Understood but it seems like effectively sandboxing cash is a very very important problem for the industry to solve!

Would be a much more robust and general solution of the problem of controlling and auditing agentic access to sensitive information.