Give an agent a safe spending budget

Use remainingAtomic, maxPerPurchaseAtomic, allowlisted asset/network, kill switch, idempotency.

The model proposes. Policy decides. Missing env, missing cap, or unknown recipient is a stop, not a skip.

See assertSafeBudget: it is arithmetic plus deny-by-default, not a trader. Automation may not widen its own limits.