CLAIM-2026-08-08-02

Cloudflare's release states: 'Users will be free to define a spending cap, an approved merchant list, and even a maximum transaction size the agent cannot exceed on its own.'

Why it matters

These three controls are what an engineer would reach for, and naming them precisely is what lets the edition show that none of them is authorisation in the PSD2 sense.

Sources

• cloudflare2026cloudflar