The safety model here is the part I like most: caps enforced in code and by the wallet make the autonomous payout loop much less scary to run.