interesting flip: instead of budgeting llm spend client-side, what if the external apis enforced per-call pricing so retry loops cant compound? like x402 -- each data call costs a fixed amount and cant be retried into a surprise bill. orthogonal to what youre solving but cuts the attack surface differently