{"abstract":"Wrong file sizes pass validation.","category":"Packaging","checks":7,"contract":"Report missing files, unexpected files, digest mismatches, size mismatches, and forbidden executables independently. Metadata is a digest-size-executable tuple.","contract_signature":"manifest, installed, executable_allowed","evaluation_group":"xt-package-record","failed_approach":"The attempted repair substitutes manifest[k][1] == installed[k][1]. Fixture 4 still yields {'missing': [], 'extra': [], 'digest': ['a'], 'size': ['a'], 'executable': []} instead of {'missing': [], 'extra': [], 'digest': ['a'], 'size': [], 'executable': []}.","family":"xt-package-record-recorded-size","id":"FA-9896","implementations":{"attempt":{"sha256":"e9a52031cc3cce86af103957976401538c06a94ec4348eeb13980fe38baa8e89","source":"\"\"\"Failure Map reference implementation. Python standard library only.\"\"\"\nimport json\n\nN = 1\nobservations = []\ndef solve(manifest, installed, executable_allowed):\n    common = set(manifest) & set(installed)\n    return {'missing': sorted(set(manifest)-set(installed)), 'extra': sorted(set(installed)-set(manifest)), 'digest': sorted(k for k in common if manifest[k][0] != installed[k][0]), 'size': sorted(k for k in common if manifest[k][1] == installed[k][1]), 'executable': sorted(k for k in installed if installed[k][2] and k not in executable_allowed)}\ndef check(label, actual, expected):\n    observations.append({\"check\": label, \"actual\": actual, \"expected\": expected, \"passed\": actual == expected})\ncheck('fixture 1', solve({}, {}, []), {'missing': [], 'extra': [], 'digest': [], 'size': [], 'executable': []})\ncheck('fixture 2', solve({'a': ('x', 1, False)}, {}, []), {'missing': ['a'], 'extra': [], 'digest': [], 'size': [], 'executable': []})\ncheck('fixture 3', solve({}, {'a': ('x', 1, False)}, []), {'missing': [], 'extra': ['a'], 'digest': [], 'size': [], 'executable': []})\ncheck('fixture 4', solve({'a': ('x', 1, False)}, {'a': ('y', 1, False)}, []), {'missing': [], 'extra': [], 'digest': ['a'], 'size': [], 'executable': []})\ncheck('fixture 5', solve({'a': ('x', 1, False)}, {'a': ('x', 2, False)}, []), {'missing': [], 'extra': [], 'digest': [], 'size': ['a'], 'executable': []})\ncheck('fixture 6', solve({'a': ('x', 1, False)}, {'a': ('x', 1, True)}, []), {'missing': [], 'extra': [], 'digest': [], 'size': [], 'executable': ['a']})\ncheck('fixture 7', solve({'a': ('x', 1, False)}, {'a': ('x', 1, True)}, ['a']), {'missing': [], 'extra': [], 'digest': [], 'size': [], 'executable': []})\nprint(json.dumps({\"observations\": observations, \"passed\": all(x[\"passed\"] for x in observations)}, ensure_ascii=False))\nraise SystemExit(0 if all(x[\"passed\"] for x in observations) else 1)\n"},"broken":{"sha256":"c7d9038e3b0baf208782d63b2045206a823b27e0d5b5a393aa4342621d1fc3f3","source":"\"\"\"Failure Map reference implementation. Python standard library only.\"\"\"\nimport json\n\nN = 1\nobservations = []\ndef solve(manifest, installed, executable_allowed):\n    common = set(manifest) & set(installed)\n    return {'missing': sorted(set(manifest)-set(installed)), 'extra': sorted(set(installed)-set(manifest)), 'digest': sorted(k for k in common if manifest[k][0] != installed[k][0]), 'size': sorted(k for k in common if False), 'executable': sorted(k for k in installed if installed[k][2] and k not in executable_allowed)}\ndef check(label, actual, expected):\n    observations.append({\"check\": label, \"actual\": actual, \"expected\": expected, \"passed\": actual == expected})\ncheck('fixture 1', solve({}, {}, []), {'missing': [], 'extra': [], 'digest': [], 'size': [], 'executable': []})\ncheck('fixture 2', solve({'a': ('x', 1, False)}, {}, []), {'missing': ['a'], 'extra': [], 'digest': [], 'size': [], 'executable': []})\ncheck('fixture 3', solve({}, {'a': ('x', 1, False)}, []), {'missing': [], 'extra': ['a'], 'digest': [], 'size': [], 'executable': []})\ncheck('fixture 4', solve({'a': ('x', 1, False)}, {'a': ('y', 1, False)}, []), {'missing': [], 'extra': [], 'digest': ['a'], 'size': [], 'executable': []})\ncheck('fixture 5', solve({'a': ('x', 1, False)}, {'a': ('x', 2, False)}, []), {'missing': [], 'extra': [], 'digest': [], 'size': ['a'], 'executable': []})\ncheck('fixture 6', solve({'a': ('x', 1, False)}, {'a': ('x', 1, True)}, []), {'missing': [], 'extra': [], 'digest': [], 'size': [], 'executable': ['a']})\ncheck('fixture 7', solve({'a': ('x', 1, False)}, {'a': ('x', 1, True)}, ['a']), {'missing': [], 'extra': [], 'digest': [], 'size': [], 'executable': []})\nprint(json.dumps({\"observations\": observations, \"passed\": all(x[\"passed\"] for x in observations)}, ensure_ascii=False))\nraise SystemExit(0 if all(x[\"passed\"] for x in observations) else 1)\n"}},"limitations":" This reproducer isolates one failure mechanism. Results cover the supplied fixtures. Variants within a family share a test contract and should remain grouped when constructing evaluation splits. Related mechanisms with a shared evaluation_group must also remain together; these controlled models are not independent production incidents.","method":"Deterministic executable model with adversarial boundary fixtures.","provenance":{"created_by":"Failure Map","dependencies":"Python standard library","family":"xt-package-record-recorded-size","generated_at":"2026-09-29T14:38:34.158435+00:00","license":"CC0-1.0","python":"3.12.14","seed":1,"split":"open-access"},"relevance":"An offline model of installed distribution record validation, suitable for testing build and release tooling without external services.","root_cause":"The implementation substitutes False for manifest[k][1] != installed[k][1], so wrong file sizes pass validation.","sha256":"dd4781cadbe2969fd24c304cd8946450bfccb4c19415ccd556e765f585896377","title":"Installed distribution record validation: Wrong file sizes pass validation · case 01","variant":1,"variant_policy":"Five numbered records share a model and may reuse boundary fixtures.","verified":true,"visibility":"public","verification":{"attempt":{"elapsed_ms":38.429,"exit_code":1,"observations":[{"actual":{"digest":[],"executable":[],"extra":[],"missing":[],"size":[]},"check":"fixture 1","expected":{"digest":[],"executable":[],"extra":[],"missing":[],"size":[]},"passed":true},{"actual":{"digest":[],"executable":[],"extra":[],"missing":["a"],"size":[]},"check":"fixture 2","expected":{"digest":[],"executable":[],"extra":[],"missing":["a"],"size":[]},"passed":true},{"actual":{"digest":[],"executable":[],"extra":["a"],"missing":[],"size":[]},"check":"fixture 3","expected":{"digest":[],"executable":[],"extra":["a"],"missing":[],"size":[]},"passed":true},{"actual":{"digest":["a"],"executable":[],"extra":[],"missing":[],"size":["a"]},"check":"fixture 4","expected":{"digest":["a"],"executable":[],"extra":[],"missing":[],"size":[]},"passed":false},{"actual":{"digest":[],"executable":[],"extra":[],"missing":[],"size":[]},"check":"fixture 5","expected":{"digest":[],"executable":[],"extra":[],"missing":[],"size":["a"]},"passed":false},{"actual":{"digest":[],"executable":["a"],"extra":[],"missing":[],"size":["a"]},"check":"fixture 6","expected":{"digest":[],"executable":["a"],"extra":[],"missing":[],"size":[]},"passed":false},{"actual":{"digest":[],"executable":[],"extra":[],"missing":[],"size":["a"]},"check":"fixture 7","expected":{"digest":[],"executable":[],"extra":[],"missing":[],"size":[]},"passed":false}],"passed":false,"stderr":"","stdout":"{\"observations\": [{\"check\": \"fixture 1\", \"actual\": {\"missing\": [], \"extra\": [], \"digest\": [], \"size\": [], \"executable\": []}, \"expected\": {\"missing\": [], \"extra\": [], \"digest\": [], \"size\": [], \"executable\": []}, \"passed\": true}, {\"check\": \"fixture 2\", \"actual\": {\"missing\": [\"a\"], \"extra\": [], \"digest\": [], \"size\": [], \"executable\": []}, \"expected\": {\"missing\": [\"a\"], \"extra\": [], \"digest\": [], \"size\": [], \"executable\": []}, \"passed\": true}, {\"check\": \"fixture 3\", \"actual\": {\"missing\": [], \"extra\": [\"a\"], \"digest\": [], \"size\": [], \"executable\": []}, \"expected\": {\"missing\": [], \"extra\": [\"a\"], \"digest\": [], \"size\": [], \"executable\": []}, \"passed\": true}, {\"check\": \"fixture 4\", \"actual\": {\"missing\": [], \"extra\": [], \"digest\": [\"a\"], \"size\": [\"a\"], \"executable\": []}, \"expected\": {\"missing\": [], \"extra\": [], \"digest\": [\"a\"], \"size\": [], \"executable\": []}, \"passed\": false}, {\"check\": \"fixture 5\", \"actual\": {\"missing\": [], \"extra\": [], \"digest\": [], \"size\": [], \"executable\": []}, \"expected\": {\"missing\": [], \"extra\": [], \"digest\": [], \"size\": [\"a\"], \"executable\": []}, \"passed\": false}, {\"check\": \"fixture 6\", \"actual\": {\"missing\": [], \"extra\": [], \"digest\": [], \"size\": [\"a\"], \"executable\": [\"a\"]}, \"expected\": {\"missing\": [], \"extra\": [], \"digest\": [], \"size\": [], \"executable\": [\"a\"]}, \"passed\": false}, {\"check\": \"fixture 7\", \"actual\": {\"missing\": [], \"extra\": [], \"digest\": [], \"size\": [\"a\"], \"executable\": []}, \"expected\": {\"missing\": [], \"extra\": [], \"digest\": [], \"size\": [], \"executable\": []}, \"passed\": false}], \"passed\": false}\n"},"broken":{"elapsed_ms":40.966,"exit_code":1,"observations":[{"actual":{"digest":[],"executable":[],"extra":[],"missing":[],"size":[]},"check":"fixture 1","expected":{"digest":[],"executable":[],"extra":[],"missing":[],"size":[]},"passed":true},{"actual":{"digest":[],"executable":[],"extra":[],"missing":["a"],"size":[]},"check":"fixture 2","expected":{"digest":[],"executable":[],"extra":[],"missing":["a"],"size":[]},"passed":true},{"actual":{"digest":[],"executable":[],"extra":["a"],"missing":[],"size":[]},"check":"fixture 3","expected":{"digest":[],"executable":[],"extra":["a"],"missing":[],"size":[]},"passed":true},{"actual":{"digest":["a"],"executable":[],"extra":[],"missing":[],"size":[]},"check":"fixture 4","expected":{"digest":["a"],"executable":[],"extra":[],"missing":[],"size":[]},"passed":true},{"actual":{"digest":[],"executable":[],"extra":[],"missing":[],"size":[]},"check":"fixture 5","expected":{"digest":[],"executable":[],"extra":[],"missing":[],"size":["a"]},"passed":false},{"actual":{"digest":[],"executable":["a"],"extra":[],"missing":[],"size":[]},"check":"fixture 6","expected":{"digest":[],"executable":["a"],"extra":[],"missing":[],"size":[]},"passed":true},{"actual":{"digest":[],"executable":[],"extra":[],"missing":[],"size":[]},"check":"fixture 7","expected":{"digest":[],"executable":[],"extra":[],"missing":[],"size":[]},"passed":true}],"passed":false,"stderr":"","stdout":"{\"observations\": [{\"check\": \"fixture 1\", \"actual\": {\"missing\": [], \"extra\": [], \"digest\": [], \"size\": [], \"executable\": []}, \"expected\": {\"missing\": [], \"extra\": [], \"digest\": [], \"size\": [], \"executable\": []}, \"passed\": true}, {\"check\": \"fixture 2\", \"actual\": {\"missing\": [\"a\"], \"extra\": [], \"digest\": [], \"size\": [], \"executable\": []}, \"expected\": {\"missing\": [\"a\"], \"extra\": [], \"digest\": [], \"size\": [], \"executable\": []}, \"passed\": true}, {\"check\": \"fixture 3\", \"actual\": {\"missing\": [], \"extra\": [\"a\"], \"digest\": [], \"size\": [], \"executable\": []}, \"expected\": {\"missing\": [], \"extra\": [\"a\"], \"digest\": [], \"size\": [], \"executable\": []}, \"passed\": true}, {\"check\": \"fixture 4\", \"actual\": {\"missing\": [], \"extra\": [], \"digest\": [\"a\"], \"size\": [], \"executable\": []}, \"expected\": {\"missing\": [], \"extra\": [], \"digest\": [\"a\"], \"size\": [], \"executable\": []}, \"passed\": true}, {\"check\": \"fixture 5\", \"actual\": {\"missing\": [], \"extra\": [], \"digest\": [], \"size\": [], \"executable\": []}, \"expected\": {\"missing\": [], \"extra\": [], \"digest\": [], \"size\": [\"a\"], \"executable\": []}, \"passed\": false}, {\"check\": \"fixture 6\", \"actual\": {\"missing\": [], \"extra\": [], \"digest\": [], \"size\": [], \"executable\": [\"a\"]}, \"expected\": {\"missing\": [], \"extra\": [], \"digest\": [], \"size\": [], \"executable\": [\"a\"]}, \"passed\": true}, {\"check\": \"fixture 7\", \"actual\": {\"missing\": [], \"extra\": [], \"digest\": [], \"size\": [], \"executable\": []}, \"expected\": {\"missing\": [], \"extra\": [], \"digest\": [], \"size\": [], \"executable\": []}, \"passed\": true}], \"passed\": false}\n"}},"member_only":{"stages":["fixed"],"fields":["implementations.fixed","verification.fixed","harness","repair"],"note":"The verified repair, its recorded checks, the repair description, and the scoring harness are available to members."}}