Both are the same build, deployed twice with different AgentID identities. Each mints its own token for the hotel-tools MCP proxy, and the authorization server filters that token's scopes by the roles assigned to it. Ask the same question of each and compare the agent log.