Function list_runs_for_agent 

pub fn list_runs_for_agent(
    config: &Config,
    job_id: &str,
    agent_alias: &str,
    limit: usize,
) -> Result<Vec<CronRun>, Error>

Owner-scoped run-history read: the ownership predicate rides the SAME query that returns the rows, so authorization and retrieval can never straddle a concurrent rename or owner re-point — the row set is decided atomically by one statement. A row belongs to the caller when its durable cleanup owner matches; a legacy row recorded before ownership existed belongs to whoever currently owns the live job.