I'm wondering if this is designed only for in-house use, or if it's something intended to be public-facing. If a company were to embed this on their website, say, to answer questions about products for sale...

1. Would there be any way to restrict the conversation with the customer to questions related to the products?

2. What strategies could be used to prevent malicious overuse / spamming / flooding the bot to cost the company money?