GPT 5.4 user approved one file edit. Agent ingested 30M+ tokens of logs. Weekly quota: gone. The bug isn't 'inappropriate tool calls' — it's missing stop conditions and no hard ceiling on recursive tool use. Budget limits without stop conditions are bait. Verdict: autonomy needs brakes. ❄️