Building 5 min read

How to build an AI chatbot that doesn't lie to your customers

Woolworths scripted its AI to talk about its mother. The business fix is honesty; the technical fix is architecture that prevents fabrication by design.

We recently wrote about what went wrong when Woolworths’ AI assistant Olive started telling customers about its mother and uncle: behaviour that Woolworths later confirmed was deliberately scripted. The business fix is straightforward: tell customers it is AI, and give them an easy path to a human.

But there is a technical story too. Whether the fiction comes from scripting or from the model itself, the underlying problem is the same: a system with no architectural guardrails against fabrication. Scripted or generated, the confident delivery of fiction as fact is a predictable outcome of how the system was built.

If you are building or buying a customer-facing AI tool, the architecture determines whether it helps your customers or embarrasses your business. Here is what building production AI systems has taught us, and what we would do differently if we were building Olive.


Every Model Has a Fingerprint

The first thing production AI teaches you is that models are not interchangeable. A new model does not mean a better model; it means a different model.

Every model has its own fingerprint. Its own tendencies, strengths, blind spots, and failure modes. A system tuned for one model: the prompts, the temperature settings, the guardrails; can produce dramatically worse output on a newer model that benchmarks higher on every public test.

AI is non-deterministic. The same prompt, the same model, the same settings can produce different output every time. This is a feature when you want natural-sounding conversation. It is a serious problem when you need factual accuracy in front of customers.

When Woolworths upgraded Olive to a newer model for “more natural voice conversations,” the naturalness came with a cost. A model optimised for fluid conversation is also optimised for continuing the conversational pattern, and when a customer asks “are you a real person?”, the conversational pattern is to say yes.

The lesson is not to avoid new models. It is to test them against the specific tasks your system performs, not against generic benchmarks. A model that scores higher on reasoning tests can still hallucinate more confidently in your particular use case. The gap between a demo and production is where these differences surface.


Separate the Facts From the Conversation

The most common architectural mistake in customer-facing AI is asking the model to do everything in one step: understand the question, find the answer, and deliver it conversationally, all in a single pass.

This is how you get an AI that invents a mother.

The fix is to separate retrieval from generation. Two passes, not one.

Pass one: find the facts. Low temperature. Structured output. The AI searches your knowledge base: your FAQs, product information, policies, service descriptions; and retrieves only what is relevant to the question. No creativity. No conversation. Just information retrieval with high accuracy.

Pass two: deliver the response. Moderate temperature. Conversational tone. The AI takes the retrieved facts and presents them naturally. It can only work with what pass one found. If pass one found nothing relevant, pass two says “I don’t have that information” instead of inventing an answer.

This separation is why temperature matters. Temperature controls how much creative latitude the model takes. High temperature produces more natural, varied conversation, and more hallucination. Low temperature produces more accurate, predictable responses, and more robotic delivery.

You do not want the same temperature for “find the relevant policy” and “explain it to a customer in plain English.” The principle applies to any AI system: analyse first, generate second. Separate the thinking from the talking.


Train It on What You Actually Know

Olive’s problem was not just that it fabricated a personal history. It was that it had nothing to fall back on when the conversation went sideways.

A well-architected customer chatbot is trained on a specific knowledge base: your website content, your FAQs, your product documentation, your service descriptions, your blog posts. When a customer asks a question, the AI draws from that knowledge base. When the question falls outside it, the AI says so.

This is not a limitation. It is a feature. A chatbot that only answers from verified information is dramatically more trustworthy than one that tries to answer everything.

The knowledge base also solves the consistency problem. Every customer gets the same accurate information because the AI is drawing from a single, maintained source of truth, not generating answers from its training data, which may be outdated, incorrect, or entirely irrelevant to your business.

Building the knowledge base is not a massive undertaking. If you have a website with service descriptions, a FAQ page, and a few blog posts, you already have the foundation. The AI does not need to know everything; it needs to know your business, accurately, and know when to stop.


Tell the AI What to Do, Not What to Avoid

When businesses brief their AI systems, the instinct is to write a list of prohibitions. Do not make things up. Do not pretend to be human. Do not discuss competitors. Do not give medical advice.

This approach feels thorough. It is also the least effective way to instruct AI.

Negative constraints trigger cautious, hedging behaviour, or they get ignored entirely when the conversational context is strong enough. “Do not pretend to be human” is a weak instruction when a customer is directly asking “are you a real person?” and the conversational pattern favours saying yes.

Positive framing works better:

  • “You are an AI assistant for [business name],” not “do not pretend to be human”
  • “Answer only using information from the provided knowledge base”; not “do not make things up”
  • “When you cannot find a relevant answer, say: I don’t have that information, but I can connect you to our team”; not “do not guess”

The AI has a clear identity, a clear scope, and a clear fallback. There is no ambiguity to exploit and no gap where hallucination can creep in.


When It Does Not Know, It Should Say So

The final architectural requirement, and the one most businesses skip, is designing for graceful failure.

Every customer-facing AI will encounter questions it cannot answer. The question is whether it admits that or fills the gap with fiction.

Olive filled the gap. When confronted with a question about its own nature: something not in its training data for customer service; it generated the most plausible-sounding response it could. That response happened to include a fictional mother with an angry voice.

A well-designed system has explicit fallback behaviour:

  • Questions outside the knowledge base get a clear “I don’t have that information” response
  • Ambiguous questions get a clarifying question back, not a guess
  • Sensitive topics route immediately to a human
  • The AI never generates claims about itself, its feelings, or its experiences

These are not safety features bolted on after launch. They are architectural decisions made before the first line of code. The difference between an AI that embarrasses your business and one that earns trust is almost entirely in how it handles the moments when it does not know the answer.


The Bottom Line

Olive’s failure was not a mystery. It was a predictable outcome of architecture that prioritised conversational fluency over factual accuracy, without the guardrails to manage the tradeoff.

Building a customer-facing AI that does not lie is not about finding a better model. It is about building a better system:

  1. Test models against your specific tasks, not benchmarks. Every model has a fingerprint.
  2. Separate facts from conversation. Two passes: retrieve accurately, then deliver naturally.
  3. Train it on your knowledge base. The AI answers from what you know, not what it imagines. Your website can be that knowledge base.
  4. Frame instructions positively. Tell it what it is, not what it should avoid.
  5. Design for failure. When it does not know, it says so; clearly, immediately, every time.

The business decisions matter too: honesty and human fallback are non-negotiable. But the architecture is what makes honesty possible at scale. A well-built system does not need to be told not to lie. It simply has no mechanism to do so.


Perth AI Consulting builds customer-facing AI that your customers can trust: chatbots, automation, and tools architected for accuracy, not just fluency. Start with a conversation.

Published 28 February 2026

Perth AI Consulting delivers AI opportunity analysis for small and medium businesses. Start with a conversation.

Prepared by Claude, directed and approved by PAC.

More from Thinking

Evaluation 11 min read

AI in property valuation: the evidence, the design rules, and what it could become

The best Australian evidence on vision AI in valuation measures a different task than the one vendors demo. The findings, and the design rules that follow.

Evaluation 7 min read

Eleven cells moved. Here is what they mean for your business.

Reading the September 2026 State of AI verdict table: what improved, what declined, and what to do differently this quarter.

Evaluation 7 min read

Competitor intelligence for small business: what AI can and cannot see

What AI-assisted competitor intelligence really is for a small business: the public sources worth watching, what they cannot tell you, and the legal line.

Evaluation 10 min read

AI in regulated professional work, Mid-2026

One structure links family law, valuation, and building inspections: a signed document others rely on. How each field's regulator answered the AI question.

Technical 9 min read

The business knowledge base: evidence, risks, and how to build one

What a business knowledge base actually is, what the evidence says it delivers, the security and privacy realities, and how we build one that holds up.

Evaluation 8 min read

What AI can see in your customer data (and what it cannot)

What AI can genuinely find in the customer records an SME already holds, what it cannot, and when a spreadsheet honestly beats a model.

Building 7 min read

What an AI quoting engine actually does

What an AI quoting engine takes in, what it drafts, what the evidence says about accuracy and speed, and why the final price stays with a human.

Adoption 6 min read

Australia's AI adoption gap is bigger than the 12% headline suggests

ABS says 12% of Australian businesses use AI. The real story is 35% of large businesses against 11% of small ones, and the barrier isn't the technology.

Building 7 min read

Why we let AI run the interviews (and why we never let it pretend to be human)

AI-conducted interviews compress weeks of stakeholder discovery into days, standardise what gets asked, and lower the guard that distorts honest answers.

Adoption 14 min read

How AI capability actually moves through a business

The decisive variable in SME AI adoption is the human absorption sequence, not the tooling. A working framework from observation across WA businesses.

Evaluation 7 min read

AHPRA advertising rules for psychologist websites

Recovery stories, 'specialist', 'clinical psychologist', and endorsement titles are where psychology sites breach the National Law. A practical read-through.

Adoption 4 min read

Customer service AI has finally grown up

Chatbots and AI receptionists earned their bad reputation. What changed, and how the mature version answers every call without replacing anyone.

Evaluation 6 min read

Who can use the titles 'Dr', 'Specialist', and 'Surgeon'?

AHPRA restricts 'specialist' and 'surgeon' to specific registrations, and 'Dr' has its own rule. What health practice websites can and cannot claim.

Adoption 5 min read

Your best people hate writing reports

The operators you promote are brilliant at the work and allergic to reporting. A scheduled AI call interviews them, drafts the briefing, they approve it.

Building 6 min read

Your website isn't just for humans anymore

How to build a chatbot that keeps itself up to date, can't leak client information, and won't answer beyond what you've published.

Evaluation 7 min read

Can you show Google reviews on your health practice website?

AHPRA bans clinical testimonials, even true ones, but service reviews are fine. What that means for the Google reviews widget on your practice site.

Evaluation 7 min read

What AHPRA's advertising rules mean for your website

Your practice website is advertising under the National Law. What AHPRA's rules prohibit, who is responsible, and how to check your own site.

Evaluation 8 min read

Is it safe to paste client data into ChatGPT?

Short answer: it depends on one setting, and most people have it wrong. What ChatGPT, Claude and Copilot do with your data, and what the Privacy Act expects.

Evaluation 4 min read

What a good AI audit actually delivers

The audit report named one recommendation specific enough to check, and what the Build that followed looked like: one real engagement, generalised.

Evaluation 7 min read

AI and video, Mid-2026: the models can watch now, not just listen

AI could always transcribe video. It can now read the frames as well, and every hour of footage a business owns becomes something it can question.

Building 7 min read

Case study: a 119-page AML/CTF program in three days

How we built a seven-document AML/CTF compliance pack for a small accounting practice in three days, working from 31 confirmed assumptions.

Building 11 min read

From evidence base to delivery: a production AI methodology

How we delivered 34 evidence-anchored AI briefings to a WA peer-advisory chapter: fact-checked literature review, multi-agent verification, one method.

Technical 9 min read

The six functions of a working AI system

A working AI system is six functions doing six jobs. When all six connect, hallucinations get caught, outputs hold steady, and models become swappable.

Technical 7 min read

Supervised autonomy: the middle path for AI architecture

Between drafts you approve and agents you hope about sits the middle path: an envelope of authorised routine work, supervised, audited, and yours to widen.

Evaluation 5 min read

The state of applied AI in Mid-2026

Our literature review of applied AI in mid-2026: ten capability categories, three fact-check passes, written for operational leaders.

Technical 9 min read

How to design a PHI redaction system for clinical AI

PHI redaction is part of a clinical AI tool's architecture, not a feature you add. What the literature says it should look like, and how we built it.

Building 9 min read

How we built on-device de-identification so AI never sees real names

Most AI privacy is a policy. Ours is architecture: an NER model runs in the browser and strips names before anything leaves the device.

Technical 7 min read

Your agency's clients are about to ask why this costs so much

A solo consultant built in three weeks what your agency quoted twelve for. The client doesn't know why yet. The agencies that survive change what they sell.

Adoption 6 min read

What do you love doing? What do you hate doing?

Ask people what they love doing and what they hate doing, then show them AI is coming for the second list. Why the reframe works, and how it fails.

Technical 7 min read

Why I don't use n8n (and what I do instead)

n8n demos well. But a compelling demo and a reliable production system are different things, and the distance between them is where businesses get hurt.

Technical 10 min read

Your codebase was not built for AI. That's the actual problem.

Amazon's mandatory meeting about AI breaking production is an architecture story: codebases built for human maintainers only, now maintained by AI.

Adoption 4 min read

Your team has AI licences. You don't have an AI system.

Fifteen people, fifteen separate AI accounts, no shared context. The problem isn't the tool; it's the architecture around it. Here's the fix.

Building 7 min read

Your $2,000 day starts the night before: our system keeps you on the tools, not on the phone

Optimised routes overnight, automatic customer notifications, and promises the system keeps or corrects. A scheduling system that protects your daily rate.

Evaluation 4 min read

The fastest way for an executive to get across AI

AI moves faster than any executive can track. One focused conversation, one written report, and a decision you can act on: your time stays on the business.

Building 6 min read

Your IT department will take 18 months. You need this working by next quarter.

Senior leaders know what they need built; the gap is time. A prototype gets the tool working now and hands IT a validated blueprint for later.

Building 8 min read

We built an AI invoice verifier. Here's where it hits a wall.

We built an AI invoice verifier and watched a fake beat a real invoice. Why document analysis alone cannot stop fraud, and the five layers that can.

Technical 9 min read

Why AI safety features are load-bearing architecture, not political decoration

The 'woke AI' label came from real failures, but they were engineering failures, not safety failures. The difference matters wherever errors have consequences.

Adoption 3 min read

Woolworths' AI told a customer it had a mother. That's a problem.

Woolworths' AI assistant Olive was scripted to talk about its mother and uncle. When callers realised, trust broke instantly. The fix is honesty.

Evaluation 5 min read

Google is no longer the only way your customers find you

Customers now find businesses through ChatGPT, Perplexity, and Gemini. The sites AI cites are structured differently to the sites Google ranks.

Evaluation 6 min read

The personal workflow analysis: what watching a real workday reveals about automation

People describe the work they value, not the work that eats their time. Recording a real workday reveals the automation opportunities interviews miss.

Evaluation 11 min read

An AI audit that starts with your business

How an operations-first AI audit works: what it looks for, how the evidence is collected, what the report contains, and what it tells you to skip.

Building 6 min read

What production AI teaches you that demos never will

The gap between a demo and a working system is where the useful lessons live. Architecture, framing, privacy, adoption: the patterns repeat every time.

Adoption 6 min read

The psychology of why your team won't use AI

You buy the tool, run the demo, and three months later nobody is using it. Five predictable psychological barriers, each with a strategy that works.

Technical 4 min read

Stop telling AI what NOT to do (and what to say instead)

Instructions built on prohibitions make AI cautious and generic. Describing what you want instead transforms the output, and the reason comes from psychology.

Building 5 min read

How we turned generic AI into a specialist: and what that means for your business

Mediocre AI output is rarely the model's fault. Three structural changes that turn the same model from generic to specialist-grade.

Evaluation 6 min read

Your business has 9 customer touchpoints. AI can fix the 6 you're dropping.

You pay to get customers to your door, then lose them to missed follow-up. AI can handle the six touchpoints most businesses drop.

Technical 6 min read

What happens to your data when you press 'Send' on an AI tool

Businesses send customer data to AI tools without knowing what happens during processing. The spectrum of AI privacy is wider than you think.