I just added loop detection based on your comment. It fingerprints tool actions (tool name + args) and kills the agent if it tries the exact same thing 5 times in a row.