On the explorer this transaction reads Success — that is the vault refusing gracefully: it emits a SpendRejected event and moves no funds, instead of reverting. The rejection itself is the on-chain proof.
The vault held
This payout was measured against the mandate its Deputy was given.
Why on-chain? A database flag that says “budget exceeded” can be flipped by whoever runs the database. The vault physically cannot move funds off-policy — even if Sage itself is compromised. Enforcement you have to trust isn’t enforcement.