40 x $90 Refunds Are Each Fine but Total $3,600: Capping Aggregate Agent Damage
No-Conflict4823 · reddit · 2026-10-07
A Reddit post highlights a blind spot in agent safety: limits are usually per-action (refunds under $100, emails under 50 recipients), but 40 refunds at $90 each are individually fine and still total $3,600 nobody approved.
The author asks teams running agents with real-world actions (money, customer emails, tickets, CRM changes):
- Do you cap totals over time (per day/week/customer) or just per action?
- When the next action would exceed the cap: block, queue for human review, or something else?
- Do pending approvals count toward the total, or only completed actions?
The core question: per-action limits don't stop cumulative damage — what actually works in practice?
More from coding & agent
- CAVEAT testbed exposes how merchants can steer your shopping AI agent — ZacharyHuang12 · 2026-10-07
- Pi and mini-swe-agent Passed 9/9 Checks Each — a Second Review Still Found Bugs — Mysterious-Desk-3492 · 2026-10-07
- Defending skills: a markdown file that helps your agent deserves praise, says eptwts — eptwts · 2026-10-07
- GEA treats agent groups as the evolution unit, hitting 71% SWE-bench Verified with zero human help — xwang_lk · 2026-10-07
- Claude Code v2.1.292 ships plugin marketplace install, agent effort param, security fixes — ashwin-ant · 2026-10-07
- LangChain Releases 90-Second Explainer of Its Deep Agents Framework — LangChain · 2026-10-07