Sumplus
An agent that spends money, and a record you can check yourself.
Give an agent a budget and it will spend it. The cashier sits in front of every call it makes: the policy decides before the money moves, and each call leaves a receipt. The receipts are chained, so a stranger can recompute the whole record from the receipts alone and catch a single edited digit.
Nothing has been spent yet
Press Run a session. The agent reads the Sumplus execution catalogue, searches it, asks the gateway to prove what hardware it is running on, and then tries two calls the policy has to refuse. Every call above is a live request to production, not a recording.