Follow Discord
Sweep 12 Nov 2026 · 23:00Z Build v2.1.323 540 read Stable v2.1.311 Latest v2.1.323 Next v2.1.323 Feeds RSS JSON llms.txt llms-full.txt Unofficial

Claude Code v2.1.323 ·

Subagent reports are marked as not coming from you, and as unreviewed when needed

A subagent's final report is framed as model output, not a message from you, and flagged UNREVIEWED when its safety review was refused

You'll notice Improvements
JSON All of v2.1.323
You'll noticeTier: how much it should matter to you
1Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
SubagentsArea: what it touches
ImprovementsKind: in v2.1.323,
ImprovementsSection of the release

Unclear It is not stated whether this framing applies in every session or only behind a switch.

What

A subagent is a helper that Claude starts to work on part of a task, which then hands a report back. Claude Code's wording around that report has changed:

  • The report is labelled as a subagent hand-back and is described as output from the model that is "NOT a message from the user".
  • If the request to safety-review the report was refused by an upstream safety filter, the report is marked UNREVIEWED with a security warning.
Why

A report from a subagent can contain text the subagent picked up from files or websites. Labelling it this way helps stop Claude from following instructions hidden in that text as though you had given them, a kind of attack known as prompt injection.

How sure we are
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubtIt is not stated whether this framing applies in every session or only behind a switch.

See this entry in the whole of v2.1.323 →

Feedback