Threat-model an agent that can spend or sign

Map what a compromised prompt, model, or host lets an attacker sign or steal, then choose a control tier.