But for such a specific use-case as this, I don’t think it’s outside the realm of possibility to build some sort of reverse-lookup system that sanity checks the output before sending it.

What kind of reverse-lookup system, exactly? As far as I know, that’s impossible without AGI.

I don’t like to assume ill intent just to fill in an unexplained gap. It’s entirely possible for someone to just be wrong.

That doesn’t explain the evasiveness. Something’s up. Something we won’t like when it’s revealed.