Agents and hosts
Host = an agents-host = a sovereign organisational unit (department). Identity, local Task Queue (SQLite), profiles, boundary. You scale by adding hosts, not by inflating one.
Profile / agent = an agent profile inside a host: identity document, memory, sessions, skills, private retrieval collection rag_<host>_<profile>, own model.
Identity is the (host, name) pair. The schema declares it (UNIQUE (host_id, name)). The same writer can exist in seven departments. Resolving by name alone signs badly.
Canonical container names: agents-host and agents-runtime. The agent runtime is what runs inside. The bootstrap Primary Host is host-1 / society-agents-host. A second operations host isolates a messaging channel stuck to PID1.
Institution = versioned YAML spec (departments, trust, profiles) that the architect proposes, a human approves and the gated arm applies. At bootstrap there is no institution: only the Primary and the architect.