# AgentGuard Spend task template: payment-approval
# Local-only policy file. Prompts, completions, API keys, and signing keys stay in the customer runtime.
id: payment-approval-v1
name: Payment approval agent
version: 1
effectiveFrom: "2026-05-27T00:00:00.000Z"
mode: enforce
requiredCapability: payment_initiate
scope:
  tenantId: my-tenant
models:
  primary: anthropic/claude-sonnet-4-6
  fallback: openai/gpt-5-mini
  allowed:
    - anthropic/claude-sonnet-4-6
    - openai/gpt-5-mini
caps:
  # WHY: 500 cents per call bounds one agent action while keeping normal work flowing.
  - amountCents: 500
    window: per_call
    action: downgrade
    downgradeTo: openai/gpt-5-mini
    reason: "Per-call budget reached, routing to fallback model"
  # WHY: Daily cap catches loops and unexpected traffic before monthly budgets drift.
  - amountCents: 20000
    window: per_day
    action: block
    reason: "Daily budget reached"
systemInstructions: |
  Review payment intent and policy evidence. Recommend approve, hold, or escalate. Never execute funds movement.