Claude needs a "preflight" in its plan mode, where it tries to predict what tool calls it will need and then exercises them such that it will prompt the user for permissions early if needed.