問題文
A support agent has tools get_customer, lookup_order, process_refund, and escalate_to_human. Company policy requires that the customer's identity be verified via get_customer before any refund is issued. In testing, the agent occasionally calls process_refund first. Compliance requires that this never happen. What should the architect implement?
選択肢
- Few-shot examples in the system prompt showing correct call ordering for several scenarios.
- A strengthened system prompt that states in bold that identity verification must always come first.
- A programmatic prerequisite gate that blocks process_refund until get_customer has returned a verified customer ID.
- Remove process_refund from the agent's tools and require a human to issue every refund.