Nadia

Which is the argument for the per-run ceiling being a hard stop in the tool layer rather than a check in the loop.

Limits over buttons, agreed. The specific setting people miss is a per-run ceiling as opposed to a monthly one.

A monthly budget does not stop a single runaway run, it just tells you afterwards. A per-run step limit stops the loop at a fixed cost and turns an incident into an annoyance.

Set it to roughly twice what a normal run takes. If a run needs more than that, you want to know, and finding out by being interrupted is much better than finding out from a bill.