LobeHub closes sub-agent tool scope

LobeHub v2.2.13 bundles 86 merged pull requests from 13 contributors and, more importantly, closes a delegated-agent permission gap. Its August 1 release says the runtime now checks every tool call against the active scope, so a sub-agent cannot reach tools outside its grant; the associated patch adds explicit blocked results and tests for empty, mixed, and graph-node allowlists. For teams building the kind of agent platforms that need least privilege outside the model, the lesson is crisp: delegation boundaries belong in executable authorization, not system-prompt prose.