{"abstract":"Build public redirect origins from explicitly trusted proxy metadata: the trusted proto fallback branch emits an incorrect decision.","category":"HTTP redirects","checks":6,"contract":"Build public redirect origins from explicitly trusted proxy metadata. The explicit fixture inputs and outputs define a bounded offline policy; request identity must accompany the decision.","evaluation_group":"s3-http-redirects-forwarded-public-origin","failed_approach":"The partial repair uses 'proto if trusted else direct_scheme' and still fails an explicit boundary or control.","family":"s3-http-redirects-forwarded-public-origin-trusted-proto-fallback","id":"FA-29046","implementations":{"attempt":{"sha256":"98fe5a40781e859e8948d1e223e85cce68344aa3fa76100f9ec16a0ed51cb437","source":"\"\"\"Failure Map reference implementation. Python standard library only.\"\"\"\nimport json\nfrom urllib.parse import urlsplit, unquote, quote\nimport posixpath\nimport re\nN = 1\nobservations = []\ndef solve(request, trusted, chain, proto, direct_host, direct_scheme, prefix):\n    return {'request': request, 'decision': [chain[0] if trusted and chain else direct_host, proto if trusted else direct_scheme, chain, bool(chain), '/' + prefix.lstrip('/') if prefix else '', prefix if trusted else '', direct_host, prefix.rstrip('/')+'/' if prefix else '/', not proto or proto.lower() in ('http','https'), 'forwarded' if trusted and chain else 'direct']} \ndef check(label, actual, expected):\n    observations.append({\"check\": label, \"actual\": actual, \"expected\": expected, \"passed\": actual == expected})\ncheck('fixture 1', solve('/requests/' + str(N) + '/0', True, ['client.test', 'edge.test'], 'https', 'internal:8080', 'http', '/app'), {'request': '/requests/' + str(N) + '/0', 'decision': ['client.test', 'https', ['client.test', 'edge.test'], True, '/app', '/app', 'internal:8080', '/app/', True, 'forwarded']})\ncheck('fixture 2', solve('/requests/' + str(N) + '/1', False, ['attacker.test'], 'https', 'public.test', 'http', '/'), {'request': '/requests/' + str(N) + '/1', 'decision': ['public.test', 'http', ['attacker.test'], True, '/', '', 'public.test', '/', True, 'direct']})\ncheck('fixture 3', solve('/requests/' + str(N) + '/2', True, [], '', 'fallback.test', 'https', ''), {'request': '/requests/' + str(N) + '/2', 'decision': ['fallback.test', 'https', [], False, '', '', 'fallback.test', '/', True, 'direct']})\ncheck('fixture 4', solve('/requests/' + str(N) + '/3', True, ['one.test', 'two.test', 'three.test'], 'http', 'internal', 'https', '/v2/'), {'request': '/requests/' + str(N) + '/3', 'decision': ['one.test', 'http', ['one.test', 'two.test', 'three.test'], True, '/v2/', '/v2/', 'internal', '/v2/', True, 'forwarded']})\ncheck('fixture 5', solve('/requests/' + str(N) + '/4', True, ['public.test'], 'HTTPS', 'internal', 'http', '//evil.test'), {'request': '/requests/' + str(N) + '/4', 'decision': ['public.test', 'https', ['public.test'], True, '/evil.test', '//evil.test', 'internal', '//evil.test/', True, 'forwarded']})\ncheck('fixture 6', solve('/requests/' + str(N) + '/5', False, [], 'http', 'actual.test', 'https', '/x'), {'request': '/requests/' + str(N) + '/5', 'decision': ['actual.test', 'https', [], False, '/x', '', 'actual.test', '/x/', True, 'direct']})\nprint(json.dumps({\"observations\": observations, \"passed\": all(x[\"passed\"] for x in observations)}, ensure_ascii=False))\nraise SystemExit(0 if all(x[\"passed\"] for x in observations) else 1)\n"},"broken":{"sha256":"2dab68542fe9b917fbd1d6129c3a3d0ee72f85aeac2f4ba89087c1d0d2fb0006","source":"\"\"\"Failure Map reference implementation. Python standard library only.\"\"\"\nimport json\nfrom urllib.parse import urlsplit, unquote, quote\nimport posixpath\nimport re\nN = 1\nobservations = []\ndef solve(request, trusted, chain, proto, direct_host, direct_scheme, prefix):\n    return {'request': request, 'decision': [chain[0] if trusted and chain else direct_host, proto.lower() if proto else direct_scheme, chain, bool(chain), '/' + prefix.lstrip('/') if prefix else '', prefix if trusted else '', direct_host, prefix.rstrip('/')+'/' if prefix else '/', not proto or proto.lower() in ('http','https'), 'forwarded' if trusted and chain else 'direct']} \ndef check(label, actual, expected):\n    observations.append({\"check\": label, \"actual\": actual, \"expected\": expected, \"passed\": actual == expected})\ncheck('fixture 1', solve('/requests/' + str(N) + '/0', True, ['client.test', 'edge.test'], 'https', 'internal:8080', 'http', '/app'), {'request': '/requests/' + str(N) + '/0', 'decision': ['client.test', 'https', ['client.test', 'edge.test'], True, '/app', '/app', 'internal:8080', '/app/', True, 'forwarded']})\ncheck('fixture 2', solve('/requests/' + str(N) + '/1', False, ['attacker.test'], 'https', 'public.test', 'http', '/'), {'request': '/requests/' + str(N) + '/1', 'decision': ['public.test', 'http', ['attacker.test'], True, '/', '', 'public.test', '/', True, 'direct']})\ncheck('fixture 3', solve('/requests/' + str(N) + '/2', True, [], '', 'fallback.test', 'https', ''), {'request': '/requests/' + str(N) + '/2', 'decision': ['fallback.test', 'https', [], False, '', '', 'fallback.test', '/', True, 'direct']})\ncheck('fixture 4', solve('/requests/' + str(N) + '/3', True, ['one.test', 'two.test', 'three.test'], 'http', 'internal', 'https', '/v2/'), {'request': '/requests/' + str(N) + '/3', 'decision': ['one.test', 'http', ['one.test', 'two.test', 'three.test'], True, '/v2/', '/v2/', 'internal', '/v2/', True, 'forwarded']})\ncheck('fixture 5', solve('/requests/' + str(N) + '/4', True, ['public.test'], 'HTTPS', 'internal', 'http', '//evil.test'), {'request': '/requests/' + str(N) + '/4', 'decision': ['public.test', 'https', ['public.test'], True, '/evil.test', '//evil.test', 'internal', '//evil.test/', True, 'forwarded']})\ncheck('fixture 6', solve('/requests/' + str(N) + '/5', False, [], 'http', 'actual.test', 'https', '/x'), {'request': '/requests/' + str(N) + '/5', 'decision': ['actual.test', 'https', [], False, '/x', '', 'actual.test', '/x/', True, 'direct']})\nprint(json.dumps({\"observations\": observations, \"passed\": all(x[\"passed\"] for x in observations)}, ensure_ascii=False))\nraise SystemExit(0 if all(x[\"passed\"] for x in observations) else 1)\n"},"fixed":{"sha256":"1cf0d52a188497680b662446e9e728ece3ead2736ca856b111c53d634a32c1b7","source":"\"\"\"Failure Map reference implementation. Python standard library only.\"\"\"\nimport json\nfrom urllib.parse import urlsplit, unquote, quote\nimport posixpath\nimport re\nN = 1\nobservations = []\ndef solve(request, trusted, chain, proto, direct_host, direct_scheme, prefix):\n    return {'request': request, 'decision': [chain[0] if trusted and chain else direct_host, proto.lower() if trusted and proto else direct_scheme, chain, bool(chain), '/' + prefix.lstrip('/') if prefix else '', prefix if trusted else '', direct_host, prefix.rstrip('/')+'/' if prefix else '/', not proto or proto.lower() in ('http','https'), 'forwarded' if trusted and chain else 'direct']} \ndef check(label, actual, expected):\n    observations.append({\"check\": label, \"actual\": actual, \"expected\": expected, \"passed\": actual == expected})\ncheck('fixture 1', solve('/requests/' + str(N) + '/0', True, ['client.test', 'edge.test'], 'https', 'internal:8080', 'http', '/app'), {'request': '/requests/' + str(N) + '/0', 'decision': ['client.test', 'https', ['client.test', 'edge.test'], True, '/app', '/app', 'internal:8080', '/app/', True, 'forwarded']})\ncheck('fixture 2', solve('/requests/' + str(N) + '/1', False, ['attacker.test'], 'https', 'public.test', 'http', '/'), {'request': '/requests/' + str(N) + '/1', 'decision': ['public.test', 'http', ['attacker.test'], True, '/', '', 'public.test', '/', True, 'direct']})\ncheck('fixture 3', solve('/requests/' + str(N) + '/2', True, [], '', 'fallback.test', 'https', ''), {'request': '/requests/' + str(N) + '/2', 'decision': ['fallback.test', 'https', [], False, '', '', 'fallback.test', '/', True, 'direct']})\ncheck('fixture 4', solve('/requests/' + str(N) + '/3', True, ['one.test', 'two.test', 'three.test'], 'http', 'internal', 'https', '/v2/'), {'request': '/requests/' + str(N) + '/3', 'decision': ['one.test', 'http', ['one.test', 'two.test', 'three.test'], True, '/v2/', '/v2/', 'internal', '/v2/', True, 'forwarded']})\ncheck('fixture 5', solve('/requests/' + str(N) + '/4', True, ['public.test'], 'HTTPS', 'internal', 'http', '//evil.test'), {'request': '/requests/' + str(N) + '/4', 'decision': ['public.test', 'https', ['public.test'], True, '/evil.test', '//evil.test', 'internal', '//evil.test/', True, 'forwarded']})\ncheck('fixture 6', solve('/requests/' + str(N) + '/5', False, [], 'http', 'actual.test', 'https', '/x'), {'request': '/requests/' + str(N) + '/5', 'decision': ['actual.test', 'https', [], False, '/x', '', 'actual.test', '/x/', True, 'direct']})\nprint(json.dumps({\"observations\": observations, \"passed\": all(x[\"passed\"] for x in observations)}, ensure_ascii=False))\nraise SystemExit(0 if all(x[\"passed\"] for x in observations) else 1)\n"}},"limitations":"Stipulated offline redirect policy, not a complete HTTP, browser, URL, cache, or security implementation. Numbered variants vary request correlation identity. This reproducer isolates one failure mechanism. Results cover the supplied fixtures. Variants within a family share a test contract and should remain grouped when constructing evaluation splits. Related mechanisms with a shared evaluation_group must also remain together; these controlled models are not independent production incidents.","method":"Deterministic executable model with adversarial boundary fixtures.","provenance":{"created_by":"Failure Map","dependencies":"Python standard library","family":"s3-http-redirects-forwarded-public-origin-trusted-proto-fallback","generated_at":"2026-09-29T14:41:39.513669+00:00","license":"CC0-1.0","python":"3.12.14","seed":1,"split":"open-access"},"relevance":"Models a redirect controller decision before following a target or exposing a redirect result.","repair":"At this decision use 'proto.lower() if trusted and proto else direct_scheme', preserving the other controller outputs.","root_cause":"The trusted-proto-fallback decision uses 'proto.lower() if proto else direct_scheme'; this violates the stipulated controller policy.","sha256":"4ef4ddc6acd1e438750ae9e824f5da75c2021ccfed7e2e8a65129925c0f847c9","title":"Build public redirect origins from explicitly trusted proxy metadata: trusted proto fallback · case 01","variant":1,"variant_policy":"N changes request correlation identity. Policy boundary fixtures are reused; numbered variants are not independent examples.","verification":{"attempt":{"elapsed_ms":46.925,"exit_code":1,"observations":[{"actual":{"decision":["client.test","https",["client.test","edge.test"],true,"/app","/app","internal:8080","/app/",true,"forwarded"],"request":"/requests/1/0"},"check":"fixture 1","expected":{"decision":["client.test","https",["client.test","edge.test"],true,"/app","/app","internal:8080","/app/",true,"forwarded"],"request":"/requests/1/0"},"passed":true},{"actual":{"decision":["public.test","http",["attacker.test"],true,"/","","public.test","/",true,"direct"],"request":"/requests/1/1"},"check":"fixture 2","expected":{"decision":["public.test","http",["attacker.test"],true,"/","","public.test","/",true,"direct"],"request":"/requests/1/1"},"passed":true},{"actual":{"decision":["fallback.test","",[],false,"","","fallback.test","/",true,"direct"],"request":"/requests/1/2"},"check":"fixture 3","expected":{"decision":["fallback.test","https",[],false,"","","fallback.test","/",true,"direct"],"request":"/requests/1/2"},"passed":false},{"actual":{"decision":["one.test","http",["one.test","two.test","three.test"],true,"/v2/","/v2/","internal","/v2/",true,"forwarded"],"request":"/requests/1/3"},"check":"fixture 4","expected":{"decision":["one.test","http",["one.test","two.test","three.test"],true,"/v2/","/v2/","internal","/v2/",true,"forwarded"],"request":"/requests/1/3"},"passed":true},{"actual":{"decision":["public.test","HTTPS",["public.test"],true,"/evil.test","//evil.test","internal","//evil.test/",true,"forwarded"],"request":"/requests/1/4"},"check":"fixture 5","expected":{"decision":["public.test","https",["public.test"],true,"/evil.test","//evil.test","internal","//evil.test/",true,"forwarded"],"request":"/requests/1/4"},"passed":false},{"actual":{"decision":["actual.test","https",[],false,"/x","","actual.test","/x/",true,"direct"],"request":"/requests/1/5"},"check":"fixture 6","expected":{"decision":["actual.test","https",[],false,"/x","","actual.test","/x/",true,"direct"],"request":"/requests/1/5"},"passed":true}],"passed":false,"stderr":"","stdout":"{\"observations\": [{\"check\": \"fixture 1\", \"actual\": {\"request\": \"/requests/1/0\", \"decision\": [\"client.test\", \"https\", [\"client.test\", \"edge.test\"], true, \"/app\", \"/app\", \"internal:8080\", \"/app/\", true, \"forwarded\"]}, \"expected\": {\"request\": \"/requests/1/0\", \"decision\": [\"client.test\", \"https\", [\"client.test\", \"edge.test\"], true, \"/app\", \"/app\", \"internal:8080\", \"/app/\", true, \"forwarded\"]}, \"passed\": true}, {\"check\": \"fixture 2\", \"actual\": {\"request\": \"/requests/1/1\", \"decision\": [\"public.test\", \"http\", [\"attacker.test\"], true, \"/\", \"\", \"public.test\", \"/\", true, \"direct\"]}, \"expected\": {\"request\": \"/requests/1/1\", \"decision\": [\"public.test\", \"http\", [\"attacker.test\"], true, \"/\", \"\", \"public.test\", \"/\", true, \"direct\"]}, \"passed\": true}, {\"check\": \"fixture 3\", \"actual\": {\"request\": \"/requests/1/2\", \"decision\": [\"fallback.test\", \"\", [], false, \"\", \"\", \"fallback.test\", \"/\", true, \"direct\"]}, \"expected\": {\"request\": \"/requests/1/2\", \"decision\": [\"fallback.test\", \"https\", [], false, \"\", \"\", \"fallback.test\", \"/\", true, \"direct\"]}, \"passed\": false}, {\"check\": \"fixture 4\", \"actual\": {\"request\": \"/requests/1/3\", \"decision\": [\"one.test\", \"http\", [\"one.test\", \"two.test\", \"three.test\"], true, \"/v2/\", \"/v2/\", \"internal\", \"/v2/\", true, \"forwarded\"]}, \"expected\": {\"request\": \"/requests/1/3\", \"decision\": [\"one.test\", \"http\", [\"one.test\", \"two.test\", \"three.test\"], true, \"/v2/\", \"/v2/\", \"internal\", \"/v2/\", true, \"forwarded\"]}, \"passed\": true}, {\"check\": \"fixture 5\", \"actual\": {\"request\": \"/requests/1/4\", \"decision\": [\"public.test\", \"HTTPS\", [\"public.test\"], true, \"/evil.test\", \"//evil.test\", \"internal\", \"//evil.test/\", true, \"forwarded\"]}, \"expected\": {\"request\": \"/requests/1/4\", \"decision\": [\"public.test\", \"https\", [\"public.test\"], true, \"/evil.test\", \"//evil.test\", \"internal\", \"//evil.test/\", true, \"forwarded\"]}, \"passed\": false}, {\"check\": \"fixture 6\", \"actual\": {\"request\": \"/requests/1/5\", \"decision\": [\"actual.test\", \"https\", [], false, \"/x\", \"\", \"actual.test\", \"/x/\", true, \"direct\"]}, \"expected\": {\"request\": \"/requests/1/5\", \"decision\": [\"actual.test\", \"https\", [], false, \"/x\", \"\", \"actual.test\", \"/x/\", true, \"direct\"]}, \"passed\": true}], \"passed\": false}\n"},"broken":{"elapsed_ms":38.699,"exit_code":1,"observations":[{"actual":{"decision":["client.test","https",["client.test","edge.test"],true,"/app","/app","internal:8080","/app/",true,"forwarded"],"request":"/requests/1/0"},"check":"fixture 1","expected":{"decision":["client.test","https",["client.test","edge.test"],true,"/app","/app","internal:8080","/app/",true,"forwarded"],"request":"/requests/1/0"},"passed":true},{"actual":{"decision":["public.test","https",["attacker.test"],true,"/","","public.test","/",true,"direct"],"request":"/requests/1/1"},"check":"fixture 2","expected":{"decision":["public.test","http",["attacker.test"],true,"/","","public.test","/",true,"direct"],"request":"/requests/1/1"},"passed":false},{"actual":{"decision":["fallback.test","https",[],false,"","","fallback.test","/",true,"direct"],"request":"/requests/1/2"},"check":"fixture 3","expected":{"decision":["fallback.test","https",[],false,"","","fallback.test","/",true,"direct"],"request":"/requests/1/2"},"passed":true},{"actual":{"decision":["one.test","http",["one.test","two.test","three.test"],true,"/v2/","/v2/","internal","/v2/",true,"forwarded"],"request":"/requests/1/3"},"check":"fixture 4","expected":{"decision":["one.test","http",["one.test","two.test","three.test"],true,"/v2/","/v2/","internal","/v2/",true,"forwarded"],"request":"/requests/1/3"},"passed":true},{"actual":{"decision":["public.test","https",["public.test"],true,"/evil.test","//evil.test","internal","//evil.test/",true,"forwarded"],"request":"/requests/1/4"},"check":"fixture 5","expected":{"decision":["public.test","https",["public.test"],true,"/evil.test","//evil.test","internal","//evil.test/",true,"forwarded"],"request":"/requests/1/4"},"passed":true},{"actual":{"decision":["actual.test","http",[],false,"/x","","actual.test","/x/",true,"direct"],"request":"/requests/1/5"},"check":"fixture 6","expected":{"decision":["actual.test","https",[],false,"/x","","actual.test","/x/",true,"direct"],"request":"/requests/1/5"},"passed":false}],"passed":false,"stderr":"","stdout":"{\"observations\": [{\"check\": \"fixture 1\", \"actual\": {\"request\": \"/requests/1/0\", \"decision\": [\"client.test\", \"https\", [\"client.test\", \"edge.test\"], true, \"/app\", \"/app\", \"internal:8080\", \"/app/\", true, \"forwarded\"]}, \"expected\": {\"request\": \"/requests/1/0\", \"decision\": [\"client.test\", \"https\", [\"client.test\", \"edge.test\"], true, \"/app\", \"/app\", \"internal:8080\", \"/app/\", true, \"forwarded\"]}, \"passed\": true}, {\"check\": \"fixture 2\", \"actual\": {\"request\": \"/requests/1/1\", \"decision\": [\"public.test\", \"https\", [\"attacker.test\"], true, \"/\", \"\", \"public.test\", \"/\", true, \"direct\"]}, \"expected\": {\"request\": \"/requests/1/1\", \"decision\": [\"public.test\", \"http\", [\"attacker.test\"], true, \"/\", \"\", \"public.test\", \"/\", true, \"direct\"]}, \"passed\": false}, {\"check\": \"fixture 3\", \"actual\": {\"request\": \"/requests/1/2\", \"decision\": [\"fallback.test\", \"https\", [], false, \"\", \"\", \"fallback.test\", \"/\", true, \"direct\"]}, \"expected\": {\"request\": \"/requests/1/2\", \"decision\": [\"fallback.test\", \"https\", [], false, \"\", \"\", \"fallback.test\", \"/\", true, \"direct\"]}, \"passed\": true}, {\"check\": \"fixture 4\", \"actual\": {\"request\": \"/requests/1/3\", \"decision\": [\"one.test\", \"http\", [\"one.test\", \"two.test\", \"three.test\"], true, \"/v2/\", \"/v2/\", \"internal\", \"/v2/\", true, \"forwarded\"]}, \"expected\": {\"request\": \"/requests/1/3\", \"decision\": [\"one.test\", \"http\", [\"one.test\", \"two.test\", \"three.test\"], true, \"/v2/\", \"/v2/\", \"internal\", \"/v2/\", true, \"forwarded\"]}, \"passed\": true}, {\"check\": \"fixture 5\", \"actual\": {\"request\": \"/requests/1/4\", \"decision\": [\"public.test\", \"https\", [\"public.test\"], true, \"/evil.test\", \"//evil.test\", \"internal\", \"//evil.test/\", true, \"forwarded\"]}, \"expected\": {\"request\": \"/requests/1/4\", \"decision\": [\"public.test\", \"https\", [\"public.test\"], true, \"/evil.test\", \"//evil.test\", \"internal\", \"//evil.test/\", true, \"forwarded\"]}, \"passed\": true}, {\"check\": \"fixture 6\", \"actual\": {\"request\": \"/requests/1/5\", \"decision\": [\"actual.test\", \"http\", [], false, \"/x\", \"\", \"actual.test\", \"/x/\", true, \"direct\"]}, \"expected\": {\"request\": \"/requests/1/5\", \"decision\": [\"actual.test\", \"https\", [], false, \"/x\", \"\", \"actual.test\", \"/x/\", true, \"direct\"]}, \"passed\": false}], \"passed\": false}\n"},"fixed":{"elapsed_ms":40.781,"exit_code":0,"observations":[{"actual":{"decision":["client.test","https",["client.test","edge.test"],true,"/app","/app","internal:8080","/app/",true,"forwarded"],"request":"/requests/1/0"},"check":"fixture 1","expected":{"decision":["client.test","https",["client.test","edge.test"],true,"/app","/app","internal:8080","/app/",true,"forwarded"],"request":"/requests/1/0"},"passed":true},{"actual":{"decision":["public.test","http",["attacker.test"],true,"/","","public.test","/",true,"direct"],"request":"/requests/1/1"},"check":"fixture 2","expected":{"decision":["public.test","http",["attacker.test"],true,"/","","public.test","/",true,"direct"],"request":"/requests/1/1"},"passed":true},{"actual":{"decision":["fallback.test","https",[],false,"","","fallback.test","/",true,"direct"],"request":"/requests/1/2"},"check":"fixture 3","expected":{"decision":["fallback.test","https",[],false,"","","fallback.test","/",true,"direct"],"request":"/requests/1/2"},"passed":true},{"actual":{"decision":["one.test","http",["one.test","two.test","three.test"],true,"/v2/","/v2/","internal","/v2/",true,"forwarded"],"request":"/requests/1/3"},"check":"fixture 4","expected":{"decision":["one.test","http",["one.test","two.test","three.test"],true,"/v2/","/v2/","internal","/v2/",true,"forwarded"],"request":"/requests/1/3"},"passed":true},{"actual":{"decision":["public.test","https",["public.test"],true,"/evil.test","//evil.test","internal","//evil.test/",true,"forwarded"],"request":"/requests/1/4"},"check":"fixture 5","expected":{"decision":["public.test","https",["public.test"],true,"/evil.test","//evil.test","internal","//evil.test/",true,"forwarded"],"request":"/requests/1/4"},"passed":true},{"actual":{"decision":["actual.test","https",[],false,"/x","","actual.test","/x/",true,"direct"],"request":"/requests/1/5"},"check":"fixture 6","expected":{"decision":["actual.test","https",[],false,"/x","","actual.test","/x/",true,"direct"],"request":"/requests/1/5"},"passed":true}],"passed":true,"stderr":"","stdout":"{\"observations\": [{\"check\": \"fixture 1\", \"actual\": {\"request\": \"/requests/1/0\", \"decision\": [\"client.test\", \"https\", [\"client.test\", \"edge.test\"], true, \"/app\", \"/app\", \"internal:8080\", \"/app/\", true, \"forwarded\"]}, \"expected\": {\"request\": \"/requests/1/0\", \"decision\": [\"client.test\", \"https\", [\"client.test\", \"edge.test\"], true, \"/app\", \"/app\", \"internal:8080\", \"/app/\", true, \"forwarded\"]}, \"passed\": true}, {\"check\": \"fixture 2\", \"actual\": {\"request\": \"/requests/1/1\", \"decision\": [\"public.test\", \"http\", [\"attacker.test\"], true, \"/\", \"\", \"public.test\", \"/\", true, \"direct\"]}, \"expected\": {\"request\": \"/requests/1/1\", \"decision\": [\"public.test\", \"http\", [\"attacker.test\"], true, \"/\", \"\", \"public.test\", \"/\", true, \"direct\"]}, \"passed\": true}, {\"check\": \"fixture 3\", \"actual\": {\"request\": \"/requests/1/2\", \"decision\": [\"fallback.test\", \"https\", [], false, \"\", \"\", \"fallback.test\", \"/\", true, \"direct\"]}, \"expected\": {\"request\": \"/requests/1/2\", \"decision\": [\"fallback.test\", \"https\", [], false, \"\", \"\", \"fallback.test\", \"/\", true, \"direct\"]}, \"passed\": true}, {\"check\": \"fixture 4\", \"actual\": {\"request\": \"/requests/1/3\", \"decision\": [\"one.test\", \"http\", [\"one.test\", \"two.test\", \"three.test\"], true, \"/v2/\", \"/v2/\", \"internal\", \"/v2/\", true, \"forwarded\"]}, \"expected\": {\"request\": \"/requests/1/3\", \"decision\": [\"one.test\", \"http\", [\"one.test\", \"two.test\", \"three.test\"], true, \"/v2/\", \"/v2/\", \"internal\", \"/v2/\", true, \"forwarded\"]}, \"passed\": true}, {\"check\": \"fixture 5\", \"actual\": {\"request\": \"/requests/1/4\", \"decision\": [\"public.test\", \"https\", [\"public.test\"], true, \"/evil.test\", \"//evil.test\", \"internal\", \"//evil.test/\", true, \"forwarded\"]}, \"expected\": {\"request\": \"/requests/1/4\", \"decision\": [\"public.test\", \"https\", [\"public.test\"], true, \"/evil.test\", \"//evil.test\", \"internal\", \"//evil.test/\", true, \"forwarded\"]}, \"passed\": true}, {\"check\": \"fixture 6\", \"actual\": {\"request\": \"/requests/1/5\", \"decision\": [\"actual.test\", \"https\", [], false, \"/x\", \"\", \"actual.test\", \"/x/\", true, \"direct\"]}, \"expected\": {\"request\": \"/requests/1/5\", \"decision\": [\"actual.test\", \"https\", [], false, \"/x\", \"\", \"actual.test\", \"/x/\", true, \"direct\"]}, \"passed\": true}], \"passed\": true}\n"}},"verified":true,"visibility":"public"}