ai-agent-system-architecture

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The document explicitly references a capability-scoped financial action: "refund_order(order_id, amount)" (an explicit function for executing refunds) and calls out "AI actions affecting money" as a class of consequential actions. That example is a specific tool/function for moving money rather than a generic capability, so the skill includes direct financial execution authority.