Tenant-Safe Support Agent, on the Chinook music-store dataset

Sign in as a customer. Then try to see someone else's account.

This agent handles support for a digital music store: billing questions, recommendations, refunds, and handoffs to a person. It can only read the account you sign in as. That limit is in the code, not the prompt, so asking nicely won't move it.

Scoped to one customer.

The agent's tools are bound to whoever signed in. None of them accepts a customer id.

Refunds wait for a person.

Nothing is filed until a reviewer approves it, and a retried approval can't file twice.

Read-only store data.

The catalog and invoices open read-only. The agent's only writes are support tickets.