Notes on controls for AI agents that touch money: limits, approvals, and evidence somebody outside the loop can verify.
