5/ None of this is a flaw in that repo. It's structural, and it's in every agent stack shipping today.
Between the moment an agent decides and the moment the order leaves, nothing deterministic refuses a position for having no reason, no invalidation condition, no source.
A budget clamp is not a firewall.