USE CASES where governance earns its keep

Every one of these is an agent spending money you can't watch in real time.

A single agent conversation can trigger hundreds of sub-cent purchases — API calls, data pulls, model inference, other agents' tools. That's exactly where an unbounded wallet turns a bug into an invoice. Here's who's spending, what goes wrong without a governor, and the SpendVeto controls that stop it.

Procurement bot

Autonomous purchasing & restocking

An inventory agent predicts a shortage and places supplier orders on its own, settling in stablecoins. A bad forecast or a retry loop can order ten times what's needed before anyone looks.

per-call caphourly budgetpayee allowlistapproval > $X
Compliance agent

Sanctions & risk-score lookups

A compliance bot pings a paid sanctions database and buys supplier-risk scores per check. Charged per query, a mis-scoped batch job can rack up thousands of paid lookups overnight.

rate limitcategory captool scoperunaway auto-freeze
Support triage agent

Tier-1 tickets, priced per interaction

A triage agent resolves common tickets and escalates hard ones, paying per model call and per tool. A prompt-injected ticket can steer it into paying an attacker or looping a premium tool.

payee allowlisthuman approvalper-agent budgetkill switch
Analytics copilot

Scoped data pulls, billed per query

A copilot runs data pulls and summaries against metered datasets, billed by the query. "Analyze everything" becomes an unbounded fan-out of paid queries — precise consumption, no ceiling.

hourly budgetAPI-spend railshadow-test limitsaudit trail
Agent-to-agent

Buying datasets & tools from other agents

Agents pay other agents for data and API access in real time, at machine velocity. A chain of micro-payments across untrusted counterparties is impossible to reconcile after the fact — or to stop mid-chain.

nested budgetspayee scopesigned receiptstrust score
Coding & CI agents

Fleets that buy compute & premium tools

Claude Code / LangChain / CrewAI fleets call paid models, review tools, and sandboxes across many parallel sub-agents. One runaway parent can fan a budget out across dozens of children before a human notices.

delegation treeMCP-nativeconcurrency-safe capstrading-hours

See the decision happen — no install.

The playground runs SpendVeto's real policy logic in your browser: set a budget, fire agent spend at it, and watch each attempt pass, pause for approval, or get blocked with a reason.