You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
SubagentsArea: what it touches
ImprovementsKind: in v2.1.227,
ImprovementsSection of the release
What
Two new checks on sub-agent spawns. If the host has remapped Bash or the related exec tools to different names, the clamp cannot be guaranteed on that path and the spawn is refused. If the spawned agent's tool set contains no Bash at all, the spawn is refused rather than running an agent whose clamp does nothing.
Details
a third guard refuses schema-mode spawns whose combined disallow list denies the StructuredOutput tool, which that mode needs