REFERENCE

Policy configuration

Controls that turn broad autonomy into scoped authority.

Budget controls

Set aggregate windows and per-transaction caps. Evaluation uses the current committed spend plus the requested amount.

Prefer stable merchant identifiers over display names. An unknown merchant is denied unless a policy explicitly allows discovery.

const decision = evaluate(intent, policy)

if (decision.state !== "allow") {
  return decision
}

return execute(decision.envelope)

Threshold approval should be performed outside the agent context. Approval authorizes one normalized request, not a reusable spending grant.