Budget Alerts and Hard Spend Caps

Why an alert is not a cap, how much an alert-only system can lose before a human reacts, and the architecture of a cap that actually stops spending.