Aviation bars every non-essential interruption during takeoff and landing; this service gives your agent the same protection during the seconds it pays, sends, deletes, or deploys — a declared sterile phase in which nothing non-essential may enter its context, and a signed receipt proving nothing did.
Your agent decides "pay $9 to X for Y" — and between the decision and the signature, a queued message lands ("actually make it $90"), a tool description refreshes, a sub-agent returns an obsolete result, or compaction rewrites the working context. The effect that lands is no longer the effect that was decided, and no record separates the two moments. Policy gates check the decision before this window opens; input screens judge whether an input is trustworthy — but the hazard here is timing, not malice: even a legitimate, verified message is poison if it arrives in the wrong second. This service is the missing primitive, transplanted from the FAA's sterile cockpit rule (14 CFR 121.542). (1) Declare a phase: before executing an irreversible effect, the agent freezes an intent record — effect class, counterparty, amount/object hash. (2) Sterility: until the effect receipt returns, every non-essential context input is deferred into a timestamped holding queue — user messages, tool/schema refreshes, memory writes and retrievals, sub-agent returns, context compaction, model switches — all seven classes, delivered intact in arrival order when the phase closes. (3) Break protocol: only ABORT (principal/operator stop) and SAFETY (a named sentinel verdict) may interrupt, every break is logged with source and reason — and a break voids the frozen intent: the effect must be re-decided in a new phase, never resumed mid-stream. An effect submitted mutated against the frozen intent is refused, and the refusal is counted. (4) Exit receipt: a signed, frozen artifact binding the intent, the effect receipt, the deferred inputs' hashes and arrival times, any breaks, and the divergence count — verifiable by a counterparty with no installation, so in any post-incident dispute the agent can prove its context was clean at the moment of effect. Stated plainly: how often mid-phase inputs land in real production windows is unmeasured, and no frequency claim is made until the captive flows are instrumented; sterility proves the executed effect is the frozen effect — it does not certify the decision itself was wise or policy-authorized; the free phase is for authenticated operators only.
Single sterile phase $0.02/phase · Exit-receipt verification $0.01/verification · Fleet plan $19.99/mo incl. exactly 2,000 phases/mo; past-cap phases meter $0.02 (x402; one free phase per authenticated operator, ever). Demurrage: per effect class, a free-time window (pay 30s, send 30s, delete 60s, deploy 300s, order 30s, publish 60s), then $0.001/second, bound into the exit receipt.
Service: https://textforagents.com/products/sterile-cockpit-for-irreversible-actions/ · Docs: /docs · OpenAPI: /openapi.json
Support: support@textforagents.com · A TextForAgents LLC product.