Implement native AgentManager services (#59)

README.md

@@ -324,3 +324,18 @@ counters and receives real UDP and server-stat updates without exposing packet
 payloads or endpoints. The gate asserts token redaction, bounded policies, and
 joined CAPS/download/network tasks; `tools/check_milestone_08.py` prevents owned
 networking stubs or required audit evidence from regressing.
+
+### Milestone 09
+
+The first world-services slice provides a native non-movement `AgentManager`
+over the milestone 08 transport. Chat, instant messages and conferences,
+gestures, animation, viewer effects, balance and payments, profiles, notes,
+picks, classifieds, display names, language/access/preferences, experiences,
+viewer reporting, benefits, attachment resources, mute lists, and nav-mesh
+status now use their C#-compatible LLUDP or capability paths. Incoming state is
+updated before callbacks, and callbacks run outside synchronization locks.
+Gesture assets have a native version-2 parser and executor with bounded HTTP
+and UDP download paths. An offline fake grid verifies capability discovery and
+the resulting chat, animation, and sound packets. The ownership, cancellation,
+limits, and compatibility rules are documented in
+[`docs/agent-manager.md`](docs/agent-manager.md).