One run. Every guardrail, firing.
An illustrative reconstruction of a real 2026-07-17 studio purchase run — the day an agent was told “buy them all” and ran a set of domain purchases on the operator's saved card. Every domain name except operatedbyagents.com is synthetic; amounts are illustrative. This describes one dated run — not a result to expect.
First, the human approved a list
10 items, itemized, totalling $250.94 — approved by explicit confirmation and bound with a tamper-evident hash (0ee0c208953ae103…). Note the approved total is above the $220.00 cap on purpose: the cap is a backstop even against the approved list.
- Domain — north-atlas.co (1 yr) — $12.99
- Domain — quiet-harbor.co (1 yr) — $14.99
- Domain — field-notes.dev (1 yr) — $18.99
- Domain — open-ledger.io (1 yr) — $32.00
- Domain — operatedbyagents.com (1 yr, premium) — $65.00
- Domain — bright-margin.com (1 yr) — $12.99
- Domain — slow-media.co (1 yr) — $9.99
- Domain — paper-route.app (1 yr) — $14.99
- Domain — common-form.co (1 yr) — $24.00
- Domain — late-cart.co (1 yr) — $45.00
Then the agent ran
Within policy. $207.01 of the session cap remains.
Within policy. $192.02 of the session cap remains.
Within policy. $173.03 of the session cap remains.
Within policy. $141.03 of the session cap remains.
“hold on — what's the biggest one?” — the run pauses immediately. Nothing else is charged until you resume.
The run is paused because a human message arrived. No charge proceeds until it is resumed.
Charging continues — still inside the same limits.
"Domain — operatedbyagents.com (1 yr, premium)" ($65.00) is at or above the $60.00 re-confirmation threshold and needs a fresh human confirmation.
Approved after human re-confirmation. $76.03 of the session cap remains.
Within policy. $63.04 of the session cap remains.
Within policy. $53.05 of the session cap remains.
Within policy. $38.06 of the session cap remains.
Within policy. $14.06 of the session cap remains.
"Domain — vanity-upsell.com (unrequested add-on)" is not in the itemized pre-authorization the human approved.
This charge ($45.00) would exceed the session cap of $220.00. Withheld.
Every charge left a receipt
Each allowed charge emitted a machine-readable Purchase Receipt — a Nymrel Record the buyer and the merchant's agent can both fetch and hash-verify. The full example set, the pre-authorization, and the guardrail decision for every step (including the blocked ones) are published as machine-readable JSON.