Split a Refund Tool
Decompose a high-risk action tool into safer stages with separate permissions and approvals.
The tool refund_order lets the agent interpret policy and move money in one call. High-risk action = check eligibility -> draft response -> submit approval -> execute approved action The common trap is thinking the refund tool is safe because the prompt says to follow policy. Prompt policy is not the same as permission design. Separate policy check check_refund_eligibility(order_id, issue_type) returns eligible, denied, or needs_review with evidence. Policy interpretation becomes structured evidence instead of an immediate side effect. Draft communication draft_refund_response(case_id, eligibility_result_id) writes customer text without sending or refunding. The agent can help the support rep explain the outcome while…
Sign up free — one personalized lesson every day, matched to your role and goals.
Already have an account? Sign in