# D+ ordinary-document packet

Packet version: C-paper-1 · 17 October 2026

Scope: Six audited development assertions across three seed families. This packet contains no executed evaluation results. It is open-book development material, not an unseen holdout. Sources were checked by the Group B evidence audit on 17 October 2026; this packet does not claim a second independent source verification. Links are references, not authorization to act. No live execution, external communication or security-control change is permitted by this packet.

## C-01 — SDK repair record

PR #4654 was merged on 26 August 2026; its inspected repair publishes completed guardrail results into durable state before a fallible append. Evidence status: merged patch inspected; independent repair execution not performed. Context: SDK-FAMILY-01; repaired commit 3603dc92c90d0d9aebf382e6c0e7dbc6b22d430a changes two runner source files and one regression-test file. Source: [PR #4654](https://github.com/openai/openai-agents-python/pull/4654), description; [exact repair commit](https://github.com/openai/openai-agents-python/commit/3603dc92c90d0d9aebf382e6c0e7dbc6b22d430a), source diff. Use status: attributed summary and links; MIT code license verified at repaired commit, but dependency/fixture rights and separate issue-prose terms still require review before packaging.

## C-02 — SDK test evidence

The inspected regression test contains four selected combinations covering streaming/non-streaming recovery, live/JSON state and before-commit/commit-then-raise failures; these are not a complete factorial or independent problem families. Evidence status: test inspected and upstream passing verification reported; individual CI logs not inspected and independent tests not run in this research. Context: SDK-FAMILY-01; assertions include approval identities, history, public/durable guardrail results, hooks and model-call counts; one pre-approval row expects two input checks and one output check. Source: [exact repair commit](https://github.com/openai/openai-agents-python/commit/3603dc92c90d0d9aebf382e6c0e7dbc6b22d430a), regression-test diff; [PR #4654](https://github.com/openai/openai-agents-python/pull/4654), verification description. Use status: attributed summary and links; copying the test requires preserving applicable MIT notices and checking fixture/dependency origins.

## C-03 — SDK comparison provenance

The source-level comparison pair is parent 18de65134083ee8cbdb84ae30a34c1f30ef4cb86 versus repair 3603dc92c90d0d9aebf382e6c0e7dbc6b22d430a; the parent contains prerequisite #4650 merge a624e17956bfeac0599aa3f6b12a97a0ea689fc6. Evidence status: GitHub compare metadata verified prerequisite-to-parent ahead by 3 and behind by 0, and parent-to-repair ahead by 1 and behind by 0; runtime failure and repair remain unobserved here. Context: SDK-FAMILY-01; the intended future check must apply the same protected oracle to both source versions rather than compare their different test suites. Source: [prerequisite comparison](https://github.com/openai/openai-agents-python/compare/a624e17956bfeac0599aa3f6b12a97a0ea689fc6...18de65134083ee8cbdb84ae30a34c1f30ef4cb86), commit/merge-base metadata; [repair comparison](https://github.com/openai/openai-agents-python/compare/18de65134083ee8cbdb84ae30a34c1f30ef4cb86...3603dc92c90d0d9aebf382e6c0e7dbc6b22d430a), commit and file-change metadata. Use status: attributed summary and links; no copied fixture, installation or execution is authorized by this source pair.

## C-04 — SDK release boundary

The repaired commit's pyproject.toml still declares version 0.22.0, so that version string alone cannot distinguish the candidate old and repaired source; the first fixed release remains unverified. Evidence status: source version declaration inspected; release mapping unknown, not evidence that no fixed release exists. Context: SDK-FAMILY-01; retain full commit and distribution provenance for any future claim or experiment. Source: [pyproject.toml at repaired commit](https://github.com/openai/openai-agents-python/blob/3603dc92c90d0d9aebf382e6c0e7dbc6b22d430a/pyproject.toml), version declaration. Use status: attributed summary and link; no release recommendation is established by this packet.

## C-05 — Microsoft guidance and applicability

Microsoft guidance identifies a renamed site or folder as one possible cause of a broken agent-level SharePoint knowledge link and prescribes obtaining an administrator-authorized link or appropriate access and updating the knowledge source. Evidence status: conditional vendor guidance; no observed customer before/after outcome is recorded in this case. Context: MS-GUIDANCE-FAMILY-01; confirm the actual cause and existing authority before applying guidance; the rendered page reports 6 August 2026 while source frontmatter reports ms.date 5 August 2026 and ai-usage: ai-assisted; source blob 554f2645c69e535554a2462714d99ad84ff5cc5b is not a repository commit or product version. Source: [Microsoft Learn article](https://learn.microsoft.com/en-us/troubleshoot/power-platform/copilot-studio/knowledge/sharepoint-no-response), “The SharePoint source link is broken after a rename”; [article source](https://github.com/MicrosoftDocs/SupportArticles-docs/blob/main/support/power-platform/copilot-studio/knowledge/sharepoint-no-response.md), matching section and frontmatter. Use status: attributed summary and links; source repository CC BY 4.0 license verified, but article commit and exclusions/embedded assets require review before redistribution; do not weaken permissions, protection or moderation automatically.

## C-06 — Incident evidence and dependence

The investigator report and related YouTube commentary concern the same incident; the report does not establish a demonstrated safe repair, and investigators report no evidence of real-time coordination. Evidence status: attributed incident evidence plus dependent commentary; no independent incident reproduction or verified remedy in this research. Context: INCIDENT-FAMILY-01; describe a fleet rather than asserting a coordinated swarm; preserve uncertainty about model attribution; a report that a temporary evaluation concluded does not establish remediation. Source: [incident investigation](https://swarmcha.se/posts/chinese-agent-fleet-full-report), Introduction, Technical Overview, Tencent's Actions and finding 8; [related commentary](https://www.youtube.com/watch?v=rb4CTZjHCNg), same-event relationship inherited from the prior transcript review, without a new audiovisual review in the Group B audit. Use status: attributed summary and links only; reuse rights for incident/video artifacts are not established; do not copy raw logs, credentials, payloads, inboxes or transcripts, and do not replay against live targets.