We build these systems with our clients, on infrastructure we operate. When something fails, it fails where we can see it, and the cost is ours.
An unbounded agent loop consumed several hundred dollars overnight; we traced its cause and introduced spend caps, a circuit breaker, and a monitor that alerts when a threshold is reached.
We paid for that lesson once, at our own expense. Like each failure that has changed how we build, it was recorded as a change to the rules our systems run under, and a client's system inherits those rules, not the failure.
The controls address one operational risk: continued execution that consumes money after an agent has stopped doing useful work. The approval rules built into our products address another: a decision the owner needs to retain as the work becomes automated.