c16
c16 / wf5.m1 - Agent Control Plane — hi-fi (wf5.m1) / Usage Limits·control-plane-v1/usage-limits·draft

Finance · Usage Limits

Put a ceiling on AI spend — per user, per agent, per tool

Cap coverage is 78% (14 of 18 entities have a ceiling). 3 over cap (svc-data@qpoint.io, support-copilot, gpt-4o), 2 near it. $218.50 flows through 4 uncapped entities — starting with data-pipeline-agent (the LLM10 unbounded finding). We're in Audit: nothing is blocked yet.

How a breached cap is handled

Audit live · Assist / Enforce projected

Audit

live now

Observe consumption against each cap. Surface who has no ceiling and who is over — no intervention.

Assist

projected

Alert the owner at 80% of cap and require approval to keep spending past it.

Enforce

projected

Hard-stop the run when the cap is hit. The spend simply cannot exceed the ceiling.

Cap coverage

78%

14 of 18 have a ceiling

Over cap

3

already past a ceiling this period

Near cap

2

≥ 80% — Assist would alert

Uncapped spend

$218.50

4 entities · no ceiling at all

Limits by User

A monthly ceiling per human or service identity — who is spending.

User
Spend vs. cap
Used
Cap
Status
dev-7f3@duck.com
est
no ceiling — runs unbounded
$78.00none uncapped
(proxy-only, no identity)
no ceiling — runs unbounded
$44.10none uncapped
svc-data@qpoint.io
$52.30$40.00 131% over
mark@qpoint.io
$245.50$300.00 82%
svc-support@qpoint.io
$168.40$250.00 67%
jane@qpoint.io
$96.20$200.00 48%

Each bar fills toward the cap line (100%). Rows past it are over; rows with no ceiling run uncapped — an enforcing policy can't stop what has no limit. At the recent ~$115.57/day fleet run-rate, the near-cap rows breach within 2 days.

No ceiling — set a cap first

2 uncapped · $218.50

These actors spend with no limit. data-pipeline-agent is the LLM10 unbounded-consumption finding by name — it burned 9.2M tokens with no per-agent ceiling. Capping here is the highest-leverage move.

dev-7f3@duck.com

$78.00 spent · proposed cap $100.00/mo

~25% over observed spend

(proxy-only, no identity)

$44.10 spent · proposed cap $75.00/mo

~25% over observed spend

Enforce caps in Policy & Enforcement

projected

A spend ceiling is one policy on the same Audit → Assist → Enforce ladder. Flip to Enforce there to hard-stop a run when its cap is hit — paired with the tool allow-list and approval gates.