Maybe there could be an allowlist and/or denylist of specific tools that you would like to (not) use. As seen in Claude Code.