Proximo's mandatory pre-mutation dry-run and blast-radius computation mean an AI agent structurally cannot modify a Proxmox cluster without first producing a human-reviewable plan — directly addressing the "Lack of Audit and Telemetry" and "irrecoverable data loss" risks named in the OWASP MCP Top 10 and official MCP security guidance.