MCP has 84k GitHub stars and a documented RCE Anthropic calls "intended behavior." Nexus Protocol is the fix.
WASM sandbox. 19 dangerous syscalls blocked at the kernel boundary. Binary protocol with zero JSON overhead. Three sandbox policies. Prompt injection guard at the protocol layer. SDKs in Rust, Python, Go, and TypeScript. Apache 2.0.
If your agent can call execve() without a sandbox, you don't have a secure agent. You have a polite backdoor.
