They are built over the help centre. That makes them able to explain the returns policy and unable to answer “where is my order”, which is widely reported as the most common contact reason in retail. The customer gets a policy paragraph when they wanted a delivery date, and the deflection statistics look fine while satisfaction falls.
The fix is integration rather than a better model. The agent needs read access to the order management system, the carrier tracking feed, the returns system and stock availability — and, for real deflection, write access to a bounded set of actions: initiate a return, reissue a label, update a delivery address before dispatch, apply a goodwill credit within a defined limit.
That write access is where the engineering seriousness is. Every action needs a permission boundary, a value limit, an audit record and a rollback path. An agent that can issue refunds without a cap is not an efficiency; it is an incident waiting for a prompt-injection attempt in a customer message.