NEXO Privilege Gate

NEXO Privilege Gate v0.4.0 is an open-source least-privilege gateway for AI agents. It now enforces structured filesystem actions inside a local sandbox, blocks path escapes and sensitive-file aliases, requires human approval for destructive actions, quarantines deletions, and records a tamper-evident audit trail. GPT-6 Astra also found and helped fix a real path-alias authorization bypass before release.