Spawned agents are told not to run git commands (team lead handles those) and to call db/connectors scripts with bare commands only — no python3 prefix or command chaining — so they match the permission whitelist. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>