The selected workspace remains fixed by the authenticated request and permission checks. Its editable name is not inserted into the system instruction, so workspace content cannot be treated as authority over assistant tools.
Keep workspace names out of assistant instructions
Workspace names are no longer inserted into the Workspace assistant system instructions.