Stop the spend before it leaves the building.

A job that is not installed cannot run. IBM's 2025 Cost of a Data Breach report found that high levels of shadow AI added $670,000 to the average breach cost, and that 20% of the organizations studied had a breach involving shadow AI. Of the AI-related breaches, 97% involved systems without proper access controls. That figure is a breach cost, not a software bill. The control is the missing piece: if it is not installed, it cannot run on the side.

A call that would break the ceiling is refused. So is a call with no price on it. In 2026, Uber had used its full-year AI coding budget by April. The FinOps Foundation's director said companies were reporting they were already three times over their 2026 token budget in April. A separate catalog counted 63 confirmed production incidents, from 2023 through 2026, in which an agent loop spent past its budget before a person noticed. The ceiling is the refusal. A call with no price on it is refused for the same reason.

Anything at $10,000, or a vendor you have not used, waits for a person. The $10,000 line is your rule, not a statistic. The loss underneath it is. The Hackett Group's maverick-spend study found respondents believing they lose as much as 16% of negotiated savings when buying goes around the approved path, and 75% blamed missing tools rather than people refusing to comply. Separately, the Association for Financial Professionals found that 76% of organizations reported attempted or actual payments fraud in 2025. The hold does not prove the vendor. It keeps the new name, or the amount at the line, from leaving until your person has seen it.

Rent, term, notice, and deposit, each tied to the sentence it came from. We do not tell you what the clause means. Prophia's 2025 lease-abstraction benchmark, a vendor report, put average exposure from abstraction errors above $180,000 per building. Treat that as their benchmark, not an official series. The control does not interpret the clause. It keeps the four figures attached to the sentence they came from, so a missed notice is visible before the date passes.

A change to where a bill would be paid waits for a person, at any amount. The phone they use must already be on file, not the phone in the request. The FBI's Internet Crime Complaint Center recorded 24,768 business-email-compromise complaints in 2025 and $3,046,598,558 in reported losses, up from $2.77 billion in 2024. The ordinary shape is a real vendor thread asking for a new place to pay. We do not call the vendor, and we do not check the account. The record waits. The payment does not move.