I wouldn’t count on it.

Securing these things is a freaking nightmare.

Giving the AI authority is what makes it powerful, it can do what an army of customer service agents can’t.

But keeping it reigned in then becomes the same exact level of problem.

The best thing you can do is make tooling with protection and make the AI only use the tooling,