Spend policies

Every agent spend is evaluated before Privy broadcast.

• maxPerTx — hard ceiling per payment
• dailyCap — UTC day sum from the spend ledger
• allowlist — usernames, agent slugs, pay slugs, or addresses (empty = any)
• allowedModes — instant, escrow
• requireMandate — AP2 mandate id required when true

Kill switches

• Pause or revoke agent in the UI
• Revoke API keys
• Env AGENTS_ENABLED=false disables all agent spend globally