The engineering discipline that makes LLM agents dependable enough for domains where being wrong is not an option.
Inject faults on purpose, inside a bounded blast radius.
ALERT · LIMIT · BLOCK enforced in code, before any action.
Every decision chained into a forensic provenance trail.
Not a server going down, an agent doing the wrong thing. Æon names each failure mode and binds it to a deterministic response.
Observability intelligence is logically separated from fault execution (the COM/MON principle). Tap a layer to inspect its role in the loop.
Deterministic decision functions over measurable thresholds. Drag the deviation and watch the Safety Envelope respond.
Beyond chaos engineering: the axiom engine ships as an independent module. The industry's safety effort is still concentrated on output content, monolingual, multilingual, multimodal filters. Actions remain uncovered. Import aeon-axioms alone and bolt a deterministic enforcement layer onto any agent framework, no rewrite, no lock-in.
Prompt-level defenses are persuadable: a peer-reviewed study reported a 97% success rate for reasoning models autonomously jailbreaking other models' guardrails. Code is not persuadable. Nature Communications (2026) ↗
Not a replacement. Role-aware guardrails, I/O validation and content filters are mature and stay in place. Axioms compose with them, the final, deterministic gate on the composed action, so the layers you already trust keep working and nothing reaches a tool unchecked.
Filters inspect text. Guardrails steer the model. Axioms intercept the composed action, LLM reasoning plus what it is about to do through tools: REST APIs, MCP servers, A2A messages, shell, browsers. Explicit, testable criteria decide GO or BLOCK before execution.
from aeon.axioms import axiom, enforce # testable, versioned, deterministic @axiom(on_violation="BLOCK") def no_destructive_tool_call(action): return action.tool not in DESTRUCTIVE \ or action.approved # wrap ANY executor: # LangGraph, CrewAI, MCP host, A2A agent.executor = enforce(agent.executor)
A chaos-native runtime, batteries included. Install, scaffold, and run your first controlled fault.