These policy pages describe the four rule patterns that cover almost every agent-spend scenario. Each one shows the rule shape, the failure mode it prevents, and how to combine it with the others into a complete spend firewall.
A daily ceiling policy caps total agent spend in a 24-hour window. This guide covers how to set ceilings that balance safety with the agent's task scope.
A merchant allowlist policy restricts which merchants an agent can transact with. This guide covers allowlist design patterns for different agent use cases
A per-transaction limit policy caps the dollar value of any single spend an AI agent can execute. This guide covers recommended limits by use case and how
A velocity cap policy limits the number of transactions per minute an agent can execute. This guide covers recommended velocity caps by agent type.
A category policy defines what agents may buy — by spend type. Here's the template and the enforcement.
A time-of-day policy decides what happens when agents spend outside business hours — the window where runaways happen.
An approval policy defines what waits for a human — the control that keeps agents fast without unreviewed spend.