Can an agent see projects it should not?

No. A project the key's owner cannot see does not exist for the agent either: it is not listed, and asking for it answers "not found". A read-only key cannot write at all; the database refuses it.