[kingstnap]

If the orchestrator agent -> subagent prompt is encrypted then how do you even know if the orchestrator agent is doing its job?

Now one reason I could see for why they do this is because maybe they made the model "better at using subagents" by using thinking tokens for the subagent prompt instead of normal output tokens.

[embedding-shape]

Technically they still let you see all the rest of the session data in both the "orchestrator" and in the sub-agents, including all outputs and stuff. It seems for now they only encrypt the prompt from the orchestrator to the sub-agent. Still, basically make the entire sub-agent and Ultra thinking useless for me and I'm guessing a whole lot of other people, who need to be able to introspect things when it goes wrong.