{"page":"/blog/agent-ready-ad-infrastructure","modified":"2026-11-10","license":"https://creativecommons.org/licenses/by/4.0/","columns":["Field","Purpose"],"rows":[["allowed_tools, read_only_tools","Least privilege: this credential can read freely but only some tools can write"],["spend_limits","Hard caps the platform enforces, whatever the agent asks"],["human_approval","Orders above the threshold wait for a named role; unapproved requests expire"],["pricing_rules","Refuse prices with no traceable source, the failure AAMP 2.3 targets"],["idempotency","Writes must carry a key; repeats return the original result"],["audit_log","Store inputs and outputs of every call for at least a full planning year"]],"sourceUrls":[[],[],[],[],[],[]]}