This is already running in production.

Governs maximum spend and call quotas per window. Blocks execution on breach.

Every governed request is written to audit before execution is permitted.

Operator-level kill switch. Overrides all execution regardless of budget state.