Governed XCP-ng ops via Xen Orchestra — 27 MCP tools with audit, budget, undo guards.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts — it cannot prove the absence of malicious code.
Governed XCP-ng ops via Xen Orchestra — 27 MCP tools with audit, budget, undo guards.