mirror of
https://github.com/deepseek-ai/deepseek-harness.git
synced 2026-11-10 04:27:42 +08:00
Chinesezjc
699f1a8dc1
A delegated child could arm reminders through the tools its preset mount passes down, even though delivery can never reach a child's Session. The refusal now reads the delegation-depth accounting the delegation cap itself enforces, and the shipped presets deny the four tools to children outright: - `reminderTargetRefusal` refuses when `delegationDepthOf(agent)` is above zero, or when the Session is subagent-owned without a depth record. - `standard`, `cordis`, and `ptc` set `toolFilter.deny` on both delegation rows, so the four tools leave a child's prompt and reject execution. `create` still rejects and `update` still returns the non-mutating refusal.
