You'll notice
Useful3 Signal4
Coordinator messages forwarded to worker agents are labelled and escaped so they can't fake markup.
What's wrong with this entry?
Anonymous. No account, no email.
What
When a coordinator session forwards a message to a worker agent, the message is now wrapped in a preamble that says whether the text is a copied user message or the coordinator speaking, and the body is escaped so a message cannot fake relay markup.
Details
- Only well-formed relay, cited and note tag lines survive unescaped; a line carrying a duplicate attribute is disqualified and escaped.
- Unicode characters that normalize to angle brackets are escaped too, closing the look-alike route.
- Recognised attributes on those lines are
id|author|name|session|at|where|thread|edited_at|truncated|attachments. - A
serverEnvelopeoption signals that the server handles the wrapping instead.
Evidence
id|author|name|session|at|where|thread|edited_at|truncated|attachments
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.
-
v2.1.235
Question options with identical text are no longer confused with each other
Both mention agent
-
v2.1.236
Teammate messages whose summary swallowed the body are split back apart
Both mention agent
-
v2.1.238
Claude is told to stay in a worktree even when it did not create one
Both mention agent