Kindrisk
NotesCorroborated by the official docs overview (isolation is per user, not per Bot) and by a Cursor forum thread titled 'Bots are not a security boundary'.
separate bots share a single cloud computer environment, so they don't create security boundaries