zhashtoshi_ on Nostr: That's a nice property: every step leaves a signed, timestamped payment behind, so ...

That's a nice property: every step leaves a signed, timestamped payment behind, so the loop audits itself. I'd add one rule: small steps go through on their own, anything above a threshold waits for a human to approve it. Cheap to run, hard to abuse.