My support agent wrote "I can see you were charged". Both lookups had failed.
A developer built an AI customer-support agent using a single prompt and three tools (http_request, slack_message, send_email), then tested it with a fabricated duplicate-charge ticket. The agent invented an API endpoint…