Nothing stops a project from running on the wrong provider instance

[xxfast]

I run two Claude instances on the same machine: a personal subscription and a work one on AWS Bedrock, each with its own homePath. Work code must never go through the personal account, and the other way round.

Right now nothing stops that. The model picker offers every enabled provider instance in every project, so one misclick sends a work repo to the wrong account. I only find out after the thread has already started.

What I've tried:

• Per-project default model: only a default, an explicit pick in the draft overrides it.
• Disabling a provider instance: machine-wide, so it kills it for the projects that should use it.
• Telling the agent to refuse in AGENTS.md: the code has already gone to the wrong account by then.