dsh-subagent-rules 0.1.3 - anchored-safe rules injection
- rules message is now gated on PROMOTION: it lands only after the session's first durable tool/call or assistant/message, so anchored-standard's request #1 stays Minimal-exact (clean tool pair, no injected context)
- verified: fresh session -> no injection; promoted session -> injected once; assistant/message also promotes; dedupe holds