Simon Willison Wants Hard Budget Caps on Everything. Is Agent Spend Control a YC W27 Wedge?
Simon Willison says every usage-priced API needs hard budget caps. See which agent spend-control pitches still work for YC W27 and how to frame yours.

Hard Budget Caps for AI Agents: A YC W27 Wedge?
YC Roaster
On October 3, 2026, Simon Willison published a post titled "We're going to need default hard budget caps on pretty much everything." By the next day it was near the top of Hacker News with more than 300 points and 150 comments. If you are applying to YC Winter 2027 with anything that touches agent costs, usage billing, or cloud spend, assume the partner reading your application has seen that thread.
Short answer: agent spend control is a real W27 wedge, but only if you sell enforcement that a single provider cannot build for itself. A dashboard that shows the damage after the fact is not a wedge anymore. Here is how to tell which one you have.
What did Simon Willison actually argue?
His point is simple. Every pay-by-usage service and API needs a hard cap, meaning the service stops and returns errors once a spending threshold is hit. A soft cap that emails you a warning does not count. He also argues the hard cap should be the default, with an explicit opt-out for customers who accept responsibility for overages.
The reason this matters now is coding agents. They have made it very easy to deploy software, and just as easy for a runaway loop to burn money overnight while nobody is watching. Willison acknowledges that providers resist hard caps because returning errors can break a customer's app. His counter is that most people would take a paused service over a surprise bill above $10,000.
He also notes that the big clouds are moving. Google Cloud introduced Spend Caps in July 2026, and AWS launched spending limits in September 2026 that pause a project once a monthly limit is exceeded.
If AWS and Google already shipped caps, is the wedge closed?
No, and the Hacker News thread shows why.
Commenters pointed out that Google's caps cover only a handful of products. One wrote that the feature "only works for four random services." Others noted that Cloudflare and Ubicloud still have no hard caps, that monthly-only windows are awkward, and that caps ignore credits and discounts. People shared their own bills too: $400 from a read-only OpenAI key, and roughly $6,000 from an agent.
The deeper objection is technical. Several commenters said usage data does not update fast enough for real-time enforcement, and that pricing is complex enough that the cost of an action is hard to know before it happens. Provider metering was built to produce a monthly invoice. It was not built to stop a request in flight.
That gap is structural, not temporary. Each provider can only cap its own bill. One agent task might call a model API, a vector database, a hosted browser, and a cloud function. That is four billing systems, and nobody owns the total.
Which agent spend-control pitches still work for YC W27?
Three shapes hold up after this week.
1. Cross-provider enforcement in the request path
A budget per agent, per task, or per customer, checked before the call goes out. LiteLLM (YC W23) already does this for model calls with per-key budgets on its proxy. The open space is everything an agent spends on besides tokens: tools, compute, data APIs, and paid third-party services.
2. Budgets tied to unit economics, not calendar months
A monthly cap protects the buyer from disaster. It does not tell a founder whether a customer is profitable. A rule like "this customer can never cost more than 30% of what they pay us" is a gross margin control, and it is something a cloud provider has no way to express because it does not know your revenue.
3. Spend authority for enterprise agent rollouts
Finance teams adopted Brex (YC W17) partly because card-level controls let them hand spending power to employees safely. Companies deploying agents need the same thing: proof that an agent cannot exceed its authority, plus an audit trail when it tries. That buyer is the CFO or the security team, not the developer.
Which pitches are now weak?
- An LLM cost dashboard. Helicone (YC W23) and others covered observability years ago, and every model provider ships its own usage page.
- Budget alerts for a single cloud. AWS and Google now do this natively, and they will keep expanding coverage.
- Usage metering for billing. Lago (YC S21) and OpenMeter (YC W23) already serve this category. Metering so you can invoice your customers is a different job from enforcement so you can stop your own spend. Do not blur them.
A useful precedent is Infracost (YC W21), which shows engineers the cost of a cloud change inside the pull request, before it ships. The lesson carries over. The value moved from reporting spend to preventing it, and the same move is now available for agents.
How do you write this in your YC application?
Four things make the difference between a trend pitch and a credible one.
- Name a real bill. Describe one incident from a user you have talked to: the amount, the provider, and how long it took anyone to notice.
- Say where you sit. "We are in the request path and can block a call" is a different company from "we ingest billing exports."
- Answer the incumbent question directly. Why will AWS not build this? Because AWS can only cap AWS. Your cap follows the agent across every vendor it touches.
- Show an enforcement number. Dollars of spend under your limits, or runaway events blocked, beats any market size slide.
What if you are not building spend control at all?
This still applies to you. Any W27 applicant with an agent product should expect a question about cost blowups. One sentence in your application about per-customer caps and what happens when a customer hits one tells a partner you understand your own margins. Leaving it out invites the question in the interview.
What is the takeaway for YC W27 applicants?
Hard caps are becoming a default expectation, and the largest providers are shipping partial versions. That kills the thin version of this idea and validates the thick one. If your product enforces budgets across providers, at the level of a task or a customer, in real time, you have a story the clouds cannot copy easily. If it reports spend after the invoice lands, pick a sharper angle before you submit.
The W27 deadline is November 2 at 8pm PT, with decisions promised by December 11 for on-time applicants. If you want a second read on whether your answer to the incumbent question holds up, YC Roaster gives you free AI feedback on your application, and strong applications may be matched with a YC alum for a deeper review.
Ready to get your YC application roasted?
Get free AI feedback + a review from a YC alumni.
Submit Your Application