Curious how you handle TOCTOU between policy approval and the actual tool execution