A service agent can answer return-policy questions but must issue a refund only after eligibility is verified. What design best separates the conversational and transactional requirements?

1. Use grounded policy answers and a constrained refund action with enforced eligibility checks
2. Put refund eligibility only in the agent's welcome message
3. Replace the refund action with a free-text promise
4. Allow the model to update any payment record directly