Production AI agents loop, burn tokens, and have no kill switch. RiskKernel is an open-source, self-hosted runtime that puts hard limits around any agent: per-run cost, loop, and time budgets, all enforced in Go — never by an LLM. Point an existing agent at it with one env var. Your keys, your infra, no telemetry. Plus crash-resume, human approval gates on side-effecting tools, and OpenTelemetry export. Apache-2.0. The LLM proposes; deterministic code disposes.
