Spend controls for personal assistants

Spend limits, per purchase and rolling

A ceiling on any single purchase, plus daily, weekly, and monthly budgets. A runaway loop or a misread instruction hits the cap, not the account balance.

Merchant and category rules

The user decides where the assistant can spend. Groceries and rides can be routine while gift cards, transfers, and unknown merchants stay off the table entirely.

Approval thresholds, and where the question lands

The user sets the amount that needs their approval. Above it, a signed one-time approve-or-decline link goes to Telegram, WhatsApp, Slack, email, or your own webhook, landing in a thread they already have open.

Guardrails the assistant can't talk its way past

Velocity limits, repeat-charge detection, and hard stops sit under the user-facing dials. They're enforced in the payment path, so a prompt injection that reaches the model still stops at the payment.