The Execution Boundary Problem: What PocketOS Made Visible

The PocketOS incident last week gave it a name everyone could see. But this bug was already breaking systems quietly — payments, trades, scheduled jobs. Anywhere an AI agent retries a failed action without knowing if the first attempt completed. The guardrail can't live inside the agent. It has to live outside, at the tool call boundary. That's what SafeAgent does. safe_execute(request_id, action, payload) Same request_id always returns the original receipt. The side effect never fires twice. Wo