Controls that hold before the money moves.
Dashboards tell you what happened. Policy decides what's allowed to happen.
- Budgets with teeth
- Set a monthly ceiling per team, per feature, per agent or per customer. The router enforces it at request time: warn at 70%, throttle at 90%, hard stop at 100%, or whatever thresholds you choose. Exceptions require a named approver and are logged.
- Agent guardrails
- Autonomous workloads fail in a specific way: quietly, repeatedly, and at full price. GraySmith watches per-agent spend velocity against a rolling baseline and kills a runaway loop automatically. Every agent gets a budget, a maximum call depth and an owner.
- Policy routing
- Rules expressed once and enforced per request: this data class never leaves the EU; this customer's traffic never touches a given provider; this feature never uses a model above a set price tier. Violations are blocked, not reported after the fact.
- Chargeback and showback
- Every token carries a person, team, feature, customer and environment. Monthly statements export to NetSuite, QuickBooks, Xero, SAP, CSV or API. Custom dimensions supported: if finance allocates by cost centre or product line, we match it.
- Audit
- Every routing decision, policy block, budget exception and configuration change is logged with actor, timestamp and reason. SSO, SCIM and role-based access included from the Control plan up.