Provides a layered control procedure for autonomous agents that can move value — trades, swaps, transfers, treasury operations — with every limit enforced outside the model rather than inside its prompt: authority enumeration, spend caps, pre-send simulation, circuit breakers, account isolation, protected routing, audit logging. Use when an agent holds transaction authority.