Treat per-subagent tool grants as a blast-radius boundary: read-only+web for researchers, Edit+Bash-no-network for writers

Totalum·medium signal

The production subagent playbook partitions tools per role: a research subagent gets read-only file access plus web search, a writer subagent gets Edit and Bash but no network. Tight per-subagent scopes mean one compromised or hallucinating subagent cannot poison the rest of the run, and independent write partitions prevent two subagents racing on the same file. Plan the partition before you fan out — scoping is a security control, not just plumbing.