Four Verifiable Boundaries for Agent Payment Authorization

Build bounded sessions, intent binding, single-use approvals, and external signers to prevent prompt injection from triggering unauthorized payments.