Refund tools as verbs, not pens: how 'Veronica' stops LLM agents from inventing payees

schwentker · x · 2026-10-09

The demo: a payment agent without a spend policy books a kayak trip and gets charged 10x in pathUSD on the Tempo testnet.

The key design: Veronica's refund tool is a verb, not a pen — exposing refundovercharge(chargeid) instead of a generic send(to, amount). Since the tool only operates on existing charges, the model can't invent a payee. Safety is enforced at the API layer, not via prompts.

Related event: Veronica: A Hackathon Voice Agent for Billing Complaints(5 posts)→

Original post →

More from coding & agent

coding & agent channel →