Eh, just have a human evaluate and approve every tool call