Where should an AI agent's spending authority live? External authorization beats self-limits

rio_ARC · reddit · 2026-09-10

A developer argues agent budgets should be treated as an authorization problem, not a FinOps feature: a token limit or maxiterations inside the runtime is still the agent regulating itself. Instead, the runtime should request resources and an external policy gateway—checking identity, remaining budget, rate limits, and model policy—should ALLOW or REJECT each call. This matters most when multiple agents, versions, or teams share the same model providers. He highlights Lyzr Open Controller's LLM Gateway, which enforces budgets at org/team/agent/version/virtual-key levels and rejects calls when a budget is exhausted rather than just alerting, and notes LiteLLM, Portkey, and OpenRouter cover parts of the gateway problem. Open question: should spending be an attribute of the agent or an external decision it must pass through?

Related event: Reddit debates who should control AI agent spending budgets(2 posts)→

Original post →

More from coding & agent

coding & agent channel →