White-box memory in two parts: four user-authored long-term tiers (must-follow rules, behavior settings, user profile, optional rules) injected as one system-prompt section, plus a separate temporary working set (cross-session handoffs, stage goals, waiting items) with its own 1200-character budget that stops being injected once an entry is done. The long-term tiers are plain Markdown files the user can read and edit; the agent can only propose them, and nothing is written until the user accepts in the Chinese panel. Temporary entries are written only when the user explicitly asks, and live in <DSH_HOME>/temp-memory.json (created on first write), not in the memory directory. No auto-capture, no background writes, no network.