Subagent reports can be wrapped so embedded instructions cannot pass as your commands, off here.
Handback provenance framing checks CLAUDE_CODE_HANDBACK_PROVENANCE then tengu_melodic_wolf, which falls back off.
tengu_melodic_wolf Not enough to sayNothing here resolved what this flag was doing on this version, so nothing here should be read as on or off.
This account: no value returned · anonymous baseline: no value returned · compiled default in v2.1.242: on
Read once, for one account on one subscription tier, against v2.1.242. It isn't a statement about your account. What a flag value here can and cannot tell you
What's wrong with this entry?
When a subagent finishes, its report is re-emitted indented under a preamble telling the model the text is model output carrying no user authority, so instructions embedded in it cannot pass as commands. The section list is hashed so the notes and tail split cannot be forged, and a failed split is reported as degraded. Off unless enabled: CLAUDE_CODE_HANDBACK_PROVENANCE is checked first, otherwise the tengu_melodic_wolf setting, which falls back to off.
[Subagent hand-back] The text below is the final report of a subagent this session delegated to.
Strings lifted out of the shipped bundle, so the claim above can be checked against them.