# CPU validation environment, Python 3.12, 2026-09-14.
# Install torch==2.14.0+cpu from https://download.pytorch.org/whl/cpu first.
agent-client-protocol==0.12.1
agentdojo==0.1.33
aioboto3==15.5.0
aiobotocore==2.25.1
aiofiles==25.1.0
aiohappyeyeballs==2.7.1
aiohttp==3.14.3
aiohttp-retry==2.9.1
aioitertools==0.13.0
aiosignal==1.4.0
annotated-doc==0.0.5
annotated-types==0.8.0
anthropic==1.5.0
anyio==4.15.1
argon2-cffi==23.1.0
argon2-cffi-bindings==26.1.0
attrs==26.1.0
beautifulsoup4==4.15.0
blinker==1.9.0
boto3==1.40.61
botocore==1.40.61
build==1.6.1
cachebox==5.2.3
certifi==2025.11.12
cffi==2.1.1
charset-normalizer==3.5.1
click==8.5.0
cohere==7.1.1
contourpy==1.4.0
control_arena==19.0.0
cryptography==50.0.1
cycler==0.12.1
datasets==5.0.1
debugpy==1.8.21
deepdiff==9.1.0
defusedxml==0.7.1
dill==0.4.1
distro==1.9.0
dnspython==2.8.0
docker==7.2.0
docstring_parser==0.18.0
docutils==0.23
durationpy==0.11
email-validator==2.3.0
fastapi==0.141.1
fastavro==1.12.2
filelock==3.32.3
Flask==3.1.3
fonttools==4.65.0
frozenlist==1.8.0
fsspec==2026.6.0
gitdb==4.0.12
GitPython==3.1.62
google-auth==2.58.0
google-genai==2.23.0
h11==0.16.0
hf-xet==1.6.0
httpcore==1.0.9
httpcore2==2.12.0
httpx==0.28.1
httpx2==2.12.0
huggingface_hub==0.36.2
id==1.6.1
idna==3.19
ijson==3.5.1
inspect-k8s-sandbox==0.13.0
inspect_ai==0.3.263
itsdangerous==2.2.0
jaraco.classes==3.4.0
jaraco.context==6.1.2
jaraco.functools==4.6.0
jeepney==0.9.0
Jinja2==3.1.6
jiter==0.17.0
jmespath==1.1.0
jsonlines==4.0.0
jsonpatch==1.33
jsonpath-ng==1.8.0
jsonpointer==3.1.1
jsonref==1.1.0
jsonschema==4.26.0
jsonschema-specifications==2025.9.1
keyring==25.7.0
kiwisolver==1.5.1
kubernetes==36.0.3
kubernetes_asyncio==36.1.0
langchain==1.4.0
langchain-core==1.6.3
langchain-protocol==0.0.19
langgraph==1.2.11
langgraph-checkpoint==4.2.0
langgraph-prebuilt==1.1.0
langgraph-sdk==0.4.4
langsmith==0.12.4
linkify-it-py==2.2.0
markdown-it-py==4.2.0
MarkupSafe==3.0.3
matplotlib==3.11.2
mdit-py-plugins==0.6.1
mdurl==0.1.2
minio==7.2.20
miniopy-async==1.23.5
mmh3==5.3.0
more-itertools==11.1.0
mpmath==1.3.0
multidict==6.8.0
multiprocess==0.70.19
mypy_extensions==1.1.0
nest-asyncio2==1.7.2
networkx==3.6.1
nh3==0.3.7
numpy==2.5.3
oauthlib==3.3.1
openai==3.13.0
orderly-set==5.5.0
orjson==3.12.0
ormsgpack==1.12.2
packaging==26.3
pandas==3.0.5
pandera==0.33.1
pathlib_abc==0.5.2
pillow==12.3.0
platformdirs==4.11.8
propcache==0.5.2
psutil==7.2.2
psycopg==3.3.5
psycopg-binary==3.3.5
pyarrow==25.0.1
pyasn1==0.6.4
pyasn1_modules==0.4.2
pycparser==3.0
pycryptodome==3.23.0
pydantic==2.13.5
pydantic_core==2.46.5
Pygments==2.21.0
pyparsing==3.3.2
pyproject_hooks==1.2.0
python-dateutil==2.9.0.post0
python-dotenv==1.2.3
PyYAML==6.0.3
readme_renderer==46.0
redis==5.2.1
referencing==0.37.0
regex==2026.9.10
requests==2.34.2
requests-oauthlib==2.0.0
requests-toolbelt==1.0.0
rfc3986==2.0.0
rich==15.0.0
rpds-py==2026.6.3
s3fs==2026.6.0
s3transfer==0.14.0
safetensors==0.8.0
seaborn==0.13.2
SecretStorage==3.5.0
semver==3.1.0
setuptools==78.1.0
shortuuid==1.0.13
six==1.17.0
smmap==5.0.3
sniffio==1.3.1
soupsieve==2.9.2
starlette==1.6.0
sympy==1.14.0
tenacity==9.1.4
textual==8.2.8
tiktoken==0.14.0
tokenizers==0.22.2
torch==2.14.0+cpu
tqdm==4.70.1
transformers==4.57.6
truststore==0.10.4
twine==7.0.0
typeguard==4.6.0
types-requests==2.33.0.20260906
typing-inspect==0.9.0
typing-inspection==0.4.4
typing_extensions==4.16.0
universal_pathlib==0.3.10
urllib3==2.7.0
uuid_utils==0.17.1
uvicorn==0.53.0
websocket-client==1.9.2
websockets==16.1.1
Werkzeug==3.1.8
wrapt==1.17.3
xxhash==4.0.1
yarl==1.24.5
zipfile-zstd==0.0.4
zipp==4.1.0
zstandard==0.25.0
