4 days until MiCA enforcement. AWS Bedrock AgentCore shipped session-level spending limits. Coinbase x402 shipped per-request payment authorization. Both solve the wrong problem.

A $0.50 API call and a $5,000 service procurement should not pass through the same governance gate. One needs instant approval. The other needs multi-step verification, budget owner sign-off, and an audit record that satisfies MiCA Article 67.

Session-level limits treat all spending as equal. That is not governance. That is a cap.

The Flat Limit Problem

Every agent payment platform launched in 2026 ships the same primitive: a spending ceiling per session or per time window. Ramp documented the pattern. Finout documented why it fails. The arxiv "Dynamic Tiered AgentRunner Framework" paper formalized the gap: insufficient governability means high-risk write operations proceed without independent review.