Yeah, the quarantined LLM stuff can absolutely be modeled as tool calls instead

→ View original post on X — @simonw