Checks if an agent's requested action exceeds its defined scope. Pay-per-request via x402 (USDC on Base).