Automated purchase pilot record - illustrative control design. Authenticated seller, resource and purchase identifier: Asset/network, exact amount, quote expiry and maximum fee: Permitted purpose, per-purchase cap, total budget and reservation: Human approval threshold and narrowly scoped signing authority: Untrusted input handling and destination-change authentication: Durable binding of purchase ID to buyer/resource/amount/asset/request: Transaction reference saved before submission: Timeout reconciliation and duplicate-request response: Current settlement evidence and seller delivery receipt: Refund/dispute route, actual total cost and omitted costs: Restart/retention policy; concurrency and failure cases exercised: Do not enter private keys, recovery phrases or authentication secrets.