You could in theory fully review Claude Code.

But even that wouldn't be enough because LLMs are nondeterministic, and these kinds of issues are the inevitable results.

Only a mechanical, deterministic failsafe can protect you from it.