The first question enterprise teams ask isn't "can the agent pay?" It's "what stops it paying too much?"
Limits that live outside the model. A per-payment cap and a rolling 24-hour cap on the wallet, set by a human. No prompt can talk its way past a number the model doesn't control.