What's Changed

• docs(agents): scope RULES.md under Builtin Implementation section by @AlexandreYang in #259
• test: vuln-hunt 2026-05-18 regression suite (blocked-attack & isolation tests) by @AlexandreYang in #257
• fix(interp): restore prior value for same-name inline-command vars by @AlexandreYang in #262
• fix(interp): cap r.stderr at 10 MiB by @AlexandreYang in #263
• test(df): make POSIX/PT/-h row parsing resilient to whitespace in source/mountpoint by @AlexandreYang in #265
• fix(analysis): audit all non-exempt top-level builtins/ files by @AlexandreYang in #261
• Add vuln-hunt regression tests across builtins and shell features by @AlexandreYang in #264
• Fix absolute glob expansion in sandbox by @AlexandreYang in #268

Full Changelog: v0.0.18...v0.0.19