{"abstract":"CONNECT uses authority form and server-wide OPTIONS uses asterisk form.","category":"HTTP semantics","checks":4,"contract":"CONNECT uses authority form and server-wide OPTIONS uses asterisk form: return the result specified by the explicit input/output boundary fixtures.","contract_signature":"method, target","evaluation_group":"xh-request-target-form","failed_approach":"The attempted repair uses `'authority' if method == 'CONNECT' else ('asterisk' if target == '*' else 'origin')` and still violates a separate fixture.","family":"xh-request-target-form","id":"FA-6626","implementations":{"attempt":{"sha256":"a14396cfa7019d4d68f45a8a1878e31bcd47769ea62753f1056e1bf6125a95b8","source":"\"\"\"Failure Map reference implementation. Python standard library only.\"\"\"\nimport json\nimport ipaddress\nimport re\nfrom urllib.parse import urlsplit, urljoin\nN = 1\nobservations = []\ndef solve(method, target):\n    return 'authority' if method == 'CONNECT' else ('asterisk' if target == '*' else 'origin')\ndef check(label, actual, expected):\n    observations.append({\"check\": label, \"actual\": actual, \"expected\": expected, \"passed\": actual == expected})\n_fixtures = [\"check('fixture 1', solve('CONNECT', 'host:443'), 'authority')\", \"check('fixture 2', solve('OPTIONS', '*'), 'asterisk')\", \"check('fixture 3', solve('GET', 'https://h/a'), 'absolute')\", \"check('fixture 4', solve('GET', '/a'), 'origin')\"]\nfor _line in _fixtures[N % len(_fixtures):] + _fixtures[:N % len(_fixtures)]:\n    exec(_line)\nprint(json.dumps({\"observations\": observations, \"passed\": all(x[\"passed\"] for x in observations)}, ensure_ascii=False))\nraise SystemExit(0 if all(x[\"passed\"] for x in observations) else 1)\n"},"broken":{"sha256":"a9bff85a174c14762e304fb626cb65ffe90fd2a96eceb0533dd3059404c4b063","source":"\"\"\"Failure Map reference implementation. Python standard library only.\"\"\"\nimport json\nimport ipaddress\nimport re\nfrom urllib.parse import urlsplit, urljoin\nN = 1\nobservations = []\ndef solve(method, target):\n    return 'absolute' if '://' in target else 'origin'\ndef check(label, actual, expected):\n    observations.append({\"check\": label, \"actual\": actual, \"expected\": expected, \"passed\": actual == expected})\n_fixtures = [\"check('fixture 1', solve('CONNECT', 'host:443'), 'authority')\", \"check('fixture 2', solve('OPTIONS', '*'), 'asterisk')\", \"check('fixture 3', solve('GET', 'https://h/a'), 'absolute')\", \"check('fixture 4', solve('GET', '/a'), 'origin')\"]\nfor _line in _fixtures[N % len(_fixtures):] + _fixtures[:N % len(_fixtures)]:\n    exec(_line)\nprint(json.dumps({\"observations\": observations, \"passed\": all(x[\"passed\"] for x in observations)}, ensure_ascii=False))\nraise SystemExit(0 if all(x[\"passed\"] for x in observations) else 1)\n"}},"limitations":"Bounded deterministic policy model over validated inputs; not a complete protocol stack or an interoperability claim. The five variants rotate the same explicit fixture set. This reproducer isolates one failure mechanism. Results cover the supplied fixtures. Variants within a family share a test contract and should remain grouped when constructing evaluation splits. Related mechanisms with a shared evaluation_group must also remain together; these controlled models are not independent production incidents.","method":"Deterministic executable model with adversarial boundary fixtures.","provenance":{"created_by":"Failure Map","dependencies":"Python standard library","family":"xh-request-target-form","generated_at":"2026-09-29T14:38:03.794618+00:00","license":"CC0-1.0","python":"3.12.14","seed":1,"split":"open-access"},"relevance":"This deterministic http semantics model isolates the request-target-form policy at a network component boundary.","root_cause":"The faulty implementation uses `'absolute' if '://' in target else 'origin'` for the request-target-form decision.","sha256":"4cfff7f9e89ae122e7f6f54d8285c1fa72436c6fd525a1419055f832a3648189","title":"CONNECT uses authority form and server-wide OPTIONS uses asterisk form · case 01","variant":1,"variant_policy":"Five numbered records share a model and may reuse boundary fixtures.","verified":true,"visibility":"public","verification":{"attempt":{"elapsed_ms":34.744,"exit_code":1,"observations":[{"actual":"asterisk","check":"fixture 2","expected":"asterisk","passed":true},{"actual":"origin","check":"fixture 3","expected":"absolute","passed":false},{"actual":"origin","check":"fixture 4","expected":"origin","passed":true},{"actual":"authority","check":"fixture 1","expected":"authority","passed":true}],"passed":false,"stderr":"","stdout":"{\"observations\": [{\"check\": \"fixture 2\", \"actual\": \"asterisk\", \"expected\": \"asterisk\", \"passed\": true}, {\"check\": \"fixture 3\", \"actual\": \"origin\", \"expected\": \"absolute\", \"passed\": false}, {\"check\": \"fixture 4\", \"actual\": \"origin\", \"expected\": \"origin\", \"passed\": true}, {\"check\": \"fixture 1\", \"actual\": \"authority\", \"expected\": \"authority\", \"passed\": true}], \"passed\": false}\n"},"broken":{"elapsed_ms":35.658,"exit_code":1,"observations":[{"actual":"origin","check":"fixture 2","expected":"asterisk","passed":false},{"actual":"absolute","check":"fixture 3","expected":"absolute","passed":true},{"actual":"origin","check":"fixture 4","expected":"origin","passed":true},{"actual":"origin","check":"fixture 1","expected":"authority","passed":false}],"passed":false,"stderr":"","stdout":"{\"observations\": [{\"check\": \"fixture 2\", \"actual\": \"origin\", \"expected\": \"asterisk\", \"passed\": false}, {\"check\": \"fixture 3\", \"actual\": \"absolute\", \"expected\": \"absolute\", \"passed\": true}, {\"check\": \"fixture 4\", \"actual\": \"origin\", \"expected\": \"origin\", \"passed\": true}, {\"check\": \"fixture 1\", \"actual\": \"origin\", \"expected\": \"authority\", \"passed\": false}], \"passed\": false}\n"}},"member_only":{"stages":["fixed"],"fields":["implementations.fixed","verification.fixed","harness","repair"],"note":"The verified repair, its recorded checks, the repair description, and the scoring harness are available to members."}}