DL-396

Cross-owner reach is gated at delivery, not by membership: SubscribedAgents, ChannelAgentMembers, UndeliveredMessages, OwedMentions, and the cursor advance admit an agent only when the author shares its owner, is the system account, or is live-peered with its owner, in every channel kind. Revoke deletes one row and mutates nothing else; it stops every deliver, steer, owed row, and wake across the boundary in both directions, and re-approval restores them. Pull reads stay membership-gated. Amends DL-226: a cross-owner wake needs a live peering.

Status: Active (Matt, 2026-09-28)

Record: ../../server/compass-owner-peering/design.md#ledger-delta