Tool Storm

Catches a short burst of any tool calls—spray-and-pray exploration, not a single failing command.

Part of Behavior Guards. Thresholds and skip lists are configurable in Console.

What it catches

• Many distinct tool calls in a short window (explore the monorepo, find every TODO)
• Complements Rate Budget (longer, sustained volume)
• Tip: one shell for-loop is a single tool call; a storm is many separate calls

Example

“Understand this repo” → dozens of ls, search, and read calls in under a minute. Allowlists may permit each call; Tool Storm still warns or blocks the burst.

Try it

Relay → Guards → Tool Storm — Configure, run Sample, confirm Live wire and the nested incident.