What
When a coordinator session forwards a message to a worker agent, the message is now wrapped in a preamble that says whether the text is a copied user message or the coordinator speaking, and the body is escaped so a message cannot fake relay markup.
Details
- Only well-formed relay, cited and note tag lines survive unescaped; a line carrying a duplicate attribute is disqualified and escaped.
- Unicode characters that normalize to angle brackets are escaped too, closing the look-alike route.
- Recognised attributes on those lines are
id|author|name|session|at|where|thread|edited_at|truncated|attachments. - A
serverEnvelopeoption signals that the server handles the wrapping instead.
Evidence
id|author|name|session|at|where|thread|edited_at|truncated|attachments
Strings lifted out of the shipped bundle, so the claim above can be checked against them.