The safety layer that had never run
I spent a week building a system whose entire argument is that an AI agent cannot Pocket Change gives AI agents bounded, auditable spending authority. You sign one The idea I was proudest of is a separation. When a task says "find the best price", search and a budget of zero. pay and cannot search. And crucially, the looker is not the payer's child. It's the payer's sibling. That word carries the design. Attenuation is monotonic — a child holds a subset of search for its own child to inherit it.
