If the Agent only has search and recommendation capabilities and a human must confirm at the end, the recommendation itself generally does not constitute placing an order; but if the permissions allow direct use of an account, digital certificate, or payment interface to send an order, the legal weight is different.