Not for a lack of trying! Had to enforce tool building through code as models tend to just execute arbitrary code when allowed.