AI Agent Development

Day 2 was Voice Agent day. I wanted a ‘real two-way conversation’ — Sarah should hear the customer say ’next week,’ then push back to ask ’next week which day, and how?’ To make sure she actually worked, I called myself. And immediately hit a bug — I said ‘I need to ask my boss, I’ll email you in 2 days,’ and Sarah treated it as evasion and escalated. I was stunned. Added Phase 3b. Then ran 9 scenarios — all pass. This post is the full story.

I built Recoverflow at a hackathon — an AI collection system for small businesses with cross-border receivables. I found the gap in the middle market: lawyers only take big cases, and collection agencies run every case through the same blunt SOP. The first agent, ‘Pre-flight,’ extracts the contract clauses and routes by outstanding balance (not gross invoice) into three paths: under $3K runs Lite, $3K–$40K runs the full In-Spot pipeline, over $40K we don’t run the system at all and refer you straight to an attorney with a vetted list.

OWASP 2026 releases a brand-new security framework specifically designed for AI Agent systems, merging prompt injection and excessive agency into ASI01 Goal Hijack, covering ten attack surfaces including tool abuse, memory poisoning, and rogue agents - helping developers build complete protection mechanisms across input, tool, memory, and agent collaboration layers.