Evidence record / agent-zero

A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.

2026-10-13-agent-zero-the-retained-parallel-secret-fix-shares-the-worker-argument-dictionary

The retained parallel secret fix shares the worker argument dictionary. Parallel workers previously held a shallow copy before pre-execution hooks replaced secret placeholders in the original dictionary. Tools reading self.args could therefore send literal aliases and fail authentication. The retained fix assigns tool.args = tool_args. aa8e1c042a is an ancestor of stable, but its recursive implementation is not retained. Issue #1838 is still open; this record does not establish why. The confirmed failure mechanism leaves placeholders unresolved; this record does not demonstrate secret-value disclosure.

Channel: tagged-release. Half: defect. Date: 2026-09-23 (first stable; PR merged 2026-09-18).

Operator consequence: Use v2.13 or later for this parallel-call path, with v2.14 the current recommendation. Re-test an authenticated parallel operation without logging credentials. Inspect the file at the tag when tracking a fix: ancestry can survive a revert. Do not carry forward the earlier profile’s unresolved leak direction or treat the reverted recursive patch as proof that arbitrary nested substitutions now work.

Receipt

Finding metadata

Run: 2026-10-13-profile-refresh-2026-09-21_2026-10-13-frontier-v0

Finding ID: 2026-10-13-agent-zero-the-retained-parallel-secret-fix-shares-the-worker-argument-dictionary

Profile citations

  • Agent Zero / claim / parallel-argument-dictionary-fix

Source links

Primary links, including exact changelog lines when available.

Versioned source: run artifact