diff --git a/agent/chat.go b/agent/chat.go
index 05128b3..ae52ee8 100644
--- a/agent/chat.go
+++ b/agent/chat.go
@@ -160,9 +160,6 @@ func (c *ChatAgent) Chat(ctx context.Context, agentKey, sessionID, message strin
 		Settlement:   wrapupSettlement(agentKey, nil),
 		NonStreaming: c.nonStreaming(), // when this profile selects non-streaming, use Provider.Complete
 		MaxTokens:    c.maxTokens(),    // 0 = send no cap, the server's default decides
-
-		// Frame tool results as untrusted data (nonce-tagged); see harness/untrusted.go.
-		UntrustedOutputBoundary: true,
 	}
 	if c.guard != nil {
 		opts.Hooks = c.guard.Hooks()
diff --git a/agent/mainagent.go b/agent/mainagent.go
index b05d60c..94585fb 100644
--- a/agent/mainagent.go
+++ b/agent/mainagent.go
@@ -169,9 +169,6 @@ func (m *MainAgent) Chat(ctx context.Context, taskID int64, mainSeg int, as *db.
 		Settlement:   wrapupSettlement("mainagent", nil),
 		NonStreaming: m.nonStreaming(), // when this profile selects non-streaming, use Provider.Complete
 		MaxTokens:    m.maxTokens(),    // 0 = send no cap, the server's default decides
-
-		// Frame tool results as untrusted data (nonce-tagged); see harness/untrusted.go.
-		UntrustedOutputBoundary: true,
 	}
 	if m.tx != nil { // persist raw human↔AI conversation; one accumulating file per segment
 		opts.Transcript = m.tx
diff --git a/agent/planner.go b/agent/planner.go
index 637e04f..7f53f80 100644
--- a/agent/planner.go
+++ b/agent/planner.go
@@ -457,9 +457,6 @@ func (p *Planner) Plan(ctx context.Context, taskID int64, as *db.AssetStore, ts
 		Settlement:   settle,
 		NonStreaming: p.nonStreaming(), // when this profile selects non-streaming, use Provider.Complete
 		MaxTokens:    p.maxTokens(),    // 0 = send no cap; the server default decides
-
-		// Frame tool results as untrusted data (nonce-tagged); see harness/untrusted.go.
-		UntrustedOutputBoundary: true,
 	}
 	if p.tx != nil { // persist raw LLM conversation; one accumulating file per task's planner
 		opts.Transcript = p.tx
diff --git a/agent/worker.go b/agent/worker.go
index 77a0842..93b5863 100644
--- a/agent/worker.go
+++ b/agent/worker.go
@@ -526,9 +526,6 @@ func (w *Worker) execute(ctx context.Context, name string, taskID int64, as *db.
 		Todos:         actool.NewTodoStore(),                  // session-level scratch todos (TodoWrite), pure planning, discarded on exit
 		NonStreaming:  w.nonStreaming(),                       // when this profile selects non-streaming, use Provider.Complete
 		MaxTokens:     w.maxTokens(),                          // 0 = send no cap; the server default decides
-
-		// Frame tool results as untrusted data (nonce-tagged); see harness/untrusted.go.
-		UntrustedOutputBoundary: true,
 	}
 	if hooks != nil { // typed-nil guard: only set when concrete (avoids harness panic)
 		opts.Hooks = hooks