Just implement shift-tab like Claude code to allow the AI in the current session to always run read-only queries.