cast(bool, x) is a promise to the type checker. At runtime it is the identity function.

A developer found that in google/adk-python, the value determining whether a tool call requires human confirmation is passed through typing.cast(bool, await ...), which is the identity function at runtime, so an awaited expression resolving to None reaches the caller unchecked and the confirmation step is skipped. The same pattern was previously filed against openai-agents-python as issue #4845, though via coercion rather than declaration. The developer notes the finding is a claim about what the code permits, not an observed failure, since no live call path resolving to None was traced.

In google/adk-python , the value that decides whether a tool call needs human confirmation reaches its caller through cast bool, await ... . typing.cast returns its second argument. That is the entire implementation: python def cast typ, val : """Cast a value to a type. This returns the value unchanged.""" return val It exists so a static checker will stop complaining, and it does nothing at all when the program runs. If the awaited expression produces None , the caller receives None . The caller then tests it for truth and skips the confirmation. python from typing import cast cast bool, None is None True if cast bool, None : print "confirm" prints nothing That is the same ending as the coercion defect filed against openai-agents-python as issue 4845. Different route. This one arrives by declaration instead of by conversion. Ask a type checker what cast bool, x is and it answers bool . Correctly. That is what cast is for. The programmer asserted the type and the checker took the assertion. There is no diagnostic to emit and no line to highlight. A grep-shaped tool has a different problem: the pair is not on one line. Formatters split cast from bool, across a newline, so a per-line pattern never sees them together: return cast bool, await self. tool confirmation ... , grep -n 'cast bool' returns nothing here. I had to look at a window of lines rather than at single lines. Two things, and the second is the embarrassing one. I first recorded the sites as function tool.py:206 and mcp tool.py:474 . Those lines read return bool self. require confirmation , which is the safe branch. The expression that matters is a few lines above each of them. | | what I reported | what actually matters | |---|---|---| | function tool.py | :206 | :202-205 | | mcp tool.py | :474 | :470-473 | | the code there | return bool ... , the safe branch | the multi-line cast | I recorded, and reported, the location of the code that was fine. The reason I landed there is that my tool did find those functions, and it found them for a reason I never checked. A coercion signal had matched bool ... on the safe branch. The function was on my list, the list was right, and my account of why it was on the list was wrong. A correct output with a wrong cause is harder to catch than a wrong output, because nothing looks broken. The same tool was also printing a banner that named two active signals while three were running. I fixed that by printing the signal set the run actually used. A declaration with no behaviour behind it, inside the tool I built to find declarations with no behaviour behind them. Whether any caller in adk-python actually passes something that resolves to None . I did not trace the call graph to a live path, so this is a claim about what the code permits and not about an observed failure. cast is not the defect. A cast over a value that has already been checked is fine and common. The defect is the unchecked value, and my signal cannot tell those two apart, which is why its output is a reading list rather than a finding. I have not measured how common this spelling is across the ecosystem. One repository, one commit, two sites. Repository: crates/gx-witness https://github.com/TraceFold/tracefold/tree/main/crates/gx-witness is the part of the project that exists because a claim about a value is not the same as evidence about it. Runnable reproductions for every framework named above, offline and pinned to a version: https://github.com/mahirhir/unanswered-approval https://github.com/mahirhir/unanswered-approval