agent runs the ai_agent resource as it is deployed when the run opens, agent_draft the caller’s unsaved edits of it as the editor holds them (carried in draft), and agent_version one past version named by version. The first and last are read server-side; all three are inlined into the run, so every case of a run executes one configuration: a deploy part-way through changes what the next run measures, never this one.