DL-628

Agent repository scoping, A (Matt, RIG-5942): a spawn keeps the full copy of the parent’s rows by default (B), and SpawnPeerRequest gains an optional, presence-aware repositories subset that copies only the listed repositories the caller holds (what counts as held is the record’s OQ-1); unset means the full copy and a present empty list copies none; entries are normalised exact org/name, a repository the caller does not hold fails the spawn with PERMISSION_DENIED and leaves no account, the subset applies only to a new handle, and the field is grant scoping, not a clone target, so DL-090 stands

Status: Active (Matt, 2026-10-19)

Record: ../../server/compass-agent-repo-scoping/design.md#a-spawn-time-subset