Subagent permission scoping became the shared design problem across terminal agents.

Codex widened what a child thread can ask for and narrowed what it can do, both in 48 hours. Qwen Code v0.24.1 added an explicit per-subagent tool allowlist on agent() (#12051) alongside requiring explicit trust for undecided workspaces. Both projects are moving the same way: the permission set is becoming a dispatch-time argument instead of something implicit in the prompt. If you're building multi-agent coordination on either CLI, start passing it explicitly.