Advisory NixOS change-review + CVE/KEV attestation gate for AI agents (MCP server). Grades security-relevant config diffs, attests closures against the CISA KEV catalog, gates on a human, keeps an append-only audit ledger.
**A safety gate for agent-proposed NixOS configuration changes.** `mcp-nixreview` is an [MCP](https://modelcontextprotocol.io/) server (FastMCP, Streamable HTTP) that sits between an AI agent's proposed change to a NixOS config and the human who applies it. When an agent proposes a change, this server: