Under the hood
Useful2 Signal3
The rules that neutralise control tags in subagent output are now shared with a new assistant-output scanner.
What's wrong with this entry?
Anonymous. No account, no email.
What
The rules that neutralize control tags and permission-escalation phrasing in subagent output are now one shared list, reused with fresh pattern copies by a new scanner for assistant output. Subagent behaviour is unchanged.
Details
- The escalation set covers settings JSON,
bypassPermissions,--dangerously-skip-permissionsand permission allow/deny phrasing.
Evidence
escalation-pattern
Strings lifted out of the shipped bundle, so the claim above can be checked against them.