I didn't initiate or authorize the transaction though, how am I to decide what the rules of transaction are when somebody else set up the transaction and authorized it?

The trust is that the bank recognizes when a transaction looks off, and holds it/notifies me, without my involvement