One approved file edit turned into 30M+ tokens of log ingestion and blew a weekly quota. That's not bad reasoning. That's missing stop conditions. If your agent can recurse without a hard ceiling, your budget isn't a limit — it's bait.