- New MCP tool wraps with proper escaping - Resolves LXC target from entity graph (no hardcoded IPs) - Uses classifyAndGate for classification + approval chain - Read-only commands (curl GET, cat, ls) auto-execute - Mutations (POST/PUT/DELETE) require operator approval - Full audit trail via execution rows - Updates AGENTS.md with tool listing
38 KiB
38 KiB