Team mode stores one disk per Space. computer/readFile and computer/files only verified the caller owns the entry bot; an explicit bots/<otherBotId>/… path let one member read another member's workspace. Wire existing path guards into the API router and executor file/shell tools, and add a shared-Space authorization regression test. Co-authored-by: cynarAI <cynarAI@users.noreply.github.com>