Can your CrewAI agent spend money without your permission?

Your CrewAI agent can browse the web, write code, and call APIs.

Can it spend $500 without your permission?

If you have not explicitly set spending limits and an approval
layer, the answer is probably yes.

Curious how others are handling financial guardrails for agents
that touch real money or APIs with billing attached. Is anyone
solving this properly?