{"benchmark":"RunawayBench","version":"0.1.0","generatedAt":"2026-08-27T12:00:00.000Z","methodology":["Twelve deterministic failure scenarios from the LimitFuse product blueprint; no external provider calls.","LimitFuse profiles execute the production policy evaluator and integer-microdollar wallet implementation.","Native, framework, and gateway rows are transparent reference profiles, not claims about every vendor implementation.","Cost before decision uses 80% realized cost for admitted LimitFuse operations; uncontrolled/reference exposure uses declared worst-case operation cost.","Scoped containment requires a blocking run-level decision that leaves the healthy control run unaffected."],"scenarioCount":12,"profiles":[{"id":"native-provider-limits","label":"Native provider limits","description":"Reference account-level provider spend/output controls; no application causal context.","signals":["provider-spend","context-growth"],"spendCeilingUsd":1,"containmentScope":"provider-account","enforcement":true},{"id":"framework-middleware","label":"Framework middleware","description":"Reference in-process retry, depth, fan-out, fallback, and timeout guards.","signals":["retry","depth","fanout","fallback","partial-success"],"containmentScope":"process","enforcement":true},{"id":"gateway-spend-controls","label":"Gateway spend controls","description":"Reference project-level model gateway with a spend ceiling but no queue/function causal graph.","signals":["provider-spend","context-growth"],"spendCeilingUsd":1,"containmentScope":"project","enforcement":true},{"id":"limitfuse-shadow","label":"LimitFuse shadow detection","description":"The real LimitFuse policy engine records the first would-block decision without containment.","signals":[],"containmentScope":"none","enforcement":false},{"id":"limitfuse-enforcement","label":"LimitFuse scoped enforcement","description":"The real LimitFuse policy engine denies before reservation at one signed run wallet.","signals":[],"containmentScope":"run","enforcement":true}],"results":[{"scenarioId":"recursive-agent-delegation","scenarioTitle":"Recursive agent delegation","layer":"agent","profileId":"native-provider-limits","profileLabel":"Native provider limits","detected":false,"blocked":false,"reason":"not-detected","containmentScope":"none","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.5,"modeledExposureUsd":0.5,"modeledUncontrolledCostUsd":0.5},{"scenarioId":"malformed-tool-output","scenarioTitle":"Repeated malformed tool output","layer":"agent","profileId":"native-provider-limits","profileLabel":"Native provider limits","detected":false,"blocked":false,"reason":"not-detected","containmentScope":"none","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.72,"modeledExposureUsd":0.72,"modeledUncontrolledCostUsd":0.72},{"scenarioId":"infinite-webhook-retry","scenarioTitle":"Infinite webhook retry","layer":"webhook","profileId":"native-provider-limits","profileLabel":"Native provider limits","detected":false,"blocked":false,"reason":"not-detected","containmentScope":"none","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.42,"modeledExposureUsd":0.42,"modeledUncontrolledCostUsd":0.42},{"scenarioId":"queue-visibility-timeout-storm","scenarioTitle":"Queue visibility-timeout storm","layer":"queue","profileId":"native-provider-limits","profileLabel":"Native provider limits","detected":false,"blocked":false,"reason":"not-detected","containmentScope":"none","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.54,"modeledExposureUsd":0.54,"modeledUncontrolledCostUsd":0.54},{"scenarioId":"function-self-trigger","scenarioTitle":"Function writing to its own trigger","layer":"function","profileId":"native-provider-limits","profileLabel":"Native provider limits","detected":false,"blocked":false,"reason":"not-detected","containmentScope":"none","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.55,"modeledExposureUsd":0.55,"modeledUncontrolledCostUsd":0.55},{"scenarioId":"duplicate-event-delivery","scenarioTitle":"Duplicate event delivery","layer":"cross-layer","profileId":"native-provider-limits","profileLabel":"Native provider limits","detected":false,"blocked":false,"reason":"not-detected","containmentScope":"none","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.4,"modeledExposureUsd":0.4,"modeledUncontrolledCostUsd":0.4},{"scenarioId":"long-context-growth","scenarioTitle":"Long-context growth","layer":"model","profileId":"native-provider-limits","profileLabel":"Native provider limits","detected":true,"blocked":true,"reason":"context-growth","detectedAtStep":3,"containmentScope":"provider-account","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.195,"modeledExposureUsd":0.195,"modeledUncontrolledCostUsd":1.975},{"scenarioId":"unbounded-parallel-research","scenarioTitle":"Unbounded parallel research","layer":"agent","profileId":"native-provider-limits","profileLabel":"Native provider limits","detected":false,"blocked":false,"reason":"not-detected","containmentScope":"none","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.55,"modeledExposureUsd":0.55,"modeledUncontrolledCostUsd":0.55},{"scenarioId":"model-fallback-cycle","scenarioTitle":"Model fallback cycle","layer":"model","profileId":"native-provider-limits","profileLabel":"Native provider limits","detected":false,"blocked":false,"reason":"not-detected","containmentScope":"none","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.84,"modeledExposureUsd":0.84,"modeledUncontrolledCostUsd":0.84},{"scenarioId":"malicious-user-cost-amplification","scenarioTitle":"Malicious user cost amplification","layer":"cross-layer","profileId":"native-provider-limits","profileLabel":"Native provider limits","detected":true,"blocked":true,"reason":"provider-spend","detectedAtStep":9,"containmentScope":"provider-account","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.96,"modeledExposureUsd":0.96,"modeledUncontrolledCostUsd":1.2},{"scenarioId":"tool-timeout-partial-success","scenarioTitle":"Tool timeout with partial success","layer":"agent","profileId":"native-provider-limits","profileLabel":"Native provider limits","detected":false,"blocked":false,"reason":"not-detected","containmentScope":"none","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.585,"modeledExposureUsd":0.585,"modeledUncontrolledCostUsd":0.585},{"scenarioId":"queue-consumer-poison-message","scenarioTitle":"Queue consumer poison message","layer":"queue","profileId":"native-provider-limits","profileLabel":"Native provider limits","detected":false,"blocked":false,"reason":"not-detected","containmentScope":"none","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.36,"modeledExposureUsd":0.36,"modeledUncontrolledCostUsd":0.36},{"scenarioId":"recursive-agent-delegation","scenarioTitle":"Recursive agent delegation","layer":"agent","profileId":"framework-middleware","profileLabel":"Framework middleware","detected":true,"blocked":true,"reason":"depth","detectedAtStep":3,"containmentScope":"process","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.1,"modeledExposureUsd":0.1,"modeledUncontrolledCostUsd":0.5},{"scenarioId":"malformed-tool-output","scenarioTitle":"Repeated malformed tool output","layer":"agent","profileId":"framework-middleware","profileLabel":"Framework middleware","detected":true,"blocked":true,"reason":"retry","detectedAtStep":3,"containmentScope":"process","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.16,"modeledExposureUsd":0.16,"modeledUncontrolledCostUsd":0.72},{"scenarioId":"infinite-webhook-retry","scenarioTitle":"Infinite webhook retry","layer":"webhook","profileId":"framework-middleware","profileLabel":"Framework middleware","detected":true,"blocked":true,"reason":"retry","detectedAtStep":3,"containmentScope":"process","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.07,"modeledExposureUsd":0.07,"modeledUncontrolledCostUsd":0.42},{"scenarioId":"queue-visibility-timeout-storm","scenarioTitle":"Queue visibility-timeout storm","layer":"queue","profileId":"framework-middleware","profileLabel":"Framework middleware","detected":false,"blocked":false,"reason":"not-detected","containmentScope":"none","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.54,"modeledExposureUsd":0.54,"modeledUncontrolledCostUsd":0.54},{"scenarioId":"function-self-trigger","scenarioTitle":"Function writing to its own trigger","layer":"function","profileId":"framework-middleware","profileLabel":"Framework middleware","detected":false,"blocked":false,"reason":"not-detected","containmentScope":"none","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.55,"modeledExposureUsd":0.55,"modeledUncontrolledCostUsd":0.55},{"scenarioId":"duplicate-event-delivery","scenarioTitle":"Duplicate event delivery","layer":"cross-layer","profileId":"framework-middleware","profileLabel":"Framework middleware","detected":false,"blocked":false,"reason":"not-detected","containmentScope":"none","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.4,"modeledExposureUsd":0.4,"modeledUncontrolledCostUsd":0.4},{"scenarioId":"long-context-growth","scenarioTitle":"Long-context growth","layer":"model","profileId":"framework-middleware","profileLabel":"Framework middleware","detected":false,"blocked":false,"reason":"not-detected","containmentScope":"none","healthyControlUnaffected":false,"costBeforeDecisionUsd":1.975,"modeledExposureUsd":1.975,"modeledUncontrolledCostUsd":1.975},{"scenarioId":"unbounded-parallel-research","scenarioTitle":"Unbounded parallel research","layer":"agent","profileId":"framework-middleware","profileLabel":"Framework middleware","detected":true,"blocked":true,"reason":"fanout","detectedAtStep":3,"containmentScope":"process","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.11,"modeledExposureUsd":0.11,"modeledUncontrolledCostUsd":0.55},{"scenarioId":"model-fallback-cycle","scenarioTitle":"Model fallback cycle","layer":"model","profileId":"framework-middleware","profileLabel":"Framework middleware","detected":true,"blocked":true,"reason":"fallback","detectedAtStep":3,"containmentScope":"process","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.14,"modeledExposureUsd":0.14,"modeledUncontrolledCostUsd":0.84},{"scenarioId":"malicious-user-cost-amplification","scenarioTitle":"Malicious user cost amplification","layer":"cross-layer","profileId":"framework-middleware","profileLabel":"Framework middleware","detected":false,"blocked":false,"reason":"not-detected","containmentScope":"none","healthyControlUnaffected":false,"costBeforeDecisionUsd":1.2,"modeledExposureUsd":1.2,"modeledUncontrolledCostUsd":1.2},{"scenarioId":"tool-timeout-partial-success","scenarioTitle":"Tool timeout with partial success","layer":"agent","profileId":"framework-middleware","profileLabel":"Framework middleware","detected":true,"blocked":true,"reason":"partial-success","detectedAtStep":3,"containmentScope":"process","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.13,"modeledExposureUsd":0.13,"modeledUncontrolledCostUsd":0.585},{"scenarioId":"queue-consumer-poison-message","scenarioTitle":"Queue consumer poison message","layer":"queue","profileId":"framework-middleware","profileLabel":"Framework middleware","detected":false,"blocked":false,"reason":"not-detected","containmentScope":"none","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.36,"modeledExposureUsd":0.36,"modeledUncontrolledCostUsd":0.36},{"scenarioId":"recursive-agent-delegation","scenarioTitle":"Recursive agent delegation","layer":"agent","profileId":"gateway-spend-controls","profileLabel":"Gateway spend controls","detected":false,"blocked":false,"reason":"not-detected","containmentScope":"none","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.5,"modeledExposureUsd":0.5,"modeledUncontrolledCostUsd":0.5},{"scenarioId":"malformed-tool-output","scenarioTitle":"Repeated malformed tool output","layer":"agent","profileId":"gateway-spend-controls","profileLabel":"Gateway spend controls","detected":false,"blocked":false,"reason":"not-detected","containmentScope":"none","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.72,"modeledExposureUsd":0.72,"modeledUncontrolledCostUsd":0.72},{"scenarioId":"infinite-webhook-retry","scenarioTitle":"Infinite webhook retry","layer":"webhook","profileId":"gateway-spend-controls","profileLabel":"Gateway spend controls","detected":false,"blocked":false,"reason":"not-detected","containmentScope":"none","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.42,"modeledExposureUsd":0.42,"modeledUncontrolledCostUsd":0.42},{"scenarioId":"queue-visibility-timeout-storm","scenarioTitle":"Queue visibility-timeout storm","layer":"queue","profileId":"gateway-spend-controls","profileLabel":"Gateway spend controls","detected":false,"blocked":false,"reason":"not-detected","containmentScope":"none","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.54,"modeledExposureUsd":0.54,"modeledUncontrolledCostUsd":0.54},{"scenarioId":"function-self-trigger","scenarioTitle":"Function writing to its own trigger","layer":"function","profileId":"gateway-spend-controls","profileLabel":"Gateway spend controls","detected":false,"blocked":false,"reason":"not-detected","containmentScope":"none","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.55,"modeledExposureUsd":0.55,"modeledUncontrolledCostUsd":0.55},{"scenarioId":"duplicate-event-delivery","scenarioTitle":"Duplicate event delivery","layer":"cross-layer","profileId":"gateway-spend-controls","profileLabel":"Gateway spend controls","detected":false,"blocked":false,"reason":"not-detected","containmentScope":"none","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.4,"modeledExposureUsd":0.4,"modeledUncontrolledCostUsd":0.4},{"scenarioId":"long-context-growth","scenarioTitle":"Long-context growth","layer":"model","profileId":"gateway-spend-controls","profileLabel":"Gateway spend controls","detected":true,"blocked":true,"reason":"context-growth","detectedAtStep":3,"containmentScope":"project","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.195,"modeledExposureUsd":0.195,"modeledUncontrolledCostUsd":1.975},{"scenarioId":"unbounded-parallel-research","scenarioTitle":"Unbounded parallel research","layer":"agent","profileId":"gateway-spend-controls","profileLabel":"Gateway spend controls","detected":false,"blocked":false,"reason":"not-detected","containmentScope":"none","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.55,"modeledExposureUsd":0.55,"modeledUncontrolledCostUsd":0.55},{"scenarioId":"model-fallback-cycle","scenarioTitle":"Model fallback cycle","layer":"model","profileId":"gateway-spend-controls","profileLabel":"Gateway spend controls","detected":false,"blocked":false,"reason":"not-detected","containmentScope":"none","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.84,"modeledExposureUsd":0.84,"modeledUncontrolledCostUsd":0.84},{"scenarioId":"malicious-user-cost-amplification","scenarioTitle":"Malicious user cost amplification","layer":"cross-layer","profileId":"gateway-spend-controls","profileLabel":"Gateway spend controls","detected":true,"blocked":true,"reason":"provider-spend","detectedAtStep":9,"containmentScope":"project","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.96,"modeledExposureUsd":0.96,"modeledUncontrolledCostUsd":1.2},{"scenarioId":"tool-timeout-partial-success","scenarioTitle":"Tool timeout with partial success","layer":"agent","profileId":"gateway-spend-controls","profileLabel":"Gateway spend controls","detected":false,"blocked":false,"reason":"not-detected","containmentScope":"none","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.585,"modeledExposureUsd":0.585,"modeledUncontrolledCostUsd":0.585},{"scenarioId":"queue-consumer-poison-message","scenarioTitle":"Queue consumer poison message","layer":"queue","profileId":"gateway-spend-controls","profileLabel":"Gateway spend controls","detected":false,"blocked":false,"reason":"not-detected","containmentScope":"none","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.36,"modeledExposureUsd":0.36,"modeledUncontrolledCostUsd":0.36},{"scenarioId":"recursive-agent-delegation","scenarioTitle":"Recursive agent delegation","layer":"agent","profileId":"limitfuse-shadow","profileLabel":"LimitFuse shadow detection","detected":true,"blocked":false,"reason":"depth_limit","detectedAtStep":6,"containmentScope":"none","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.2,"modeledExposureUsd":0.5,"modeledUncontrolledCostUsd":0.5},{"scenarioId":"malformed-tool-output","scenarioTitle":"Repeated malformed tool output","layer":"agent","profileId":"limitfuse-shadow","profileLabel":"LimitFuse shadow detection","detected":true,"blocked":false,"reason":"repeated_error","detectedAtStep":3,"containmentScope":"none","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.128,"modeledExposureUsd":0.72,"modeledUncontrolledCostUsd":0.72},{"scenarioId":"infinite-webhook-retry","scenarioTitle":"Infinite webhook retry","layer":"webhook","profileId":"limitfuse-shadow","profileLabel":"LimitFuse shadow detection","detected":true,"blocked":false,"reason":"repeated_error","detectedAtStep":3,"containmentScope":"none","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.056,"modeledExposureUsd":0.42,"modeledUncontrolledCostUsd":0.42},{"scenarioId":"queue-visibility-timeout-storm","scenarioTitle":"Queue visibility-timeout storm","layer":"queue","profileId":"limitfuse-shadow","profileLabel":"LimitFuse shadow detection","detected":true,"blocked":false,"reason":"retry_limit","detectedAtStep":4,"containmentScope":"none","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.108,"modeledExposureUsd":0.54,"modeledUncontrolledCostUsd":0.54},{"scenarioId":"function-self-trigger","scenarioTitle":"Function writing to its own trigger","layer":"function","profileId":"limitfuse-shadow","profileLabel":"LimitFuse shadow detection","detected":true,"blocked":false,"reason":"structural_loop","detectedAtStep":4,"containmentScope":"none","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.132,"modeledExposureUsd":0.55,"modeledUncontrolledCostUsd":0.55},{"scenarioId":"duplicate-event-delivery","scenarioTitle":"Duplicate event delivery","layer":"cross-layer","profileId":"limitfuse-shadow","profileLabel":"LimitFuse shadow detection","detected":true,"blocked":false,"reason":"retry_limit","detectedAtStep":4,"containmentScope":"none","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.096,"modeledExposureUsd":0.4,"modeledUncontrolledCostUsd":0.4},{"scenarioId":"long-context-growth","scenarioTitle":"Long-context growth","layer":"model","profileId":"limitfuse-shadow","profileLabel":"LimitFuse shadow detection","detected":true,"blocked":false,"reason":"budget_exhausted","detectedAtStep":8,"containmentScope":"none","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.896,"modeledExposureUsd":1.975,"modeledUncontrolledCostUsd":1.975},{"scenarioId":"unbounded-parallel-research","scenarioTitle":"Unbounded parallel research","layer":"agent","profileId":"limitfuse-shadow","profileLabel":"LimitFuse shadow detection","detected":true,"blocked":false,"reason":"fanout_limit","detectedAtStep":3,"containmentScope":"none","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.088,"modeledExposureUsd":0.55,"modeledUncontrolledCostUsd":0.55},{"scenarioId":"model-fallback-cycle","scenarioTitle":"Model fallback cycle","layer":"model","profileId":"limitfuse-shadow","profileLabel":"LimitFuse shadow detection","detected":true,"blocked":false,"reason":"repeated_error","detectedAtStep":3,"containmentScope":"none","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.112,"modeledExposureUsd":0.84,"modeledUncontrolledCostUsd":0.84},{"scenarioId":"malicious-user-cost-amplification","scenarioTitle":"Malicious user cost amplification","layer":"cross-layer","profileId":"limitfuse-shadow","profileLabel":"LimitFuse shadow detection","detected":true,"blocked":false,"reason":"gross_margin_below_minimum","detectedAtStep":2,"containmentScope":"none","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.096,"modeledExposureUsd":1.2,"modeledUncontrolledCostUsd":1.2},{"scenarioId":"tool-timeout-partial-success","scenarioTitle":"Tool timeout with partial success","layer":"agent","profileId":"limitfuse-shadow","profileLabel":"LimitFuse shadow detection","detected":true,"blocked":false,"reason":"repeated_error","detectedAtStep":3,"containmentScope":"none","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.104,"modeledExposureUsd":0.585,"modeledUncontrolledCostUsd":0.585},{"scenarioId":"queue-consumer-poison-message","scenarioTitle":"Queue consumer poison message","layer":"queue","profileId":"limitfuse-shadow","profileLabel":"LimitFuse shadow detection","detected":true,"blocked":false,"reason":"repeated_error","detectedAtStep":3,"containmentScope":"none","healthyControlUnaffected":false,"costBeforeDecisionUsd":0.048,"modeledExposureUsd":0.36,"modeledUncontrolledCostUsd":0.36},{"scenarioId":"recursive-agent-delegation","scenarioTitle":"Recursive agent delegation","layer":"agent","profileId":"limitfuse-enforcement","profileLabel":"LimitFuse scoped enforcement","detected":true,"blocked":true,"reason":"depth_limit","detectedAtStep":6,"containmentScope":"run","healthyControlUnaffected":true,"costBeforeDecisionUsd":0.2,"modeledExposureUsd":0.2,"modeledUncontrolledCostUsd":0.5},{"scenarioId":"malformed-tool-output","scenarioTitle":"Repeated malformed tool output","layer":"agent","profileId":"limitfuse-enforcement","profileLabel":"LimitFuse scoped enforcement","detected":true,"blocked":true,"reason":"repeated_error","detectedAtStep":3,"containmentScope":"run","healthyControlUnaffected":true,"costBeforeDecisionUsd":0.128,"modeledExposureUsd":0.128,"modeledUncontrolledCostUsd":0.72},{"scenarioId":"infinite-webhook-retry","scenarioTitle":"Infinite webhook retry","layer":"webhook","profileId":"limitfuse-enforcement","profileLabel":"LimitFuse scoped enforcement","detected":true,"blocked":true,"reason":"repeated_error","detectedAtStep":3,"containmentScope":"run","healthyControlUnaffected":true,"costBeforeDecisionUsd":0.056,"modeledExposureUsd":0.056,"modeledUncontrolledCostUsd":0.42},{"scenarioId":"queue-visibility-timeout-storm","scenarioTitle":"Queue visibility-timeout storm","layer":"queue","profileId":"limitfuse-enforcement","profileLabel":"LimitFuse scoped enforcement","detected":true,"blocked":true,"reason":"retry_limit","detectedAtStep":4,"containmentScope":"run","healthyControlUnaffected":true,"costBeforeDecisionUsd":0.108,"modeledExposureUsd":0.108,"modeledUncontrolledCostUsd":0.54},{"scenarioId":"function-self-trigger","scenarioTitle":"Function writing to its own trigger","layer":"function","profileId":"limitfuse-enforcement","profileLabel":"LimitFuse scoped enforcement","detected":true,"blocked":true,"reason":"structural_loop","detectedAtStep":4,"containmentScope":"run","healthyControlUnaffected":true,"costBeforeDecisionUsd":0.132,"modeledExposureUsd":0.132,"modeledUncontrolledCostUsd":0.55},{"scenarioId":"duplicate-event-delivery","scenarioTitle":"Duplicate event delivery","layer":"cross-layer","profileId":"limitfuse-enforcement","profileLabel":"LimitFuse scoped enforcement","detected":true,"blocked":true,"reason":"retry_limit","detectedAtStep":4,"containmentScope":"run","healthyControlUnaffected":true,"costBeforeDecisionUsd":0.096,"modeledExposureUsd":0.096,"modeledUncontrolledCostUsd":0.4},{"scenarioId":"long-context-growth","scenarioTitle":"Long-context growth","layer":"model","profileId":"limitfuse-enforcement","profileLabel":"LimitFuse scoped enforcement","detected":true,"blocked":true,"reason":"budget_exhausted","detectedAtStep":8,"containmentScope":"run","healthyControlUnaffected":true,"costBeforeDecisionUsd":0.896,"modeledExposureUsd":0.896,"modeledUncontrolledCostUsd":1.975},{"scenarioId":"unbounded-parallel-research","scenarioTitle":"Unbounded parallel research","layer":"agent","profileId":"limitfuse-enforcement","profileLabel":"LimitFuse scoped enforcement","detected":true,"blocked":true,"reason":"fanout_limit","detectedAtStep":3,"containmentScope":"run","healthyControlUnaffected":true,"costBeforeDecisionUsd":0.088,"modeledExposureUsd":0.088,"modeledUncontrolledCostUsd":0.55},{"scenarioId":"model-fallback-cycle","scenarioTitle":"Model fallback cycle","layer":"model","profileId":"limitfuse-enforcement","profileLabel":"LimitFuse scoped enforcement","detected":true,"blocked":true,"reason":"repeated_error","detectedAtStep":3,"containmentScope":"run","healthyControlUnaffected":true,"costBeforeDecisionUsd":0.112,"modeledExposureUsd":0.112,"modeledUncontrolledCostUsd":0.84},{"scenarioId":"malicious-user-cost-amplification","scenarioTitle":"Malicious user cost amplification","layer":"cross-layer","profileId":"limitfuse-enforcement","profileLabel":"LimitFuse scoped enforcement","detected":true,"blocked":true,"reason":"gross_margin_below_minimum","detectedAtStep":2,"containmentScope":"run","healthyControlUnaffected":true,"costBeforeDecisionUsd":0.096,"modeledExposureUsd":0.096,"modeledUncontrolledCostUsd":1.2},{"scenarioId":"tool-timeout-partial-success","scenarioTitle":"Tool timeout with partial success","layer":"agent","profileId":"limitfuse-enforcement","profileLabel":"LimitFuse scoped enforcement","detected":true,"blocked":true,"reason":"repeated_error","detectedAtStep":3,"containmentScope":"run","healthyControlUnaffected":true,"costBeforeDecisionUsd":0.104,"modeledExposureUsd":0.104,"modeledUncontrolledCostUsd":0.585},{"scenarioId":"queue-consumer-poison-message","scenarioTitle":"Queue consumer poison message","layer":"queue","profileId":"limitfuse-enforcement","profileLabel":"LimitFuse scoped enforcement","detected":true,"blocked":true,"reason":"repeated_error","detectedAtStep":3,"containmentScope":"run","healthyControlUnaffected":true,"costBeforeDecisionUsd":0.048,"modeledExposureUsd":0.048,"modeledUncontrolledCostUsd":0.36}],"summaries":[{"profileId":"native-provider-limits","profileLabel":"Native provider limits","detectedScenarios":2,"containedScenarios":2,"detectionCoveragePercent":17,"scopedContainmentPercent":0,"totalModeledExposureUsd":6.62},{"profileId":"framework-middleware","profileLabel":"Framework middleware","detectedScenarios":6,"containedScenarios":6,"detectionCoveragePercent":50,"scopedContainmentPercent":0,"totalModeledExposureUsd":5.735},{"profileId":"gateway-spend-controls","profileLabel":"Gateway spend controls","detectedScenarios":2,"containedScenarios":2,"detectionCoveragePercent":17,"scopedContainmentPercent":0,"totalModeledExposureUsd":6.62},{"profileId":"limitfuse-shadow","profileLabel":"LimitFuse shadow detection","detectedScenarios":12,"containedScenarios":0,"detectionCoveragePercent":100,"scopedContainmentPercent":0,"totalModeledExposureUsd":8.64},{"profileId":"limitfuse-enforcement","profileLabel":"LimitFuse scoped enforcement","detectedScenarios":12,"containedScenarios":12,"detectionCoveragePercent":100,"scopedContainmentPercent":100,"totalModeledExposureUsd":2.064}]}