What
In auto permission mode, the text a workflow subagent returns is now run through a check that can prepend a warning to it and record that warning in the run log. If the check errors or is cancelled, the text is returned unchanged.
Evidence
subagentType: "workflow-subagent"
Strings lifted out of the shipped bundle, so the claim above can be checked against them.