Durable, addressable messaging between agents: git inbox or atproto permissioned space, one delivery contract