Guardrail builder

Make the boundaries you work inside visible.

Guardrails declare what sources are in bounds, who must approve what, and how high-risk outputs escalate. Attach one to a session from Session summary and it renders alongside the memo as a trust signal.

v0.2.0 ships display-only — guardrails do not block export or council. Enforcement is a separate decision (see BACKLOG.md).