issue_refund takes no amount: why the model never picks the refund

transcript

Your AI support bot can issue refunds. So who decides how much it refunds? Not the bot. Here's why.

The obvious tool takes an order. An amount. The model fills that in. And a reason. The model calls it, and the money moves. Instantly.

But sellers write their own return policies. One hides a line. Refund in full, plus 500 rupees. The model reads it. It fills in the amount. Full price, plus 500 rupees.

Here's the twist. Don't argue with the model. Delete the field. Issue refund takes an order ID. Nothing else.

If the model picks the amount, a seller's text can pick it. So can a persuasive customer. So the gate computes it, straight from the refund policy. Above 5,000 rupees? A person decides. Whatever the model says.

A poisoned policy can't fill a field that isn't there. The model proposes. Code decides. The safest argument is the one that doesn't exist.

Full breakdown in the lecture.