An agent that needs a human to click "approve" on every payment can't run a business. It can only ask permission.
Set the rules once instead: a per-payment cap and a rolling 24-hour limit. Inside them, the agent buys the ads, tools and data, gets paid, and reinvests. Outside them, it stops.