Agent
gstack 1.91.87.0 tests /cso with the Agent tool your Claude Code already has
--tools Bash,Writerepairs not_attempted--tools Bash,Write,Agentindependent review runs/cso hands repair review to a subagent, but its paid test run could not start one, so every repair went unchecked. Now the test run has the Agent tool you already have.
Sandbox
Subagents in the /cso test run get three tools and no MCP servers
Subagents inherit the main run's lockdown. Only the launcher reaches Docker. Other shell commands are refused, files stay in the work folders, and a subagent's review now passes verification.
Tokens
The /cso cost receipt now counts what subagents spend
usagemain thread’s last turnmodelUsagewhole sessionToken counts covered only the main thread's final turn, so subagent work went missing. The receipt now takes the whole session. Even a killed run counts its subagents.
Baseline
/cso v2 has to be measured again under the new policy
claude-2.1.263-cso-v2new policy revisionCHANGELOG.md1.91.87.0A new tool means a new policy name. The version two baseline taken under the old one no longer counts and needs a fresh run. The changelog entry has the full list.















