Security review no longer misses issues when a subagent's hand-back message is the last thing in the transcript.
What's wrong with this entry?
The reviewing model is told how to judge a subagent's final hand-back message when it is the last thing in the transcript.
- new BLOCK-rule bullet: when the final entry to evaluate is a handoff review carried in tags, that text is itself the action to judge
- prevents the model concluding there was no action just because no tool call trails it
- SUBAGENT HAND-BACK: When the final entry to evaluate is a handoff review
Strings lifted out of the shipped bundle, so the claim above can be checked against them.