DEV Community

Discussion on: Zero Standing Access for AI Agents: Let Users Lend Access, One Session at a Time

Collapse
 
kevinhall profile image
Kevin Hall •

Spend fits the same rule as access. A budget the user lends for the session, enforced inside the tool call as a maximum charge per run, so an agent can never hold more than the person agreed to. A promise in the prompt is not an enforcement point, the cap in the call is.

Collapse
 
akarshan profile image
Akarshan Gandotra •

Agreed, and that's a cleaner way to put it than I managed. A budget is just another thing the user lends for the session, and like every other grant it has to be enforced where the spending happens, not described to the model. heyvaldemar's point in the thread above is the practical catch: the cap has to live somewhere that knows whose session it is, and the model gateway often doesn't.