AI agents execute tool calls driven by untrusted text. zn is a local-first gate that fuses deterministic rules with a tiny neural classifier to flag prompt injection in <5ms on CPU. Prompts never leave your machine. MCP-native. Evals published, warts and all.
