Single exec tool running caller Python in a network-isolated locked-down sandbox.
Curated ssh_probe diagnostics and single-host ssh_exec over an allowlisted SSH fleet.
