In implementation, the budget envelope is similar to a capability token: the token itself carries constraints such as an amount cap, a whitelist of target merchants and a time window, and the Agent can only present the token, unable to forge it or overspend.