The two-layer architectural fix for MCP loop amplification consists of a per-node tool-call budget and circuit-breaker logic at the MCP transport layer, the latter being more important because it broadly guards against third-party instability.