Fetching from the wire…
Public story · 2026-08-05 · high
Model checking spanned 7.4 million states before crash tests caught concurrent resumes firing one effect twice or more.
Why now: The paper carries an arXiv identifier placing it in August 2026, testing pinned releases of all three: LangGraph 1.2.9, CrewAI 1.15.2 and pydantic-graph 1.x.
LangGraph, CrewAI and pydantic-graph each violate a six-property resume contract that researchers model-checked across 7.4 million states, per a paper posted to arXiv in August 2026.
That gap isn't abstract for anyone running these frameworks with money or customer emails behind a paused step.
The paper, "Resume Means Resume" (arXiv 2608.03836), builds an LLM-free harness that fault-injects pinned releases and checks what each framework does against its resume contract.
Of the three, LangGraph 1.2.9 racks up the most failure modes. It durably records a second resume value and never reads it back. It writes schema-invalid state to disk without raising an error. After a real SIGKILL, it re-executes work it already durably recorded. The same API skips re-execution cleanly after a plain interrupt, so it's exactly-once for interrupts and at-least-once for crashes.
CrewAI 1.15.2 re-executes completed, effect-bearing methods, directly contradicting its documented resume behavior. pydantic-graph 1.x is more honest about its limits: it simply can't resume after a crash mid-node.
None of the three frameworks share a conformance profile with each other. The failure compounds under concurrency. When multiple processes resume the same parked interrupt at once, the paper found the gated effect fires once per process instead of once total. That saturated 36 of the 40 fault-injection cells tested.
Each link below shares sources, entities, or timing with this story.
Version bumps are usually boring. This one isn't, because of what it concedes. The OpenAI Agents SDK hit v0.13 with an any-LLM adapter, breaking the assumption that you'd be running OpenAI models inside OpenAI's framework. Requesty's SDK comparison has the details: alongside t...
ECP captures agent outputs, tool invocations, and audit context uniformly, with adapters for LangChain, LlamaIndex, CrewAI, and PydanticAI so the same checks run against any of them. arXiv The authors explicitly label it work-in-progress with the method set expected to change....
LangChain, LangGraph, CrewAI, AutoGen, Microsoft Agent Framework, and Google ADK, presented at Black Hat (The Register). Insecure deserialization, SSRF, path traversal, use-after-free. That's the point: prompt-controlled content crosses into trusted framework logic, and then i...
OX Security disclosed a systemic vulnerability on June 16 in core Model Context Protocol implementations that enables arbitrary command execution, exposing API keys, internal databases, and chat histories on any vulnerable MCP host. This isn't one bad server. It's a protocol-l...
Rolling out from June 13, GA June 15, an orchestrator agent inspects registered specialist subagents, reads their descriptions and actions, and routes work using the new Atlas Reasoning Engine 3.0 while preserving context, with A2A and MCP support. Source: Salesforce The patte...
Anthropic, Vercel, Mastra, LangGraph, and OpenAI all shipped harness primitives simultaneously — external scaffolding managing persistent state, retry logic, and HITL checkpoints around stateless LLM inference. This isn't framework preference; it's architectural necessity. The...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.