Guards

Reports the install-doctor verdict at session start and refuses tool calls while the install is provably broken

Denies a delegated agent lane any write to this repo's Claude settings files.

Report model drift and deny only positively invalid stale-pin launches.