the root + every transitively-reachable sub-agent, sorted by name (canonical).
the statically-enumerable worst-case reachable surface.
any per-edge scope escalations (an installable agent has none).
the root + every transitively-reachable sub-agent, sorted by name (canonical).