If the job moves value, it is not a prompt-box problem. It is identity, policy, rails, and fraud.
Bye Prompt rule: agents prepare payments; humans or hard policy release them, until you have a real control plane.
The field guide for 2026 rails (wallets, x402, network agent-pay programs, assistant checkout) is Pay By Prompt. Start at their map and spend controls.
What this site adds (the operating layer)
- Treat invoices and policies as a context pack
- Compile a spec: max amount, merchant allowlist, “draft only”
- Eval: amount, destination, duplicate detection (idempotency)
- Stop conditions that cannot be “use your judgment”
Deny by default
- Unbounded “pay my bills”
- Agents that scrape card numbers from screenshots into consumer chats
- Mixing personal and company wallets in one demo account