@@ -44,6 +44,15 @@ Move the file and edit `Status:` in the same commit. Required sections and the t
 
 `scripts/check-repo-health.sh` enforces ADR naming, the `Status:`/directory match, and that no slug dangles.
 
+## Standard E2B behavior work
+
+The active [proposed contract](notes/proposed/architecture/2026-10-16-e2b-behavior-contract.md) defines the pinned Alibaba migration surface and project extension boundary. Verification evidence is point-in-time; read the latest E2B run before reporting completion.
+
+The [provider-boundary verification](evidence/verify/2026-10-16-provider-boundary-review.md) distinguishes standard E2B clients, provider adapters and pending typed management registration.
+
+The multi-agent review proposes [provider context and availability](notes/proposed/architecture/2026-10-16-provider-context-and-availability.md). Standard protocol clients remain separate from the provider API; CLI operation unification is owned by its companion repository.
+
+See the [multi-agent SDK verification](evidence/verify/2026-10-16-multi-agent-provider-review.md) for explicit-provider regressions, source-port maintenance gaps and remaining acceptance gates.
 - [Bounded MCP binary files](notes/implemented/feature/2026-10-16-mcp-binary-files.md) · [verification](evidence/verify/2026-10-16-mcp-binary-files.md)
 
 - [Provider portability and updates](notes/implemented/architecture/2026-10-18-provider-portability-updates.md) · [verification](evidence/verify/2026-10-18-provider-portability-updates.md)
@@ -72,10 +81,13 @@ Builtin transport: [direct HTTP](notes/implemented/architecture/2026-10-18-nativ
 
 - [Provider port and file URL boundary checkpoint](evidence/verify/2026-10-18-provider-port-url-boundaries.md)
 
+- [Standard/provider convergence](notes/proposed/feature/2026-10-18-standard-provider-convergence.md) · [verification](evidence/verify/2026-10-18-standard-provider-convergence.md)
 - [Current provider isolation and Express acceptance](evidence/verify/2026-10-18-provider-isolation-acceptance.md)
 
 - [Final provider convergence acceptance](evidence/verify/2026-10-18-provider-convergence-acceptance.md)
 
 - [Provider-owned metadata follow-up](evidence/verify/2026-10-18-provider-owned-metadata-followup.md)
 
 - [Provider preflight](notes/proposed/feature/2026-10-18-provider-preflight.md) · [verification](evidence/verify/2026-10-18-provider-preflight.md)
+
+- [Conditional Express acceptance](notes/proposed/feature/2026-10-19-conditional-acceptance.md) · [verification](evidence/verify/2026-10-19-conditional-acceptance.md)
@@ -0,0 +1,33 @@
+# Verification: E2B agent guidance review
+
+- Date: 2026-10-16
+- Change: https://github.com/Alibaba-Agent-Sandbox/python-sdk/pull/47
+- Result: PASS (guidance correction); conditional backend success remains blocked as separately recorded
+- Environment: current checkout; no credentials or cloud calls required for this review.
+
+## What was verified
+
+The distributed SDK/provider skills and llms.txt still taught the old root asynchronous Sandbox and retired credential names. They now distinguish synchronous standard Sandbox, AsyncSandbox/interpreter imports and explicit ProviderSandbox extensions. Standard signed URLs/handles/errors are no longer constrained by native-extension limitations. Template generation uses scaffold, and runtime/function prerequisites are explicit. Provider-specific keys remain isolated from the Express E2B_API_KEY.
+
+## Commands run
+
+- skill-creator `scripts/quick_validate.py agent-sandbox-sdk`: PASS.
+- skill-creator `scripts/quick_validate.py agent-sandbox-provider`: PASS.
+- Manual cross-check of public imports against the implemented/validated public contract and the passing 2035-client-test suite. No prose-matching tests added.
+- Existing full Python 3.10/3.11/3.12 client/server/package/hygiene/Markdown matrix and isolated 354-shape contract passed on implementation head 3fa44beb. These guidance-only edits require their own latest remote documentation/gate result.
+
+## Results
+
+Skill names and invocation policies are preserved. The SDK skill starts with the standard migration example, then explicitly scopes existing provider/server material. Source/protocol details are kept in supporting references. Templates/engine notes link to maintained interfaces rather than hardcoding an obsolete socket.
+
+## Cleanup
+
+No resources created. Existing cloud-cleanup evidence and conditional backend restrictions remain unchanged.
+
+## Problems found
+
+This was a documentation omission in the migration change, corrected before acceptance. The current function still rejects pauseSession and lacks a snapshot-capable runtime; this record does not convert those failures into passes.
+
+## Not verified
+
+Successful enabled-function/MicroVM conditional scenarios and final acceptance/merge. Companion CLI: https://github.com/Alibaba-Agent-Sandbox/agent-sandbox/pull/40.
@@ -0,0 +1,35 @@
+# Verification: conditional Express backend capabilities
+
+- Date: 2026-10-16
+- Change: https://github.com/Alibaba-Agent-Sandbox/python-sdk/pull/47
+- Result: BLOCKED (backend prerequisites for successful conditional operations)
+- Package: current project client, Python 3.13.13, real Express python-hello template. Credentials supplied only through ignored environment configuration.
+
+## What was verified
+
+Attempted real pause and snapshot creation instead of inferring support from the presence of client methods or from the generic Gen2 documentation. These are backend configuration/runtime restrictions; no successful operation is claimed.
+
+## Commands run
+
+A Python probe created its own short-lived sandbox, called Sandbox.pause and create_snapshot, and killed the owned sandbox in finally. A second owned probe confirmed the sanitized service reasons; request IDs and account details were omitted.
+
+## Results
+
+| Operation | Result | Sanitized service reason |
+|---|---|---|
+| Pause | BLOCKED | HTTP 400, nested code 403: Pause session operation is forbidden; pauseSession is not enabled for this function |
+| Snapshot creation | BLOCKED | HTTP 400: sandbox runtime does not support snapshot |
+
+The standard source-port entry points and mocked request contracts remain implemented. A successful pause/resume run needs a function with pauseSession enabled; successful snapshot restoration needs a supported MicroVM runtime and account access. No client fallback silently changes the operation or reports success.
+
+## Cleanup
+
+Both probes killed their own source sandbox successfully. No snapshot or restored sandbox was created by either rejected request. No existing cloud function settings were changed and no unrelated resource was deleted.
+
+## Problems found
+
+Generic Gen2 support is insufficient evidence that every existing function has pause enabled. The migration guide now distinguishes runtime availability from actual function/account settings. The companion CLI uses the same supported service operations: https://github.com/Alibaba-Agent-Sandbox/agent-sandbox/pull/40.
+
+## Not verified
+
+Successful conditional pause/resume and snapshot create/list/delete/restore on correctly enabled fixtures. Keep the ADR proposed and report this prerequisite instead of claiming these paths passed.
@@ -0,0 +1,34 @@
+# Verification: E2B Python integration review
+
+- Date: 2026-10-16
+- Change: https://github.com/Alibaba-Agent-Sandbox/python-sdk/pull/47; https://github.com/Alibaba-Agent-Sandbox/python-sdk/issues/36
+- Result: PARTIAL
+- Package under test: editable client/server integrated onto main 666657b; Python 3.13.13, Linux x64. Credentials supplied only through ignored environment configuration.
+
+## What was verified
+
+Integrated the behavior contract with the accepted server-loader, MCP-lifecycle and reconnectable-background-task changes. Preserved upstream ownership guards and the complete Chinese archive translation. Historical archives and evidence were not rewritten. Remaining active SDK guides now use the CLI's positional template syntax. The fixed 354-signature comparison is also installed as a separate CI gate; upstream references are isolated from the product environment.
+
+## Commands run
+
+- `python -m pytest client-sdk/tests -q`: **2035 passed, 21 skipped**, 203.43 seconds.
+- `make lint typecheck format-check hygiene`: PASS; server 56 files and maintained client 86 files checked by mypy; server 91 files and client 203 files formatted. Source-port exclusions remain explicit.
+- `python scripts/check_standard_contract.py --reference-python <reference-python>`: PASS, 354 callable shapes.
+- `bash scripts/check-repo-health.sh`: PASS, 106 pass / 1 warning / 0 failures.
+- Cloud core scenarios and wheel install evidence: see round two; no new source change to the cloud protocol after that run.
+
+## Results
+
+The accepted main integration introduces no client regression. GitHub's first draft head passed the Python 3.10/3.11/3.12 client matrix, hygiene and Markdown-links checks; server jobs were still running when inspected. The new separate pinned-contract job and the latest documentation changes require their own remote result. No full local server pass is inferred from the client matrix.
+
+## Cleanup
+
+No resources were created by the integration checks. Round-two cloud tracking reported three sandboxes and zero leaked after cleanup.
+
+## Problems found
+
+The local full server gate from round two remains failed under managed raw-loopback networking/policy conditions. The ported API is intentionally a maintained MIT source port, not a runtime wrapper; full licenses and upstream provenance remain in the distributions. No Node SDK repository changes.
+
+## Not verified
+
+Conditional snapshot/pause real-cloud fixtures, final remote server/contract matrix, required review, merge and publication. The ADR remains proposed. Companion CLI: https://github.com/Alibaba-Agent-Sandbox/agent-sandbox/pull/40. Do not mark the feature complete from this partial record.
@@ -0,0 +1,36 @@
+# Verification: E2B behavior review, first full run
+
+- Date: 2026-10-16
+- Change: proposed architecture ADR `2026-10-16-e2b-behavior-contract`
+- Result: PARTIAL
+- Revision: uncommitted scoped implementation on `feat/e2b-behavior-20261016`; not a published release
+- Environment: Linux x64, Python 3.13.13, Node 22.22.2. Credentials supplied from ignored environment configuration; values omitted.
+
+## What was verified
+
+This first review found contract regressions and obsolete assumptions after canonical configuration and standard API changes. The task is not complete; subsequent fixes require a new verification record.
+
+## Commands run
+
+- `make test`: FAIL; server 852 passed / 8 failed; make stopped before client.
+- `pytest tests/ -q --tb=short` in client-sdk: FAIL; 1980 passed / 8 failed / 21 skipped.
+- `make lint`: PASS.
+- `make typecheck`: initially FAIL in MCP lifetime bookkeeping; fixed and subsequent run PASS (server 56 files, maintained client 84 files; ported/generated sources excluded).
+- Targeted client transport/packaging/standard regression run after fixes: PASS, 256 tests.
+- Real cloud `pytest e2e/test_standard_contract.py`: network update scenario PASS (allow, deny all, restore access). Sync/async scenarios exposed test assumptions about query models, metadata index consistency and backend interpreter error names; fixes and reruns in progress. Snapshot skipped because no MicroVM/allowlist fixture was configured.
+
+## Results
+
+The new sync API reached the real cloud and verified lifecycle, file text/bytes/WriteInfo, nonzero-command exceptions, background stdin and interpreter state/callbacks. A later test assertion failed, so the complete sync scenario is not recorded as passing. Async create/connect/files/commands passed before pagination indexing assertion. No mock result is counted as cloud completion.
+
+## Cleanup
+
+Every created standard sandbox used try/finally kill plus the E2E tracker finalizer. Cleanup results must also be captured in the final successful run. Do not infer a global account cleanup from individual kill calls.
+
+## Problems found
+
+Retired-name tests still rejected canonical E2B_* variables. Packaging incorrectly prohibited Rich, now required by the Template API. Full server failures included raw-loopback requests receiving a managed network audit response, ambient server-policy assumptions and a test venv initially lacking pip. These are not counted as passes or silently excluded.
+
+## Not verified
+
+Complete CI matrix, all cloud conditional capabilities, final package/hygiene/health checks, required remote review, PR merge and package publication. This record does not close the Issue or mark the proposed ADR implemented.
@@ -0,0 +1,46 @@
+# Verification: E2B behavior review, second run
+
+- Date: 2026-10-16
+- Change: proposed architecture ADR `2026-10-16-e2b-behavior-contract`; https://github.com/Alibaba-Agent-Sandbox/python-sdk/issues/36
+- Result: PARTIAL
+- Package under test: editable client/server from this branch, Python 3.13.13, Linux x64. Separate reference environment contains e2b 2.31.0 and e2b-code-interpreter 2.8.1.
+- Credentials: supplied through ignored environment configuration; values omitted.
+
+## What was verified
+
+The root synchronous and asynchronous clients, interpreter namespace, lazy pagination, command exceptions/handles, canonical configuration, network updates and snapshot request shapes were reviewed against the pinned reference. The implementation owns an attributed source port and has no E2B runtime dependency. Node SDK changes are excluded.
+
+## Commands run
+
+- `python -m pytest client-sdk/tests -q`: 1991 passed, 21 skipped (157.93 seconds), before the last two snapshot-state assertions.
+- `python -m pytest client-sdk/tests/test_api/test_standard_contract.py client-sdk/tests/test_providers/test_epp.py -q`: 47 passed (26.43 seconds), including final snapshot/state and placeholder-redaction fixtures.
+- `python scripts/check_standard_contract.py --reference-python <reference-python>`: 354 public callable signatures and sync/async shapes match. Only the documented optional Alibaba snapshot-name keyword is allowed beyond the reference.
+- `python -m pytest e2e/test_standard_contract.py -ra`: 3 passed, 1 skipped (24.75 seconds).
+- `make lint typecheck format-check`, `make build dist-check`, `make hygiene`: PASS. Narrow ported/generated source exclusions are recorded in configuration; maintained adapters are checked.
+- Built wheels installed into a clean environment; standard clients, shared server namespace, py.typed, both MIT licenses, SOURCES.json and PATCHES.md checked: PASS.
+- `make test`: server gate FAIL, 7 failed / 853 passed / 1 error (320.10 seconds). It stops before the client target. This is not a full-suite pass.
+- `bash scripts/check-repo-health.sh`: 106 PASS / 1 WARN / 0 FAIL before restoring historical archives. Parent branch now contains the full missing Chinese archive translation; integration and final health rerun remain.
+
+## Results
+
+| Scenario | Result | Details |
+|---|---|---|
+| Standard synchronous cloud lifecycle | PASS | Create/get_info/list/timeout, text and bytes, WriteInfo, command exit 7 with captured output, background stdin/wait, kill and repeated kill |
+| Standard async cloud lifecycle | PASS | Create/connect/files/commands and lazy metadata pagination |
+| Interpreter cloud contexts | PASS | Persistent state, callbacks, results/errors, restart/list/remove contexts |
+| Runtime network policy | PASS | Public request succeeds, deny-all blocks it, restored allow rule succeeds |
+| Snapshot request contracts | PASS | Name filter in sync/async paginators, qualified deletion paths, snapshotting states |
+| Snapshot cloud restore | SKIP | No configured MicroVM template with the snapshot allowlist (`E2E_SNAPSHOT_TEMPLATE`) |
+| Conditional pause/resume and full cloud capability matrix | NOT VERIFIED | Requires appropriate runtime/account fixtures; no claim inferred from a preserved method |
+
+## Cleanup
+
+The cloud tracker reported `sandboxes_tracked=3 leaked_after_cleanup=0`. Every test uses try/finally kill. Listing/index assertions retry only declared eventual consistency. This evidence does not claim deletion of unrelated account resources.
+
+## Problems found
+
+Fixed the interpreter error-name assumption and metadata-index timing in the initial test harness. The server gate receives managed-network HTTP audit responses on raw loopback tests and has an ambient server-policy assumption plus a bind error; server runtime source was not changed by this feature. The initial missing-pip environment problem was corrected before the reported server run. These failures remain failed, not excluded.
+
+## Not verified
+
+Final integration onto the updated parent https://github.com/Alibaba-Agent-Sandbox/python-sdk/pull/33, complete required CI matrix/review, all conditional cloud fixtures, release publication. This record does not close the Issue, accept the ADR or authorize a failing merge. The companion CLI work is tracked at https://github.com/Alibaba-Agent-Sandbox/agent-sandbox/issues/33.