Claude talks to the player. Everything it may say about rules comes from three policies, each clause with an ID, and everything it can do goes through nine MCP tools. The rules that must never break are checked in the tools' code. Every money decision, confirmation, release and refund stays with staff, one click on the dashboard, and each click sends a fixed message back into the player's chat.
What has no tool cannot happen: no tool confirms, cancels, releases, refunds or changes a booking, and none lists bookings or names a player.
Written in code, triggered by a staff click, delivered live into the player's chat. The assistant never writes them.
The three policies the assistant reads, loaded at the start of each conversation and cached. Every clause has an ID; citations link to the clause in the published policy page.
Each tool checks its own rules in code and returns a named error the assistant can act on: fix the input, ask the player, offer the alternatives, or hand to staff.
Make a booking, upload a receipt, then press Confirm on the dashboard: the confirmation arrives in this chat.
Before you paste a key: usage is billed to your own Anthropic account, so use a key with a spending limit. The key stays in this tab's memory and goes only to Anthropic. A public service would send requests through its own server instead.
Limits per conversation: 15 messages, 700 output tokens and 8 tool rounds per reply.
Bookings, receipts and handovers are saved in this browser and shared with the staff dashboard.