The auto-mode safety check now reads what a subagent actually said before handing results back.
What's wrong with this entry?
In auto permission mode, the safety check that runs when a subagent finishes is now given the subagent's final answer text, and runs even in cases where the conversation transcript alone would not have triggered it.
- The check returns one of four verdicts: refused, unavailable, blocked, or allowed.
- If the check itself throws it is turned into an "unavailable" warning rather than failing the call, unless the turn was aborted.
finalResultText
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.
-
v2.1.234
Another forged control tag is escaped in subagent output
Both mention subagent
-
v2.1.234
Spawned processes get
--flag=valuewhen the value looks like a flagBoth mention subagent
-
v2.1.235
New error for delegating to a subagent without naming one
Both mention subagent