docs(agents): point infrastructure at interchange first

Author: TheGreatAxios

AGENTS.md

@@ -87,17 +87,65 @@ It authenticates over HTTPS via `gh`'s credential helper and rewrites the SSH re
 
 ## Building on Interchange
 
-Interchange is the standard library for this repo. Every `@intx/*` package this repo imports resolves to vendored source under `vendor/intx-*` at a single pinned upstream commit — the sole exception is `@intx/tools-lsp`, which remains on published npm (provenance, patch ledgers, and the re-sync procedure: `docs/VENDORING.md`). We never modify or push to the upstream interchange repository. Before writing any new infrastructure — plugins, middleware, utilities, state management, logging, authz, inference, tools — check these packages.
-
-| Package                | Covers                                                                                                                |
-| ---------------------- | --------------------------------------------------------------------------------------------------------------------- |
-| `@intx/authz`          | Grant matching (`matchPattern`, `evaluateGrants`) for permission approvals; Corbits owns the gate, store, and TUI ask |
-| `@intx/inference`      | Reactor loop, `createAuthzExtension`, `DefaultDirector`                                                               |
-| `@intx/agent`          | Agent lifecycle, send queue, stream                                                                                   |
-| `@intx/tools-posix`    | Shell, file read/write/edit, grep, search                                                                             |
-| `@intx/storage-isogit` | Git-backed state persistence                                                                                          |
-| `@intx/log`            | Structured logging via LogTape                                                                                        |
-| `@intx/types`          | All shared runtime types                                                                                              |
+Interchange is the standard library for this repo. Before writing plugins,
+middleware, state, logging, authz, inference, tools, mail, fleet, or
+workflows, read Interchange first — do not invent a Corbits parallel.
+
+Read, in this order:
+
+- Upstream layout and package READMEs:
+  https://github.com/faremeter/interchange (`LAYOUT.md`, then the package
+  you are about to touch)
+- Vendored source under `vendor/intx-*` when this repo still vendors that
+  package
+- Skills: `interchange`, `interchange-agents`, `interchange-workflows`,
+  `interchange-run-modes`
+- Upstream examples: `agent-quickstart`, `coding-agent`, `ring-demo`
+  (multi-agent mail)
+
+### Do not reimplement
+
+These already exist. Use them; do not write a second copy.
+
+- Harness INBOX / `deliver`
+- `@intx/mailbox` IMAP
+- FleetMailbox / occupancy
+- `src/workflows` coordinators
+- Grant matching
+- `PendingOperation` ask-park
+
+If Interchange is missing something you need, stop and ask the operator. Do
+not invent a Corbits-owned mail, fleet, workflow, authz, or park layer
+beside it.
+
+### Vendor policy
+
+- Unused and unpatched: delete the vendor tree. Do not keep dead trees.
+- Used and unpatched: install from npm.
+- Used and patched (`inference`, `types`, `storage-isogit`, `agent`): stay
+  vendored; see `docs/VENDORING.md`.
+- We never modify or push to `faremeter/interchange`.
+
+Provenance, patch ledgers, and the re-sync procedure live in
+`docs/VENDORING.md`.
+
+### Packages
+
+| Package                | Covers                                                                     |
+| ---------------------- | -------------------------------------------------------------------------- |
+| `@intx/agent`          | `createAgent`, `send`, `stream`, `deliver`                                 |
+| `@intx/harness`        | INBOX watch, mail tools (npm when we use it; do not vendor an unused copy) |
+| `@intx/authz`          | `evaluateGrants`, `GrantStore`, ask effect                                 |
+| `@intx/inference`      | Reactor, `createAuthzExtension`, `DefaultDirector`, compactors registry    |
+| `@intx/tools-posix`    | Shell, file read/write/edit, grep, search                                  |
+| `@intx/storage-isogit` | Git-backed state persistence                                               |
+| `@intx/log`            | Structured logging via LogTape                                             |
+| `@intx/types`          | All shared runtime types                                                   |
+| `@intx/workflow`       | `defineWorkflow`, `runLocal` (npm when we use it)                          |
+
+Corbits owns TUI/exec chrome, auto-shell / secret-guard / path-sandbox
+_policy_, director cards, and MCP (until decided otherwise). Corbits does
+not own a second mail, fleet, or workflow OS.
 
 ## Reference