An agent with payments:auto can hand a weaker credential to a sub-agent — lower caps, shorter life, same origin, never wider than itself.
Approve a session with automatic spending first.