Use when the user authorizes a paid API, model, benchmark, eval, pilot, or one-off command with a hard cost cap, max-cost flag, strict budget, or explicit one-run limit.
