@@ -59,6 +59,7 @@ package; the date is the deadline even if it is not.
 | `vendor/intx-mime/`                                       | `faremeter/interchange` | `4cc697241fa037244a9164a50aec507c112bc9fb` | No                 | `buildMessageHeaders` is past npm `0.3.0` (verified 2026-09-07: absent from the published tarball); `@intx/mailbox` re-exports it                                                                 | step-1  | 2027-03-14 or when a published `@intx/mime` exports `buildMessageHeaders`                              |
 | `vendor/intx-workflow-host/adapters/`                     | `faremeter/interchange` | `4cc697241fa037244a9164a50aec507c112bc9fb` | No                 | App-internal: `substrate-mailbox-store.ts` has never been published in any `@intx/workflow-host` release (verified 2026-09-07: absent from the `0.3.0` tarball)                                   | step-1  | 2027-03-14 or when a published `@intx/workflow-host` exports `createSubstrateMailboxStore`             |
 | `vendor/intx-workflow-host/workflow-definition-loader.ts` | `faremeter/interchange` | `4cc697241fa037244a9164a50aec507c112bc9fb` | No                 | Director loading from a workflow closure (`loadWorkflowDirectorRegistryFromClosure`); never published in any `@intx/workflow-host` release (verified 2026-09-14: absent from the `0.3.0` tarball) | step-1  | 2027-03-14 or when a published `@intx/workflow-host` exports `loadWorkflowDirectorRegistryFromClosure` |
+
 ### The 2026-09-07 step-1 vendor pass
 
 Three needs from the ticket were verified against npm and found already
@@ -313,7 +314,7 @@ packages/<area>`):
 | `storage-isogit`                   | 9       | whole `src/`                 | **Adopt**          | `e75eee2` `sync.request`/state-push removal, verified safe (below). Coupled-trio rule forces the pin to move with `types`/`inference` anyway.                                                                                                                                                                                                                                                                                                                                       |
 | `agent`                            | 3       | whole `src/`                 | **Adopt**          | Per-send inference options (`d1835b`) and probe-child dedupe (`872610b`, `a0be3012`); `./authoring` subpath consumed by the adopted workflow-host loader.                                                                                                                                                                                                                                                                                                                           |
 | `workflow-host` (partial: 3 files) | 68      | 3 vendored files only        | **Adopt** (narrow) | The other ~100 drift files live in supervisor/workflow trees we do not vendor and are excluded by design. `workflow-definition-loader.ts` dropped the `@intx/hub-sessions/substrate` import for `@intx/types/workflow-definition`, in the direction CL-9021 already wants.                                                                                                                                                                                                          |
-| `authz`, `log`, `tools-posix`      | 0       | nothing                      | **No change**      | `git diff 5453d0b0..4cc697241fa037244a9164a50aec507c112bc9fb -- packages/<p>` is empty for all three; pin bumped with the set for single-commit coherence only.                                                                                                                                                                                                                                                                                                                                                     |
+| `authz`, `log`, `tools-posix`      | 0       | nothing                      | **No change**      | `git diff 5453d0b0..4cc697241fa037244a9164a50aec507c112bc9fb -- packages/<p>` is empty for all three; pin bumped with the set for single-commit coherence only.                                                                                                                                                                                                                                                                                                                     |
 | `crypto`                           | 2       | not vendored                 | **No action**      | Published npm dep stays at `0.3.0`; its adopted consumers (`generateKeyPair`, `createEd25519Crypto`, `importPublicKeyBytes`) all already export from the installed `0.3.0` dist (verified against `node_modules/@intx/crypto/dist/index.d.ts`).                                                                                                                                                                                                                                     |
 
 Nothing was adopted from `packages/workflow-deploy`, `packages/workflow`,