How to Protect Your Community from Bad Actors While Staying Welcoming

I’m preparing to launch my tightknit community, which is for both customers and “AI Builders” in general. Any recommendations on how to ensure we filter out bad actors? I want to be welcoming, but leaving our door wide open is a risk. Maybe the best path is to require Workato SSO to join and everyone else requires approval?