Most agents are designed to keep moving. But what happens when the system starts behaving unpredictably? A tool returns suspicious data. An API begins failing repeatedly. The agent exceeds its normal operating boundaries. Should it keep trying? What if it could switch to a restricted operating mode instead? I'd design a simple safe-mode protocol: → Detect: Identify anomalies, repeated failures, or policy violations. → Contain: Disable risky actions and restrict tool permissions. → Preserve: Keep logs, state, and evidence for investigation. → Escalate: Notify the responsible human with the reason and impact. → Recover: Resume only after defined checks and authorization. In safe mode, the agent might still explain, report, and prepare recommendations, but lose permission to send, publish, spend, delete, or modify critical data. One crucial design choice: the agent shouldn't control its own safety boundaries. Enforce restrictions through an independent policy layer, with a human-controlled recovery path. Because autonomy shouldn't mean an agent must keep operating at all costs. Sometimes the smartest action is to reduce its own power before a small failure becomes a major incident. What should trigger safe mode in your agent systems, and which capabilities would you disable first?