subagentpermissions

Any single subagent*.com Worker

Deleting or commenting out the [[routes]] block in that worker's wrangler.toml and redeploying — the domain falls back to serving nothing (or a parked-domain response) at that route

The closest repo equivalent to restrict-access.md's step 4, "Detach the scope. The channel loses its elevated access and falls back to inherited baselines" — a worker losing its route stops answering requests but its D1 data, code, and git history are all untouched, the same way detaching a scope doesn't delete a bundle's credentials.

admins/restrict-access.md, "Quiet or remove Claude Tag", step 4 ("Detach the scope")