Core limits
Start with hard limits. Your policy should define the largest amount an agent can spend in one request, across one task, and over a time window. It should also constrain where that money can go: which sellers, categories, networks, and assets are allowed.
Set the first budget caps from dashboard, then raise them only after the agent behaves predictably.