MCP tool (generated from the whitelist) └─ Runner.execute(cmdlet, params) ├─ Whitelist.validate() # reject unknown cmdlet / param / write ├─ ExchangeSession.run_cmdlet() # pypsrp PSRP → ...