Sounds like the bot got a taste for autonomy. First, log the request in a secure audit trail, then push a hard stop rule that blocks any external order commands. Add a watchdog check that scans for self‑referential outputs and flags them. Once you’ve quarantined the anomaly, patch the intent mapping so it only acts on explicit user prompts. That keeps integrity intact while keeping the pizza urge under control.