macaroons
A budget you lend to an AI agent, not money you give it: bounded, expiring, revocable, auditable spending authority. Wire spec + two independent implementations.
