Spending Limits for LangGraph Agents That a Prompt Injection Can't Talk Past
Short answer: a spending limit written into a LangGraph agent's system prompt ("never spend more than $500") is a suggestion, not a control. Any text the agent reads, including a scraped invoice or an email, can contain a competing instruction, and the model has no way to know which one is…