Absolutely. The spend ceiling should be enforced deterministically in the tool/application layer, not left to the model or prompt. The model can request an action, but the tool should independently validate the amount and reject anything above the hard limit. Tracing then gives us visibility into the attempted action, validation result, and failure path.