hmmm idk how I would feel about giving an llm cluster access from a security pov
As we will eventually move towards write-access, we're closely following the work in LLM safety. There has been some interesting work to use smaller models to evaluate tool calls/completions against a set of criteria to ensure safety
Cool idea though!