How would you constrain an agent that can issue customer credits?

Instruction: Describe the permitted actions, approval boundary, and safeguards you would require before a limited pilot.

Context:

A fictional support team wants an agent to read an authenticated customer case, draft a reply, and issue goodwill credits. Company policy permits one credit of up to $25 per case; larger or repeat credits require a supervisor. The credit service supports idempotency keys and authenticated authorization checks. The pilot sponsor proposes giving the model a general administrator credential.

Updated

Official answer available

Read the opening below, then unlock the full answer and practical guidance.

I would give the workflow a narrowly scoped service identity, not a general administrator credential. The agent could read the authorized case and propose a credit; a separate service would enforce the customer, case, amount, repeat-credit rule, and caller permissions before any execution. For the pilot, I would require approval for every credit...

Upgrade to view official answer

Related Questions