sloth v1.6 — Wi-Fi SIGINT expansion

Passive by charter. sloth still never injects, scans, or modifies kernel state — the one exception is the opt-in --hop scheduler retuning sloth's own monitor interface, gated behind an explicit MISSION §2 carve-out.

This release lands the full Wi-Fi SIGINT roadmap (issues #20–#28) on top of v1.5.1.

Channel coverage & multi-radio

• Adaptive passive channel-hop scheduler (--hop, opt-in, off by default) — activity-scaled dwell with decay, an nl80211 set_channel platform op, and a live scan bar on the monitor-radio row. (#22)
• Multi-radio passive observation merge — fold observations from more than one monitor adapter into one entity-keyed world model (AP BSSID / STA MAC), retaining per-radio provenance: seen_by, sensor_mask, best_rssi/best_sensor. Identity map with a single adapter. (#21)
• Passive sensor abstraction layer — the typed registry every observation source registers through; the seam for future RF families (BLE / Zigbee / SDR / GPS / ADS-B / Meshtastic / CAN). (#28)

Detection

• New alert rules: BEACON_FLOOD (T1498.001) and AUTH_FLOOD (T1499).
• Beacon QBSS Load IE parsing — AP self-reported occupancy.
• 6 GHz channel-number derivation on the monitor path.

Assessment & forensics

• RF session baseline + drift detection. (#23)
• Wireless-hygiene findings in the operator posture report (OPEN/WEP/TKIP/MFP-off/transition/WPS). (#24)
• Passive site snapshot export/import for repeat assessments. (#27)

UX

• Monitor-first: dashboard connections/packets bands pivot to STA↔AP associations and 802.11 frames when monitoring; full-screen frame view; launch on the dashboard with noise interfaces hidden. (#25)

Export

• JSONL: emit each captured packet exactly once; additive sensor and wifi_merged records. (#20)

All builds warning-clean; 3447 test assertions pass.