Ownership properties
The child’s private capabilities are not exposed to the parent merely because the directory is nested.
Every SubAgent must explicitly assign its allowed sandbox names with
Agent(sandboxes=[...]), even when a parent already uses those names. Its authored tools then call context.sandboxes["<name>"].execute(code) or async aexecute(code). Assignments do not create model tools. Child-local sandbox names cannot duplicate an ancestor’s names. Adding files alone does not enable sandbox execution.
Discovery rules
Framework behavior
Check recursive discovery and portable graph behavior before choosing the layout.