Interventional Causal Circuits for Safe Robot Action Testing and Failure Recovery