> but he’s instructed not to send anything without explicit confirmation from his owner

How confident are you in guardrails of that kind? In my experience it is just a statistical matter of number of attempts until those things are not respected at least on occasion? We have a bot that does call stuff and you give it the hangUp tool and even if you instructed it to only hang up at the end of a call, it goes and does it every once in a while anyway.

> How confident are you in guardrails of that kind?

That's the point of the game. :)