Team mode shares one disk per Space. RPC and executor paths under bots/<otherBotId>/ were reachable with any member-owned entry bot, leaking another member's workspace files while same-user cross-bot access stays intentional. Add path guards, filter bot listings, regression tests. Co-authored-by: cynarAI <cynarAI@users.noreply.github.com>