MCP server that runs privileged, mutating commands (local or over SSH) with a mandatory single-keypress human approval on every one; escalates via sudo, stores no password. Rust, MIT, Linux, local. Already indexed on Glama.