Python executor Code from the Osprey agent enters the execute MCP tool, passes layered safety checks, runs as a subprocess on the host, and returns structured JSON with stdout, figures, and artifacts. Osprey agent writes code execute MCP tool safety layers nine gates · static → runtime host subprocess ExecutionWrapper result JSON stdout · artifacts