{"abstract":"Unloaded embedded documents expose cached children.","category":"Accessibility interaction semantics","checks":7,"contract":"Input [host_id,host_doc,child_doc,loaded,same_origin,allow_read,host_name,child_title,children,defunct]. Return None if defunct. Otherwise return a host bridge object. Child document may only be traversed when loaded and allow_read; same_origin alone grants no reading. Expose children in original order, including repeated distinct IDs, prefixed with child_doc and colon; child document ID cannot be empty or equal to host document. Name prefers a nonempty host name, then child title only if traversal allowed, otherwise empty. Busy means not loaded; unavailable means loaded but traversal forbidden. Relation is [host_id,child_doc] only for traversable children. Source lists never include the host itself.","contract_signature":"data","evaluation_group":"s3-accessibility-embedded-document","failed_approach":"The local repair substitutes can = (loaded or same) and allowed and bool(child) and child != doc but still mishandles the regression fixtures.","family":"s3-accessibility-embedded-document-load-barrier","id":"FA-53526","implementations":{"attempt":{"sha256":"5470889e86da9d3456fe9936f61df3ed7d1203af035a37bcb0f69c6a24169886","source":"\"\"\"Failure Map reference implementation. Python standard library only.\"\"\"\nimport json\n\nN = 1\nobservations = []\ndef solve(data):\n    host,doc,child,loaded,same,allowed,name,title,children,dead = data\n    if dead: return None\n    can = (loaded or same) and allowed and bool(child) and child != doc\n    safe = [ident for ident in children if ident != host]\n    return {'id':host,'name':name if name else (title if can else ''),'busy':not loaded,'unavailable':loaded and not can,'children':[child+':'+ident for ident in safe] if can else [],'relation':[host,child] if can else None}\ndef check(label, actual, expected):\n    observations.append({\"check\": label, \"actual\": actual, \"expected\": expected, \"passed\": actual == expected})\ncheck('allowed foreign document', solve(['host','d','c',True,False,True,'','Title'+str(N),['a','b','a'],False],), {'id':'host','name':'Title'+str(N),'busy':False,'unavailable':False,'children':['c:a','c:b','c:a'],'relation':['host','c']})\ncheck('same origin no permission', solve(['host','d','c',True,True,False,'','Secret',['a'],False],), {'id':'host','name':'','busy':False,'unavailable':True,'children':[],'relation':None})\ncheck('not loaded', solve(['host','d','c',False,True,True,'Frame','Title',['a'],False],), {'id':'host','name':'Frame','busy':True,'unavailable':False,'children':[],'relation':None})\ncheck('dead host', solve(['host','d','c',True,True,True,'Frame','Title',['a'],True],), None)\ncheck('self document', solve(['host','d','d',True,True,True,'Frame','Title',['a'],False],), {'id':'host','name':'Frame','busy':False,'unavailable':True,'children':[],'relation':None})\ncheck('empty child identifier', solve(['host','d','',True,True,True,'Frame','Title',['a'],False],), {'id':'host','name':'Frame','busy':False,'unavailable':True,'children':[],'relation':None})\ncheck('host filtered', solve(['host','d','c',True,True,True,'Frame','Title',['a','host','b'],False],), {'id':'host','name':'Frame','busy':False,'unavailable':False,'children':['c:a','c:b'],'relation':['host','c']})\nprint(json.dumps({\"observations\": observations, \"passed\": all(x[\"passed\"] for x in observations)}, ensure_ascii=False))\nraise SystemExit(0 if all(x[\"passed\"] for x in observations) else 1)\n"},"broken":{"sha256":"f62b93fb1bc217465a84fd66a91b79ea3a6a373bd91aaa193d68d5c211722a23","source":"\"\"\"Failure Map reference implementation. Python standard library only.\"\"\"\nimport json\n\nN = 1\nobservations = []\ndef solve(data):\n    host,doc,child,loaded,same,allowed,name,title,children,dead = data\n    if dead: return None\n    can = allowed and bool(child) and child != doc\n    safe = [ident for ident in children if ident != host]\n    return {'id':host,'name':name if name else (title if can else ''),'busy':not loaded,'unavailable':loaded and not can,'children':[child+':'+ident for ident in safe] if can else [],'relation':[host,child] if can else None}\ndef check(label, actual, expected):\n    observations.append({\"check\": label, \"actual\": actual, \"expected\": expected, \"passed\": actual == expected})\ncheck('allowed foreign document', solve(['host','d','c',True,False,True,'','Title'+str(N),['a','b','a'],False],), {'id':'host','name':'Title'+str(N),'busy':False,'unavailable':False,'children':['c:a','c:b','c:a'],'relation':['host','c']})\ncheck('same origin no permission', solve(['host','d','c',True,True,False,'','Secret',['a'],False],), {'id':'host','name':'','busy':False,'unavailable':True,'children':[],'relation':None})\ncheck('not loaded', solve(['host','d','c',False,True,True,'Frame','Title',['a'],False],), {'id':'host','name':'Frame','busy':True,'unavailable':False,'children':[],'relation':None})\ncheck('dead host', solve(['host','d','c',True,True,True,'Frame','Title',['a'],True],), None)\ncheck('self document', solve(['host','d','d',True,True,True,'Frame','Title',['a'],False],), {'id':'host','name':'Frame','busy':False,'unavailable':True,'children':[],'relation':None})\ncheck('empty child identifier', solve(['host','d','',True,True,True,'Frame','Title',['a'],False],), {'id':'host','name':'Frame','busy':False,'unavailable':True,'children':[],'relation':None})\ncheck('host filtered', solve(['host','d','c',True,True,True,'Frame','Title',['a','host','b'],False],), {'id':'host','name':'Frame','busy':False,'unavailable':False,'children':['c:a','c:b'],'relation':['host','c']})\nprint(json.dumps({\"observations\": observations, \"passed\": all(x[\"passed\"] for x in observations)}, ensure_ascii=False))\nraise SystemExit(0 if all(x[\"passed\"] for x in observations) else 1)\n"}},"limitations":"Stipulated finite adapter contract, not a claim of platform accessibility or ARIA conformance. This reproducer isolates one failure mechanism. Results cover the supplied fixtures. Variants within a family share a test contract and should remain grouped when constructing evaluation splits. Related mechanisms with a shared evaluation_group must also remain together; these controlled models are not independent production incidents.","method":"Deterministic executable model with adversarial boundary fixtures.","provenance":{"created_by":"Failure Map","dependencies":"Python standard library","family":"s3-accessibility-embedded-document-load-barrier","generated_at":"2026-09-29T14:45:40.110418+00:00","license":"CC0-1.0","python":"3.12.14","seed":1,"split":"open-access"},"relevance":"Offline accessibility bridge model with explicit policy; useful for testing semantic API adapters independently of browser implementations.","root_cause":"The load barrier decision in the embedded document adapter violates its declared contract.","sha256":"bdb965b0fcb8e8994a91c084d1e003bd2598f5b6c27efdf5f09823f9136cd776","title":"Unloaded embedded documents expose cached children · case 01","variant":1,"variant_policy":"Five numbered records share a model and may reuse boundary fixtures.","verified":true,"visibility":"public","verification":{"attempt":{"elapsed_ms":41.952,"exit_code":1,"observations":[{"actual":{"busy":false,"children":["c:a","c:b","c:a"],"id":"host","name":"Title1","relation":["host","c"],"unavailable":false},"check":"allowed foreign document","expected":{"busy":false,"children":["c:a","c:b","c:a"],"id":"host","name":"Title1","relation":["host","c"],"unavailable":false},"passed":true},{"actual":{"busy":false,"children":[],"id":"host","name":"","relation":null,"unavailable":true},"check":"same origin no permission","expected":{"busy":false,"children":[],"id":"host","name":"","relation":null,"unavailable":true},"passed":true},{"actual":{"busy":true,"children":["c:a"],"id":"host","name":"Frame","relation":["host","c"],"unavailable":false},"check":"not loaded","expected":{"busy":true,"children":[],"id":"host","name":"Frame","relation":null,"unavailable":false},"passed":false},{"actual":null,"check":"dead host","expected":null,"passed":true},{"actual":{"busy":false,"children":[],"id":"host","name":"Frame","relation":null,"unavailable":true},"check":"self document","expected":{"busy":false,"children":[],"id":"host","name":"Frame","relation":null,"unavailable":true},"passed":true},{"actual":{"busy":false,"children":[],"id":"host","name":"Frame","relation":null,"unavailable":true},"check":"empty child identifier","expected":{"busy":false,"children":[],"id":"host","name":"Frame","relation":null,"unavailable":true},"passed":true},{"actual":{"busy":false,"children":["c:a","c:b"],"id":"host","name":"Frame","relation":["host","c"],"unavailable":false},"check":"host filtered","expected":{"busy":false,"children":["c:a","c:b"],"id":"host","name":"Frame","relation":["host","c"],"unavailable":false},"passed":true}],"passed":false,"stderr":"","stdout":"{\"observations\": [{\"check\": \"allowed foreign document\", \"actual\": {\"id\": \"host\", \"name\": \"Title1\", \"busy\": false, \"unavailable\": false, \"children\": [\"c:a\", \"c:b\", \"c:a\"], \"relation\": [\"host\", \"c\"]}, \"expected\": {\"id\": \"host\", \"name\": \"Title1\", \"busy\": false, \"unavailable\": false, \"children\": [\"c:a\", \"c:b\", \"c:a\"], \"relation\": [\"host\", \"c\"]}, \"passed\": true}, {\"check\": \"same origin no permission\", \"actual\": {\"id\": \"host\", \"name\": \"\", \"busy\": false, \"unavailable\": true, \"children\": [], \"relation\": null}, \"expected\": {\"id\": \"host\", \"name\": \"\", \"busy\": false, \"unavailable\": true, \"children\": [], \"relation\": null}, \"passed\": true}, {\"check\": \"not loaded\", \"actual\": {\"id\": \"host\", \"name\": \"Frame\", \"busy\": true, \"unavailable\": false, \"children\": [\"c:a\"], \"relation\": [\"host\", \"c\"]}, \"expected\": {\"id\": \"host\", \"name\": \"Frame\", \"busy\": true, \"unavailable\": false, \"children\": [], \"relation\": null}, \"passed\": false}, {\"check\": \"dead host\", \"actual\": null, \"expected\": null, \"passed\": true}, {\"check\": \"self document\", \"actual\": {\"id\": \"host\", \"name\": \"Frame\", \"busy\": false, \"unavailable\": true, \"children\": [], \"relation\": null}, \"expected\": {\"id\": \"host\", \"name\": \"Frame\", \"busy\": false, \"unavailable\": true, \"children\": [], \"relation\": null}, \"passed\": true}, {\"check\": \"empty child identifier\", \"actual\": {\"id\": \"host\", \"name\": \"Frame\", \"busy\": false, \"unavailable\": true, \"children\": [], \"relation\": null}, \"expected\": {\"id\": \"host\", \"name\": \"Frame\", \"busy\": false, \"unavailable\": true, \"children\": [], \"relation\": null}, \"passed\": true}, {\"check\": \"host filtered\", \"actual\": {\"id\": \"host\", \"name\": \"Frame\", \"busy\": false, \"unavailable\": false, \"children\": [\"c:a\", \"c:b\"], \"relation\": [\"host\", \"c\"]}, \"expected\": {\"id\": \"host\", \"name\": \"Frame\", \"busy\": false, \"unavailable\": false, \"children\": [\"c:a\", \"c:b\"], \"relation\": [\"host\", \"c\"]}, \"passed\": true}], \"passed\": false}\n"},"broken":{"elapsed_ms":43.001,"exit_code":1,"observations":[{"actual":{"busy":false,"children":["c:a","c:b","c:a"],"id":"host","name":"Title1","relation":["host","c"],"unavailable":false},"check":"allowed foreign document","expected":{"busy":false,"children":["c:a","c:b","c:a"],"id":"host","name":"Title1","relation":["host","c"],"unavailable":false},"passed":true},{"actual":{"busy":false,"children":[],"id":"host","name":"","relation":null,"unavailable":true},"check":"same origin no permission","expected":{"busy":false,"children":[],"id":"host","name":"","relation":null,"unavailable":true},"passed":true},{"actual":{"busy":true,"children":["c:a"],"id":"host","name":"Frame","relation":["host","c"],"unavailable":false},"check":"not loaded","expected":{"busy":true,"children":[],"id":"host","name":"Frame","relation":null,"unavailable":false},"passed":false},{"actual":null,"check":"dead host","expected":null,"passed":true},{"actual":{"busy":false,"children":[],"id":"host","name":"Frame","relation":null,"unavailable":true},"check":"self document","expected":{"busy":false,"children":[],"id":"host","name":"Frame","relation":null,"unavailable":true},"passed":true},{"actual":{"busy":false,"children":[],"id":"host","name":"Frame","relation":null,"unavailable":true},"check":"empty child identifier","expected":{"busy":false,"children":[],"id":"host","name":"Frame","relation":null,"unavailable":true},"passed":true},{"actual":{"busy":false,"children":["c:a","c:b"],"id":"host","name":"Frame","relation":["host","c"],"unavailable":false},"check":"host filtered","expected":{"busy":false,"children":["c:a","c:b"],"id":"host","name":"Frame","relation":["host","c"],"unavailable":false},"passed":true}],"passed":false,"stderr":"","stdout":"{\"observations\": [{\"check\": \"allowed foreign document\", \"actual\": {\"id\": \"host\", \"name\": \"Title1\", \"busy\": false, \"unavailable\": false, \"children\": [\"c:a\", \"c:b\", \"c:a\"], \"relation\": [\"host\", \"c\"]}, \"expected\": {\"id\": \"host\", \"name\": \"Title1\", \"busy\": false, \"unavailable\": false, \"children\": [\"c:a\", \"c:b\", \"c:a\"], \"relation\": [\"host\", \"c\"]}, \"passed\": true}, {\"check\": \"same origin no permission\", \"actual\": {\"id\": \"host\", \"name\": \"\", \"busy\": false, \"unavailable\": true, \"children\": [], \"relation\": null}, \"expected\": {\"id\": \"host\", \"name\": \"\", \"busy\": false, \"unavailable\": true, \"children\": [], \"relation\": null}, \"passed\": true}, {\"check\": \"not loaded\", \"actual\": {\"id\": \"host\", \"name\": \"Frame\", \"busy\": true, \"unavailable\": false, \"children\": [\"c:a\"], \"relation\": [\"host\", \"c\"]}, \"expected\": {\"id\": \"host\", \"name\": \"Frame\", \"busy\": true, \"unavailable\": false, \"children\": [], \"relation\": null}, \"passed\": false}, {\"check\": \"dead host\", \"actual\": null, \"expected\": null, \"passed\": true}, {\"check\": \"self document\", \"actual\": {\"id\": \"host\", \"name\": \"Frame\", \"busy\": false, \"unavailable\": true, \"children\": [], \"relation\": null}, \"expected\": {\"id\": \"host\", \"name\": \"Frame\", \"busy\": false, \"unavailable\": true, \"children\": [], \"relation\": null}, \"passed\": true}, {\"check\": \"empty child identifier\", \"actual\": {\"id\": \"host\", \"name\": \"Frame\", \"busy\": false, \"unavailable\": true, \"children\": [], \"relation\": null}, \"expected\": {\"id\": \"host\", \"name\": \"Frame\", \"busy\": false, \"unavailable\": true, \"children\": [], \"relation\": null}, \"passed\": true}, {\"check\": \"host filtered\", \"actual\": {\"id\": \"host\", \"name\": \"Frame\", \"busy\": false, \"unavailable\": false, \"children\": [\"c:a\", \"c:b\"], \"relation\": [\"host\", \"c\"]}, \"expected\": {\"id\": \"host\", \"name\": \"Frame\", \"busy\": false, \"unavailable\": false, \"children\": [\"c:a\", \"c:b\"], \"relation\": [\"host\", \"c\"]}, \"passed\": true}], \"passed\": false}\n"}},"member_only":{"stages":["fixed"],"fields":["implementations.fixed","verification.fixed","harness","repair"],"note":"The verified repair, its recorded checks, the repair description, and the scoring harness are available to members."}}