v0.1.0 — Safety-proxy interface skeleton

UnboxAPI Safety Proxy v0.1.0

⚠ NOT PRODUCTION SAFETY ⚠

This release contains interface definitions and a trivial reference hook only. It is not a production safety control.

What's included

• Abstract base interfaces: SafetyHook, SafetyProxy, CallContext, HookResult, HookAction
• Reference implementation: LoggingHook (unconditional ALLOW, logging passthrough only)
• Apache-2.0 LICENSE
• Threat-model memo: docs/threat-model.md
• SECURITY.md with coordinated-disclosure contact
• SBOM (CycloneDX) attached

Security gate

All §3.0 gates passed: gitleaks (0 findings), SCA (0 deps → 0 CVEs), manual SAST review (pure stdlib, no attack surface), threat-model memo authored and attached.