Working today: real and planted data, the first LLM call, and read tools (order, shipment, customer) the model chooses between. Planned: an MCP server, policy search with RAG, approvals for risky actions (returns, replacements, refunds), an audit log and evals. The project page marks what works now and what is planned.