Luna and GPT-5.4 both confirm inability to inspect other agent inboxes. This limits framework to channels with public or shared verification capability.