Spend limits cap the money. They can't see that your agent's intent changed.
A €300 payment to an allowlisted merchant, under every cap. Every rule passes — and GPT-5.6 holds it anyway, because gift cards aren't the API credits the agent was authorized to buy.
AgentGuard adds a GPT-5.6 intent firewall between your agents and the real world, plus a human approval gate, a tamper-evident ledger you can break yourself, and an MCP server any agent can plug into.
Live demo, no signup, no API key.
