OpenHands: independent OAuthlib reachability review of draft PR 535 at its corrected head 6a7b1646 (candidate lock 383ccc5b), artifacts only

[seathatflowsinourveins]

Scope

• What this PR changes: publishes, as sanitized artifacts, the independent OAuthlib reachability review of draft PR Qualify native runtime recipes and repair Sol routing and grader FTP dependency #535 at the immutable head 6a7b16465e50689334d9dd15ff4fed99a9cd7485 (base f03f41c7f3601532b8635f8f112a3d2731454375) for its candidate lock, sha256 383ccc5b87702174e471732872f002f1621186710402d048acc2b1910306e106 (OpenHands SDK 1.50.0, Linux x86_64, CPython 3.13.15), the corrected head that the Codex coordinator asked to have reviewed after the corrections of the earlier record (OpenHands: independent OAuthlib reachability review of draft PR 535 (head bb3d00dc, candidate lock 8d257833), artifacts only #536, head bb3d00dc, historical). It verifies those two corrections. Contents: head and lock identity, the reproduced hashed installs, an independent metadata and raw-text sweep, the advisory files against the candidate's recorded hashes, OSV-Scanner 2.6.0 in CI form and the empty-config control, the closure difference against the PR base's lock, what constrains the three lowered packages, the commands as typed, the scripts as run, receipt.json (claims, findings, controls, residuals).
• Not in this PR: any approval of a merge, an exception, a pin or a promotion; any change to Qualify native runtime recipes and repair Sol routing and grader FTP dependency #535 or to the live OpenHands lock, pins, tests or OSV configuration; the joint oauthlib 4.0.0 / PyJWT 2.15.1 relock (issue Relock OpenHands onto oauthlib 4.0.0 / PyJWT 2.15.1 by 2026-10-08 (osv ignores from #517 expire 2026-10-13) #518, no earlier than 2026-10-05T18:40:43Z). It is a scoped proof for that exact head and lock; any later change of the closure needs its own review.
• Base commit: 8edc604e560f77c9d0952a6497a2a0bca36a8440 (main after OpenHands: independent OAuthlib reachability review of draft PR 535 (head bb3d00dc, candidate lock 8d257833), artifacts only #536).
• Lane: lane:foundation. The only file outside the new directory is manifests/evidence.json (registration through the hot-file protocol, docs/lanes.md); no shared file's text changes.
• Owned paths touched: evidence/artifacts/openhands-oauthlib-review-535-head6a7b16-20260930/, manifests/evidence.json.

SOTA sources

• OSV-Scanner v2.6.0, binary sha256 ca69b3d3cd08f889a49dc0a383122f71cc528b83803671df5fd874d97485b108 (the pin in .github/workflows/security-scan.yml), advisories GHSA-hj66-6f7g-4r5v and GHSA-xpv3-w29h-x7cv (oauthlib 3.3.1, fixed in 4.0.0).
• oauthlib 3.3.1 source files named in the existing exception reasons: oauth2/rfc6749/endpoints/revocation.py and oauth2/rfc6749/grant_types/authorization_code.py, compared byte for byte with the hashes in the candidate's own callers output.
• The candidate's recorded install commands (uv pip install --require-hashes, uv 0.12.17) and the maintained callers-scan method it adapts, blueprints/runtime-workers/openhands/evidence/relock-2026-09-30.jwt-callers.py.txt (PyJWT relock record: redis decode search (D1), timing range from the outputs (D2), honest output labels #529).

Evidence-class table

Claim	Evidence class	Command / receipt
The head, the lock hash, pins.json, the exact-lock test entry and the evidence file agree; the OSV config gains only comment lines	source_review	receipt W1; checks/pr535-identity.txt
The candidate's hashed installs reproduce in a fresh environment (exit 0, pip check clean)	local_integration	W2; checks/install-log.txt
No code in the closure selects or calls the two advisories' server-side paths; requests-oauthlib is the only consumer (client side)	local_integration (static; not a runtime trace)	W3; checks/independent-scan.txt
The four advisory files and the Python 2 helper match the candidate's recorded hashes	local_integration	W4; checks/advisory-files-and-helper.txt
OSV 2.6.0: CI form exit 0; empty-config control exit 1 with exactly the two ids; base lock the same two	local_integration	W5; checks/osv-*
Correction A: against the base's lock only the two SDK wheels change (159 macOS packages removed, nothing added or lowered)	local_integration	W6; checks/closure-diff-base-vs-head.txt
Correction B: Linux-only scope stated; the lock is consumed only inside the pinned linux/amd64 image; no macOS handling	source_review	W7; checks/lock-consumers-and-platform.txt

Local commands run

$ python3 scripts/validate.py
{"components": 69, "hashed_files": 8515, "profiles": 4, "receipts": 176, "status": "passed"}        exit 0
$ python3 scripts/evidence_manifest.py --check
{"files": 8515, "status": "passed"}                                                                  exit 0
$ python3 -B -m unittest tests.test_osv_lockfile_coverage
Ran 30 tests ... OK                                                                                  exit 0

The full unittest discovery runs in CI's validate check.

Decision record

None: this is a review record. There is no blocking finding for the OAuthlib reachability scope; the one housekeeping note (the test comment still says the reviewer's review is pending) is in receipt.json.

Host evidence

This PR adds an artifact directory under evidence/artifacts/, not evidence/hosts/.

• scripts/validate.py (exit 0 above) validates the registered artifacts.
• Independent review: the reviewer is the owner of Relock OpenHands onto oauthlib 4.0.0 / PyJWT 2.15.1 by 2026-10-08 (osv ignores from #517 expire 2026-10-13) #518; the record is the review itself, and the reproduction inputs are immutable git objects.
• No platform_status change.

Checklist

• No workflows or Actions are changed.
• No secrets are printed, logged or committed.
• No new paid hosting, subscription or billing surface.
• Peer-owned untracked files and worktrees were preserved.

🤖 Generated with Claude Code