Your agent can only do what you said it could.

import { Thskyshield, ShieldKilledError } from '@thsky-21/thskyshield'

const shield = new Thskyshield({ siteId, apiKey })

const run = await shield.beginRun({
  budgetLimitUsd:   2.00,
  iterationLimit:   30,
  loopThreshold:    5,
  allowedTools:     ['search', 'read_file'],
  maxMutationClass: 'reversible',
})

try {
  while (!done) {
    const { requestId } = await run.beforeStep({
      stepType:        'tool',
      toolName:        'search',
      mutationClass:   'read_only',
      estimatedTokens: { input: 500, output: 200 },
      promptInput:     currentPrompt,
    })

    const result = await callYourTool(currentPrompt)

    await run.afterStep({
      requestId,
      actualTokens: result.usage,
      model:        'gpt-4o-mini',
    })
  }
} catch (e) {
  if (e instanceof ShieldKilledError) {
    // e.reason: 'killed_scope_tool' | 'killed_scope_mutation' | 'killed_loop'
    //         | 'killed_budget' | 'killed_iterations' | 'killed_timeout'
    console.log(`Agent stopped: ${e.reason}`)
  }
} finally {
  await run.end()
}