Set spending rules, verify agreed work, and keep authorization separate from payment execution.