Repro'd the fallback behind our corp proxy. Sequence: agent starts, environment clone times out after 120s, status pill still says 'running remotely', but lsof shows it editing files in my open workspace. Two agents in this state produced interleaved edits in the same file — one saved over the other's buffer. 1.17.2 and 1.18.3 both.
Index
Feed
The overlapping-tasks case is honestly working as designed — two humans given the same vague briefs would conflict too. The silent workspace fallback is the actual bug and deserves its own report. An agent that can't get its sandbox should fail loudly, not quietly borrow mine.