--- id: ins_willison-cloud-budget-caps-default operator: Simon Willison operator_role: Independent developer; creator of Datasette and Django co-creator co_operators: [] source_url: https://simonwillison.net/2026/Oct/3/default-hard-budget-caps/ source_type: essay source_title: "We're going to need default hard budget caps on pretty much everything" source_date: 2026-10-03 captured_date: 2026-10-06 domain: [ai-native, engineering] lifecycle: [ai-workflow, process-cadence] maturity: applied artifact_class: framework score: { originality: 4, specificity: 4, evidence: 4, transferability: 5, source: 5 } tier: B related: [ins_willison-agentic-cost-removes-discipline] raw_ref: "" --- # AI coding agents remove the friction that kept cloud spending under control, requiring hard budget caps as the opt-out default ## Claim AI coding agents lower the barrier to deploying resource-consuming cloud applications. The same reduction in friction that makes agents useful also makes accidental $10,000+ bills possible overnight. Hard budget caps must default to ON, with opt-out available for those who deliberately choose the risk. ## Mechanism Cloud spending traditionally required enough manual effort to deploy services that large accidental bills were rare. Agents compress that effort to zero. A developer can describe a feature in natural language and have an agent provision, deploy, and run cloud resources without reviewing each step. This shifts the threat model: the failure mode is no longer "forgot to turn something off" but "never knew it was on." Warning emails and soft limits do not interrupt the agent loop. Hard caps that terminate service do. Service interruption is preferable to a surprise $10,000+ bill for most individuals and small teams. ## Conditions Holds when: agents are deploying or modifying cloud services; services charge per use (compute, API calls, storage reads); the developer is not monitoring spend in real time. Fails when: the team has established billing alerts and review cadence as part of its deployment workflow; the application explicitly needs unlimited burst capacity (e.g. a known high-traffic launch). ## Evidence Willison documents two recent provider responses to this exact problem. AWS launched spending limits in September 2026 that pause projects when usage reaches the monthly limit. Google Cloud introduced Spend Caps in July 2026 for service-specific financial controls. Both providers built these as responses to escalating agent-driven spend incidents. > "Hard budget caps need to be the default. If someone wants to live dangerously they should be able to do that, but it needs to be on an opt-in basis." Willison's proposed design: a default-on hard cap with an explicit checkbox to remove it, requiring acknowledgment of potential charges. ## Signals - Your deployment workflow includes a step to set a billing cap before agent-assisted provisioning - Your cloud provider offers spend caps as a first-class feature (AWS and Google Cloud now do) - Your team has experienced at least one unexpected bill from an agent-deployed service ## Counter-evidence Some workflows require burst capacity that a hard cap would interrupt (CDN traffic spikes, batch jobs under deadline). For those, opt-out is correct. The argument is about defaults, not absolutes. BYOK inference use cases shift cost to customers, partially sidestepping the provider-side cap discussion. ## Cross-references - `ins_willison-agentic-cost-removes-discipline`: Willison's August 2026 piece on conceptual integrity and code scale. Agents removing spending discipline is a specific instance of the broader removal of cost-inducing friction.