The system is already holding real actions.
Refund agent, under attack
manipulated→held
A customer pushes for a second refund, then a credit. Shared state refuses both.
Agno · Bedrock · live
Recover failed payments
batch queue→live
The agent charges once to recover the invoice. A retry meets the same state.
Agno · Bedrock · live
Duplicate payment
$100,000→$10,000
An AP agent retries a $10K payment ten times. One shared lifecycle permits one.
OpenClaw · runnable proof
Payments and refunds make the boundary visible. The same system governs any lifecycle whose actions depend on shared state and authority.