A launchd daemon is the sole writer of an atomic wallet.json every 30s. Headroom = min(5h, 7d, headless pool). Every hook becomes a sub-ms read.
On every spawn, PreToolUse rewrites the model down to the lever's ceiling, stamps the [TRIDENT …] envelope, and falls back to an SSE-transparent proxy floor.
On Stop + SubagentStop it settles counters and grows cross-surface "antibodies" — tighter budget, higher confidence to block next time.