Fast answers for shoppers and staff. Approvals where they matter.
One governed assistant reads what’s on screen, answers instantly for low-risk reads, and pauses for a human before anything that touches money or inventory — across kiosks, drive-through voice, and the back office.
Control is the default here.
The same platform serves an in-store kiosk shopper, a drive-through order taker over voice, and a store manager — three personas, one adapter, distinguished only by user.role and permission references.
Low-risk reads — price and promo lookups, inventory searches — run automatically. Anything that touches money or stock, from applying a promo to placing a hold, routes through an approval card and is written to the audit trail.
Voice ordering runs over OpenAI Realtime with the API key never reaching the client; order confirmation is a controlled write that requires an explicit spoken or tapped yes — never a silent auto-approve.
Every action an agent takes here runs through the same gate: least-privilege permissions, policy and an audit trail, with the sensitive steps held for human approval. The controls behind it are set out on the security and data-handling page.
What it looks like in practice.
Illustrative examples of what a host would configure — tool ids and risk levels are the host’s to define. The primitives underneath are built and tested.
Self-service checkout assistant
A kiosk shopper asks about a two-for discount; a comparison card shows the price with and without the promo before it’s applied under the kiosk’s authorized scope.
Drive-through voice order taker
The Joe voice orchestrator builds a modified order via governed tools; the kitchen ticket won’t fire until the customer confirms, with live cost visibility across Economy, Balanced, and Premium voice profiles.
Store-manager stock & shrink report
A coordinator plus specialist agents return a store-scoped table and a shrink diagram from a plain question — no BI seat required.
E-commerce
A single adapter serves both shoppers and merchants. Persona is just the user’s role and permissions — so a customer can track an order while only staff can issue a refund or adjust stock.
Industry · Financial servicesFinancial services & fintech
Every action is the intersection of what the user, the agent, and org policy permit — fail-closed, approval-gated for anything risky, and recorded to an append-only audit.
Industry · LogisticsLogistics & supply chain
Agents surface what’s at risk, weigh the options, and route reroutes, reschedules, and discrepancy notes through approval — with a full audit trail.
See governed AI for Retail.
Book a demo and we’ll tailor the walkthrough to your sector — the governance model, the two-seam integration, and an example close to your systems.