Codex starts encrypting sub-agent prompts 8 days ago
This is to pass cache keys through the client to improve token usage. Obviously not a distillation defense as you can simply bypass this kind of thing trivially by using a different subtask tool.
https://mikesoylu.com