Policy first, payments second
An agent is born with a budget and a merchant allowlist, and it cannot exceed either. Anything above the human-approval threshold pauses and asks. The agent moves fast inside the walls; the walls are yours.
- [ 01 ]Budgets enforced at the platform, not promised by the agent
- [ 02 ]Allowlists scope where money can go at all
- [ 03 ]Thresholds route big decisions to people
Every action on the record
The audit log is immutable and complete: what the agent tried, what policy allowed, who approved what. When an agent misbehaves — or a policy turns out wrong — the kill-switch stops it instantly, and the log shows exactly what happened.