Add Orchestrator/delegate mode such that the main agent is strictly read-only

What variant of Codex are you using?

CLI

What feature would you like to see?

Main agent has the tendency to do everything by itself, especially after context fills up, even explicit instructions and agents.md do not prevent the behaviour.

It is observed that when main-agent delegates effectively, tasks are done better and more efficiently, however, it is not straightforward in codex to enforce this behaviour because subagents inherit permissions from main agent. For claude code, hooks can be used with agent_id to identify subagent, but in codex there is no such arg apparently.

Additional information

_No response_