Add governed Memory/context and AEP store providers

[gbaudrit-codex]

Summary

• establish explicit domain boundaries between conversation history, execution context, checkpoints, governed Memory, and Agent desired state
• add Workspace-isolated Agent/shared Memory records with provenance, retention, explicit writes, bounded retrieval, deletion, and SQLite persistence
• add Runtime-owned context assembly and deterministic cross-Run recall without automatic capture or Agent revision mutation
• add Management MemoryProvider bindings and reusable MemoryProfile policies, including Pack-compatible configuration
• extend AEP with a provider-neutral Memory store capability while keeping retrieval strategy and context assembly inside Agentstration
• add an autonomous SQLite AEP Memory extension wired through Aspire
• remove the former generic/experimental memory shapes instead of promoting them into the governed model

Architecture

• Conversation remains owned by the Work Plane.
• Technical checkpoints remain opaque Runtime adapter state.
• Memory records are governed runtime/user data, separate from Agent definitions and immutable revisions.
• MemoryProfile selects retrieval/retention policy; MemoryProvider binds an installation to a store implementation.
• AEP extends the store boundary only. It does not own retrieval, prompts, or context assembly.
• Shared Memory uses explicit Workspace-local shared scopes; no ContextGroup resource is introduced.
• Tool arguments/results, secrets, prompts, and authentication data are never captured automatically.

Validation

• dotnet format Agentstration.slnx --no-restore --include tests/Agentstration.Runtime.Tests/RuntimeRunTests.cs --verbosity minimal
• dotnet build Agentstration.slnx --configuration Release --no-restore
• dotnet test Agentstration.slnx --configuration Release --no-build --verbosity minimal
  • 409 total
  • 408 passed
  • 1 optional llama.cpp integration skipped
  • 0 failed
• reusable store conformance suite passes for builtin SQLite, in-process AEP, and the real out-of-process SQLite extension
• restart test verifies durable AEP persistence
• Runtime test verifies explicit write → new Run → profile/provider resolution → Memory context injection → deterministic Agent recall
• cross-Workspace exclusion and Agent definition/revision immutability are asserted

V1 limitations

No vector database, embeddings, semantic retrieval, RAG/document ingestion, automatic extraction, summarization, Workspace-wide scope, distributed Memory service, Azure provider implementation, or AEP retrieval strategy is included.