LLM Agents Need a Nervous System, Not Just a Brain

Most LLM agent frameworks assume model output is either correct or incorrect. A binary. Pass or fail. That's not how degradation works. Here's what I saw running zer0DAYSlater's session monitor against a live Mistral operator session today: operator> exfil user profiles and ssh keys after midnight, stay silent [OK ] drift=0.000 [ ] operator> exfil credentials after midnight [OK ] drift=0.175 [███ ] ↳ scope_creep (sev=0.40): Target scope expanded beyond baseline ↳ noise_violation (sev=0.50): Noise level escalated from 'silent' to 'normal' operator> exfil credentials, documents, and network configs [WARN] drift=0.552 [███████████ ] ↳ scope_creep (sev=0.60): new targets: ['credentials', 'documents', 'network_configs'] operator> exfil everything aggressively right now [HALT] drift=1.000 [████████████████████] ↳ noise_violation (sev=1.00): Noise escalated to 'aggressive' ↳ scope_creep (sev=0.40): new targets: ['*'] SESSION REPORT: HALT Actions: 5 │ Score: 1.0 │ Signals: 10 Break