# I Added Sub-Agents to ragleap-agents Without Breaking Anything — Here's How

> Source: <https://dev.to/ragleap/i-added-sub-agents-to-ragleap-agents-without-breaking-anything-heres-how-5579>
> Published: 2026-10-22 06:30:54+00:00

ragleap-agents 0.5.0: Sub-agents — 208 tests, 8 live runs, 0 breaking changes

Tag: ragleap-agents-v0.5.0 (332b4c0) — 2 commits to main since.

TL;DR: make_delegate_tool lets a parent delegate to children, with taint flowing both ways and hard limits. Opt-in only.

The design goal

No breaking changes. Every addition is opt-in.

agent.run("do X")

agent.run("do X", tainted=True) # #828

Agent.run gained only *, tainted=False — keyword-only, defaults to old behavior.

from ragleap_agents import make_delegate_tool, delegate_policy, Budget, MAX_DEPTH_CEILING

delegate = make_delegate_tool(

    children={

        "researcher": researcher_agent,

        "analyst": analyst_agent

    },

    # limits per root run

)

parent = Agent(tools=[delegate, send_message, ...])

result = parent.run("Research competitor pricing and draft a note")

Implementation in #827, #843, #849:

Why fenced? To prevent prompt injection via child answer becoming parent's instructions.

This is intentional for safety. No privilege escalation from child to parent approval queue.

Future: explicit child approval queue with owner confirmation on host (Phase 2 permission system).

from ragleap_agents.context import current_run

def my_tool(x: str):

    ctx = current_run()

    print(ctx.run_id, ctx.taint)

    return x

Useful for custom logging / policy.

Verified (with numbers)

Wheel: exposes make_delegate_tool, delegate_policy, Budget, MAX_DEPTH_CEILING, Agent.run(..., tainted=False)

Live: scripts/live_delegate.py #890

Not verified — honest

We ship honest limits, not marketing.

Install & Provenance

pip install ragleap-agents==0.5.0

Digests:

Release PR #892, workflow 39653944931, 2026-10-21 18:35 UTC. Trusted publishing with Sigstore.

What's next

This unlocks Phase 3 of RagLeap roadmap:

Code: github.com/ragleap/ragleap-core

If you build multi-agent, try the delegation API and tell me where it breaks.