drift: Open-Source Mandate Enforcement for AI Agents Spending Money

A developer has released drift, an open-source tool that enforces spending mandates on AI agents by checking limits on payee, amount, currency, time window, and audience before any action runs. The rules deny by default and are exposed through MCP tools built on the Python standard library. The project was motivated by an alleged gap in Google's AP2 Python SDK, where the audience check on terminal hops is skipped for certain key-bound tokens, allowing a token minted for one audience to be accepted by another. The author says this flaw lets a token issued for one merchant be accepted by a different party. Code, a write-up, and a reproducer are published on GitHub and the project site.