All of a user's Bots share one cloud computer, so files, browser sessions, logins and command-line credentials are reachable across the whole roster; separate Bots are not a security boundary.

NotesStated by eight independent sources, all tracing to the same official warning. Kumar Gauraw's phrasing is the sharpest: Separate profiles, conversations, screens, and role memories are routing and context boundaries, not confidentiality boundaries.

do not create a Finance Bot and a Marketing Bot and assume their names isolate access.