just put an hard budget cap.. a good agent should have it. a protection for irreversible action as well. i run agents daily and use this way. another cool stuff is to have a triage protocol to downgrade the model for mechanical tasks, it burns a lot less tokens