- A Terminal tab a collaborator opens records them (dashboard_runs.started_by):
its pane token acts as them — and only while still shared with them —
never as the workspace owner (userFromPaneToken).
- POST /api/run always starts the lane's AI tool: a collaborator gets
ECOLLABSTART whatever the body says (shell: true no longer slips past).
- A collaborator disabled since no longer locks the share list: kept on it
(shown disabled) or taken off; only a new addition must be enabled.
- The workspace home tells a collaborator to open an existing session and
keeps Start disabled instead of failing on every submit.
nntrivi2001
54001585e2