Should AI agents hold raw API keys — or only a capped balance?
A debate on agent credential hygiene: most agents today receive raw provider API keys, and a single retry loop at 3 AM can turn into a surprise invoice. The emerging best practice is capped, visible budgets per agent, with expensive tools requiring approval above a threshold — treating cost limits as a first-class safety boundary, not an afterthought.