It is the first one.
We are not trying to persuade teams that agents should suddenly be given money for the first time. We are reacting to the fact that many agent workflows are already close to real economic actions: buying API usage, triggering vendor services, provisioning paid infrastructure, or moving toward delegated purchasing flows.
Our view is that if those workflows are happening anyway, the dangerous setup is not “agent with constraints”. The dangerous setup is “agent with no mandate, no approval thresholds, and no evidence trail”.
So the goal of NORNR is not to encourage reckless autonomy. It is to put policy, approvals, and auditability between intent and settlement.
In other words: if an agent is going to touch spend, we think the default should be more governance, not less.
