[Angnuo (angnuoli)]

Summary

• Adapt the trusted internal SQLite IPC validator to OpenClaw 2026.10.5 auth-profile-rows and operation metadata.
• Validate only known metadata fields and types while preserving canonical database scope and the strict snapshot, staging, and transfer envelopes. OpenClaw still admits the read operation and verifies physical file identity.
• Cover the shared session RPC path for cloud and local model selections without changing model API endpoints or disabling sandbox enforcement.
• Update the real OpenClaw integration probe for 2026.10.5 hashed runtime chunks, authenticated reads, and read-only operations with both artifact-preservation settings.

Validation

• 504 tests passed across sandbox-logic.test.ts, session-model-service.test.ts, and openclaw-sqlite-sandbox.integration.test.ts.
• Real OpenClaw 2026.10.5 integration tests passed, including Gateway startup/restart and scoped SQLite reads in temporary fixture directories.
• TypeScript no-emit check passed.
• ESLint passed with 0 errors and 9 existing warnings in sandbox-logic.test.ts.
• Prettier passed for the changed JavaScript/TypeScript files; README.md has existing formatting differences on both the base and working versions, so unrelated Markdown formatting is left untouched.
• git diff --check passed.