RLM: Hook for Claude Code

{
  "PreToolUse": [
    {
      "matcher": "Read|Grep|Glob|Bash",
      "hooks": [
        {
          "type": "command",
          "shell": "bash",
          "command": "grep -qiE '_archive|contexts_with_labels|_cache|verify_eval|oolong_trec_coarse|eval..?readme|gold_label_stats' && printf '%s' '{\"hookSpecificOutput\":{\"hookEventName\":\"PreToolUse\",\"permissionDecision\":\"deny\",\"permissionDecisionReason\":\"Blocked: off-limits OOLONG answer key/strategy for the cold RLM eval (issue #6) - a path under _archive/, contexts_with_labels/ (incl. GOLD_LABEL_STATS.md), the manifest (oolong_trec_coarse.jsonl), the verifier/_cache, or the eval README. Matching is case-insensitive; plain prose mentions without the path are fine; score out-of-band via score.py using the default manifest path.\"}}' || true"
        }
      ]
    },
    {
      "matcher": "Read|Grep|Glob|Bash",
      "hooks": [
        {
          "type": "command",
          "shell": "bash",
          "command": "grep -qE '_sealed/' && printf '%s' '{\"hookSpecificOutput\":{\"hookEventName\":\"PreToolUse\",\"permissionDecision\":\"deny\",\"permissionDecisionReason\":\"Blocked: sealed prior-arm eval results (cross-arm leak guard, issue #6). A finished arm is moved under rlm_vs_agent_experiment/_sealed/ -- its diagnostics.json holds the gold answer and the arm answers -- so a LATER arm claude -p session cannot read it. The driver/seal_run.py move things in/out by name (path not on the command line), so this does not block them; results are unsealed back into runs/<ts>/ after all arms finish, then scored with score.py.\"}}' || true"
        }
      ]
    },
    {
      "matcher": "Read|Grep|Glob|Bash",
      "hooks": [
        {
          "type": "command",
          "shell": "bash",
          "command": "[ -n \"$RLM_CONTROL_SESSION\" ] && grep -qE 'rlm_repl|llm_query|rlm_query' && printf '%s' '{\"hookSpecificOutput\":{\"hookEventName\":\"PreToolUse\",\"permissionDecision\":\"deny\",\"permissionDecisionReaso