The model cannot be made careful. The gap between what it asks for and what actually happens can be — and that gap is where every control lives.
The agent asks to do something
The problem it solves
How it works
So what
You are not making the model trustworthy. You are deciding, in advance and in code, which of its requests you are willing to honour.