Problem
Agent-controlled text goes straight into rich markup: a description like run [bold]pwned[/bold] test renders with injected styling, and finding messages/evidence plus show output have the same flaw.
Where
agentrace/cli.py (console.print with unescaped r.description, f.message, f.evidence, prompt/result).
Acceptance
Add a failing test first asserting cmd_check output for a bracketed description shows literal brackets rather than styled text. Then fix.
Problem
Agent-controlled text goes straight into rich markup: a description like
run [bold]pwned[/bold] testrenders with injected styling, and finding messages/evidence plusshowoutput have the same flaw.Where
agentrace/cli.py(console.printwith unescapedr.description,f.message,f.evidence, prompt/result).Acceptance
Add a failing test first asserting
cmd_checkoutput for a bracketed description shows literal brackets rather than styled text. Then fix.