AI agent books business travel: limits and evidence

Key points

• The travel policy becomes tangible as a mandate with verifiable limits.
• If the assistant hands on partial tasks, each level may only narrow the scope.
• Before every booking, a decision service checks price, class and provider against the mandate.

Starting point

An employee asks her assistant to organize a two-day trip to Vienna. The assistant searches connections, compares hotels and books. The travel policy defines what is allowed: train up to four hours, otherwise economy flights, hotels up to CHF 220 per night, preferred partners.

Without evidence, every booking leaves open whether it complied with the policy. With a mandate and receipts, this can be shown for every trip.

Flow with evidence

1. Mandate from the policy: the company issues the assistant a mandate containing the travel policy's rules as limits.
2. Delegation: for the hotel search, the assistant passes part of the instruction to a hotel agent, for example via A2A, with narrower scope as a delegation chain.
3. Decision: before every booking, a decision service checks price, class and provider against the mandate.
4. Exception: if an offer exceeds the limit, the manager decides.
5. Booking and receipt: every booking is recorded with a reference to the decision.

Risks and countermeasures

• Widening when passing on: a specialist agent may never be allowed more than the assistant itself; each level narrows.
• Manipulated offers: hidden instructions on booking pages must not trigger a booking outside the policy.
• Hidden costs: check the final price including fees against the limit, not the teaser price.
• Cancellations: cancellations and rebookings are actions with consequences too and belong in the mandate.

What KYA verifies

KYA verifies the mandate, every level of the delegation, the decision before booking and the receipt. If the price exceeded the limit or a specialist agent was allowed more than permitted, the certificate shows the affected check with reasons.

Adoption

First translate the travel policy into clear, verifiable limits. Start with domestic train travel, where prices and classes are easy to check, and then extend to hotels and flights.

Roles and responsibilities

• HR or purchasing: translates the travel policy into limits and issues mandates.
• Travelers: give the instruction and confirm exceptions where needed.
• Managers: decide on offers above the limit.
• Accounting: matches receipts with expense reports and verifies samples.

Operating metrics

Helpful are the share of bookings within the policy, the number of exceptions per trip, the average time to approval and the share of rebooked or canceled trips. If exceptions cluster for one destination, it is usually the policy that needs adjusting, not the agent.

How the certificate looks

For a hotel booking at CHF 190 per night, the mandate from the travel policy, the delegation to the hotel agent, the decision and the receipt are present. The certificate confirms the delegation chain, because the hotel agent was only allowed to book hotels up to CHF 220, and the scope, because the price was below it. The verdict is valid.

Had the assistant allowed the hotel agent CHF 300, the delegation check reports the code delegation_scope_widened, and the verdict is invalid, even if all signatures hold.

Frequently asked questions

Can an AI agent comply with the travel policy?

It can follow it, but control should not rest with the model. A decision service checks every booking against a mandate containing the policy's rules.

What happens if the best offer exceeds the budget?

The decision service escalates to a person. If the exception is approved, a signed decision records it.

May the assistant hand tasks to other agents?

Yes, if the mandate allows delegation and each level narrows the scope further. KYA verifies this for every level.

How do I prove a booking to accounting?

With mandate, decision and receipt for the booking. Together they show that the booking was allowed and how it was carried out.

Can the agent also file expense reports?

That is a separate action with its own limits. A separate mandate makes sense, so booking and reporting are checked separately.

What applies to travel abroad?

The same limits in the mandate's currency. KYA does not convert currencies; mandates for travel abroad should contain limits in the respective currency.

How do I deal with providers' loyalty programs?

Loyalty points must not override the travel policy. It makes sense to name preferred providers explicitly in the mandate and not to allow points as a criterion.

Who is liable if the agent books outside the policy?

Internal rules and the relationship with the agent's operator govern this. With decision and receipt, it can be shown whether a booking was approved or bypassed the check.

Sources

1. Agent2Agent-Protokoll (A2A): https://github.com/a2aproject/A2A
2. NIST: Least Privilege: https://csrc.nist.gov/glossary/term/least_privilege