{"abstract":"Context menu caller overrides protected command arguments.","category":"Menu interactions","checks":7,"contract":"Menu entries bind explicit invocation arguments, permit caller overrides only for allowed names, and distinguish missing values from explicit null.","evaluation_group":"s3-menu-interactions-command-argument-binding","failed_approach":"The attempted repair `{k:v for k,v in p['caller'].items() if k not in p['allowed']}` still violates the allowlist oracle.","family":"s3-menu-interactions-command-argument-binding-allowlist","id":"FA-32886","implementations":{"attempt":{"sha256":"d1bed96f0db07f9b0b67967071029dc1ba99f328b06614e22c8865eb9be8e410","source":"\"\"\"Failure Map reference implementation. Python standard library only.\"\"\"\nimport json\nimport math\nimport unicodedata\nN = 1\nobservations = []\ndef solve(action, p):\n    if action == 'bound-order':\n        return p['bound']+p['runtime']\n    if action == 'allowlist':\n        return {k:v for k,v in p['caller'].items() if k not in p['allowed']}\n    if action == 'explicit-null':\n        return p['args']['target'] if 'target' in p['args'] else p['default']\n    if action == 'required':\n        return sorted(set(p['required'])-set(p['args']))\n    if action == 'prefix':\n        return p['namespace']+'.'+p['name']\n    if action == 'frozen-list':\n        return p['captured'][:]\n    return {'error': 'unsupported menu operation'}\ndef check(label, actual, expected):\n    observations.append({\"check\": label, \"actual\": actual, \"expected\": expected, \"passed\": actual == expected})\ncheck('bound-order contract', solve('bound-order', {'bound':['document',N],'runtime':['copy']}), ['document',N,'copy'])\ncheck('allowlist contract', solve('allowlist', {'caller':{'count':N,'owner':'rogue'},'allowed':['count']}), {'count':N})\ncheck('explicit-null contract', solve('explicit-null', {'args':{'target':None},'default':N}), None)\ncheck('required contract', solve('required', {'required':['a','b'],'args':{'a':N,'c':1}}), ['b'])\ncheck('prefix contract', solve('prefix', {'namespace':'item'+str(N),'name':'mode'}), 'item'+str(N)+'.mode')\ncheck('frozen-list contract', solve('frozen-list', {'captured':list(range(N+2)),'live':[-1]}), list(range(N+2)))\ncheck('unknown operation', solve('unknown', {}), {'error': 'unsupported menu operation'})\nprint(json.dumps({\"observations\": observations, \"passed\": all(x[\"passed\"] for x in observations)}, ensure_ascii=False))\nraise SystemExit(0 if all(x[\"passed\"] for x in observations) else 1)\n"},"broken":{"sha256":"558426a462e85861c8daebe7bbaae362946566bc43cae629ff5661c4001a0989","source":"\"\"\"Failure Map reference implementation. Python standard library only.\"\"\"\nimport json\nimport math\nimport unicodedata\nN = 1\nobservations = []\ndef solve(action, p):\n    if action == 'bound-order':\n        return p['bound']+p['runtime']\n    if action == 'allowlist':\n        return p['caller']\n    if action == 'explicit-null':\n        return p['args']['target'] if 'target' in p['args'] else p['default']\n    if action == 'required':\n        return sorted(set(p['required'])-set(p['args']))\n    if action == 'prefix':\n        return p['namespace']+'.'+p['name']\n    if action == 'frozen-list':\n        return p['captured'][:]\n    return {'error': 'unsupported menu operation'}\ndef check(label, actual, expected):\n    observations.append({\"check\": label, \"actual\": actual, \"expected\": expected, \"passed\": actual == expected})\ncheck('bound-order contract', solve('bound-order', {'bound':['document',N],'runtime':['copy']}), ['document',N,'copy'])\ncheck('allowlist contract', solve('allowlist', {'caller':{'count':N,'owner':'rogue'},'allowed':['count']}), {'count':N})\ncheck('explicit-null contract', solve('explicit-null', {'args':{'target':None},'default':N}), None)\ncheck('required contract', solve('required', {'required':['a','b'],'args':{'a':N,'c':1}}), ['b'])\ncheck('prefix contract', solve('prefix', {'namespace':'item'+str(N),'name':'mode'}), 'item'+str(N)+'.mode')\ncheck('frozen-list contract', solve('frozen-list', {'captured':list(range(N+2)),'live':[-1]}), list(range(N+2)))\ncheck('unknown operation', solve('unknown', {}), {'error': 'unsupported menu operation'})\nprint(json.dumps({\"observations\": observations, \"passed\": all(x[\"passed\"] for x in observations)}, ensure_ascii=False))\nraise SystemExit(0 if all(x[\"passed\"] for x in observations) else 1)\n"},"fixed":{"sha256":"e9a6ad2d3cf8e549088ca230c5ec0b9e07f74fb3c7466fa8a7001a7566aa9543","source":"\"\"\"Failure Map reference implementation. Python standard library only.\"\"\"\nimport json\nimport math\nimport unicodedata\nN = 1\nobservations = []\ndef solve(action, p):\n    if action == 'bound-order':\n        return p['bound']+p['runtime']\n    if action == 'allowlist':\n        return {k:v for k,v in p['caller'].items() if k in p['allowed']}\n    if action == 'explicit-null':\n        return p['args']['target'] if 'target' in p['args'] else p['default']\n    if action == 'required':\n        return sorted(set(p['required'])-set(p['args']))\n    if action == 'prefix':\n        return p['namespace']+'.'+p['name']\n    if action == 'frozen-list':\n        return p['captured'][:]\n    return {'error': 'unsupported menu operation'}\ndef check(label, actual, expected):\n    observations.append({\"check\": label, \"actual\": actual, \"expected\": expected, \"passed\": actual == expected})\ncheck('bound-order contract', solve('bound-order', {'bound':['document',N],'runtime':['copy']}), ['document',N,'copy'])\ncheck('allowlist contract', solve('allowlist', {'caller':{'count':N,'owner':'rogue'},'allowed':['count']}), {'count':N})\ncheck('explicit-null contract', solve('explicit-null', {'args':{'target':None},'default':N}), None)\ncheck('required contract', solve('required', {'required':['a','b'],'args':{'a':N,'c':1}}), ['b'])\ncheck('prefix contract', solve('prefix', {'namespace':'item'+str(N),'name':'mode'}), 'item'+str(N)+'.mode')\ncheck('frozen-list contract', solve('frozen-list', {'captured':list(range(N+2)),'live':[-1]}), list(range(N+2)))\ncheck('unknown operation', solve('unknown', {}), {'error': 'unsupported menu operation'})\nprint(json.dumps({\"observations\": observations, \"passed\": all(x[\"passed\"] for x in observations)}, ensure_ascii=False))\nraise SystemExit(0 if all(x[\"passed\"] for x in observations) else 1)\n"}},"limitations":"Offline supplied-valid-payload model; excludes DOM, keyboard, focus, selection, announcements and browser conformance. This reproducer isolates one failure mechanism. Results cover the supplied fixtures. Variants within a family share a test contract and should remain grouped when constructing evaluation splits. Related mechanisms with a shared evaluation_group must also remain together; these controlled models are not independent production incidents.","method":"Deterministic executable model with adversarial boundary fixtures.","provenance":{"created_by":"Failure Map","dependencies":"Python standard library","family":"s3-menu-interactions-command-argument-binding-allowlist","generated_at":"2026-09-29T14:42:16.750835+00:00","license":"CC0-1.0","python":"3.12.14","seed":1,"split":"open-access"},"relevance":"Cascading and context menus require coherent command and session state as content changes.","repair":"Apply `{k:v for k,v in p['caller'].items() if k in p['allowed']}` at allowlist.","root_cause":"The command-argument-binding model applies `p['caller']` at its allowlist operation instead of the stipulated transformation.","sha256":"ed81569e39b8dbc7483ba53908e464dff8e63d50d2c24d76217e8cf66737d6ae","title":"Context menu caller overrides protected command arguments · case 01","variant":1,"variant_policy":"Five numbered records share a model and may reuse boundary fixtures.","verification":{"attempt":{"elapsed_ms":44.281,"exit_code":1,"observations":[{"actual":["document",1,"copy"],"check":"bound-order contract","expected":["document",1,"copy"],"passed":true},{"actual":{"owner":"rogue"},"check":"allowlist contract","expected":{"count":1},"passed":false},{"actual":null,"check":"explicit-null contract","expected":null,"passed":true},{"actual":["b"],"check":"required contract","expected":["b"],"passed":true},{"actual":"item1.mode","check":"prefix contract","expected":"item1.mode","passed":true},{"actual":[0,1,2],"check":"frozen-list contract","expected":[0,1,2],"passed":true},{"actual":{"error":"unsupported menu operation"},"check":"unknown operation","expected":{"error":"unsupported menu operation"},"passed":true}],"passed":false,"stderr":"","stdout":"{\"observations\": [{\"check\": \"bound-order contract\", \"actual\": [\"document\", 1, \"copy\"], \"expected\": [\"document\", 1, \"copy\"], \"passed\": true}, {\"check\": \"allowlist contract\", \"actual\": {\"owner\": \"rogue\"}, \"expected\": {\"count\": 1}, \"passed\": false}, {\"check\": \"explicit-null contract\", \"actual\": null, \"expected\": null, \"passed\": true}, {\"check\": \"required contract\", \"actual\": [\"b\"], \"expected\": [\"b\"], \"passed\": true}, {\"check\": \"prefix contract\", \"actual\": \"item1.mode\", \"expected\": \"item1.mode\", \"passed\": true}, {\"check\": \"frozen-list contract\", \"actual\": [0, 1, 2], \"expected\": [0, 1, 2], \"passed\": true}, {\"check\": \"unknown operation\", \"actual\": {\"error\": \"unsupported menu operation\"}, \"expected\": {\"error\": \"unsupported menu operation\"}, \"passed\": true}], \"passed\": false}\n"},"broken":{"elapsed_ms":45.391,"exit_code":1,"observations":[{"actual":["document",1,"copy"],"check":"bound-order contract","expected":["document",1,"copy"],"passed":true},{"actual":{"count":1,"owner":"rogue"},"check":"allowlist contract","expected":{"count":1},"passed":false},{"actual":null,"check":"explicit-null contract","expected":null,"passed":true},{"actual":["b"],"check":"required contract","expected":["b"],"passed":true},{"actual":"item1.mode","check":"prefix contract","expected":"item1.mode","passed":true},{"actual":[0,1,2],"check":"frozen-list contract","expected":[0,1,2],"passed":true},{"actual":{"error":"unsupported menu operation"},"check":"unknown operation","expected":{"error":"unsupported menu operation"},"passed":true}],"passed":false,"stderr":"","stdout":"{\"observations\": [{\"check\": \"bound-order contract\", \"actual\": [\"document\", 1, \"copy\"], \"expected\": [\"document\", 1, \"copy\"], \"passed\": true}, {\"check\": \"allowlist contract\", \"actual\": {\"count\": 1, \"owner\": \"rogue\"}, \"expected\": {\"count\": 1}, \"passed\": false}, {\"check\": \"explicit-null contract\", \"actual\": null, \"expected\": null, \"passed\": true}, {\"check\": \"required contract\", \"actual\": [\"b\"], \"expected\": [\"b\"], \"passed\": true}, {\"check\": \"prefix contract\", \"actual\": \"item1.mode\", \"expected\": \"item1.mode\", \"passed\": true}, {\"check\": \"frozen-list contract\", \"actual\": [0, 1, 2], \"expected\": [0, 1, 2], \"passed\": true}, {\"check\": \"unknown operation\", \"actual\": {\"error\": \"unsupported menu operation\"}, \"expected\": {\"error\": \"unsupported menu operation\"}, \"passed\": true}], \"passed\": false}\n"},"fixed":{"elapsed_ms":43.216,"exit_code":0,"observations":[{"actual":["document",1,"copy"],"check":"bound-order contract","expected":["document",1,"copy"],"passed":true},{"actual":{"count":1},"check":"allowlist contract","expected":{"count":1},"passed":true},{"actual":null,"check":"explicit-null contract","expected":null,"passed":true},{"actual":["b"],"check":"required contract","expected":["b"],"passed":true},{"actual":"item1.mode","check":"prefix contract","expected":"item1.mode","passed":true},{"actual":[0,1,2],"check":"frozen-list contract","expected":[0,1,2],"passed":true},{"actual":{"error":"unsupported menu operation"},"check":"unknown operation","expected":{"error":"unsupported menu operation"},"passed":true}],"passed":true,"stderr":"","stdout":"{\"observations\": [{\"check\": \"bound-order contract\", \"actual\": [\"document\", 1, \"copy\"], \"expected\": [\"document\", 1, \"copy\"], \"passed\": true}, {\"check\": \"allowlist contract\", \"actual\": {\"count\": 1}, \"expected\": {\"count\": 1}, \"passed\": true}, {\"check\": \"explicit-null contract\", \"actual\": null, \"expected\": null, \"passed\": true}, {\"check\": \"required contract\", \"actual\": [\"b\"], \"expected\": [\"b\"], \"passed\": true}, {\"check\": \"prefix contract\", \"actual\": \"item1.mode\", \"expected\": \"item1.mode\", \"passed\": true}, {\"check\": \"frozen-list contract\", \"actual\": [0, 1, 2], \"expected\": [0, 1, 2], \"passed\": true}, {\"check\": \"unknown operation\", \"actual\": {\"error\": \"unsupported menu operation\"}, \"expected\": {\"error\": \"unsupported menu operation\"}, \"passed\": true}], \"passed\": true}\n"}},"verified":true,"visibility":"public"}