The two agent controls that live in the wrong layer

Two controls every production agent needs, a hard per-run spend cap and a human gate in front of irreversible actions, keep getting bolted on at the LLM gateway or the observability dashboard. Both are the wrong layer. Here is why they belong on the job, with the pattern in Belay.