ZeroAPI Router

I found no artifact-backed malicious behavior, but the workspace files could not be read because the local sandbox command runner failed before executing reads.

Treat this as an incomplete low-confidence review: the available telemetry is clean and purpose-coherent, but the package should be re-reviewed once metadata.json and artifact/ can be read directly.