The claude runner (internal/core/runner/claude.go) copies the external tool's reported model into the route record, which reaches abcd implement record --json raw, so a tool reporting a model name with a control or bidi rune puts it on the stream.

The claude runner (internal/core/runner/claude.go) copies the external tool's reported model into the route record, which reaches abcd implement record --json raw, so a tool reporting a model name with a control or bidi rune puts it on the stream.

Security scope (abcd-fixes-what-it-adds): the route does not exist without abcd. The text is echoed by abcd's own --json surface, so abcd added the route and fixes it at the boundary the text enters by; a fix changes nothing about how the repository works.