Heartbeat Sentinel
The Heartbeat Sentinel protects against Shadow AI scenarios where an autonomous agent goes “rogue” or “silent” — continuing to operate without reporting back, or crashing and leaving processes in an unknown state.Mechanism
The Sentinel functions as a Dead Man’s Switch. It expects a periodic “pulse” from the agent.States
- ACTIVE 🟢: The agent is healthy and reporting regularly.
- SILENT 🟡: The agent missed 1 heartbeat window (5 minutes). Warning issued.
- ZOMBIE 🔴: The agent missed 3 heartbeat windows (15 minutes). Critical alert issued.
Escalation Protocol
- Monitoring: The agent sends a heartbeat
POST /heartbeat?agentId=xyzevery N minutes. - Alarm: If the deadline passes without a heartbeat, a Durable Object Alarm fires.
- Alerting:
- SILENT: Logs a warning via webhook.
- ZOMBIE: Escalates to a Critical Alert (PagerDuty/Slack/Email).
- Recovery: If a ZOMBIE agent sends a heartbeat, the system marks it as RECOVERED, logging the outage duration.
