How would it know it’s really there, and not just a tool input/output injected into its input?