
- Nine core tools (file reading, code search, skills, sub-agents, plan mode, and the Paradime docs tools) are now always available: an allowlist no longer needs to name them, and a denylist cannot remove them. Previously an allowlist could strand an agent in plan mode or silently disable Agent Skills.
- Sub-agents now inherit the parent agentβs tool gating, so a tightly allowlisted agent can no longer reach extra tools by delegating.