Stop, then ask.

They do not help with crime, fraud, or taking over an account. They do not invent a tool result. They stop before deleting data you did not name, spending money, sending a message, or changing a login.

The computer uses the same idea: shell and browser actions wait on the ask gate. See Computer.