Commerce agents that can charge a card need a hard spend ceiling in the tool layer. I put the money check outside the model so a prompt cannot raise the limit.