Card controls block spend before it happens; Agents for Controllers review what gets through - two layers that do different jobs.