ragleap-agents 0.5.0: Sub-agents — 208 tests, 8 live runs, 0 breaking changes
Tag: ragleap-agents-v0.5.0 (332b4c0) — 2 commits to main since. TL;DR: make_delegate_tool lets a parent delegate to children, with taint flowing both ways and hard limits. Opt-in only.
The design goal
No breaking changes. Every addition is opt-in.
agent.run("do X")
agent.run("do X", tainted=True) # #828
Agent.run gained only *, tainted=False — keyword-only, defaults to old behavior.
from ragleap_agents import make_delegate_tool, delegate_policy, Budget, MAX_DEPTH_CEILING
delegate = make_delegate_tool(
children={
"researcher": researcher_agent,
"analyst": analyst_agent
},
)
parent = Agent(tools=[delegate, send_message, ...])
result = parent.run("Research competitor pricing and draft a note")
Implementation in #827, #843, #849:
Why fenced? To prevent prompt injection via child answer becoming parent's instructions.
This is intentional for safety. No privilege escalation from child to parent approval queue.
Future: explicit child approval queue with owner confirmation on host (Phase 2 permission system).
from ragleap_agents.context import current_run
def my_tool(x: str):
ctx = current_run()
print(ctx.run_id, ctx.taint)
return x
Useful for custom logging / policy.
Verified (with numbers) Wheel: exposes make_delegate_tool, delegate_policy, Budget, MAX_DEPTH_CEILING, Agent.run(..., tainted=False)
Live: scripts/live_delegate.py #890
Not verified — honest
We ship honest limits, not marketing.
Install & Provenance
pip install ragleap-agents==0.5.0 Digests:
Release PR #892, workflow 39653944931, 2026-10-21 18:35 UTC. Trusted publishing with Sigstore.
What's next
This unlocks Phase 3 of RagLeap roadmap:
Code: github.com/ragleap/ragleap-core
If you build multi-agent, try the delegation API and tell me where it breaks.