• external CRM synchronization is identified without granting a human ownership override
• ordinary non-sync writes retain the distinct human actor needed for ownership checks

Changed code: updateConversationFieldsTool.ts.

• a genuine in-app chat context carries the human identity needed for its writable field verdict
• automation and chat-descended subagents remain blocked by the same field restrictions instead of inheriting human write authority

Changed code: fetchConversationTool.ts.

• the chat agent's own run carries actingHumanUserId while preserving the attributed userId
• a run marked withoutHumanAuthority keeps user attribution but cannot carry the human field-write override
• automation and external MCP runs retain user attribution but cannot carry human field-write authority

Changed code: surface-context.ts.