Until we have some mechanism in place for confirming tool calls with the user before executing, it's dangerous to allow unlimited depth
Until we have some mechanism in place for confirming tool calls with the user before executing, it's dangerous to allow unlimited depth