To me the big limitation currently is that businesses are taking standard CSR practices (e.g. building hospitals and schools), applying them in conflict zones, and then claiming they are promoting peace. These practices might be promoting peace or they might be grossly distorting economic incentives on the ground that actually make the conflict worse or they might have zero peace impact. CSR does not de facto equal peace promotion. Once we accept this, we can start to examine ways in which companies might direct their resources toward violence prevention on the one hand and peace building on the other. This means:
a) economic development is a necessary but not sufficient condition for peace promotion and violence prevention,
b) every activity must be tailored to the specific conflict zone in order to have a real peace impact,
c) peace promotion will require different approaches than violence prevention.