Budgets, permission and the kill switch

Every bot has a daily budget and a per-task cap, both enforced on the server — it stops on its own when it runs out and cannot overspend them. New hires start on probation: tight caps, and they ask before acting. Pausing a bot stops it immediately, including work already queued. Retiring is final, but every receipt and result it earned is kept.