{"abstract":"Untrusted indexes can supply packages.","category":"Dependency resolution","checks":9,"contract":"Return first declared trusted nonmirror source containing the package, otherwise first trusted mirror containing it. Disabled and untrusted sources never participate.","contract_signature":"name, sources","evaluation_group":"xt-source-priority","failed_approach":"The attempted repair substitutes not s['trusted']. Fixture 2 still yields 'untrusted' instead of 'first'.","family":"xt-source-priority-trust-source","id":"FA-9486","implementations":{"attempt":{"sha256":"93f55c74cb74cd373f5b8c79f948cc2eb4dfe1070f61bd5f07b984fe8c649f47","source":"\"\"\"Failure Map reference implementation. Python standard library only.\"\"\"\nimport json\n\nN = 1\nobservations = []\ndef solve(name, sources):\n    eligible = [s for s in sources if s['enabled']]\n    eligible = [s for s in eligible if not s['trusted']]\n    eligible = [s for s in eligible if name in s['packages']]\n    primary = [s for s in eligible if not s['mirror']]\n    choices = primary or eligible\n    return choices[0]['name'] if choices else None\ndef check(label, actual, expected):\n    observations.append({\"check\": label, \"actual\": actual, \"expected\": expected, \"passed\": actual == expected})\ncheck('fixture 1', solve('a', []), None)\ncheck('fixture 2', solve('a', [{'name': 'mirror', 'enabled': True, 'trusted': True, 'packages': ['a'], 'mirror': True}, {'name': 'bad', 'enabled': False, 'trusted': True, 'packages': ['a'], 'mirror': False}, {'name': 'untrusted', 'enabled': True, 'trusted': False, 'packages': ['a'], 'mirror': False}, {'name': 'first', 'enabled': True, 'trusted': True, 'packages': ['a', 'b'], 'mirror': False}, {'name': 'last', 'enabled': True, 'trusted': True, 'packages': ['a'], 'mirror': False}]), 'first')\ncheck('fixture 3', solve('a', [{'name': 'mirror', 'enabled': True, 'trusted': True, 'packages': ['a'], 'mirror': True}]), 'mirror')\ncheck('fixture 4', solve('b', []), None)\ncheck('fixture 5', solve('b', [{'name': 'mirror', 'enabled': True, 'trusted': True, 'packages': ['a'], 'mirror': True}, {'name': 'bad', 'enabled': False, 'trusted': True, 'packages': ['a'], 'mirror': False}, {'name': 'untrusted', 'enabled': True, 'trusted': False, 'packages': ['a'], 'mirror': False}, {'name': 'first', 'enabled': True, 'trusted': True, 'packages': ['a', 'b'], 'mirror': False}, {'name': 'last', 'enabled': True, 'trusted': True, 'packages': ['a'], 'mirror': False}]), 'first')\ncheck('fixture 6', solve('b', [{'name': 'mirror', 'enabled': True, 'trusted': True, 'packages': ['a'], 'mirror': True}]), None)\ncheck('fixture 7', solve('missing', []), None)\ncheck('fixture 8', solve('missing', [{'name': 'mirror', 'enabled': True, 'trusted': True, 'packages': ['a'], 'mirror': True}, {'name': 'bad', 'enabled': False, 'trusted': True, 'packages': ['a'], 'mirror': False}, {'name': 'untrusted', 'enabled': True, 'trusted': False, 'packages': ['a'], 'mirror': False}, {'name': 'first', 'enabled': True, 'trusted': True, 'packages': ['a', 'b'], 'mirror': False}, {'name': 'last', 'enabled': True, 'trusted': True, 'packages': ['a'], 'mirror': False}]), None)\ncheck('fixture 9', solve('missing', [{'name': 'mirror', 'enabled': True, 'trusted': True, 'packages': ['a'], 'mirror': True}]), None)\nprint(json.dumps({\"observations\": observations, \"passed\": all(x[\"passed\"] for x in observations)}, ensure_ascii=False))\nraise SystemExit(0 if all(x[\"passed\"] for x in observations) else 1)\n"},"broken":{"sha256":"7ed467179b1c8a82a9c6cf283cca32617b74736cadf17741b225d272c79c78e5","source":"\"\"\"Failure Map reference implementation. Python standard library only.\"\"\"\nimport json\n\nN = 1\nobservations = []\ndef solve(name, sources):\n    eligible = [s for s in sources if s['enabled']]\n    eligible = [s for s in eligible if True]\n    eligible = [s for s in eligible if name in s['packages']]\n    primary = [s for s in eligible if not s['mirror']]\n    choices = primary or eligible\n    return choices[0]['name'] if choices else None\ndef check(label, actual, expected):\n    observations.append({\"check\": label, \"actual\": actual, \"expected\": expected, \"passed\": actual == expected})\ncheck('fixture 1', solve('a', []), None)\ncheck('fixture 2', solve('a', [{'name': 'mirror', 'enabled': True, 'trusted': True, 'packages': ['a'], 'mirror': True}, {'name': 'bad', 'enabled': False, 'trusted': True, 'packages': ['a'], 'mirror': False}, {'name': 'untrusted', 'enabled': True, 'trusted': False, 'packages': ['a'], 'mirror': False}, {'name': 'first', 'enabled': True, 'trusted': True, 'packages': ['a', 'b'], 'mirror': False}, {'name': 'last', 'enabled': True, 'trusted': True, 'packages': ['a'], 'mirror': False}]), 'first')\ncheck('fixture 3', solve('a', [{'name': 'mirror', 'enabled': True, 'trusted': True, 'packages': ['a'], 'mirror': True}]), 'mirror')\ncheck('fixture 4', solve('b', []), None)\ncheck('fixture 5', solve('b', [{'name': 'mirror', 'enabled': True, 'trusted': True, 'packages': ['a'], 'mirror': True}, {'name': 'bad', 'enabled': False, 'trusted': True, 'packages': ['a'], 'mirror': False}, {'name': 'untrusted', 'enabled': True, 'trusted': False, 'packages': ['a'], 'mirror': False}, {'name': 'first', 'enabled': True, 'trusted': True, 'packages': ['a', 'b'], 'mirror': False}, {'name': 'last', 'enabled': True, 'trusted': True, 'packages': ['a'], 'mirror': False}]), 'first')\ncheck('fixture 6', solve('b', [{'name': 'mirror', 'enabled': True, 'trusted': True, 'packages': ['a'], 'mirror': True}]), None)\ncheck('fixture 7', solve('missing', []), None)\ncheck('fixture 8', solve('missing', [{'name': 'mirror', 'enabled': True, 'trusted': True, 'packages': ['a'], 'mirror': True}, {'name': 'bad', 'enabled': False, 'trusted': True, 'packages': ['a'], 'mirror': False}, {'name': 'untrusted', 'enabled': True, 'trusted': False, 'packages': ['a'], 'mirror': False}, {'name': 'first', 'enabled': True, 'trusted': True, 'packages': ['a', 'b'], 'mirror': False}, {'name': 'last', 'enabled': True, 'trusted': True, 'packages': ['a'], 'mirror': False}]), None)\ncheck('fixture 9', solve('missing', [{'name': 'mirror', 'enabled': True, 'trusted': True, 'packages': ['a'], 'mirror': True}]), None)\nprint(json.dumps({\"observations\": observations, \"passed\": all(x[\"passed\"] for x in observations)}, ensure_ascii=False))\nraise SystemExit(0 if all(x[\"passed\"] for x in observations) else 1)\n"}},"limitations":" This reproducer isolates one failure mechanism. Results cover the supplied fixtures. Variants within a family share a test contract and should remain grouped when constructing evaluation splits. Related mechanisms with a shared evaluation_group must also remain together; these controlled models are not independent production incidents.","method":"Deterministic executable model with adversarial boundary fixtures.","provenance":{"created_by":"Failure Map","dependencies":"Python standard library","family":"xt-source-priority-trust-source","generated_at":"2026-09-29T14:38:30.411794+00:00","license":"CC0-1.0","python":"3.12.14","seed":1,"split":"open-access"},"relevance":"An offline model of package source selection, suitable for testing build and release tooling without external services.","root_cause":"The implementation substitutes True for s['trusted'], so untrusted indexes can supply packages.","sha256":"1b052750e8617fa4dc23ec3e7db04c022c21f61ce1a50eb31e83b811547d8008","title":"Package source selection: Untrusted indexes can supply packages · case 01","variant":1,"variant_policy":"Five numbered records share a model and may reuse boundary fixtures.","verified":true,"visibility":"public","verification":{"attempt":{"elapsed_ms":39.714,"exit_code":1,"observations":[{"actual":null,"check":"fixture 1","expected":null,"passed":true},{"actual":"untrusted","check":"fixture 2","expected":"first","passed":false},{"actual":null,"check":"fixture 3","expected":"mirror","passed":false},{"actual":null,"check":"fixture 4","expected":null,"passed":true},{"actual":null,"check":"fixture 5","expected":"first","passed":false},{"actual":null,"check":"fixture 6","expected":null,"passed":true},{"actual":null,"check":"fixture 7","expected":null,"passed":true},{"actual":null,"check":"fixture 8","expected":null,"passed":true},{"actual":null,"check":"fixture 9","expected":null,"passed":true}],"passed":false,"stderr":"","stdout":"{\"observations\": [{\"check\": \"fixture 1\", \"actual\": null, \"expected\": null, \"passed\": true}, {\"check\": \"fixture 2\", \"actual\": \"untrusted\", \"expected\": \"first\", \"passed\": false}, {\"check\": \"fixture 3\", \"actual\": null, \"expected\": \"mirror\", \"passed\": false}, {\"check\": \"fixture 4\", \"actual\": null, \"expected\": null, \"passed\": true}, {\"check\": \"fixture 5\", \"actual\": null, \"expected\": \"first\", \"passed\": false}, {\"check\": \"fixture 6\", \"actual\": null, \"expected\": null, \"passed\": true}, {\"check\": \"fixture 7\", \"actual\": null, \"expected\": null, \"passed\": true}, {\"check\": \"fixture 8\", \"actual\": null, \"expected\": null, \"passed\": true}, {\"check\": \"fixture 9\", \"actual\": null, \"expected\": null, \"passed\": true}], \"passed\": false}\n"},"broken":{"elapsed_ms":40.004,"exit_code":1,"observations":[{"actual":null,"check":"fixture 1","expected":null,"passed":true},{"actual":"untrusted","check":"fixture 2","expected":"first","passed":false},{"actual":"mirror","check":"fixture 3","expected":"mirror","passed":true},{"actual":null,"check":"fixture 4","expected":null,"passed":true},{"actual":"first","check":"fixture 5","expected":"first","passed":true},{"actual":null,"check":"fixture 6","expected":null,"passed":true},{"actual":null,"check":"fixture 7","expected":null,"passed":true},{"actual":null,"check":"fixture 8","expected":null,"passed":true},{"actual":null,"check":"fixture 9","expected":null,"passed":true}],"passed":false,"stderr":"","stdout":"{\"observations\": [{\"check\": \"fixture 1\", \"actual\": null, \"expected\": null, \"passed\": true}, {\"check\": \"fixture 2\", \"actual\": \"untrusted\", \"expected\": \"first\", \"passed\": false}, {\"check\": \"fixture 3\", \"actual\": \"mirror\", \"expected\": \"mirror\", \"passed\": true}, {\"check\": \"fixture 4\", \"actual\": null, \"expected\": null, \"passed\": true}, {\"check\": \"fixture 5\", \"actual\": \"first\", \"expected\": \"first\", \"passed\": true}, {\"check\": \"fixture 6\", \"actual\": null, \"expected\": null, \"passed\": true}, {\"check\": \"fixture 7\", \"actual\": null, \"expected\": null, \"passed\": true}, {\"check\": \"fixture 8\", \"actual\": null, \"expected\": null, \"passed\": true}, {\"check\": \"fixture 9\", \"actual\": null, \"expected\": null, \"passed\": true}], \"passed\": false}\n"}},"member_only":{"stages":["fixed"],"fields":["implementations.fixed","verification.fixed","harness","repair"],"note":"The verified repair, its recorded checks, the repair description, and the scoring harness are available to members."}}