A run woken over an agent connection hears another owner's bot, not the user, so update_user_profile is withheld there: nothing such a conversation says can become a fact about the user. Detection moves ahead of tool selection; the reduced user block uses the same flag. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01MRtGG9ARfqqhma3t85Ro2u