> protect what they see as the moat, that a model is "good at spawning sub-agents"

Yes, that is the obvious answer. I was looking for an explanation as to why and why now. Codex is open source after all. They used to not do it. Agent prompts more generally are also not encrypted, and continue to be.

This particular change just looks unintuitive to me.