root access to an LLM... ooph.

could it have hallucinated some nonesense for a moment and accidentally run "sudo rn -rf /"??

Or does it ask for each command to be executed and the human must say OK?