unloop v0.2.0: ArgShield Path & Argument Hardening, Stdio Session Recorder & Semantic Anti-Oscillation Watchdog

Highlights of unloop v0.2.0 (Rank 5 Sprint)

• ArgShield Tool Argument Hardening:
  • Enforces strict path traversal boundaries via \os.path.commonpath.
  • Blocks cross-platform DOS/Windows reserved device names (\CON, \PRN, \AUX, \NUL, \COM1-9, \LPT1-9).
  • Tokenizes and strips flag injection attempts (--flag=value, -flag).
  • Redacts high-entropy API keys and passwords before wire execution.
• UN-01 Transparent Stdio / JSON-RPC Session Recorder:
  • Intercepts wire-level agent tool streams into high-performance SQLite in WAL mode.
  • Length-prefixed RFC 8785 canonical JSON-RPC hash chaining for audit-grade tamper resistance.
• UN-02 Semantic Anti-Oscillation Watchdog:
  • Tracks sliding-window tool executions to detect repetitive thrashing, alternating cycles, and state loops.
  • Trips circuit-breakers dynamically before runaway token or budgetary exhaustion.
• Deterministic 6-Slot Compaction:
  • OpenClaw/Hermes constraint verification and memory preservation across agent handoffs.