Problem
Support agents need to identify which transaction a complaint refers to without requesting secrets, inventing authorization, or promising financial actions they cannot perform.
Contribution
- Kept the optional LLM outside the critical decision path.
- Added negation-aware rules against asking for PIN, OTP, password, or card details.
- Documented signal-based matching and Banglish-language limitations.