have it only write python code and run it, disallow it to ever delete or update data in a database.