Project 05: ERP AI Agent

Objective

Build an AI assistant that can safely interact with enterprise-style data and workflows through controlled tools.

Example Capabilities

• Show sales metrics.
• List overdue invoices.
• Summarize inventory risk.
• Explain expense changes.
• Draft an invoice preview.
• Request confirmation before writes.

Architecture

User -> AI Assistant -> Intent/Planning -> Authorization -> Tool Selection -> API/Database -> Business Logic -> Result -> LLM Explanation -> Audit Log

Critical Rules

• Reads: validate, authorize, execute, explain, audit.
• Writes: validate, authorize, preview, confirm, execute idempotently, audit.
• Destructive actions: require explicit confirmation and rollback plan.

Tasks

• Design sample ERP data model.
• Create read-only tools.
• Create write tools with preview mode.
• Add role-based permissions.
• Add tool input validation.
• Add audit logs.
• Add idempotency keys.
• Add error handling and rate limiting.
• Add evaluation cases.
• Document security risks.

Tips

• Keep tool names specific and narrow.
• Never let the model directly construct unrestricted SQL.
• Use allowlisted operations.
• Log every tool call with user, intent, parameters, result, and decision.