Permissions follow the runner, not the builder

When an agent moves from its builder to a borrower, whose permissions apply? In tting the answer is always the same: the runner's.

A borrowed agent can only see the documents, channels and tools the person running it can already see. The builder's access never travels with the agent — so publishing to the team library never widens anyone's blast radius.

Grounding without leaking

Every answer cites its sources, and every source is checked against the runner's entitlements at query time. Two teammates can run the same agent and get differently scoped answers — by design.