diff --git a/.gitignore b/.gitignore
index 6444ae6..ed0aa68 100644
--- a/.gitignore
+++ b/.gitignore
@@ -13,6 +13,16 @@ __pycache__/
 !.env.beta.example
 data/secrets/
 
+# ── Claude Code (deny by default, allow-list shared wiring — see standards/portability.md) ──
+.claude/*
+!.claude/rules/
+!.claude/agents/
+!.claude/commands/
+!.claude/skills/
+!.claude/settings.json
+# launch.json is a deliberate, secret-free debug config CRM commits
+!.claude/launch.json
+
 # ── Local databases & SQLite sidecars ──
 # CRM is canonical and lives on the Start9 /data volume; never commit live LP
 # data into git (guardrail #1). Dev/synthetic DBs are local-only.
diff --git a/AGENTS.md b/AGENTS.md
index 858488b..4a7753e 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -4,6 +4,9 @@
 
 **The agentic system is new functionality built on top of that CRM** — an in-house AI layer to widen the fundraising funnel, sharpen the thesis, and automate outreach drafting. Frontier reasoning runs on Claude (Agent SDK/API); privacy-sensitive and bulk work runs on local DGX Spark models via the **Spark Control** gateway. **Phase 0/1 — no live outward-facing agents; agents draft, humans send.**
 
+> **Inbox check:** At session start, if `~/Projects/standards/INBOX.md` exists, scan it for
+> items tagged `(CRM)` and surface them before proposing next steps; triage with `/triage`.
+
 ## Stack (versions that matter)
 
 - **Python 3.11, standard library only at runtime.** The CRM is one monolith, `backend/server.py` (~5k lines): a stdlib `http.server.ThreadingHTTPServer` + hand-written `CRMHandler` with manual path dispatch (`do_GET`/`do_POST`). **Not FastAPI.** `backend/requirements.txt` lists FastAPI/SQLAlchemy/Alembic/Pydantic/pytest-style deps but **none are imported at runtime** (vestigial).