The agent

Tell it what to pay. Under its cap, it pays on its own. Beyond it, the Stellar network refuses its signature, and only yours unlocks the payment.