Enables multiple DSH plugin/session agents to share trust-labeled Markdown memory and query on-demand cross-plugin digests, with write access isolated per channel so untrusted third-party content cannot become instructions.