Chaos Engineering for LLM Agents

Build agents that fail safe.

Chaos engineering for LLM agents. Æon injects controlled faults, gates every action with deterministic axioms, and chains the proof into an immutable trail, so resilience is engineered, not hoped for.

Install Core Explore the cycle
Deterministic axioms Gray-failure detection Immutable audit
aeon · safety-envelope.log LIVE
THE DISCIPLINE

The engineering discipline that makes LLM agents dependable enough for domains where being wrong is not an option.

L3–L4
Controlled chaos

Inject faults on purpose, inside a bounded blast radius.

AXIOMS
Deterministic axioms

ALERT · LIMIT · BLOCK enforced in code, before any action.

L6
Immutable audit

Every decision chained into a forensic provenance trail.

WHAT BREAKS

What is an agent failure?

Not a server going down, an agent doing the wrong thing. Æon names each failure mode and binds it to a deterministic response.

THE ARCHITECTURE

A seven-layer cycle for dependable agents

Observability intelligence is logically separated from fault execution (the COM/MON principle). Tap a layer to inspect its role in the loop.

7
LAYER CYBERNETIC CYCLE
3
LAYER 3

Detection

ALERT · LIMIT

feedback loop · negative entropy deterministic protection · ms
THE AXIOMS

ALERT → LIMIT → BLOCK

Deterministic decision functions over measurable thresholds. Drag the deviation and watch the Safety Envelope respond.

p99 latency deviation 18%
STEADYALERTLIMITBLOCK
drag to inject deviation →
STEADY

envelope.check(p99_deviation)
[STEADY] OK · within envelope
continuous monitoring · no action
WHY ÆON

Not another LLM wrapper.

Built for regulated, high-consequence domains

Read the safety-critical guide

From zero to a resilient agent

A chaos-native runtime, batteries included. Install, scaffold, and run your first controlled fault.

zsh
$ pip install aeon-core
✓ installed aeon-core · resilience runtime ready
$ aeon init sentinel-agent
↳ scaffolded · aeon.yaml · chaos_budget.yaml · agent.py
$ aeon chaos run "degrade gateway latency"
[L4] fault injected · ALERTBLOCK · Safe State restored