That's a common misconception. You can request a proof of harmlessness, and disregard anything without it.
No need to "ask" for "proof". You can monitor the system in real-time and detect malicious or potentially harmful activity and stop it early. The same tools and methodologies used by security tools for decades...
Are you not familiar with sandboxing? eBPF? Audit logs? "Dry Runs"? Static and dynamic scanning?