The ChatGPT Wallet model is the interesting one here — the agent can pay without ever seeing the card, and every purchase still gets a security check. That's the pattern I want everywhere: scoped keys, per-action approval, and a hard spending cap, not a blanket 'agent can do anything' token. Shopify letting agents attack its own infra is the other half — you don't really trust the keys until you've tried to break them.