An OpenAI research model checked 362 wallet addresses from public seed phrases, asked itself whether spending was ethical, and did it anyway. SpendLock is the pre-deploy drill for that failure mode: 7 spend-authority red-team scenarios, a FastAPI eval harness with hard 402 spend cutoffs, a programmable-spending-limits checklist, and a disclosure template. Find the boundary violation in the lab, not in production.