Got 96% Recall on LLM Hallucination Detection With No ML Model – Just 50 Lines of Python A practitioner's guide to getting more value out of AI coding: agent quality & token optimization How to Handle Telegram Albums in Telegraf I Built a Multilingual Spam Detection Dataset with 149K+ Messages Across 23 Languages How to Handle Telegram Albums in grammY RAG 시스템 실전 구축 (v38) Beyond Pip Install: Why Your AI Agent Needs a "Hermetic" Life-Support System to Survive Resume Building using HTML & CSS SpecFlow: Multi-Agent SDD in Cursor (4 phases, /approve, single code writer) Running ASR for smart homes in the NPU of Intel processors "Building a CI/CD Pipeline From Scratch: A Practical Guide for Developers (with GitHub Actions)" SpecFlow: SDD multi-agente en Cursor (4 fases, /approve, un solo escritor de código) How to Extract Your Full Team Hierarchy from HubSpot (the API doesn't expose it) Adobe Commerce Cloud now costs $40k/year. We migrated from Adobe Commerce to Magento Open Source — here's the honest breakdown .klickd v4.0.0 — Portable AI memory with constraints, strict schemas, and test vectors We Trust Third Party Code, It’s Time to Trust AI Generated Code LangGraph 워크플로우 템플릿 (v38) Sustainable AI Starts with Efficient AI Find Remove duplicated files in Google Drive How to Detect GPU Waste in a Kubernetes Cluster The Privacy Bug in My First Chrome Extension (And How to Avoid It) Serverless Mental Models: What They Don't Tell You Before You Build Preventing GPT hallucination in automated content pipelines: how I structure Make.com flows with data injection Hmm, where were we? AI Visibility Tools, Math Proofs, and Stripped Guardrails Shape Developer Landscape How AI and Electronics Are Changing Healthcare Devices: The Future of Smart Healthcare Author: Shivam Wakade | Founder, PrivSR Making Claude Sound Like Optimus Prime Understanding Reinforcement Learning with Human Feedback Part 5: Training the Reward Model with Loss Functions Learning Progress Pt.20 How Secure LoRa Communication Devices Work: Building the Future of Private and Long-Range Connectivity Author: Shivam Wakade | Founder, PrivSR How I Rebuilt an RPG Map Editor with Rust, React, and WASM Building a System That Automates YouTube Post-Production Building a 100% Serverless Digital Asset Packager in the Browser Game Recommended AI What is Human-In-The-Loop (HITL)? Deep Dive: React Server Components in TanStack Start Migrating off Google Analytics: Umami vs Plausible vs Fathom Building a Portfolio That Actually Demonstrates Software Engineering Async/Await in JavaScript: From Callbacks to Clean Code (2026) Benchmarking LLM Structured Outputs Angular 21 Multiselect Dropdown: A Migration-Friendly Component with Live Functional Tests ShareBox v5 — GPU transcoding, Netflix-style grid, and why I don't need Plex anymore TOML Schema is live Handling Duplicate Shopify Webhook Events (And Why You Must) Original Kubernetes Dashboard — retired upstream, upgraded to Angular 21. لماذا أسست ترينافو للتجار العرب الذين تتجاهلهم المنصات الغربية Construyendo un recomendador de películas en Python: de los datos al modelo When APIs Lie: A Lesson in Defensive Debugging Pope Leo XIV's AI Encyclical: What Builders Must Know (2026) Donna v0.3.0 HTB — MonitorsFour | Writeup The Free Tool You Trust Is the One You Should Fear the Most HTB — MonitorsFour | Writeup Fr 97. Embeddings and Vector Search: Semantic Search That Works Deep Dive: Building "Gravity Paint" - A Tactile Physics Instrument with React, Matter.js, and p5.js ABAP Unit Testing with Test Doubles and Mocking Frameworks: A Senior Architects Guide to Isolating Dependencies in SAP S/4HANA LeetCode Solution: 5. Longest Palindromic Substring kovax-react 0.8: Tailwind v4 preset, FormField adapters, ColorModeScript, and Storybook I built an AI résumé tool that refuses to lie about your experience The hat Azure Entra ID User & Role Management — Step-by-Step Practical Guide With A Simple Excercise The AI-Native Company: How a Single Founder Can Build Global Organizations Powered by AWS and an Ecosystem of Artificial Intelligences Building a Lightweight Remote MCP Knowledge Base on Cloudflare Workers Why I built Trinavo for the MENA merchants Western platforms ignore The N+1 Query That Killed Our Database, And How I Fixed It Docstrings vs Markdown Docs: What Should Developers Actually Write? Training Data Provenance: The Manifest Diff That Explains the Hash Add SVGIcons MCP to Claude Code and Find SVG Icons from Your Terminal
The Simplest Stop Condition: A Hard Cap on Agent Loop Iterations
Mukunda Rao · 2026-05-26 · via DEV Community

Mukunda Rao Katta

Before you need composable stop conditions, budget tracking, or progress detection — you need an iteration cap. Every production agent loop should have one.

agent-loop-bound is the simplest possible stop condition: a hard cap on how many times the loop runs, with a counter you can check anywhere.


The Shape of the Fix

from agent_loop_bound import LoopBound, LoopBoundExceeded

bound = LoopBound(max_iterations=20)

while True:
    bound.tick()  # raises LoopBoundExceeded if exceeded

    response = call_llm(messages)

    if response.stop_reason == "end_turn":
        break

    messages.append(handle_tool_call(response))

print(f"Completed in {bound.count} iterations")

Enter fullscreen mode Exit fullscreen mode

tick() increments the counter and raises LoopBoundExceeded at the limit. bound.count tells you how many iterations ran.


What It Does NOT Do

agent-loop-bound does not track cost, tokens, or progress. It only counts iterations. For multi-dimensional stop conditions, use llm-stop-conditions.

It does not prevent inflight LLM calls from completing. If the call is in progress when LoopBoundExceeded is raised, the exception propagates normally after the call returns.

It does not have configurable behavior on exceed. It always raises. If you want to handle the exceed case differently (return partial results vs raise), catch LoopBoundExceeded and handle it yourself.


Inside the Library

class LoopBound:
    def __init__(self, max_iterations: int):
        if max_iterations < 1:
            raise ValueError("max_iterations must be >= 1")
        self._max = max_iterations
        self._count = 0

    def tick(self) -> None:
        self._count += 1
        if self._count > self._max:
            raise LoopBoundExceeded(
                f"Loop exceeded {self._max} iterations"
                f" (ran {self._count})"
            )

    @property
    def count(self) -> int:
        return self._count

    @property
    def remaining(self) -> int:
        return max(0, self._max - self._count)

    def reset(self) -> None:
        self._count = 0

Enter fullscreen mode Exit fullscreen mode

Zero global state. Thread-safe for reads (no writes to shared state between tick() calls). Not thread-safe for concurrent tick() callers — create one LoopBound per agent instance, not per process.

The remaining property is useful for prompts that need to tell the model how many steps are left: "You have {bound.remaining} iterations remaining. Make them count."


When to Use It

Use it as the absolute minimum stop condition for any agent loop. Even if you plan to add llm-stop-conditions later, start with a LoopBound. It adds two lines and protects against the most common failure mode: infinite loops.

The rule of thumb: set the max to 3-5x the expected number of iterations for normal tasks. If your agent typically completes in 5-7 steps, set the bound to 20. This gives the model room to work while preventing runaway execution.

Use the remaining property for adaptive prompting. When the agent is running out of iterations, tell it:

bound = LoopBound(max_iterations=20)

while True:
    bound.tick()

    # Warn the model when iterations are low
    if bound.remaining <= 3:
        messages.append({
            "role": "user",
            "content": f"Note: You have {bound.remaining} turns remaining. "
                      f"Please wrap up and provide your final answer soon."
        })

    response = call_llm(messages)
    # ...

Enter fullscreen mode Exit fullscreen mode


Install

pip install git+https://github.com/MukundaKatta/agent-loop-bound

Enter fullscreen mode Exit fullscreen mode

from agent_loop_bound import LoopBound, LoopBoundExceeded

def run_agent(task: str, max_steps: int = 15) -> str:
    bound = LoopBound(max_iterations=max_steps)
    messages = [{"role": "user", "content": task}]

    try:
        while True:
            bound.tick()
            response = call_llm(messages)

            if response.stop_reason == "end_turn":
                return extract_text(response)

            messages.extend(handle_tool_calls(response))

    except LoopBoundExceeded:
        # Agent ran out of iterations
        logger.warning("loop_bound_exceeded", 
                      task=task[:50], 
                      iterations=bound.count)
        # Return best partial result or an error message
        return "Task exceeded step limit. Partial results: " + get_partial_result(messages)

Enter fullscreen mode Exit fullscreen mode


Sibling Libraries

Library What it solves
llm-stop-conditions Composable MaxIters + MaxUsd + MaxTokens + NoProgress
agent-deadline Wall-clock time deadline
llm-cost-cap Pre-flight per-call cost gate
token-budget-pool Shared budget across concurrent agents
llm-circuit-breaker-py Open circuit after repeated provider failures

agent-loop-bound is the simplest stop condition. llm-stop-conditions includes MaxIters and three others. If you need only an iteration cap, agent-loop-bound is lighter. If you need the full set, use llm-stop-conditions.


What's Next

Hierarchical bounds: bound.sub(max_iterations=5) creates a child bound for a nested loop. When the child exceeds its limit or the parent exceeds its limit, both raise. This handles the common pattern of outer loops with inner loops that each need their own caps.

Soft limits: LoopBound(max_iterations=20, warn_at=15) that logs a warning at 15 iterations without raising. You get the signal early without the hard stop.

Counter grouping: track multiple named counters in one object. bound.tick("outer_loop"), bound.tick("inner_search"), etc. Useful for agents with nested loops that have different semantics.


Built as part of the agent-stack family: composable Python primitives for production LLM agents.