Secure local-first MCP server exposing 100 ArcGIS Pro / ArcPy geoprocessing tools to LLM agents. Two-process architecture, PathGuard filesystem sandboxing, and confirmation gates for destructive operations. Real geoprocessing requires local Windows + licensed ArcGIS Pro; cloud/container runners support discovery, installation metadata, and health_check pipeline introspection without ArcGIS.