So a human still sits in the seat.
The workaround is always the same: keep a person in the loop to approve every money-moving action by hand.
agent proposes
→
human validatesslow · costly · doesn’t scale
→
action runs
It works. It also means the agent never quite does the job it was hired for. The human became the product.