switch-persona

The feature achieves rapid persona switching but implements a dangerous trust model: reading arbitrary user files and fully discarding prior system instructions grants persona files excessive authority and creates a high risk of instruction injection, data exfiltration, and other malicious behaviors. Without strong mitigations (immutable safety guards, trusted persona signing, capability limits, confirmation, and auditing), this design should be considered a significant security risk and revised before deployment.