You'll notice
Task notifications now warn when relayed Artifact content may not be trustworthy instructions
What
When a subagent (a helper agent spawned to do a sub-task) reports back a result that contains Artifact content (a document or piece of output that other people, not just the assistant, may have written), the notification now prepends a warning stating the content may have been written by people other than the assistant and should be treated as data, not as instructions to follow.
Why
This reduces the risk of the assistant mistakenly treating text embedded in a relayed artifact as a command it should obey, since that text could have come from another person rather than being a trusted instruction.