What happened
Agent_acid, an open-source project, adds ACID-style transaction guarantees to autonomous AI agents—automatic rollback of multi-step plans if any step fails, hard code-level guardrails that block bad outputs, and stateful guardrails that track forbidden actions across an entire session to catch "salami slicing" attacks (splitting one large forbidden action into multiple small, individually-legal ones).
Why it matters
Most guardrail systems validate only one action at a time with no session memory, leaving AI agents vulnerable to salami-slicing attacks where an attacker or manipulated AI spreads a forbidden action across many small steps that each pass individual checks. Agent_acid's session-wide guardrails close this gap—in a head-to-head test, a naive agent allowed three $400 charges totaling $1,200 despite a $500 per-step limit, while agent_acid blocked the third charge and fully refunded all three.
What to watch
The project is early-stage and actively developed; core engine and guardrail layer are tested, with automated test suites and live demos available (some require an OpenAI API key). The repository includes runnable examples of two real attack scenarios—prompt injection and salami slicing—that users can reproduce and test themselves.
Summaries like this, in your inbox every morning.
Agent_acid addresses a real vulnerability in how autonomous AI agents are currently safeguarded. The article frames the problem clearly: guardrails that only inspect individual tool calls have no session-level awareness, making them vulnerable to attackers or manipulated AI systems that distribute a forbidden action across multiple small steps. The salami-slicing attack is not hypothetical—it is documented as an actively studied problem in AI safety research.
The project's design separates concerns logically: reversible tools handle the undo mechanism (every action has a compensating action), the transaction context tracks multi-step plans, and the guardrail layer enforces rules at two levels—per-action (hard blocks) and session-wide (cumulative tracking). The head-to-head comparison with a naive agent is concrete and reproducible: under identical conditions, the naive agent allowed $1,200 in charges while agent_acid blocked the excess and refunded all three charges, then deleted the leftover account created during the failed plan.
Pick your industry and the AI tools you use, and get news related to your work every day.
Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →
Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.
Anthropic gave six METR staffers hardware, office space and internal tools, putting them roughly on par with i…
Cammarata reinterprets InceptionV1's cat-car neuron as a V-shape detector, not two unrelated concepts
Google Deepmind's Gemini 4 Argon scored 97.5 percent on ARC-AGI-3 at a cost of $4,800, second only to GPT-6 As…
Microsoft's Surface Laptop Ultra, using Nvidia's RTX Spark platform, starts at $2,599 (up to $5,899)
Meta's new commercial terms, effective October 30th, appear to let it crawl and train AI on content from websi…
Vercel data published Thursday shows TypeSafe AI's Jev, a lightweight decision model for choosing among predet…
