I Added Sub-Agents to ragleap-agents Without Breaking Anything — Here's How

The ragleap-agents project released version 0.5.0, adding a make_delegate_tool that lets a parent agent delegate tasks to child agents while propagating taint in both directions and enforcing hard limits such as MAX_DEPTH_CEILING and per-run budgets. The release is opt-in only, with Agent.run gaining a keyword-only tainted=False parameter that preserves existing behavior, and the project reports 208 tests, 8 live runs and zero breaking changes. Child answers are fenced so a delegated agent's output cannot become the parent's instructions, blocking prompt injection and privilege escalation from child to parent approval queue.

ragleap-agents 0.5.0: Sub-agents — 208 tests, 8 live runs, 0 breaking changes Tag: ragleap-agents-v0.5.0 332b4c0 — 2 commits to main since. TL;DR: make delegate tool lets a parent delegate to children, with taint flowing both ways and hard limits. Opt-in only. The design goal No breaking changes. Every addition is opt-in. agent.run "do X" agent.run "do X", tainted=True 828 Agent.run gained only , tainted=False — keyword-only, defaults to old behavior. from ragleap agents import make delegate tool, delegate policy, Budget, MAX DEPTH CEILING delegate = make delegate tool children={ "researcher": researcher agent, "analyst": analyst agent }, limits per root run parent = Agent tools= delegate, send message, ... result = parent.run "Research competitor pricing and draft a note" Implementation in 827, 843, 849: Why fenced? To prevent prompt injection via child answer becoming parent's instructions. This is intentional for safety. No privilege escalation from child to parent approval queue. Future: explicit child approval queue with owner confirmation on host Phase 2 permission system . from ragleap agents.context import current run def my tool x: str : ctx = current run print ctx.run id, ctx.taint return x Useful for custom logging / policy. Verified with numbers Wheel: exposes make delegate tool, delegate policy, Budget, MAX DEPTH CEILING, Agent.run ..., tainted=False Live: scripts/live delegate.py 890 Not verified — honest We ship honest limits, not marketing. Install & Provenance pip install ragleap-agents==0.5.0 Digests: Release PR 892, workflow 39653944931, 2026-10-21 18:35 UTC. Trusted publishing with Sigstore. What's next This unlocks Phase 3 of RagLeap roadmap: Code: github.com/ragleap/ragleap-core If you build multi-agent, try the delegation API and tell me where it breaks.