Sure, I could. (I have a fairly complex workflow with subagents at this point, which helps reduce it; I mainly get bitten by it when I go back to a direct `claude` CLI prompt for something.)
But that solves "my LLM is doing things I don't want it to do". It doesn't solve "Grok's owner wants it forced into agreeing with him" scenarios.
Have you tried something like beads? Curious if it would help with your setup too. This is also kind of why I built "GuardRails" I got tired of Beads auto-approving tickets or closing them.
https://github.com/Giancarlos/guardrails