{"abstract":"Reject malformed redirect authorities without interpreting path text as an authority: the network path host branch emits an incorrect decision.","category":"HTTP redirects","checks":6,"contract":"Reject malformed redirect authorities without interpreting path text as an authority. The explicit fixture inputs and outputs define a bounded offline policy; request identity must accompany the decision.","evaluation_group":"s3-http-redirects-authority-shape","failed_approach":"The partial repair uses 'bool(urlsplit(target).scheme)' and still fails an explicit boundary or control.","family":"s3-http-redirects-authority-shape-network-path-host","id":"FA-28001","implementations":{"attempt":{"sha256":"a99bd334cce922e7ce4f2d9c477ec77dba6aabdadd924b08170276d703b3c0ac","source":"\"\"\"Failure Map reference implementation. Python standard library only.\"\"\"\nimport json\nfrom urllib.parse import urlsplit, unquote, quote\nimport posixpath\nimport re\nN = 1\nobservations = []\ndef solve(request, target):\n    return {'request': request, 'decision': [target.startswith('//') or '://' in target, urlsplit(target).hostname or '', bool(urlsplit(target).scheme), urlsplit(target).path, urlsplit(target).path or '/']} \ndef check(label, actual, expected):\n    observations.append({\"check\": label, \"actual\": actual, \"expected\": expected, \"passed\": actual == expected})\ncheck('fixture 1', solve('/requests/' + str(N) + '/0', 'https://EXAMPLE.test:8443/A'), {'request': '/requests/' + str(N) + '/0', 'decision': [True, 'example.test', True, '/A', '/A']})\ncheck('fixture 2', solve('/requests/' + str(N) + '/1', '//other.test/B'), {'request': '/requests/' + str(N) + '/1', 'decision': [True, 'other.test', True, '/B', '/B']})\ncheck('fixture 3', solve('/requests/' + str(N) + '/2', '/a//b'), {'request': '/requests/' + str(N) + '/2', 'decision': [False, '', True, '/a//b', '/a//b']})\ncheck('fixture 4', solve('/requests/' + str(N) + '/3', '///missing'), {'request': '/requests/' + str(N) + '/3', 'decision': [True, '', False, '/missing', '/missing']})\ncheck('fixture 5', solve('/requests/' + str(N) + '/4', 'https://h.test'), {'request': '/requests/' + str(N) + '/4', 'decision': [True, 'h.test', True, '', '/']})\ncheck('fixture 6', solve('/requests/' + str(N) + '/5', '/MiXeD?q=x'), {'request': '/requests/' + str(N) + '/5', 'decision': [False, '', True, '/MiXeD', '/MiXeD']})\nprint(json.dumps({\"observations\": observations, \"passed\": all(x[\"passed\"] for x in observations)}, ensure_ascii=False))\nraise SystemExit(0 if all(x[\"passed\"] for x in observations) else 1)\n"},"broken":{"sha256":"dfa8fa7d150758c5e5c65129a9805ba90f783084db022d2005d04557cf62165c","source":"\"\"\"Failure Map reference implementation. Python standard library only.\"\"\"\nimport json\nfrom urllib.parse import urlsplit, unquote, quote\nimport posixpath\nimport re\nN = 1\nobservations = []\ndef solve(request, target):\n    return {'request': request, 'decision': [target.startswith('//') or '://' in target, urlsplit(target).hostname or '', True, urlsplit(target).path, urlsplit(target).path or '/']} \ndef check(label, actual, expected):\n    observations.append({\"check\": label, \"actual\": actual, \"expected\": expected, \"passed\": actual == expected})\ncheck('fixture 1', solve('/requests/' + str(N) + '/0', 'https://EXAMPLE.test:8443/A'), {'request': '/requests/' + str(N) + '/0', 'decision': [True, 'example.test', True, '/A', '/A']})\ncheck('fixture 2', solve('/requests/' + str(N) + '/1', '//other.test/B'), {'request': '/requests/' + str(N) + '/1', 'decision': [True, 'other.test', True, '/B', '/B']})\ncheck('fixture 3', solve('/requests/' + str(N) + '/2', '/a//b'), {'request': '/requests/' + str(N) + '/2', 'decision': [False, '', True, '/a//b', '/a//b']})\ncheck('fixture 4', solve('/requests/' + str(N) + '/3', '///missing'), {'request': '/requests/' + str(N) + '/3', 'decision': [True, '', False, '/missing', '/missing']})\ncheck('fixture 5', solve('/requests/' + str(N) + '/4', 'https://h.test'), {'request': '/requests/' + str(N) + '/4', 'decision': [True, 'h.test', True, '', '/']})\ncheck('fixture 6', solve('/requests/' + str(N) + '/5', '/MiXeD?q=x'), {'request': '/requests/' + str(N) + '/5', 'decision': [False, '', True, '/MiXeD', '/MiXeD']})\nprint(json.dumps({\"observations\": observations, \"passed\": all(x[\"passed\"] for x in observations)}, ensure_ascii=False))\nraise SystemExit(0 if all(x[\"passed\"] for x in observations) else 1)\n"},"fixed":{"sha256":"dd045afe69a6c88b5e35bf639a7121ea72cf104c9f24f0d3fe88bd5f7b85ee37","source":"\"\"\"Failure Map reference implementation. Python standard library only.\"\"\"\nimport json\nfrom urllib.parse import urlsplit, unquote, quote\nimport posixpath\nimport re\nN = 1\nobservations = []\ndef solve(request, target):\n    return {'request': request, 'decision': [target.startswith('//') or '://' in target, urlsplit(target).hostname or '', not target.startswith('//') or bool(urlsplit(target).netloc), urlsplit(target).path, urlsplit(target).path or '/']} \ndef check(label, actual, expected):\n    observations.append({\"check\": label, \"actual\": actual, \"expected\": expected, \"passed\": actual == expected})\ncheck('fixture 1', solve('/requests/' + str(N) + '/0', 'https://EXAMPLE.test:8443/A'), {'request': '/requests/' + str(N) + '/0', 'decision': [True, 'example.test', True, '/A', '/A']})\ncheck('fixture 2', solve('/requests/' + str(N) + '/1', '//other.test/B'), {'request': '/requests/' + str(N) + '/1', 'decision': [True, 'other.test', True, '/B', '/B']})\ncheck('fixture 3', solve('/requests/' + str(N) + '/2', '/a//b'), {'request': '/requests/' + str(N) + '/2', 'decision': [False, '', True, '/a//b', '/a//b']})\ncheck('fixture 4', solve('/requests/' + str(N) + '/3', '///missing'), {'request': '/requests/' + str(N) + '/3', 'decision': [True, '', False, '/missing', '/missing']})\ncheck('fixture 5', solve('/requests/' + str(N) + '/4', 'https://h.test'), {'request': '/requests/' + str(N) + '/4', 'decision': [True, 'h.test', True, '', '/']})\ncheck('fixture 6', solve('/requests/' + str(N) + '/5', '/MiXeD?q=x'), {'request': '/requests/' + str(N) + '/5', 'decision': [False, '', True, '/MiXeD', '/MiXeD']})\nprint(json.dumps({\"observations\": observations, \"passed\": all(x[\"passed\"] for x in observations)}, ensure_ascii=False))\nraise SystemExit(0 if all(x[\"passed\"] for x in observations) else 1)\n"}},"limitations":"Stipulated offline redirect policy, not a complete HTTP, browser, URL, cache, or security implementation. Numbered variants vary request correlation identity. This reproducer isolates one failure mechanism. Results cover the supplied fixtures. Variants within a family share a test contract and should remain grouped when constructing evaluation splits. Related mechanisms with a shared evaluation_group must also remain together; these controlled models are not independent production incidents.","method":"Deterministic executable model with adversarial boundary fixtures.","provenance":{"created_by":"Failure Map","dependencies":"Python standard library","family":"s3-http-redirects-authority-shape-network-path-host","generated_at":"2026-09-29T14:41:30.114901+00:00","license":"CC0-1.0","python":"3.12.14","seed":1,"split":"open-access"},"relevance":"Models a redirect controller decision before following a target or exposing a redirect result.","repair":"At this decision use \"not target.startswith('//') or bool(urlsplit(target).netloc)\", preserving the other controller outputs.","root_cause":"The network-path-host decision uses 'True'; this violates the stipulated controller policy.","sha256":"228c18c1449078fe3a7c5a1379e6f35d5c00da3293ddfb5d04fa9a8ba8ddd608","title":"Reject malformed redirect authorities without interpreting path text as an authority: network path host · case 01","variant":1,"variant_policy":"N changes request correlation identity. Policy boundary fixtures are reused; numbered variants are not independent examples.","verification":{"attempt":{"elapsed_ms":36.75,"exit_code":1,"observations":[{"actual":{"decision":[true,"example.test",true,"/A","/A"],"request":"/requests/1/0"},"check":"fixture 1","expected":{"decision":[true,"example.test",true,"/A","/A"],"request":"/requests/1/0"},"passed":true},{"actual":{"decision":[true,"other.test",false,"/B","/B"],"request":"/requests/1/1"},"check":"fixture 2","expected":{"decision":[true,"other.test",true,"/B","/B"],"request":"/requests/1/1"},"passed":false},{"actual":{"decision":[false,"",false,"/a//b","/a//b"],"request":"/requests/1/2"},"check":"fixture 3","expected":{"decision":[false,"",true,"/a//b","/a//b"],"request":"/requests/1/2"},"passed":false},{"actual":{"decision":[true,"",false,"/missing","/missing"],"request":"/requests/1/3"},"check":"fixture 4","expected":{"decision":[true,"",false,"/missing","/missing"],"request":"/requests/1/3"},"passed":true},{"actual":{"decision":[true,"h.test",true,"","/"],"request":"/requests/1/4"},"check":"fixture 5","expected":{"decision":[true,"h.test",true,"","/"],"request":"/requests/1/4"},"passed":true},{"actual":{"decision":[false,"",false,"/MiXeD","/MiXeD"],"request":"/requests/1/5"},"check":"fixture 6","expected":{"decision":[false,"",true,"/MiXeD","/MiXeD"],"request":"/requests/1/5"},"passed":false}],"passed":false,"stderr":"","stdout":"{\"observations\": [{\"check\": \"fixture 1\", \"actual\": {\"request\": \"/requests/1/0\", \"decision\": [true, \"example.test\", true, \"/A\", \"/A\"]}, \"expected\": {\"request\": \"/requests/1/0\", \"decision\": [true, \"example.test\", true, \"/A\", \"/A\"]}, \"passed\": true}, {\"check\": \"fixture 2\", \"actual\": {\"request\": \"/requests/1/1\", \"decision\": [true, \"other.test\", false, \"/B\", \"/B\"]}, \"expected\": {\"request\": \"/requests/1/1\", \"decision\": [true, \"other.test\", true, \"/B\", \"/B\"]}, \"passed\": false}, {\"check\": \"fixture 3\", \"actual\": {\"request\": \"/requests/1/2\", \"decision\": [false, \"\", false, \"/a//b\", \"/a//b\"]}, \"expected\": {\"request\": \"/requests/1/2\", \"decision\": [false, \"\", true, \"/a//b\", \"/a//b\"]}, \"passed\": false}, {\"check\": \"fixture 4\", \"actual\": {\"request\": \"/requests/1/3\", \"decision\": [true, \"\", false, \"/missing\", \"/missing\"]}, \"expected\": {\"request\": \"/requests/1/3\", \"decision\": [true, \"\", false, \"/missing\", \"/missing\"]}, \"passed\": true}, {\"check\": \"fixture 5\", \"actual\": {\"request\": \"/requests/1/4\", \"decision\": [true, \"h.test\", true, \"\", \"/\"]}, \"expected\": {\"request\": \"/requests/1/4\", \"decision\": [true, \"h.test\", true, \"\", \"/\"]}, \"passed\": true}, {\"check\": \"fixture 6\", \"actual\": {\"request\": \"/requests/1/5\", \"decision\": [false, \"\", false, \"/MiXeD\", \"/MiXeD\"]}, \"expected\": {\"request\": \"/requests/1/5\", \"decision\": [false, \"\", true, \"/MiXeD\", \"/MiXeD\"]}, \"passed\": false}], \"passed\": false}\n"},"broken":{"elapsed_ms":37.239,"exit_code":1,"observations":[{"actual":{"decision":[true,"example.test",true,"/A","/A"],"request":"/requests/1/0"},"check":"fixture 1","expected":{"decision":[true,"example.test",true,"/A","/A"],"request":"/requests/1/0"},"passed":true},{"actual":{"decision":[true,"other.test",true,"/B","/B"],"request":"/requests/1/1"},"check":"fixture 2","expected":{"decision":[true,"other.test",true,"/B","/B"],"request":"/requests/1/1"},"passed":true},{"actual":{"decision":[false,"",true,"/a//b","/a//b"],"request":"/requests/1/2"},"check":"fixture 3","expected":{"decision":[false,"",true,"/a//b","/a//b"],"request":"/requests/1/2"},"passed":true},{"actual":{"decision":[true,"",true,"/missing","/missing"],"request":"/requests/1/3"},"check":"fixture 4","expected":{"decision":[true,"",false,"/missing","/missing"],"request":"/requests/1/3"},"passed":false},{"actual":{"decision":[true,"h.test",true,"","/"],"request":"/requests/1/4"},"check":"fixture 5","expected":{"decision":[true,"h.test",true,"","/"],"request":"/requests/1/4"},"passed":true},{"actual":{"decision":[false,"",true,"/MiXeD","/MiXeD"],"request":"/requests/1/5"},"check":"fixture 6","expected":{"decision":[false,"",true,"/MiXeD","/MiXeD"],"request":"/requests/1/5"},"passed":true}],"passed":false,"stderr":"","stdout":"{\"observations\": [{\"check\": \"fixture 1\", \"actual\": {\"request\": \"/requests/1/0\", \"decision\": [true, \"example.test\", true, \"/A\", \"/A\"]}, \"expected\": {\"request\": \"/requests/1/0\", \"decision\": [true, \"example.test\", true, \"/A\", \"/A\"]}, \"passed\": true}, {\"check\": \"fixture 2\", \"actual\": {\"request\": \"/requests/1/1\", \"decision\": [true, \"other.test\", true, \"/B\", \"/B\"]}, \"expected\": {\"request\": \"/requests/1/1\", \"decision\": [true, \"other.test\", true, \"/B\", \"/B\"]}, \"passed\": true}, {\"check\": \"fixture 3\", \"actual\": {\"request\": \"/requests/1/2\", \"decision\": [false, \"\", true, \"/a//b\", \"/a//b\"]}, \"expected\": {\"request\": \"/requests/1/2\", \"decision\": [false, \"\", true, \"/a//b\", \"/a//b\"]}, \"passed\": true}, {\"check\": \"fixture 4\", \"actual\": {\"request\": \"/requests/1/3\", \"decision\": [true, \"\", true, \"/missing\", \"/missing\"]}, \"expected\": {\"request\": \"/requests/1/3\", \"decision\": [true, \"\", false, \"/missing\", \"/missing\"]}, \"passed\": false}, {\"check\": \"fixture 5\", \"actual\": {\"request\": \"/requests/1/4\", \"decision\": [true, \"h.test\", true, \"\", \"/\"]}, \"expected\": {\"request\": \"/requests/1/4\", \"decision\": [true, \"h.test\", true, \"\", \"/\"]}, \"passed\": true}, {\"check\": \"fixture 6\", \"actual\": {\"request\": \"/requests/1/5\", \"decision\": [false, \"\", true, \"/MiXeD\", \"/MiXeD\"]}, \"expected\": {\"request\": \"/requests/1/5\", \"decision\": [false, \"\", true, \"/MiXeD\", \"/MiXeD\"]}, \"passed\": true}], \"passed\": false}\n"},"fixed":{"elapsed_ms":41.06,"exit_code":0,"observations":[{"actual":{"decision":[true,"example.test",true,"/A","/A"],"request":"/requests/1/0"},"check":"fixture 1","expected":{"decision":[true,"example.test",true,"/A","/A"],"request":"/requests/1/0"},"passed":true},{"actual":{"decision":[true,"other.test",true,"/B","/B"],"request":"/requests/1/1"},"check":"fixture 2","expected":{"decision":[true,"other.test",true,"/B","/B"],"request":"/requests/1/1"},"passed":true},{"actual":{"decision":[false,"",true,"/a//b","/a//b"],"request":"/requests/1/2"},"check":"fixture 3","expected":{"decision":[false,"",true,"/a//b","/a//b"],"request":"/requests/1/2"},"passed":true},{"actual":{"decision":[true,"",false,"/missing","/missing"],"request":"/requests/1/3"},"check":"fixture 4","expected":{"decision":[true,"",false,"/missing","/missing"],"request":"/requests/1/3"},"passed":true},{"actual":{"decision":[true,"h.test",true,"","/"],"request":"/requests/1/4"},"check":"fixture 5","expected":{"decision":[true,"h.test",true,"","/"],"request":"/requests/1/4"},"passed":true},{"actual":{"decision":[false,"",true,"/MiXeD","/MiXeD"],"request":"/requests/1/5"},"check":"fixture 6","expected":{"decision":[false,"",true,"/MiXeD","/MiXeD"],"request":"/requests/1/5"},"passed":true}],"passed":true,"stderr":"","stdout":"{\"observations\": [{\"check\": \"fixture 1\", \"actual\": {\"request\": \"/requests/1/0\", \"decision\": [true, \"example.test\", true, \"/A\", \"/A\"]}, \"expected\": {\"request\": \"/requests/1/0\", \"decision\": [true, \"example.test\", true, \"/A\", \"/A\"]}, \"passed\": true}, {\"check\": \"fixture 2\", \"actual\": {\"request\": \"/requests/1/1\", \"decision\": [true, \"other.test\", true, \"/B\", \"/B\"]}, \"expected\": {\"request\": \"/requests/1/1\", \"decision\": [true, \"other.test\", true, \"/B\", \"/B\"]}, \"passed\": true}, {\"check\": \"fixture 3\", \"actual\": {\"request\": \"/requests/1/2\", \"decision\": [false, \"\", true, \"/a//b\", \"/a//b\"]}, \"expected\": {\"request\": \"/requests/1/2\", \"decision\": [false, \"\", true, \"/a//b\", \"/a//b\"]}, \"passed\": true}, {\"check\": \"fixture 4\", \"actual\": {\"request\": \"/requests/1/3\", \"decision\": [true, \"\", false, \"/missing\", \"/missing\"]}, \"expected\": {\"request\": \"/requests/1/3\", \"decision\": [true, \"\", false, \"/missing\", \"/missing\"]}, \"passed\": true}, {\"check\": \"fixture 5\", \"actual\": {\"request\": \"/requests/1/4\", \"decision\": [true, \"h.test\", true, \"\", \"/\"]}, \"expected\": {\"request\": \"/requests/1/4\", \"decision\": [true, \"h.test\", true, \"\", \"/\"]}, \"passed\": true}, {\"check\": \"fixture 6\", \"actual\": {\"request\": \"/requests/1/5\", \"decision\": [false, \"\", true, \"/MiXeD\", \"/MiXeD\"]}, \"expected\": {\"request\": \"/requests/1/5\", \"decision\": [false, \"\", true, \"/MiXeD\", \"/MiXeD\"]}, \"passed\": true}], \"passed\": true}\n"}},"verified":true,"visibility":"public"}