diff --git a/nix/templates/harness-base.nix b/nix/templates/harness-base.nix
index b7fafaa5..491fb360 100644
--- a/nix/templates/harness-base.nix
+++ b/nix/templates/harness-base.nix
@@ -738,6 +738,15 @@ in
         [ -d "$harnessDir" ] || continue
         chown -hR "$userName:$userName" "$harnessDir" 2>/dev/null || true
       done
+      # The proposed-config repo is RW-mounted into the editing (parent/
+      # manager) agent and owned by it; hive-c0re only pulls from it. Heal
+      # it to this user too — same as state/harness. In an agent's own
+      # container its config is RO-mounted, so the chown there just fails
+      # harmlessly (|| true).
+      for configDir in /agents/*/config; do
+        [ -d "$configDir" ] || continue
+        chown -hR "$userName:$userName" "$configDir" 2>/dev/null || true
+      done
       if [ -d "$homeDir/.claude" ]; then
         chown -hR "$userName:$userName" "$homeDir/.claude" 2>/dev/null || true
       fi