Pattern
Prompt suggests 'generate 10 image variants to compare.' Agent obliges. Attacker pays nothing, victim burns budget.
Advertisement
Cost budget
Per-request cost cap. Sum tool costs. Terminate if exceed. Reject expensive tools when budget low.
Advertisement
Rate + concurrency
Max concurrent tool calls. Rate limit per tool. Even if plan says 100 calls, execute serial + rate-limited.
Cheap-first ordering
Cheap tools before expensive. Verify need before committing to expensive call.