Spend caps for agent wallets. They ask before they pay. You keep the keys. One-day trial then $29 USDC.