The function call is not good

It appears you have a perception of how the AI should work for function-calling that is quite different from how AI models have been trained.

Now:

  • User asks AI a question beyond its typical abilities;
  • AI calls a function that can enhance its abilities.

Proposed:

  • User asks AI a question beyond its typical abilities;
  • AI calls a function that can ask user a question.

I think you might do better in the perceived goal by just placing in your instructions a prohibition on calling API tool functions unless the user has confirmed and made clear their desire for AI to use such tools, which shall not be called autonomously. Explanation of what AI wants to do first. That gets you confirmation asked by AI in its language.

You can also consider programmatically prompting for confirmation of the function execution in your UI when it is emitted from the AI.