Agent runs that can actually write, and cards that stop claiming they are busy
Actions that are authorized to change files can now do so when they run against your own project checkout. Until now the permission profile handed to the agent was decided by whether the run used an isolated worktree, not by whether the action was allowed to make changes. Turning isolation off therefore produced a run that had been confirmed as a mutating action but was given a read-only profile, so every attempt to write a file was refused, and because these runs have no terminal for anyone to answer a prompt at, the agent discovered this only after working through the whole task. It reported that it was blocked and left nothing behind.
Write permission is now decided by the action itself and scoped by where the run executes. A propose action still cannot change files, and on the providers that can enforce that it is now genuinely enforced rather than merely requested in the instructions. An apply action running in your own checkout gets file-edit access limited to that folder. An apply action in an isolated worktree keeps the broader profile it needs to commit unattended, unchanged. The launch dialog states which of the three you are about to start, in plain words, before you confirm, and a run that would write into a folder that no longer exists is refused up front with the setting to fix, instead of failing minutes later.
Separately, the green "working" badge on a task card now means an agent is working on it right now. It used to be derived from the assignee alone, so a card kept pulsing long after its run had finished, and moving the task to Review and back made the badge disappear and return. The badge is now driven by live signals that expire on their own, so it clears promptly when a run succeeds, fails, or is stopped, and it cannot survive a crash or a closed app. A task an agent still owns but is not actively working shows a quiet "owned" badge instead, so you can still see who holds it without being told work is in progress that is not.
The Telemetry charts also gained proper tooltips. Hovering or focusing any data point now shows its date or label with exact figures, in the app's own theme rather than an operating system tooltip. The reported-tokens chart breaks each day down by agent, using full numbers rather than the rounded axis format, so two agents a few hundred tokens apart are still distinguishable, and it keeps each agent's legend colour beside its value. Days nobody reported say so rather than showing a zero, and an agent that was silent on a given day is shown as unreported rather than as having used nothing. Every chart is reachable by keyboard: each is a single tab stop, arrow keys move between points, and Escape dismisses.