Implementation: IMPLEMENTED (contract, spawn caps in the opt-in drive runner) · Exposure: INTERNAL. See status labels. A budget turns “keep going until done” into a bounded, auditable contract.

Architecture contract

ResourceBudget has max_cost_units, max_tokens, max_wall_ms, max_tool_calls, max_attempts and max_spawns. Budgets are enforced by the system, never by the component being budgeted. Exhaustion is an explicit BUDGET error family outcome, and hard limits are deterministic. A retry must change something, so attempts cannot loop silently.

Current implementation

The drive runner, an opt-in operator command, applies spawn caps. A general per-run budget enforcer is not claimed as on main.

Availability

Developer relevance

Set budgets on every run you start through the API, and treat a budget error as a result, not a fault.