Define the boundary
A policy names the agent, permitted actions, currency, counterparties, maximum amount per request, total budget, and expiry. An agent can prepare these terms and send an owner a review link. It cannot activate a policy or approve its own proposals.
Approve the terms you actually reviewed
Policy requests retain immutable terms and a digest. An administrator reviews those terms before activation. Requests expire within 24 hours; activation checks that the original connection is still active. Repeating an activation returns the same policy rather than creating another allowance.
Reserve before approval
A proposal reserves allowance against its policy. Pause, revocation, budget reservation, and approval use a shared workspace lock. Exact proposal terms are fixed; an idempotency key prevents the same request from becoming multiple reservations.
Permission and execution are different steps
General commerce proposals do not execute payments, including after approval. The separate refund pilot uses Stripe test mode. Keep direct payment credentials outside agent access: DeAlgo cannot govern actions that bypass its integration.