{"abstract":"Refill cap violates retry transition semantics","category":"HTTP retries","checks":9,"contract":"configure(capacity) resets a shared retry pool. reserve(request) consumes one token only for a new reservation; commit spends its token and removes the reservation, abort refunds exactly once, refill is capped. Repeated reserve is idempotent; unknown commit/abort does nothing. Return admissions and available token count.","evaluation_group":"s3-http_retries-budget-reservations","failed_approach":"The attempted repair changes the faulty site to max(capacity-len(held),available+e[1]) but still violates a regression oracle.","family":"s3-http_retries-budget-reservations-refill-cap","id":"FA-29941","implementations":{"attempt":{"sha256":"4703a4d44e7f71aa19ee881820b8fe7ee6ac9f5e3d779276f8f8267254db4ed7","source":"\"\"\"Failure Map reference implementation. Python standard library only.\"\"\"\nimport json\n\nN = 1\nobservations = []\ndef solve(events):\n    capacity=0; available=0; held=set(); out=[]\n    for e in events:\n        if e[0]=='configure':\n            capacity=e[1]; available=capacity; held.clear()\n        elif e[0]=='reserve':\n            if e[1] in held: out.append('held'); continue\n            if available==0: out.append('denied'); continue\n            available-=1\n            held.add(e[1])\n            out.append('reserved')\n        elif e[0]=='commit':\n            if e[1] in held:\n                held.remove(e[1])\n        elif e[0]=='abort':\n            if e[1] in held:\n                held.remove(e[1])\n                available=min(capacity,available+1)\n        elif e[0]=='refill':\n            available=max(capacity-len(held),available+e[1])\n    return [out,available,sorted(held)]\ndef check(label, actual, expected):\n    observations.append({\"check\": label, \"actual\": actual, \"expected\": expected, \"passed\": actual == expected})\ncheck('0', solve([('configure',3),('reserve','a'),('reserve','b'),('abort','a')]), [['reserved','reserved'],2,['b']])\ncheck('1', solve([('configure',3),('reserve','a'),('commit','a'),('reserve','a'),('commit','a'),('reserve','a'),('commit','a'),('refill',2)]), [['reserved','reserved','reserved'],2,[]])\ncheck('2', solve([]), [[],0,[]])\ncheck('3', solve([('configure',0),('reserve','a')]), [['denied'],0,[]])\ncheck('4', solve([('configure',2),('reserve','a'),('reserve','a'),('reserve','b'),('reserve','c')]), [['reserved','held','reserved','denied'],0,['a','b']])\ncheck('5', solve([('configure',3),('reserve','a'),('reserve','b'),('commit','a'),('abort','a'),('abort','b'),('abort','b')]), [['reserved','reserved'],2,[]])\ncheck('6', solve([('configure',N+3),('reserve','a'),('refill',N+10)]), [['reserved'],N+2,['a']])\ncheck('7', solve([('configure',4),('reserve','a'),('commit','a'),('reserve','b'),('commit','b'),('refill',1)]), [['reserved','reserved'],3,[]])\ncheck('8', solve([('configure',1),('reserve','a'),('configure',2),('reserve','a')]), [['reserved','reserved'],1,['a']])\nprint(json.dumps({\"observations\": observations, \"passed\": all(x[\"passed\"] for x in observations)}, ensure_ascii=False))\nraise SystemExit(0 if all(x[\"passed\"] for x in observations) else 1)\n"},"broken":{"sha256":"90b4e25829eb31607781d550adade5741c24eb582bf505c17d53ad807b18cd49","source":"\"\"\"Failure Map reference implementation. Python standard library only.\"\"\"\nimport json\n\nN = 1\nobservations = []\ndef solve(events):\n    capacity=0; available=0; held=set(); out=[]\n    for e in events:\n        if e[0]=='configure':\n            capacity=e[1]; available=capacity; held.clear()\n        elif e[0]=='reserve':\n            if e[1] in held: out.append('held'); continue\n            if available==0: out.append('denied'); continue\n            available-=1\n            held.add(e[1])\n            out.append('reserved')\n        elif e[0]=='commit':\n            if e[1] in held:\n                held.remove(e[1])\n        elif e[0]=='abort':\n            if e[1] in held:\n                held.remove(e[1])\n                available=min(capacity,available+1)\n        elif e[0]=='refill':\n            available=available+e[1]\n    return [out,available,sorted(held)]\ndef check(label, actual, expected):\n    observations.append({\"check\": label, \"actual\": actual, \"expected\": expected, \"passed\": actual == expected})\ncheck('0', solve([('configure',3),('reserve','a'),('reserve','b'),('abort','a')]), [['reserved','reserved'],2,['b']])\ncheck('1', solve([('configure',3),('reserve','a'),('commit','a'),('reserve','a'),('commit','a'),('reserve','a'),('commit','a'),('refill',2)]), [['reserved','reserved','reserved'],2,[]])\ncheck('2', solve([]), [[],0,[]])\ncheck('3', solve([('configure',0),('reserve','a')]), [['denied'],0,[]])\ncheck('4', solve([('configure',2),('reserve','a'),('reserve','a'),('reserve','b'),('reserve','c')]), [['reserved','held','reserved','denied'],0,['a','b']])\ncheck('5', solve([('configure',3),('reserve','a'),('reserve','b'),('commit','a'),('abort','a'),('abort','b'),('abort','b')]), [['reserved','reserved'],2,[]])\ncheck('6', solve([('configure',N+3),('reserve','a'),('refill',N+10)]), [['reserved'],N+2,['a']])\ncheck('7', solve([('configure',4),('reserve','a'),('commit','a'),('reserve','b'),('commit','b'),('refill',1)]), [['reserved','reserved'],3,[]])\ncheck('8', solve([('configure',1),('reserve','a'),('configure',2),('reserve','a')]), [['reserved','reserved'],1,['a']])\nprint(json.dumps({\"observations\": observations, \"passed\": all(x[\"passed\"] for x in observations)}, ensure_ascii=False))\nraise SystemExit(0 if all(x[\"passed\"] for x in observations) else 1)\n"},"fixed":{"sha256":"7697ed66b0cd8c4c97edc64b0a4a54e1223e32323ce614329d3eea4f2672b5ce","source":"\"\"\"Failure Map reference implementation. Python standard library only.\"\"\"\nimport json\n\nN = 1\nobservations = []\ndef solve(events):\n    capacity=0; available=0; held=set(); out=[]\n    for e in events:\n        if e[0]=='configure':\n            capacity=e[1]; available=capacity; held.clear()\n        elif e[0]=='reserve':\n            if e[1] in held: out.append('held'); continue\n            if available==0: out.append('denied'); continue\n            available-=1\n            held.add(e[1])\n            out.append('reserved')\n        elif e[0]=='commit':\n            if e[1] in held:\n                held.remove(e[1])\n        elif e[0]=='abort':\n            if e[1] in held:\n                held.remove(e[1])\n                available=min(capacity,available+1)\n        elif e[0]=='refill':\n            available=min(capacity-len(held),available+e[1])\n    return [out,available,sorted(held)]\ndef check(label, actual, expected):\n    observations.append({\"check\": label, \"actual\": actual, \"expected\": expected, \"passed\": actual == expected})\ncheck('0', solve([('configure',3),('reserve','a'),('reserve','b'),('abort','a')]), [['reserved','reserved'],2,['b']])\ncheck('1', solve([('configure',3),('reserve','a'),('commit','a'),('reserve','a'),('commit','a'),('reserve','a'),('commit','a'),('refill',2)]), [['reserved','reserved','reserved'],2,[]])\ncheck('2', solve([]), [[],0,[]])\ncheck('3', solve([('configure',0),('reserve','a')]), [['denied'],0,[]])\ncheck('4', solve([('configure',2),('reserve','a'),('reserve','a'),('reserve','b'),('reserve','c')]), [['reserved','held','reserved','denied'],0,['a','b']])\ncheck('5', solve([('configure',3),('reserve','a'),('reserve','b'),('commit','a'),('abort','a'),('abort','b'),('abort','b')]), [['reserved','reserved'],2,[]])\ncheck('6', solve([('configure',N+3),('reserve','a'),('refill',N+10)]), [['reserved'],N+2,['a']])\ncheck('7', solve([('configure',4),('reserve','a'),('commit','a'),('reserve','b'),('commit','b'),('refill',1)]), [['reserved','reserved'],3,[]])\ncheck('8', solve([('configure',1),('reserve','a'),('configure',2),('reserve','a')]), [['reserved','reserved'],1,['a']])\nprint(json.dumps({\"observations\": observations, \"passed\": all(x[\"passed\"] for x in observations)}, ensure_ascii=False))\nraise SystemExit(0 if all(x[\"passed\"] for x in observations) else 1)\n"}},"limitations":"Stipulated bounded simulator, not a complete HTTP implementation or a standards conformance claim. This reproducer isolates one failure mechanism. Results cover the supplied fixtures. Variants within a family share a test contract and should remain grouped when constructing evaluation splits. Related mechanisms with a shared evaluation_group must also remain together; these controlled models are not independent production incidents.","method":"Deterministic executable model with adversarial boundary fixtures.","provenance":{"created_by":"Failure Map","dependencies":"Python standard library","family":"s3-http_retries-budget-reservations-refill-cap","generated_at":"2026-09-29T14:41:48.091230+00:00","license":"CC0-1.0","python":"3.12.14","seed":1,"split":"open-access"},"relevance":"Offline deterministic model of HTTP request retries.","repair":"Restore the specified transition min(capacity-len(held),available+e[1]).","root_cause":"Refill cap violates retry transition semantics","sha256":"60fa66f0d6c5d287b5602ddb1693d216af461193ca8728063c2d377f72e5a08e","title":"Retry budget reservation lifecycle: Refill cap violates retry transition semantics · case 01","variant":1,"variant_policy":"Five numbered records share a model and may reuse boundary fixtures.","verification":{"attempt":{"elapsed_ms":43.168,"exit_code":1,"observations":[{"actual":[["reserved","reserved"],2,["b"]],"check":"0","expected":[["reserved","reserved"],2,["b"]],"passed":true},{"actual":[["reserved","reserved","reserved"],3,[]],"check":"1","expected":[["reserved","reserved","reserved"],2,[]],"passed":false},{"actual":[[],0,[]],"check":"2","expected":[[],0,[]],"passed":true},{"actual":[["denied"],0,[]],"check":"3","expected":[["denied"],0,[]],"passed":true},{"actual":[["reserved","held","reserved","denied"],0,["a","b"]],"check":"4","expected":[["reserved","held","reserved","denied"],0,["a","b"]],"passed":true},{"actual":[["reserved","reserved"],2,[]],"check":"5","expected":[["reserved","reserved"],2,[]],"passed":true},{"actual":[["reserved"],14,["a"]],"check":"6","expected":[["reserved"],3,["a"]],"passed":false},{"actual":[["reserved","reserved"],4,[]],"check":"7","expected":[["reserved","reserved"],3,[]],"passed":false},{"actual":[["reserved","reserved"],1,["a"]],"check":"8","expected":[["reserved","reserved"],1,["a"]],"passed":true}],"passed":false,"stderr":"","stdout":"{\"observations\": [{\"check\": \"0\", \"actual\": [[\"reserved\", \"reserved\"], 2, [\"b\"]], \"expected\": [[\"reserved\", \"reserved\"], 2, [\"b\"]], \"passed\": true}, {\"check\": \"1\", \"actual\": [[\"reserved\", \"reserved\", \"reserved\"], 3, []], \"expected\": [[\"reserved\", \"reserved\", \"reserved\"], 2, []], \"passed\": false}, {\"check\": \"2\", \"actual\": [[], 0, []], \"expected\": [[], 0, []], \"passed\": true}, {\"check\": \"3\", \"actual\": [[\"denied\"], 0, []], \"expected\": [[\"denied\"], 0, []], \"passed\": true}, {\"check\": \"4\", \"actual\": [[\"reserved\", \"held\", \"reserved\", \"denied\"], 0, [\"a\", \"b\"]], \"expected\": [[\"reserved\", \"held\", \"reserved\", \"denied\"], 0, [\"a\", \"b\"]], \"passed\": true}, {\"check\": \"5\", \"actual\": [[\"reserved\", \"reserved\"], 2, []], \"expected\": [[\"reserved\", \"reserved\"], 2, []], \"passed\": true}, {\"check\": \"6\", \"actual\": [[\"reserved\"], 14, [\"a\"]], \"expected\": [[\"reserved\"], 3, [\"a\"]], \"passed\": false}, {\"check\": \"7\", \"actual\": [[\"reserved\", \"reserved\"], 4, []], \"expected\": [[\"reserved\", \"reserved\"], 3, []], \"passed\": false}, {\"check\": \"8\", \"actual\": [[\"reserved\", \"reserved\"], 1, [\"a\"]], \"expected\": [[\"reserved\", \"reserved\"], 1, [\"a\"]], \"passed\": true}], \"passed\": false}\n"},"broken":{"elapsed_ms":42.691,"exit_code":1,"observations":[{"actual":[["reserved","reserved"],2,["b"]],"check":"0","expected":[["reserved","reserved"],2,["b"]],"passed":true},{"actual":[["reserved","reserved","reserved"],2,[]],"check":"1","expected":[["reserved","reserved","reserved"],2,[]],"passed":true},{"actual":[[],0,[]],"check":"2","expected":[[],0,[]],"passed":true},{"actual":[["denied"],0,[]],"check":"3","expected":[["denied"],0,[]],"passed":true},{"actual":[["reserved","held","reserved","denied"],0,["a","b"]],"check":"4","expected":[["reserved","held","reserved","denied"],0,["a","b"]],"passed":true},{"actual":[["reserved","reserved"],2,[]],"check":"5","expected":[["reserved","reserved"],2,[]],"passed":true},{"actual":[["reserved"],14,["a"]],"check":"6","expected":[["reserved"],3,["a"]],"passed":false},{"actual":[["reserved","reserved"],3,[]],"check":"7","expected":[["reserved","reserved"],3,[]],"passed":true},{"actual":[["reserved","reserved"],1,["a"]],"check":"8","expected":[["reserved","reserved"],1,["a"]],"passed":true}],"passed":false,"stderr":"","stdout":"{\"observations\": [{\"check\": \"0\", \"actual\": [[\"reserved\", \"reserved\"], 2, [\"b\"]], \"expected\": [[\"reserved\", \"reserved\"], 2, [\"b\"]], \"passed\": true}, {\"check\": \"1\", \"actual\": [[\"reserved\", \"reserved\", \"reserved\"], 2, []], \"expected\": [[\"reserved\", \"reserved\", \"reserved\"], 2, []], \"passed\": true}, {\"check\": \"2\", \"actual\": [[], 0, []], \"expected\": [[], 0, []], \"passed\": true}, {\"check\": \"3\", \"actual\": [[\"denied\"], 0, []], \"expected\": [[\"denied\"], 0, []], \"passed\": true}, {\"check\": \"4\", \"actual\": [[\"reserved\", \"held\", \"reserved\", \"denied\"], 0, [\"a\", \"b\"]], \"expected\": [[\"reserved\", \"held\", \"reserved\", \"denied\"], 0, [\"a\", \"b\"]], \"passed\": true}, {\"check\": \"5\", \"actual\": [[\"reserved\", \"reserved\"], 2, []], \"expected\": [[\"reserved\", \"reserved\"], 2, []], \"passed\": true}, {\"check\": \"6\", \"actual\": [[\"reserved\"], 14, [\"a\"]], \"expected\": [[\"reserved\"], 3, [\"a\"]], \"passed\": false}, {\"check\": \"7\", \"actual\": [[\"reserved\", \"reserved\"], 3, []], \"expected\": [[\"reserved\", \"reserved\"], 3, []], \"passed\": true}, {\"check\": \"8\", \"actual\": [[\"reserved\", \"reserved\"], 1, [\"a\"]], \"expected\": [[\"reserved\", \"reserved\"], 1, [\"a\"]], \"passed\": true}], \"passed\": false}\n"},"fixed":{"elapsed_ms":43.564,"exit_code":0,"observations":[{"actual":[["reserved","reserved"],2,["b"]],"check":"0","expected":[["reserved","reserved"],2,["b"]],"passed":true},{"actual":[["reserved","reserved","reserved"],2,[]],"check":"1","expected":[["reserved","reserved","reserved"],2,[]],"passed":true},{"actual":[[],0,[]],"check":"2","expected":[[],0,[]],"passed":true},{"actual":[["denied"],0,[]],"check":"3","expected":[["denied"],0,[]],"passed":true},{"actual":[["reserved","held","reserved","denied"],0,["a","b"]],"check":"4","expected":[["reserved","held","reserved","denied"],0,["a","b"]],"passed":true},{"actual":[["reserved","reserved"],2,[]],"check":"5","expected":[["reserved","reserved"],2,[]],"passed":true},{"actual":[["reserved"],3,["a"]],"check":"6","expected":[["reserved"],3,["a"]],"passed":true},{"actual":[["reserved","reserved"],3,[]],"check":"7","expected":[["reserved","reserved"],3,[]],"passed":true},{"actual":[["reserved","reserved"],1,["a"]],"check":"8","expected":[["reserved","reserved"],1,["a"]],"passed":true}],"passed":true,"stderr":"","stdout":"{\"observations\": [{\"check\": \"0\", \"actual\": [[\"reserved\", \"reserved\"], 2, [\"b\"]], \"expected\": [[\"reserved\", \"reserved\"], 2, [\"b\"]], \"passed\": true}, {\"check\": \"1\", \"actual\": [[\"reserved\", \"reserved\", \"reserved\"], 2, []], \"expected\": [[\"reserved\", \"reserved\", \"reserved\"], 2, []], \"passed\": true}, {\"check\": \"2\", \"actual\": [[], 0, []], \"expected\": [[], 0, []], \"passed\": true}, {\"check\": \"3\", \"actual\": [[\"denied\"], 0, []], \"expected\": [[\"denied\"], 0, []], \"passed\": true}, {\"check\": \"4\", \"actual\": [[\"reserved\", \"held\", \"reserved\", \"denied\"], 0, [\"a\", \"b\"]], \"expected\": [[\"reserved\", \"held\", \"reserved\", \"denied\"], 0, [\"a\", \"b\"]], \"passed\": true}, {\"check\": \"5\", \"actual\": [[\"reserved\", \"reserved\"], 2, []], \"expected\": [[\"reserved\", \"reserved\"], 2, []], \"passed\": true}, {\"check\": \"6\", \"actual\": [[\"reserved\"], 3, [\"a\"]], \"expected\": [[\"reserved\"], 3, [\"a\"]], \"passed\": true}, {\"check\": \"7\", \"actual\": [[\"reserved\", \"reserved\"], 3, []], \"expected\": [[\"reserved\", \"reserved\"], 3, []], \"passed\": true}, {\"check\": \"8\", \"actual\": [[\"reserved\", \"reserved\"], 1, [\"a\"]], \"expected\": [[\"reserved\", \"reserved\"], 1, [\"a\"]], \"passed\": true}], \"passed\": true}\n"}},"verified":true,"visibility":"public"}