NexusShield: request inspected and allowed