Your wallet authorizes the agent once. Every payment it makes is still gated by the on-chain firewall.