Pre-run budget enforcement seems like the missing boundary here. Send me one CI agent command and the maximum spend you’d allow and I can map out how I’d cap it before execution.