NEXO 7.14.0 — installer hardening, memory authority, and verification rails

Published 2026-05-06. Minor release over v7.13.9 — closes the fresh-machine installation audit and adds runtime rails for memory conflicts, external-action verification, and stale followups.

Install recovery now covers fresh, repair, and update paths

Brain now validates the managed virtual environment before reuse, moves aside unsupported Python environments, and only installs bundled wheels when they match the current platform. Windows WSL bootstrap preserves Desktop-managed flags through the bridge so the installer contract survives across the Windows-to-Linux boundary.

Legacy memory is no longer silent authority

Startup now audits legacy Claude/Codex memory layers for identity-style conflicts against NEXO authority files and reports warnings instead of letting stale client memory silently win. The hook guard also blocks writes to legacy MEMORY.md paths unless an explicit override is set for migration or debugging.

External actions must close against reality

Email, message, calendar, invite, booking, and send-like tasks now require evidence that the real sent item, event, or booking was reopened and checked before the task can close as done. The enforcement layer also prompts for post-action verification immediately after external send/calendar tool calls.

Followups are triaged instead of accumulated

The followup runner and hygiene scripts now escalate stale items after a defined age, cap operator-facing noise, and move stuck work into a decision state instead of letting overdue briefings grow as raw historical dumps.

Validation

node --check bin/nexo-brain.js bin/windows-wsl-bridge.js
pytest -q tests/test_memory_layer_audit.py tests/test_v6_fresh_install_skip.py tests/test_windows_wsl_bridge_contract.py tests/test_hook_guardrails.py tests/test_protocol.py tests/test_fase_2_audit_gaps.py tests/test_followup_triage_static.py
python3 scripts/verify_release_readiness.py --ci

Full changelog entry → · src/memory_layer_audit.py · src/hook_guardrails.py · src/plugins/protocol.py