v0.1.18 Bug fix: \uXXXX escapes take exactly four ASCII hex digits in every decoder (tokenizer, reader tokenizer, DOM parser incl. JSON5, async parser); signed/underscored spellings such as \u+041, \u0_41 and \u-000 now fail with InvalidEscape, matching the strict Go parser in devnw.dev/policy. JSON5 \xNN and schema pointer %XX take exactly two hex digits (SONNY-2768).