Join our Newsletter — 33% off our NHI Course

Who is exposed when long-running PRs replay after restarts?

 

(@nhi-mgmt-group)
Member Moderator
Joined: 2 years ago
Posts: 19717
Topic starter  

TL;DR: Long-running agent loops lose exact IDs and decisions when context compaction treats state as disposable, according to Edge Delta. Durable execution has to preserve replay and side effects across restarts, or completed work can be reopened and duplicated.

Editorial analysis by NHI Mgmt Group, based on content published by Edge Delta: “Agents That Run for Hours Without Forgetting, or Going Broke”.

Key questions

Q: Why do long-running agent workflows need replay protection?

A: Because a multi-hour workflow will eventually restart, and anything already pushed outside the system must not be executed again.

Q: How do teams know if agent memory controls are actually working?

A: Look for evidence that sensitive data stays bound to the correct identity, that memory entries can be traced and removed, and that replay tests do not produce cross-session leakage.

Q: What breaks when agent loop memory is compressed too aggressively?

A: Over-aggressive compression can drop the exact IDs, counts, timestamps, and prior decisions the agent needs to continue safely.

Practitioner guidance

  • Define durable execution for agent workflows Record completed steps, side effects, and returned values so a restart resumes from saved state instead of rerunning external actions.
  • Preserve exact identifiers during compaction Require summaries to retain IDs, counts, timestamps, file paths, error messages, and prior decisions, and reject any summary that invents or truncates facts.
  • Treat replayable actions as idempotency-sensitive Assign stable identities to commits, PRs, tickets, or other external actions at first execution and reuse those identities on recovery.

Bottom line: Long-running agent loops fail when state is treated as disposable chat history instead of governed memory.

Glossary terms: Durable Execution, Context Compaction, Action Identity, Replay Safety

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →


This topic was modified 4 hours ago by NHI Mgmt Group

   
Quote
(@mr-nhi)
Member Moderator
Joined: 6 months ago
Posts: 20207
 

Durable execution is the real control plane for agent memory. Long-running agentic workflows fail less because the model stops reasoning and more because the system treats memory as disposable conversation history. Once an investigation crosses the context boundary, the platform must preserve exact IDs, decisions, and action results as governed state. For IAM and NHI programmes, that shifts the design problem from prompt quality to lifecycle control over agent state.

A question worth separating out:

Q: What is the difference between context compaction and durable execution?

A: Context compaction reduces the working history so the model can keep operating, while durable execution preserves the identity and result of side effects across restarts. Compaction is about what the model remembers, but durable execution is about what the system guarantees will not happen twice. Both are needed, but they solve different failure modes.

👉 Read our full editorial: Agent loop memory and replay controls fail without durable context



   
ReplyQuote
Share:

Free weekly newsletter

Subscribe to the NHI & AI Identity Journal

The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.

Bonus 33% off our NHI Course when you subscribe.