Comment by reubenlavin

I’m particularly interested in the disable-model-invocation: true safety on /exec and /cleanup. It addresses the biggest hurdle for AI in infra: the fear of an agent hallucinating a delete or exec command in the wrong context.