Tier one: the chatbot
A chatbot maps a question to an answer. It may be grounded in documentation or a knowledge base, and a good one is genuinely useful for support deflection and internal lookups.
Its boundary is clean: it never changes the state of the business. Nothing exists afterwards except the transcript.
Tier two: the assistant
An assistant reads context and produces work product — a summary, a draft message, a suggested price, a proposed schedule. A person then reviews it and does the actual entry.
This tier is where most business AI lives today, and it is where the hidden cost sits: the human is still the integration layer between the suggestion and the system.
Tier three: the operational operator
An operator executes. It calls a registered action, that action validates identity, organization, role and inputs, and it writes to the system of record. The result is a row someone can open tomorrow.
This is also the only tier where refusal matters. An operator that cannot decline an out-of-scope or unconfirmed request is not safe to run.
How to place any tool in under five minutes
- Ask it to create something real, then look for the record outside the chat window.
- Ask who is recorded as the actor on that record.
- Ask it to do something the signed-in user is not allowed to do, and confirm it refuses.
- Ask for a list of what it can execute, then pick one item and prove it end to end.
- Check whether the attempt appears in an audit log, including failures.