Prevents runaway cloud costs from AI agent usage. Enforces hard budget limits with configurable actions: throttle, pause, alert, or kill. Spend projection and webhook alerts.