The agent never decides whether its own payment is valid. A payment clears only if the real charge — at the moment of settlement — matches what the user actually signed.
The user asks
One model call turns this into a single-use, expiring mandate — product, merchant, and budget. Only a charge that matches it exactly will ever be released.