Two agents, one shared knowledge tree. Ownership decides what they may write. Isolation decides where.
A file lock on main only helps on one machine. Worktree plus pull request is the protocol that survives cloud bots and long sessions.
main