Industry practice is to mitigate the lack of granular authorization for AI agents by setting preset spending limits or pushing confirmation notifications before each transaction.