Agents

Every agent gets its own scoped key and its own ceiling. When an agent reaches it the request is refused before any host is paid, and the agent receives an approval link — it can ask you for more, it can't quietly take more.