{"abstract":"An explicit scheme is overwritten by automatic upgrade policy.","category":"HTTP redirects","checks":6,"contract":"Apply a configured HTTP redirect scheme policy. The explicit fixture inputs and outputs define a bounded offline policy; request identity must accompany the decision.","evaluation_group":"s3-http-redirects-scheme-policy","failed_approach":"The partial repair uses \"'https' if not explicit else source\" and still fails an explicit boundary or control.","family":"s3-http-redirects-scheme-policy-implicit-scheme-upgrade","id":"FA-27936","implementations":{"attempt":{"sha256":"f619e869d3dff91dd4cf695da3acb98f1c22a2f3dec79cc52e9265eeff9c40a9","source":"\"\"\"Failure Map reference implementation. Python standard library only.\"\"\"\nimport json\nfrom urllib.parse import urlsplit, unquote, quote\nimport posixpath\nimport re\nN = 1\nobservations = []\ndef solve(request, scheme, source, explicit, upgrades, allow_relative):\n    return {'request': request, 'decision': [scheme.lower(), bool(scheme) or allow_relative, scheme.lower() not in ('', 'http', 'https'), source == 'http' and scheme.lower() == 'https', 'https' if not explicit else source]} \ndef check(label, actual, expected):\n    observations.append({\"check\": label, \"actual\": actual, \"expected\": expected, \"passed\": actual == expected})\ncheck('fixture 1', solve('/requests/' + str(N) + '/0', 'HtTpS', 'http', False, ['http'], False), {'request': '/requests/' + str(N) + '/0', 'decision': ['https', True, False, True, 'https']})\ncheck('fixture 2', solve('/requests/' + str(N) + '/1', 'https', 'https', True, ['https'], True), {'request': '/requests/' + str(N) + '/1', 'decision': ['https', True, False, False, 'https']})\ncheck('fixture 3', solve('/requests/' + str(N) + '/2', '', 'http', True, ['http'], True), {'request': '/requests/' + str(N) + '/2', 'decision': ['', True, False, False, 'http']})\ncheck('fixture 4', solve('/requests/' + str(N) + '/3', '', 'http', False, [], False), {'request': '/requests/' + str(N) + '/3', 'decision': ['', False, False, False, 'http']})\ncheck('fixture 5', solve('/requests/' + str(N) + '/4', 'data', 'https', True, [], True), {'request': '/requests/' + str(N) + '/4', 'decision': ['data', True, True, False, 'https']})\ncheck('fixture 6', solve('/requests/' + str(N) + '/5', 'http', 'https', False, [], False), {'request': '/requests/' + str(N) + '/5', 'decision': ['http', True, False, False, 'https']})\nprint(json.dumps({\"observations\": observations, \"passed\": all(x[\"passed\"] for x in observations)}, ensure_ascii=False))\nraise SystemExit(0 if all(x[\"passed\"] for x in observations) else 1)\n"},"broken":{"sha256":"9a630df4fa0f2ec5150d4f64a6dc6a2b3980467d0019033233481f54c099eca3","source":"\"\"\"Failure Map reference implementation. Python standard library only.\"\"\"\nimport json\nfrom urllib.parse import urlsplit, unquote, quote\nimport posixpath\nimport re\nN = 1\nobservations = []\ndef solve(request, scheme, source, explicit, upgrades, allow_relative):\n    return {'request': request, 'decision': [scheme.lower(), bool(scheme) or allow_relative, scheme.lower() not in ('', 'http', 'https'), source == 'http' and scheme.lower() == 'https', 'https' if source in upgrades else source]} \ndef check(label, actual, expected):\n    observations.append({\"check\": label, \"actual\": actual, \"expected\": expected, \"passed\": actual == expected})\ncheck('fixture 1', solve('/requests/' + str(N) + '/0', 'HtTpS', 'http', False, ['http'], False), {'request': '/requests/' + str(N) + '/0', 'decision': ['https', True, False, True, 'https']})\ncheck('fixture 2', solve('/requests/' + str(N) + '/1', 'https', 'https', True, ['https'], True), {'request': '/requests/' + str(N) + '/1', 'decision': ['https', True, False, False, 'https']})\ncheck('fixture 3', solve('/requests/' + str(N) + '/2', '', 'http', True, ['http'], True), {'request': '/requests/' + str(N) + '/2', 'decision': ['', True, False, False, 'http']})\ncheck('fixture 4', solve('/requests/' + str(N) + '/3', '', 'http', False, [], False), {'request': '/requests/' + str(N) + '/3', 'decision': ['', False, False, False, 'http']})\ncheck('fixture 5', solve('/requests/' + str(N) + '/4', 'data', 'https', True, [], True), {'request': '/requests/' + str(N) + '/4', 'decision': ['data', True, True, False, 'https']})\ncheck('fixture 6', solve('/requests/' + str(N) + '/5', 'http', 'https', False, [], False), {'request': '/requests/' + str(N) + '/5', 'decision': ['http', True, False, False, 'https']})\nprint(json.dumps({\"observations\": observations, \"passed\": all(x[\"passed\"] for x in observations)}, ensure_ascii=False))\nraise SystemExit(0 if all(x[\"passed\"] for x in observations) else 1)\n"},"fixed":{"sha256":"ec4cf6b864ac344ea50a600e5362cc8d34058c7436297913f4cf2a3c5f69ff28","source":"\"\"\"Failure Map reference implementation. Python standard library only.\"\"\"\nimport json\nfrom urllib.parse import urlsplit, unquote, quote\nimport posixpath\nimport re\nN = 1\nobservations = []\ndef solve(request, scheme, source, explicit, upgrades, allow_relative):\n    return {'request': request, 'decision': [scheme.lower(), bool(scheme) or allow_relative, scheme.lower() not in ('', 'http', 'https'), source == 'http' and scheme.lower() == 'https', 'https' if not explicit and source in upgrades else source]} \ndef check(label, actual, expected):\n    observations.append({\"check\": label, \"actual\": actual, \"expected\": expected, \"passed\": actual == expected})\ncheck('fixture 1', solve('/requests/' + str(N) + '/0', 'HtTpS', 'http', False, ['http'], False), {'request': '/requests/' + str(N) + '/0', 'decision': ['https', True, False, True, 'https']})\ncheck('fixture 2', solve('/requests/' + str(N) + '/1', 'https', 'https', True, ['https'], True), {'request': '/requests/' + str(N) + '/1', 'decision': ['https', True, False, False, 'https']})\ncheck('fixture 3', solve('/requests/' + str(N) + '/2', '', 'http', True, ['http'], True), {'request': '/requests/' + str(N) + '/2', 'decision': ['', True, False, False, 'http']})\ncheck('fixture 4', solve('/requests/' + str(N) + '/3', '', 'http', False, [], False), {'request': '/requests/' + str(N) + '/3', 'decision': ['', False, False, False, 'http']})\ncheck('fixture 5', solve('/requests/' + str(N) + '/4', 'data', 'https', True, [], True), {'request': '/requests/' + str(N) + '/4', 'decision': ['data', True, True, False, 'https']})\ncheck('fixture 6', solve('/requests/' + str(N) + '/5', 'http', 'https', False, [], False), {'request': '/requests/' + str(N) + '/5', 'decision': ['http', True, False, False, 'https']})\nprint(json.dumps({\"observations\": observations, \"passed\": all(x[\"passed\"] for x in observations)}, ensure_ascii=False))\nraise SystemExit(0 if all(x[\"passed\"] for x in observations) else 1)\n"}},"limitations":"Stipulated offline redirect policy, not a complete HTTP, browser, URL, cache, or security implementation. Numbered variants vary request correlation identity. This reproducer isolates one failure mechanism. Results cover the supplied fixtures. Variants within a family share a test contract and should remain grouped when constructing evaluation splits. Related mechanisms with a shared evaluation_group must also remain together; these controlled models are not independent production incidents.","method":"Deterministic executable model with adversarial boundary fixtures.","provenance":{"created_by":"Failure Map","dependencies":"Python standard library","family":"s3-http-redirects-scheme-policy-implicit-scheme-upgrade","generated_at":"2026-09-29T14:41:29.508188+00:00","license":"CC0-1.0","python":"3.12.14","seed":1,"split":"open-access"},"relevance":"Models a redirect controller decision before following a target or exposing a redirect result.","repair":"At this decision use \"'https' if not explicit and source in upgrades else source\", preserving the other controller outputs.","root_cause":"The implicit-scheme-upgrade decision uses \"'https' if source in upgrades else source\"; this violates the stipulated controller policy.","sha256":"fe2847e083a5f52c2c4373f26841c62b43163c503f1ade830fcaff9eace64b3e","title":"Apply a configured HTTP redirect scheme policy: implicit scheme upgrade · case 01","variant":1,"variant_policy":"N changes request correlation identity. Policy boundary fixtures are reused; numbered variants are not independent examples.","verification":{"attempt":{"elapsed_ms":36.448,"exit_code":1,"observations":[{"actual":{"decision":["https",true,false,true,"https"],"request":"/requests/1/0"},"check":"fixture 1","expected":{"decision":["https",true,false,true,"https"],"request":"/requests/1/0"},"passed":true},{"actual":{"decision":["https",true,false,false,"https"],"request":"/requests/1/1"},"check":"fixture 2","expected":{"decision":["https",true,false,false,"https"],"request":"/requests/1/1"},"passed":true},{"actual":{"decision":["",true,false,false,"http"],"request":"/requests/1/2"},"check":"fixture 3","expected":{"decision":["",true,false,false,"http"],"request":"/requests/1/2"},"passed":true},{"actual":{"decision":["",false,false,false,"https"],"request":"/requests/1/3"},"check":"fixture 4","expected":{"decision":["",false,false,false,"http"],"request":"/requests/1/3"},"passed":false},{"actual":{"decision":["data",true,true,false,"https"],"request":"/requests/1/4"},"check":"fixture 5","expected":{"decision":["data",true,true,false,"https"],"request":"/requests/1/4"},"passed":true},{"actual":{"decision":["http",true,false,false,"https"],"request":"/requests/1/5"},"check":"fixture 6","expected":{"decision":["http",true,false,false,"https"],"request":"/requests/1/5"},"passed":true}],"passed":false,"stderr":"","stdout":"{\"observations\": [{\"check\": \"fixture 1\", \"actual\": {\"request\": \"/requests/1/0\", \"decision\": [\"https\", true, false, true, \"https\"]}, \"expected\": {\"request\": \"/requests/1/0\", \"decision\": [\"https\", true, false, true, \"https\"]}, \"passed\": true}, {\"check\": \"fixture 2\", \"actual\": {\"request\": \"/requests/1/1\", \"decision\": [\"https\", true, false, false, \"https\"]}, \"expected\": {\"request\": \"/requests/1/1\", \"decision\": [\"https\", true, false, false, \"https\"]}, \"passed\": true}, {\"check\": \"fixture 3\", \"actual\": {\"request\": \"/requests/1/2\", \"decision\": [\"\", true, false, false, \"http\"]}, \"expected\": {\"request\": \"/requests/1/2\", \"decision\": [\"\", true, false, false, \"http\"]}, \"passed\": true}, {\"check\": \"fixture 4\", \"actual\": {\"request\": \"/requests/1/3\", \"decision\": [\"\", false, false, false, \"https\"]}, \"expected\": {\"request\": \"/requests/1/3\", \"decision\": [\"\", false, false, false, \"http\"]}, \"passed\": false}, {\"check\": \"fixture 5\", \"actual\": {\"request\": \"/requests/1/4\", \"decision\": [\"data\", true, true, false, \"https\"]}, \"expected\": {\"request\": \"/requests/1/4\", \"decision\": [\"data\", true, true, false, \"https\"]}, \"passed\": true}, {\"check\": \"fixture 6\", \"actual\": {\"request\": \"/requests/1/5\", \"decision\": [\"http\", true, false, false, \"https\"]}, \"expected\": {\"request\": \"/requests/1/5\", \"decision\": [\"http\", true, false, false, \"https\"]}, \"passed\": true}], \"passed\": false}\n"},"broken":{"elapsed_ms":38.457,"exit_code":1,"observations":[{"actual":{"decision":["https",true,false,true,"https"],"request":"/requests/1/0"},"check":"fixture 1","expected":{"decision":["https",true,false,true,"https"],"request":"/requests/1/0"},"passed":true},{"actual":{"decision":["https",true,false,false,"https"],"request":"/requests/1/1"},"check":"fixture 2","expected":{"decision":["https",true,false,false,"https"],"request":"/requests/1/1"},"passed":true},{"actual":{"decision":["",true,false,false,"https"],"request":"/requests/1/2"},"check":"fixture 3","expected":{"decision":["",true,false,false,"http"],"request":"/requests/1/2"},"passed":false},{"actual":{"decision":["",false,false,false,"http"],"request":"/requests/1/3"},"check":"fixture 4","expected":{"decision":["",false,false,false,"http"],"request":"/requests/1/3"},"passed":true},{"actual":{"decision":["data",true,true,false,"https"],"request":"/requests/1/4"},"check":"fixture 5","expected":{"decision":["data",true,true,false,"https"],"request":"/requests/1/4"},"passed":true},{"actual":{"decision":["http",true,false,false,"https"],"request":"/requests/1/5"},"check":"fixture 6","expected":{"decision":["http",true,false,false,"https"],"request":"/requests/1/5"},"passed":true}],"passed":false,"stderr":"","stdout":"{\"observations\": [{\"check\": \"fixture 1\", \"actual\": {\"request\": \"/requests/1/0\", \"decision\": [\"https\", true, false, true, \"https\"]}, \"expected\": {\"request\": \"/requests/1/0\", \"decision\": [\"https\", true, false, true, \"https\"]}, \"passed\": true}, {\"check\": \"fixture 2\", \"actual\": {\"request\": \"/requests/1/1\", \"decision\": [\"https\", true, false, false, \"https\"]}, \"expected\": {\"request\": \"/requests/1/1\", \"decision\": [\"https\", true, false, false, \"https\"]}, \"passed\": true}, {\"check\": \"fixture 3\", \"actual\": {\"request\": \"/requests/1/2\", \"decision\": [\"\", true, false, false, \"https\"]}, \"expected\": {\"request\": \"/requests/1/2\", \"decision\": [\"\", true, false, false, \"http\"]}, \"passed\": false}, {\"check\": \"fixture 4\", \"actual\": {\"request\": \"/requests/1/3\", \"decision\": [\"\", false, false, false, \"http\"]}, \"expected\": {\"request\": \"/requests/1/3\", \"decision\": [\"\", false, false, false, \"http\"]}, \"passed\": true}, {\"check\": \"fixture 5\", \"actual\": {\"request\": \"/requests/1/4\", \"decision\": [\"data\", true, true, false, \"https\"]}, \"expected\": {\"request\": \"/requests/1/4\", \"decision\": [\"data\", true, true, false, \"https\"]}, \"passed\": true}, {\"check\": \"fixture 6\", \"actual\": {\"request\": \"/requests/1/5\", \"decision\": [\"http\", true, false, false, \"https\"]}, \"expected\": {\"request\": \"/requests/1/5\", \"decision\": [\"http\", true, false, false, \"https\"]}, \"passed\": true}], \"passed\": false}\n"},"fixed":{"elapsed_ms":39.361,"exit_code":0,"observations":[{"actual":{"decision":["https",true,false,true,"https"],"request":"/requests/1/0"},"check":"fixture 1","expected":{"decision":["https",true,false,true,"https"],"request":"/requests/1/0"},"passed":true},{"actual":{"decision":["https",true,false,false,"https"],"request":"/requests/1/1"},"check":"fixture 2","expected":{"decision":["https",true,false,false,"https"],"request":"/requests/1/1"},"passed":true},{"actual":{"decision":["",true,false,false,"http"],"request":"/requests/1/2"},"check":"fixture 3","expected":{"decision":["",true,false,false,"http"],"request":"/requests/1/2"},"passed":true},{"actual":{"decision":["",false,false,false,"http"],"request":"/requests/1/3"},"check":"fixture 4","expected":{"decision":["",false,false,false,"http"],"request":"/requests/1/3"},"passed":true},{"actual":{"decision":["data",true,true,false,"https"],"request":"/requests/1/4"},"check":"fixture 5","expected":{"decision":["data",true,true,false,"https"],"request":"/requests/1/4"},"passed":true},{"actual":{"decision":["http",true,false,false,"https"],"request":"/requests/1/5"},"check":"fixture 6","expected":{"decision":["http",true,false,false,"https"],"request":"/requests/1/5"},"passed":true}],"passed":true,"stderr":"","stdout":"{\"observations\": [{\"check\": \"fixture 1\", \"actual\": {\"request\": \"/requests/1/0\", \"decision\": [\"https\", true, false, true, \"https\"]}, \"expected\": {\"request\": \"/requests/1/0\", \"decision\": [\"https\", true, false, true, \"https\"]}, \"passed\": true}, {\"check\": \"fixture 2\", \"actual\": {\"request\": \"/requests/1/1\", \"decision\": [\"https\", true, false, false, \"https\"]}, \"expected\": {\"request\": \"/requests/1/1\", \"decision\": [\"https\", true, false, false, \"https\"]}, \"passed\": true}, {\"check\": \"fixture 3\", \"actual\": {\"request\": \"/requests/1/2\", \"decision\": [\"\", true, false, false, \"http\"]}, \"expected\": {\"request\": \"/requests/1/2\", \"decision\": [\"\", true, false, false, \"http\"]}, \"passed\": true}, {\"check\": \"fixture 4\", \"actual\": {\"request\": \"/requests/1/3\", \"decision\": [\"\", false, false, false, \"http\"]}, \"expected\": {\"request\": \"/requests/1/3\", \"decision\": [\"\", false, false, false, \"http\"]}, \"passed\": true}, {\"check\": \"fixture 5\", \"actual\": {\"request\": \"/requests/1/4\", \"decision\": [\"data\", true, true, false, \"https\"]}, \"expected\": {\"request\": \"/requests/1/4\", \"decision\": [\"data\", true, true, false, \"https\"]}, \"passed\": true}, {\"check\": \"fixture 6\", \"actual\": {\"request\": \"/requests/1/5\", \"decision\": [\"http\", true, false, false, \"https\"]}, \"expected\": {\"request\": \"/requests/1/5\", \"decision\": [\"http\", true, false, false, \"https\"]}, \"passed\": true}], \"passed\": true}\n"}},"verified":true,"visibility":"public"}