Agent execution, with a cap the model cannot raise — Protocol Bank docs