The TwinCAT MCP server's XAE calls compared nothing about which solution the attached shell had open: when the user closed one project and opened another machine's project in a second shell, the dead proxy re-attached to whatever came first and edited the other machine's PLC project. The backend now binds the solution and checks it before every call.