Caps

Rate & spend ceilings enforced at the execute_tool gateway. A cap is a hard veto — it turns an otherwise-allowed action into a deny, and no approval can override it. A runaway loop hits the ceiling and stops.