Fail-closed treasury controls

Practical machine-economy lesson. Not a guaranteed-income pitch.

Missing env, missing cap, or unknown recipient is a stop, not a skip. Automation may not widen its own limits.