The server never sees plaintext messages — it only relays encrypted payloads between clients using NaCl (Curve25519) public-key cryptography.
Sub-agent Status Sync Hardening — Unknown/out-of-order agent_status payloads now trigger canonical live sync, and Codex thread mappings are bounded with TTL+size pruning to prevent stale UI binding ...