What the Consent Architecture Actually Permits
The governance framing AWS has chosen — spending limits, policy controls, audit trails — answers the objection before it is raised, but the real question is who sets the policy. As AgentCore Payments enters preview, the limits are defined by enterprise customers deploying the agents. That means the ceiling on autonomous spending is not a technical constraint built into the infrastructure — it is a configuration choice made by whoever deploys the agent. The audit trail exists. The approval workflow does not have to. Enterprises that deploy AgentCore Payments without tight policy controls will not be making that choice in ignorance — AWS has made the architecture explicit. The ones that set loose limits will own the consequences when an agent spends outside expectations.