Ideally, it would bias strongly towards blocking destructive activities, and hinting but not executing inferred commands.

Perhaps with something like "really" (where usage is similar to sudo) that would both override and train the fuzzy guessing. Training times might be a problem, even with a good algorithm, but perhaps if you got enough people to donate bash histories.