CLAIM-2026-09-24-05
OpenAI Agents SDK 0.22.0 and 0.22.2 act as the study's negative control, rejecting the mutated operation in three of three trials each, because a serialized continuation preserves exact per-call binding across the pause and restore cycle.
Why it matters
It identifies the design property that defeats the attack, which is what a team can test its own harness against.
Sources
- arxiv2026loopjacki