Writes to the user and agent notes already needed a paired sender, but
the turn start read them for every sender. An allowlisted sender who was
not paired, or anyone in an open channel, got the owner's notes and the
agent's notes in the prompt, in context_read, and in the scopes asked
from an add-on that serves the notes.
A messaging chat now reads the user and agent notes and the agent
profile only when the sender is paired. The notes of the conversation
stay for everyone. A turn with no known sender counts as unpaired. The
access view and its preview get a notes.read entry per kind of sender
that is refused with the existing sender_needs_pairing code and its
plain text.
Assisted-by: Claude:claude-sonnet-5-5
Ettore Di Giacinto
ed8447e539