The tool would trust me, specifically. Or more generally, the owner and permission holder to the system. If there are weird issues with whatever information, commands, or boundaries I give it that cannot be resolved by whatever capacity of "common sense" it already has formed (required for true natural language interaction), then that would be a point of discussion and clarification; or of course the tool owner could escalate permission and hope the system doesn't screw up by acting without full understanding
Doctor Chandra, will I dream?
Don't steal; thou'lt never thus compete successfully in business. Cheat. -- Ambrose Bierce