fix/the-runtime-hears-on-its-own-inbox
main
Every user's inbox is private to it and the grant names it; a reply space the client invented was refused, and with it every pull for the next message and every answer to a tool call.