Can a sub-agent spawn its own sub-agents? What stops a shell command reading another project? How do I cap what one session can spend? Can a trigger open a pull request? How do I get JSON I can pipe into something else? What happens when a model call fails halfway?