"It should write the code I tell it to in an interactive session. Also when running autonomously it shouldn't decide to hack into systems."

I don't see much connection between that problem and these controls.