{"abstract":"The transactional consume operation is admitted even though a commit revives an aborted consume transaction.","category":"Queues","checks":9,"contract":"Return a Boolean admission decision for commit a consume-transform-publish transaction. The record r must satisfy all of: r['input_owned'][0] == r['input_owned'][1]; r['output_committed'] is True; r['offset_exact'][0] == r['offset_exact'][1]+1; r['transaction_open'] == 'open'; r['producer_fenced'][0] == r['producer_fenced'][1]. Extra tracing fields are ignored; validation does not mutate the record.","evaluation_group":"xd-transactional-consume","failed_approach":"Adding the transaction open check repairs the reported defect, but replacing the adjacent producer fenced check loses that independent invariant.","family":"xd-transactional-consume-transaction_open","id":"FA-891","implementations":{"attempt":{"sha256":"b776f7f411a97aa070e1e6fe8087efcd87dc1105537acc31c4921049b23246f0","source":"\"\"\"Failure Map reference implementation. Python standard library only.\"\"\"\nimport json\n\nN = 1\nobservations = []\ndef solve(r):\n    return (r['input_owned'][0] == r['input_owned'][1]) and (r['output_committed'] is True) and (r['offset_exact'][0] == r['offset_exact'][1]+1) and (r['transaction_open'] == 'open')\ndef check(label, actual, expected):\n    observations.append({\"check\": label, \"actual\": actual, \"expected\": expected, \"passed\": actual == expected})\nr = {'input_owned': [8, 8], 'output_committed': True, 'offset_exact': [11, 10], 'transaction_open': 'open', 'producer_fenced': [9, 9]}\ncheck('valid operation', solve(r), True)\ncheck('Commit acknowledges an input partition no longer owned', solve(dict(r, **{'input_owned': [7, 8]})), False)\ncheck('Input progress commits before the transformed output', solve(dict(r, **{'output_committed': False})), False)\ncheck('Commit skips an unprocessed input offset', solve(dict(r, **{'offset_exact': [12, 10]})), False)\ncheck('A commit revives an aborted consume transaction', solve(dict(r, **{'transaction_open': 'aborted'})), False)\ncheck('A previous producer instance commits an old transaction', solve(dict(r, **{'producer_fenced': [8, 9]})), False)\ncheck('unrelated tracing metadata', solve(dict(r, trace='run-'+str(N))), True)\ncheck('repeat validation is pure', solve(r), True)\ninvalid = {'input_owned': [7, 8], 'output_committed': False, 'offset_exact': [12, 10], 'transaction_open': 'aborted', 'producer_fenced': [8, 9]}\nkeys = list(invalid)\npair = {keys[N % len(keys)]: invalid[keys[N % len(keys)]], keys[(N+1) % len(keys)]: invalid[keys[(N+1) % len(keys)]]}\ncheck('two independent violations in variant', solve(dict(r, **pair)), False)\nprint(json.dumps({\"observations\": observations, \"passed\": all(x[\"passed\"] for x in observations)}, ensure_ascii=False))\nraise SystemExit(0 if all(x[\"passed\"] for x in observations) else 1)\n"},"broken":{"sha256":"52e48cab989bfa6f77bf402d5b1a90d1f3abe4673f6d577b1fcd69e7bd3b839c","source":"\"\"\"Failure Map reference implementation. Python standard library only.\"\"\"\nimport json\n\nN = 1\nobservations = []\ndef solve(r):\n    return (r['input_owned'][0] == r['input_owned'][1]) and (r['output_committed'] is True) and (r['offset_exact'][0] == r['offset_exact'][1]+1) and (r['producer_fenced'][0] == r['producer_fenced'][1])\ndef check(label, actual, expected):\n    observations.append({\"check\": label, \"actual\": actual, \"expected\": expected, \"passed\": actual == expected})\nr = {'input_owned': [8, 8], 'output_committed': True, 'offset_exact': [11, 10], 'transaction_open': 'open', 'producer_fenced': [9, 9]}\ncheck('valid operation', solve(r), True)\ncheck('Commit acknowledges an input partition no longer owned', solve(dict(r, **{'input_owned': [7, 8]})), False)\ncheck('Input progress commits before the transformed output', solve(dict(r, **{'output_committed': False})), False)\ncheck('Commit skips an unprocessed input offset', solve(dict(r, **{'offset_exact': [12, 10]})), False)\ncheck('A commit revives an aborted consume transaction', solve(dict(r, **{'transaction_open': 'aborted'})), False)\ncheck('A previous producer instance commits an old transaction', solve(dict(r, **{'producer_fenced': [8, 9]})), False)\ncheck('unrelated tracing metadata', solve(dict(r, trace='run-'+str(N))), True)\ncheck('repeat validation is pure', solve(r), True)\ninvalid = {'input_owned': [7, 8], 'output_committed': False, 'offset_exact': [12, 10], 'transaction_open': 'aborted', 'producer_fenced': [8, 9]}\nkeys = list(invalid)\npair = {keys[N % len(keys)]: invalid[keys[N % len(keys)]], keys[(N+1) % len(keys)]: invalid[keys[(N+1) % len(keys)]]}\ncheck('two independent violations in variant', solve(dict(r, **pair)), False)\nprint(json.dumps({\"observations\": observations, \"passed\": all(x[\"passed\"] for x in observations)}, ensure_ascii=False))\nraise SystemExit(0 if all(x[\"passed\"] for x in observations) else 1)\n"},"fixed":{"sha256":"80e85882f5fbe52ad3183d96099fea52444649192c9fd9bdb3f60b1664a6dce6","source":"\"\"\"Failure Map reference implementation. Python standard library only.\"\"\"\nimport json\n\nN = 1\nobservations = []\ndef solve(r):\n    return (r['input_owned'][0] == r['input_owned'][1]) and (r['output_committed'] is True) and (r['offset_exact'][0] == r['offset_exact'][1]+1) and (r['transaction_open'] == 'open') and (r['producer_fenced'][0] == r['producer_fenced'][1])\ndef check(label, actual, expected):\n    observations.append({\"check\": label, \"actual\": actual, \"expected\": expected, \"passed\": actual == expected})\nr = {'input_owned': [8, 8], 'output_committed': True, 'offset_exact': [11, 10], 'transaction_open': 'open', 'producer_fenced': [9, 9]}\ncheck('valid operation', solve(r), True)\ncheck('Commit acknowledges an input partition no longer owned', solve(dict(r, **{'input_owned': [7, 8]})), False)\ncheck('Input progress commits before the transformed output', solve(dict(r, **{'output_committed': False})), False)\ncheck('Commit skips an unprocessed input offset', solve(dict(r, **{'offset_exact': [12, 10]})), False)\ncheck('A commit revives an aborted consume transaction', solve(dict(r, **{'transaction_open': 'aborted'})), False)\ncheck('A previous producer instance commits an old transaction', solve(dict(r, **{'producer_fenced': [8, 9]})), False)\ncheck('unrelated tracing metadata', solve(dict(r, trace='run-'+str(N))), True)\ncheck('repeat validation is pure', solve(r), True)\ninvalid = {'input_owned': [7, 8], 'output_committed': False, 'offset_exact': [12, 10], 'transaction_open': 'aborted', 'producer_fenced': [8, 9]}\nkeys = list(invalid)\npair = {keys[N % len(keys)]: invalid[keys[N % len(keys)]], keys[(N+1) % len(keys)]: invalid[keys[(N+1) % len(keys)]]}\ncheck('two independent violations in variant', solve(dict(r, **pair)), False)\nprint(json.dumps({\"observations\": observations, \"passed\": all(x[\"passed\"] for x in observations)}, ensure_ascii=False))\nraise SystemExit(0 if all(x[\"passed\"] for x in observations) else 1)\n"}},"limitations":" This reproducer isolates one failure mechanism. Results cover the supplied fixtures. Variants within a family share a test contract and should remain grouped when constructing evaluation splits. Related mechanisms with a shared evaluation_group must also remain together; these controlled models are not independent production incidents.","method":"Deterministic executable model with adversarial boundary fixtures.","provenance":{"created_by":"Failure Map","dependencies":"Python standard library","family":"xd-transactional-consume-transaction_open","generated_at":"2026-09-29T14:36:56.625062+00:00","license":"CC0-1.0","python":"3.12.14","seed":1,"split":"open-access"},"relevance":"A deterministic local contract for queues. Each negative fixture violates exactly one invariant. No transport timing, persistence, cryptographic verification, or full protocol implementation is claimed.","repair":"Require r['transaction_open'] == 'open' together with every other stated precondition before accepting the operation.","root_cause":"The admission path omits the transaction open invariant while validating the other operation preconditions.","sha256":"7d8fb4ab867ba9b26eab480dd27f43e262e295ef37325d57ff5637d8964cdf80","title":"Commit a consume-transform-publish transaction: A commit revives an aborted consume transaction · case 01","variant":1,"variant_policy":"Five numbered records share a model and may reuse boundary fixtures.","verification":{"attempt":{"elapsed_ms":32.788,"exit_code":1,"observations":[{"actual":true,"check":"valid operation","expected":true,"passed":true},{"actual":false,"check":"Commit acknowledges an input partition no longer owned","expected":false,"passed":true},{"actual":false,"check":"Input progress commits before the transformed output","expected":false,"passed":true},{"actual":false,"check":"Commit skips an unprocessed input offset","expected":false,"passed":true},{"actual":false,"check":"A commit revives an aborted consume transaction","expected":false,"passed":true},{"actual":true,"check":"A previous producer instance commits an old transaction","expected":false,"passed":false},{"actual":true,"check":"unrelated tracing metadata","expected":true,"passed":true},{"actual":true,"check":"repeat validation is pure","expected":true,"passed":true},{"actual":false,"check":"two independent violations in variant","expected":false,"passed":true}],"passed":false,"stderr":"","stdout":"{\"observations\": [{\"check\": \"valid operation\", \"actual\": true, \"expected\": true, \"passed\": true}, {\"check\": \"Commit acknowledges an input partition no longer owned\", \"actual\": false, \"expected\": false, \"passed\": true}, {\"check\": \"Input progress commits before the transformed output\", \"actual\": false, \"expected\": false, \"passed\": true}, {\"check\": \"Commit skips an unprocessed input offset\", \"actual\": false, \"expected\": false, \"passed\": true}, {\"check\": \"A commit revives an aborted consume transaction\", \"actual\": false, \"expected\": false, \"passed\": true}, {\"check\": \"A previous producer instance commits an old transaction\", \"actual\": true, \"expected\": false, \"passed\": false}, {\"check\": \"unrelated tracing metadata\", \"actual\": true, \"expected\": true, \"passed\": true}, {\"check\": \"repeat validation is pure\", \"actual\": true, \"expected\": true, \"passed\": true}, {\"check\": \"two independent violations in variant\", \"actual\": false, \"expected\": false, \"passed\": true}], \"passed\": false}\n"},"broken":{"elapsed_ms":34.687,"exit_code":1,"observations":[{"actual":true,"check":"valid operation","expected":true,"passed":true},{"actual":false,"check":"Commit acknowledges an input partition no longer owned","expected":false,"passed":true},{"actual":false,"check":"Input progress commits before the transformed output","expected":false,"passed":true},{"actual":false,"check":"Commit skips an unprocessed input offset","expected":false,"passed":true},{"actual":true,"check":"A commit revives an aborted consume transaction","expected":false,"passed":false},{"actual":false,"check":"A previous producer instance commits an old transaction","expected":false,"passed":true},{"actual":true,"check":"unrelated tracing metadata","expected":true,"passed":true},{"actual":true,"check":"repeat validation is pure","expected":true,"passed":true},{"actual":false,"check":"two independent violations in variant","expected":false,"passed":true}],"passed":false,"stderr":"","stdout":"{\"observations\": [{\"check\": \"valid operation\", \"actual\": true, \"expected\": true, \"passed\": true}, {\"check\": \"Commit acknowledges an input partition no longer owned\", \"actual\": false, \"expected\": false, \"passed\": true}, {\"check\": \"Input progress commits before the transformed output\", \"actual\": false, \"expected\": false, \"passed\": true}, {\"check\": \"Commit skips an unprocessed input offset\", \"actual\": false, \"expected\": false, \"passed\": true}, {\"check\": \"A commit revives an aborted consume transaction\", \"actual\": true, \"expected\": false, \"passed\": false}, {\"check\": \"A previous producer instance commits an old transaction\", \"actual\": false, \"expected\": false, \"passed\": true}, {\"check\": \"unrelated tracing metadata\", \"actual\": true, \"expected\": true, \"passed\": true}, {\"check\": \"repeat validation is pure\", \"actual\": true, \"expected\": true, \"passed\": true}, {\"check\": \"two independent violations in variant\", \"actual\": false, \"expected\": false, \"passed\": true}], \"passed\": false}\n"},"fixed":{"elapsed_ms":33.051,"exit_code":0,"observations":[{"actual":true,"check":"valid operation","expected":true,"passed":true},{"actual":false,"check":"Commit acknowledges an input partition no longer owned","expected":false,"passed":true},{"actual":false,"check":"Input progress commits before the transformed output","expected":false,"passed":true},{"actual":false,"check":"Commit skips an unprocessed input offset","expected":false,"passed":true},{"actual":false,"check":"A commit revives an aborted consume transaction","expected":false,"passed":true},{"actual":false,"check":"A previous producer instance commits an old transaction","expected":false,"passed":true},{"actual":true,"check":"unrelated tracing metadata","expected":true,"passed":true},{"actual":true,"check":"repeat validation is pure","expected":true,"passed":true},{"actual":false,"check":"two independent violations in variant","expected":false,"passed":true}],"passed":true,"stderr":"","stdout":"{\"observations\": [{\"check\": \"valid operation\", \"actual\": true, \"expected\": true, \"passed\": true}, {\"check\": \"Commit acknowledges an input partition no longer owned\", \"actual\": false, \"expected\": false, \"passed\": true}, {\"check\": \"Input progress commits before the transformed output\", \"actual\": false, \"expected\": false, \"passed\": true}, {\"check\": \"Commit skips an unprocessed input offset\", \"actual\": false, \"expected\": false, \"passed\": true}, {\"check\": \"A commit revives an aborted consume transaction\", \"actual\": false, \"expected\": false, \"passed\": true}, {\"check\": \"A previous producer instance commits an old transaction\", \"actual\": false, \"expected\": false, \"passed\": true}, {\"check\": \"unrelated tracing metadata\", \"actual\": true, \"expected\": true, \"passed\": true}, {\"check\": \"repeat validation is pure\", \"actual\": true, \"expected\": true, \"passed\": true}, {\"check\": \"two independent violations in variant\", \"actual\": false, \"expected\": false, \"passed\": true}], \"passed\": true}\n"}},"verified":true,"visibility":"public"}