You'll notice
Resuming a background teammate now requires folder trust before restoring its custom agent setup
What
When resuming an in-process teammate (a background agent running as part of a multi-agent team), Claude Code now checks whether the folder that its custom agent definition came from is trusted. If it isn't, the custom definition is no longer restored: the teammate falls back to only the team-essential tools and no custom instructions, and an error is logged (agent_type_untrusted) explaining that the user needs to run Claude Code in that folder and accept the trust dialog.
Why
This prevents a custom agent definition from an untrusted folder from being silently restored with its full instructions and tools when a teammate is resumed.