Built a BYOK API gateway after getting an unexpected bill from an overnight agent run — hard budget enforcement at the infra layer, not just alerts. Been running it myself for ~10 months, just opened it up.