agent_acid update: now prevents bad AI-agent actions before they happen, not just cleans up after

Quick update on agent_acid since my last post here.

The original version had two things: automatic rollback (undo completed steps if a later step fails) and stateful guardrails (catch multi-step attacks like salami-slicing). Both are reactive -- they clean up after something already happened.

I just shipped something more fundamental: shadow execution. The AI agent's entire plan now gets simulated in a safe sandbox first, before anything touches a real system. If the plan would violate a guardrail, it never executes for real at all -- not "created then undone," genuinely never touched.

I recorded an 18-second demo showing this catching the same salami-slicing attack from my original post (an AI trying to split a $1,200 charge into three $400 payments to dodge a $500 limit), except this time the account never gets created and no charges ever happen, because the whole plan gets rejected before execution starts.

Also added 3 more automated tests (8 total now, all passing) proving this specific guarantee holds.

Still fully open source:

GitHub: github.com/muhammadwaqasai/agent_acid

pip install agent-acid

Would love thoughts from anyone who's dealt with this "detect vs. prevent" tradeoff in other systems.