subagent-permission-watchdog-hook-pattern

A PostToolUse Hookify rule (subagent-permission-watchdog) can detect permission-denial payloads in subagent output and surface them as actionable warnings with the specific tool pattern to add to settings.local.json. Without this, subagent permission failures are silent — orchestrator receives vague failures with no recovery path.