rule-setup

This JSON fragment does not directly show malicious code, secrets, or network activity. However, it establishes an automatic execution pathway that runs a repository-relative shell script on `subagentStart`. That makes the supply-chain security posture highly dependent on the contents and integrity of `.cursor/hooks/enforce-subagent-model.sh`; if that file is tampered with, it could enable arbitrary command execution in the workflow environment.