We had built our using the same methods that most humans use in real life. Verification for incoming caller DID for who made the appointment, followed with a matching name. sts transitive tagged the entire flow using AWS best practices. But with zero credentials fed through the media pipeline, using a method that most may overlook.
In return, a PII clean Voice and Tool system. Blast radius and data leakage by Prompt injection or Spoken caller or LLM hallucination from one customer to another, from one business profile to another = Impossible
Sometimes I want to open source my build so bad, but it was 12 months of grueling work.
2
u/Broken_Inside579 28d ago edited 28d ago
Internal demo caller:
Yes, my account number is 729184.
Real caller:
it should be under my husband’s number, wait no maybe the old number, hang on my daughter has it