Completely agree, though the LLM part of the scanner can help with that contextual part of the analysis.

Runtime enforcement already exists (the embedded governor wraps tool calls in-process); extending it with a quarantined contextual evaluator like you describe would the logical next step.

Thanks for the feedback, actually will raise an issue on that to explore