Owner cost controls
No provider spends beyond your rules.
Free and included routes are evaluated first. Paid work is blocked by default, measured against project and monthly ceilings, and returned for exact approval.
Safe demo mode. External production and publishing calls are disabled.
Policy is separate from payment.
Changing a ceiling never charges a card. A later provider action must identify the provider, exact amount, recurrence, cancellation terms, and secure confirmation path.