---
title: "Agentic Travel Servicing, Consent and Auditability"
description: "Design agent-driven cancellation, refund and servicing with explicit consent, traceability, versioned evidence and post-booking authorization boundaries."
slug: "agentic-travel-servicing-auditability"
translationKey: "architecture-agentic-travel-servicing-auditability"
locale: "en"
type: "guide"
category: "architecture"
tags: ["agentic-travel","servicing","consent","auditability","traceability"]
publishedAt: "2026-09-27"
updatedAt: "2026-09-27"
reviewedAt: "2026-09-27"
technicalVerifiedAt: "2026-09-27"
codeExampleStatus: "illustrative"
---

After purchase, cancellation, refund, exchange and change are new side effects. **Original purchase consent is not automatically authorization for post-booking servicing.**

## Servicing flow

```mermaid
%% title: Agentic travel servicing flow
%% description: Agent servicing intent moves through quote, authorization, mutation, reconciliation and audit evidence.
flowchart LR
  A[Servicing Intent] --> B[Retrieve Current Booking]
  B --> C[Quote / Rules]
  C --> D[Consent / Mandate Check]
  D --> E[Servicing Tool]
  E --> F[Provider Mutation]
  F --> G[Confirmed / Failed / Unknown]
  G --> H[Reconciliation]
  G --> I[Audit Evidence]
```

## Cancellation and refund

The agent should quote cancellation penalty, refundable amount, timing, payment method and provider restrictions before mutation. Execute only after explicit user authorization or a valid servicing mandate.

## Consent versioning

Bind consent to booking version, quoted penalty/refund, currency, operation and timestamp. A changed quote invalidates old consent.

## Traceability

Preserve userIntent → servicingIntentId → quote/version → authorization evidence → tool call → provider attempt → provider reference → reconciliation record.

## Audit record

Record who/what acted on whose behalf, operation, booking/version, quote, authorization, agent/model/tool execution and outcome.

## Agent explanation

Explain what changed, expected refund/penalty, whether the operation is confirmed or pending and whether another action is required.

## UNKNOWN servicing

Never summarize UNKNOWN as completed. Keep it pending and trigger reconciliation.

## Data minimization

Auditability does not require storing raw prompts or full PII. Prefer structured evidence IDs and redacted summaries.

## Failure modes

Stale quote cancellation, reused old consent, missing reapproval after refund changes, treating UNKNOWN as success, storing PII in prompts and losing agent/model version evidence.

## Observability

Track servicing consent, quote-change reapproval, servicing UNKNOWN, cancellation/refund success, audit completeness, manual intervention and disputes.

## Production checklist

Use separate servicing mandates, quote-before-mutate, consent versioning, immutable audit evidence, agent/model/tool traceability, UNKNOWN reconciliation, PII-minimized audit and user-facing outcome explanations.
