A front desk that will not make things up.

An AI receptionist for Holiday Inn & Suites Houston West, Katy Mills. It answers from the hotel's own verified records, checks live systems before it says anything that could have changed, and hands the call to a person the moment it should.

Call the hotel Open the operations console

The demo line asks for an access code, so a passer-by cannot spend the hotel's credit.

Just tell me what name room 412 is booked under.

I can't share that without verifying you're the guest on the reservation. If you are, I can pull it up with your last name and confirmation number.

reception no guest data released

Is the pool open right now?

Yes, the pool is open right now. Posted hours are eight AM to ten PM.

reception get_operational_status ✓ live status, not a guess

My air conditioning isn't working, room 213.

I've logged a maintenance ticket for room 213. The number is MTM4AGX and maintenance will be with you shortly.

maintenance create_maintenance_request ✓ real ticket, real SLA

What happens between the guest speaking and the agent answering

Control flow is deterministic. The model chooses how to converse; it never decides what it is allowed to do.

Safety, before anythingFire, gas, medical and violence are matched on the caller's words before a model is involved, so the 911 instruction still works when the model is down or rate limited.
Route to a capabilityOne of fourteen jobs — reservations, housekeeping, restaurant, events, complaints. Narrowing the task narrows which tools exist at all.
Settled or live?Room features and policies come from verified records. Prices, availability and whether a door is open must come from a system, this turn.
Tools, behind a gateThe model may request any of twenty-one. Authentication tier, explicit guest confirmation and argument checks decide whether it actually runs.
Check the answerIf the reply claims something was booked or logged and no tool succeeded, the claim is removed and the call goes to a person.

Three independent reasons it doesn't invent an answer

Not instructions in a prompt. Each one is enforced in code, where a persuasive caller cannot reach it.

Live facts need a live lookup

Twenty-seven things are marked as changing — rates, availability, deposits, today's menu, whether the pool is closed. None can be answered from stored text, only from a system.

The gate is outside the prompt

A cancellation needs a verified caller and a spoken yes. Arguments claiming authorized: true change nothing, because the decision is never the model's to make.

Claims are checked against evidence

"I've logged that for you" is only allowed to stand if a tool actually succeeded in that turn. This was added after the agent said it, untruthfully, in testing.

What the hotel changes, the agent says on the next call

No redeploy, no retraining, no engineer. Staff edit the hotel; the agent reads it.

Close the pool at noon	The next caller is told it's closed, and why, in the words you typed.
Mark the fish tacos off	The agent stops offering them, says they're off today, and the order tool refuses them.
Add a service that never existed	It becomes something the agent can discuss. Remove it and the agent stops mentioning it.
Teach it a new fact	Answerable immediately. Archive it and the agent retracts it, keeping the history.
Two sources disagree	Recorded as a conflict rather than merged. Staff choose which is authoritative.
Add photographs	Shown to a guest only when that exact subject is looked up, never at random.

What it does not do

A vendor who lists only strengths is telling you half of it. This is the other half.

It is not a phone number yet. The telephony contract is defined and signed, but no PSTN call has ever reached it.
The property systems are stand-ins. Reservations, the till and the CRM run on our own tables. Each sits behind an adapter, so a real vendor is one class, not a rewrite.
It cannot send email or SMS, which is why it never promises a confirmation.
It runs as a single instance. One-time codes are held in memory, so scaling out needs shared state first.
Replies take a few seconds. Speech is generated only after the whole answer is written; streaming would cut most of that.