Checkpoint: Safety and channels

The permission system and the gateway together let the same agent talk over any channel safely. Lock that in before we add compaction, which changes the message history in interesting ways.