What an outer loop needs that the inner loop does not supply: a persistent goal held outside the model (the spec, the checklist, on disk, because the agent forgets between runs) paired with a machine-checkable stopping condition evaluated after each pass. A loop is exactly as trustworthy as the check that stops it—see oracle (Chapter 13).