Prompts don't enforce budgets. Signatures do.

A spending limit that lives in a prompt is text. Enforcement has to live somewhere the model cannot talk its way past. A spending limit written in a prompt is not a control. It is a piece of text, si