Cap your agent’s per-transaction and daily transaction amounts. Note that this policy doesn’t cover third-party transfers after token approvals.