Earned command trust + delegation through files, not fragile arguments
guard.trust lets Soma stop re-asking for commands you've already approved three times in a project (30-day expiry, per directory — never for destructive commands). `soma:agent.claude` delegates large tasks through a file contract instead of a command-line argument, removing a silent length ceiling, and `soma:agent.fold` reads what a delegated child noticed about its own role and feeds it back in. Plus a graduated keepalive ladder and real markdown conversion for fetched docs (~82% smaller than raw HTML).
