Give an AI agent a spend mandate held in contract storage. A jailbroken agent hits the same revert an honest one does.