chore(boundaries): guard latest-main runtime anchors

Author: limityan

AGENTS.md

@@ -131,6 +131,18 @@ and milestone verification gates.
   manifests, `ToolUseContext.unlocked_collapsed_tools`, and desktop/MCP/ACP
   tool catalog behavior.
 
+### Latest-main runtime anchors
+
+- Agent registry migration must preserve mode-scoped subagent availability,
+  hidden/custom/review grouping, and desktop subagent API semantics.
+- DeepResearch report finalization currently relies on the core citation
+  renumber hook; do not move it without preserving `report.md`,
+  `citations.md`, `display_map.json`, and rejected-citation handling.
+- Workspace/search refactors must preserve remote workspace startup guards,
+  remote flashgrep fallback, and search preview/context mapping.
+- ACP timeout handling and Web operation-diff fallback are product-surface
+  behavior; share facts through contracts, not UI/protocol implementation.
+
 ### DeepReview guardrails
 
 Deep Review / Code Review Team work spans the core runtime and web UI. Keep

docs/architecture/core-decomposition.md

@@ -113,11 +113,20 @@ owner 边界，否则不要把一个 feature group 继续拆成更小的 crate
 - 最新主干已把 subagent 可见性做成 mode-scoped registry 行为。迁移 agent registry 或
   subagent definitions 前，必须先保留 mode visibility、hidden/custom/review 分组和 desktop
   subagent API 等价测试；在此之前它们仍属于 `bitfun-core` product runtime assembly。
+- DeepResearch 现在包含 citation renumber post-turn hook。迁移 agent runtime 或 prompt/report
+  处理前，必须保留 `report.md` / `citations.md` / `display_map.json` 的 deterministic post-processing 行为；
+  在此之前该 hook 仍属于 `bitfun-core` agent runtime assembly。
 - 最新主干新增 on-demand tool spec discovery。`ToolExposure`、`GetToolSpec`、
   `manifest_resolver`、collapsed-tool catalog、context-aware tool schema/description
   和 `ToolUseContext.unlocked_collapsed_tools` 暂时属于 `bitfun-core` product tool runtime；
   迁移前必须证明 prompt-visible manifest、expanded/collapsed exposure、unlock state 与
   desktop/MCP/ACP tool catalog 等价。
+- 最新主干的 remote workspace guard 和 search fallback/context 修复提高了 workspace/search
+  迁移门槛。后续迁移 workspace 或 search runtime 时，必须保留 remote workspace metadata、
+  startup runtime ensure、remote flashgrep fallback、preview mapping 和 local/remote fallback 语义。
+- ACP startup timeout 和 operation diff fallback 属于 ACP/Web product surface 行为；后续只能通过
+  stable contract 共享事实，不得把 ACP timeout、tool diff fallback 或 Web diff rendering 下沉到
+  core-types、runtime-ports、agent-tools 等 contract crate。
 - 最新 CLI 重构新增大量 TUI、theme、selector、dialog 和 chat-state 代码，但仍位于
   `src/apps/cli`。后续 core decomposition 只能通过产品 check 验证 CLI 仍可组装，不应把
   CLI presentation 依赖迁入 core-types、runtime-ports 或 agent-tools。