shared memory without isolation drops agent context when tools write to unpartitioned tables.
Cursor clobbers what Claude Code stored at the shared persistence layer.
enforcing per-tool scopes in SQLite with sqlite-vec guarantees isolated write lanes.