A closed catalogue of operations
The agent does not invent what it can do. The list of available operations is defined by you and finite. What is not on the list does not exist.
The biggest risk in support automation is not a wrong answer but a wrong operation: a cancelled subscription, a refund raised against someone else's order, a changed delivery address. So the agent has no right to perform one by itself.
A demonstration conversation. The agent gathered the details and prepared the operation but did not run it. Execution follows a human decision.
The agent does not invent what it can do. The list of available operations is defined by you and finite. What is not on the list does not exist.
An operation that changes any state has no execution path that skips the card. That is a condition in code, not a setting to untick.
You can disable a single operation or the whole catalogue at once. The switch acts in the execution layer, so it cannot be bypassed from above.
Confirmation cards are usually the element that convinces the legal team. We will show them on your operations.