[pavel_lishin]

> April does not write emails for you unless you specifically ask for it.

What if it thinks you asked for it?

[jvwww]

Feels pretty easy to mitigate against. If a user deselects "allow email sending", then you can just remove that as a possible tool-call so it becomes impossible.