AI Agents Process $20M in Payments Without Final Authority