FA-28261 / HTTP redirects / Open access
Build a bounded manual redirect result without issuing the next request: opaque body · case 01
Build a bounded manual redirect result without issuing the next request: the opaque body branch emits an incorrect decision.
ROOT CAUSE
The opaque-body decision uses 'body'; this violates the stipulated controller policy.
VERIFIED REPAIR
At this decision use "body if exposed else ''", preserving the other controller outputs.
Unsuccessful approach: The partial repair uses "body if mode == 'follow' else ''" and still fails an explicit boundary or control.
Case contract
Build a bounded manual redirect result without issuing the next request. The explicit fixture inputs and outputs define a bounded offline policy; request identity must accompany the decision.
Why this case matters
Models a redirect controller decision before following a target or exposing a redirect result.
1 / The failure
Exit 1"""Failure Map reference implementation. Python standard library only."""
import json
from urllib.parse import urlsplit, unquote, quote
import posixpath
import re
N = 1
observations = []
def solve(request, mode, location, exposed, origin, body, status):
return {'request': request, 'decision': [location if exposed else None, mode == 'follow' and location is not None, mode == 'error' and location is not None, status if exposed else 0, body, 'manual-redirect' if mode == 'manual' and location is not None else 'response', exposed and origin == 'same', exposed and mode != 'error', location is not None, status//100]}
def check(label, actual, expected):
observations.append({"check": label, "actual": actual, "expected": expected, "passed": actual == expected})
check('fixture 1', solve('/requests/' + str(N) + '/0', 'manual', '/b', True, 'same', 'abc', 302), {'request': '/requests/' + str(N) + '/0', 'decision': ['/b', False, False, 302, 'abc', 'manual-redirect', True, True, True, 3]})
check('fixture 2', solve('/requests/' + str(N) + '/1', 'follow', '', True, 'cross', 'read', 307), {'request': '/requests/' + str(N) + '/1', 'decision': ['', True, False, 307, 'read', 'response', False, True, True, 3]})
check('fixture 3', solve('/requests/' + str(N) + '/2', 'error', '/d', True, 'same', 'err', 301), {'request': '/requests/' + str(N) + '/2', 'decision': ['/d', False, True, 301, 'err', 'response', True, False, True, 3]})
check('fixture 4', solve('/requests/' + str(N) + '/3', 'manual', '/e', False, 'same', 'abc', 303), {'request': '/requests/' + str(N) + '/3', 'decision': [None, False, False, 0, '', 'manual-redirect', False, False, True, 3]})
check('fixture 5', solve('/requests/' + str(N) + '/4', 'error', None, True, 'same', '', 200), {'request': '/requests/' + str(N) + '/4', 'decision': [None, False, False, 200, '', 'response', True, False, False, 2]})
check('fixture 6', solve('/requests/' + str(N) + '/5', 'follow', None, False, 'cross', 'body', 404), {'request': '/requests/' + str(N) + '/5', 'decision': [None, False, False, 0, '', 'response', False, False, False, 4]})
print(json.dumps({"observations": observations, "passed": all(x["passed"] for x in observations)}, ensure_ascii=False))
raise SystemExit(0 if all(x["passed"] for x in observations) else 1)
| Boundary fixture | Actual | Expected | Outcome |
|---|---|---|---|
| fixture 1 | {'decision': ['/b', False, False, 302, 'abc', 'manual-redirect', True, True, True, 3], 'request': '/requests/1/0'} | {'decision': ['/b', False, False, 302, 'abc', 'manual-redirect', True, True, True, 3], 'request': '/requests/1/0'} | Passed |
| fixture 2 | {'decision': ['', True, False, 307, 'read', 'response', False, True, True, 3], 'request': '/requests/1/1'} | {'decision': ['', True, False, 307, 'read', 'response', False, True, True, 3], 'request': '/requests/1/1'} | Passed |
| fixture 3 | {'decision': ['/d', False, True, 301, 'err', 'response', True, False, True, 3], 'request': '/requests/1/2'} | {'decision': ['/d', False, True, 301, 'err', 'response', True, False, True, 3], 'request': '/requests/1/2'} | Passed |
| fixture 4 | {'decision': [None, False, False, 0, 'abc', 'manual-redirect', False, False, True, 3], 'request': '/requests/1/3'} | {'decision': [None, False, False, 0, '', 'manual-redirect', False, False, True, 3], 'request': '/requests/1/3'} | Failed |
| fixture 5 | {'decision': [None, False, False, 200, '', 'response', True, False, False, 2], 'request': '/requests/1/4'} | {'decision': [None, False, False, 200, '', 'response', True, False, False, 2], 'request': '/requests/1/4'} | Passed |
| fixture 6 | {'decision': [None, False, False, 0, 'body', 'response', False, False, False, 4], 'request': '/requests/1/5'} | {'decision': [None, False, False, 0, '', 'response', False, False, False, 4], 'request': '/requests/1/5'} | Failed |
SHA-256 / beda88baca537379810b8f9dde53277a9a214fbc28e914585c24d08b0e6d79f3
2 / The unsuccessful fix
Exit 1"""Failure Map reference implementation. Python standard library only."""
import json
from urllib.parse import urlsplit, unquote, quote
import posixpath
import re
N = 1
observations = []
def solve(request, mode, location, exposed, origin, body, status):
return {'request': request, 'decision': [location if exposed else None, mode == 'follow' and location is not None, mode == 'error' and location is not None, status if exposed else 0, body if mode == 'follow' else '', 'manual-redirect' if mode == 'manual' and location is not None else 'response', exposed and origin == 'same', exposed and mode != 'error', location is not None, status//100]}
def check(label, actual, expected):
observations.append({"check": label, "actual": actual, "expected": expected, "passed": actual == expected})
check('fixture 1', solve('/requests/' + str(N) + '/0', 'manual', '/b', True, 'same', 'abc', 302), {'request': '/requests/' + str(N) + '/0', 'decision': ['/b', False, False, 302, 'abc', 'manual-redirect', True, True, True, 3]})
check('fixture 2', solve('/requests/' + str(N) + '/1', 'follow', '', True, 'cross', 'read', 307), {'request': '/requests/' + str(N) + '/1', 'decision': ['', True, False, 307, 'read', 'response', False, True, True, 3]})
check('fixture 3', solve('/requests/' + str(N) + '/2', 'error', '/d', True, 'same', 'err', 301), {'request': '/requests/' + str(N) + '/2', 'decision': ['/d', False, True, 301, 'err', 'response', True, False, True, 3]})
check('fixture 4', solve('/requests/' + str(N) + '/3', 'manual', '/e', False, 'same', 'abc', 303), {'request': '/requests/' + str(N) + '/3', 'decision': [None, False, False, 0, '', 'manual-redirect', False, False, True, 3]})
check('fixture 5', solve('/requests/' + str(N) + '/4', 'error', None, True, 'same', '', 200), {'request': '/requests/' + str(N) + '/4', 'decision': [None, False, False, 200, '', 'response', True, False, False, 2]})
check('fixture 6', solve('/requests/' + str(N) + '/5', 'follow', None, False, 'cross', 'body', 404), {'request': '/requests/' + str(N) + '/5', 'decision': [None, False, False, 0, '', 'response', False, False, False, 4]})
print(json.dumps({"observations": observations, "passed": all(x["passed"] for x in observations)}, ensure_ascii=False))
raise SystemExit(0 if all(x["passed"] for x in observations) else 1)
| Boundary fixture | Actual | Expected | Outcome |
|---|---|---|---|
| fixture 1 | {'decision': ['/b', False, False, 302, '', 'manual-redirect', True, True, True, 3], 'request': '/requests/1/0'} | {'decision': ['/b', False, False, 302, 'abc', 'manual-redirect', True, True, True, 3], 'request': '/requests/1/0'} | Failed |
| fixture 2 | {'decision': ['', True, False, 307, 'read', 'response', False, True, True, 3], 'request': '/requests/1/1'} | {'decision': ['', True, False, 307, 'read', 'response', False, True, True, 3], 'request': '/requests/1/1'} | Passed |
| fixture 3 | {'decision': ['/d', False, True, 301, '', 'response', True, False, True, 3], 'request': '/requests/1/2'} | {'decision': ['/d', False, True, 301, 'err', 'response', True, False, True, 3], 'request': '/requests/1/2'} | Failed |
| fixture 4 | {'decision': [None, False, False, 0, '', 'manual-redirect', False, False, True, 3], 'request': '/requests/1/3'} | {'decision': [None, False, False, 0, '', 'manual-redirect', False, False, True, 3], 'request': '/requests/1/3'} | Passed |
| fixture 5 | {'decision': [None, False, False, 200, '', 'response', True, False, False, 2], 'request': '/requests/1/4'} | {'decision': [None, False, False, 200, '', 'response', True, False, False, 2], 'request': '/requests/1/4'} | Passed |
| fixture 6 | {'decision': [None, False, False, 0, 'body', 'response', False, False, False, 4], 'request': '/requests/1/5'} | {'decision': [None, False, False, 0, '', 'response', False, False, False, 4], 'request': '/requests/1/5'} | Failed |
SHA-256 / 9d3641d47977353cc4a4fac11dcfe83bbecb0c3876fd567e88b6f9a5d2ef3099
3 / The verified repair
Exit 0"""Failure Map reference implementation. Python standard library only."""
import json
from urllib.parse import urlsplit, unquote, quote
import posixpath
import re
N = 1
observations = []
def solve(request, mode, location, exposed, origin, body, status):
return {'request': request, 'decision': [location if exposed else None, mode == 'follow' and location is not None, mode == 'error' and location is not None, status if exposed else 0, body if exposed else '', 'manual-redirect' if mode == 'manual' and location is not None else 'response', exposed and origin == 'same', exposed and mode != 'error', location is not None, status//100]}
def check(label, actual, expected):
observations.append({"check": label, "actual": actual, "expected": expected, "passed": actual == expected})
check('fixture 1', solve('/requests/' + str(N) + '/0', 'manual', '/b', True, 'same', 'abc', 302), {'request': '/requests/' + str(N) + '/0', 'decision': ['/b', False, False, 302, 'abc', 'manual-redirect', True, True, True, 3]})
check('fixture 2', solve('/requests/' + str(N) + '/1', 'follow', '', True, 'cross', 'read', 307), {'request': '/requests/' + str(N) + '/1', 'decision': ['', True, False, 307, 'read', 'response', False, True, True, 3]})
check('fixture 3', solve('/requests/' + str(N) + '/2', 'error', '/d', True, 'same', 'err', 301), {'request': '/requests/' + str(N) + '/2', 'decision': ['/d', False, True, 301, 'err', 'response', True, False, True, 3]})
check('fixture 4', solve('/requests/' + str(N) + '/3', 'manual', '/e', False, 'same', 'abc', 303), {'request': '/requests/' + str(N) + '/3', 'decision': [None, False, False, 0, '', 'manual-redirect', False, False, True, 3]})
check('fixture 5', solve('/requests/' + str(N) + '/4', 'error', None, True, 'same', '', 200), {'request': '/requests/' + str(N) + '/4', 'decision': [None, False, False, 200, '', 'response', True, False, False, 2]})
check('fixture 6', solve('/requests/' + str(N) + '/5', 'follow', None, False, 'cross', 'body', 404), {'request': '/requests/' + str(N) + '/5', 'decision': [None, False, False, 0, '', 'response', False, False, False, 4]})
print(json.dumps({"observations": observations, "passed": all(x["passed"] for x in observations)}, ensure_ascii=False))
raise SystemExit(0 if all(x["passed"] for x in observations) else 1)
| Boundary fixture | Actual | Expected | Outcome |
|---|---|---|---|
| fixture 1 | {'decision': ['/b', False, False, 302, 'abc', 'manual-redirect', True, True, True, 3], 'request': '/requests/1/0'} | {'decision': ['/b', False, False, 302, 'abc', 'manual-redirect', True, True, True, 3], 'request': '/requests/1/0'} | Passed |
| fixture 2 | {'decision': ['', True, False, 307, 'read', 'response', False, True, True, 3], 'request': '/requests/1/1'} | {'decision': ['', True, False, 307, 'read', 'response', False, True, True, 3], 'request': '/requests/1/1'} | Passed |
| fixture 3 | {'decision': ['/d', False, True, 301, 'err', 'response', True, False, True, 3], 'request': '/requests/1/2'} | {'decision': ['/d', False, True, 301, 'err', 'response', True, False, True, 3], 'request': '/requests/1/2'} | Passed |
| fixture 4 | {'decision': [None, False, False, 0, '', 'manual-redirect', False, False, True, 3], 'request': '/requests/1/3'} | {'decision': [None, False, False, 0, '', 'manual-redirect', False, False, True, 3], 'request': '/requests/1/3'} | Passed |
| fixture 5 | {'decision': [None, False, False, 200, '', 'response', True, False, False, 2], 'request': '/requests/1/4'} | {'decision': [None, False, False, 200, '', 'response', True, False, False, 2], 'request': '/requests/1/4'} | Passed |
| fixture 6 | {'decision': [None, False, False, 0, '', 'response', False, False, False, 4], 'request': '/requests/1/5'} | {'decision': [None, False, False, 0, '', 'response', False, False, False, 4], 'request': '/requests/1/5'} | Passed |
SHA-256 / b42defa6f1a7d6ea5f11be4b432f1c56c5a70f68b7b623c92ae1cab3cc5573f8
Verification & scope
Stipulated offline redirect policy, not a complete HTTP, browser, URL, cache, or security implementation. Numbered variants vary request correlation identity. This reproducer isolates one failure mechanism. Results cover the supplied fixtures. Variants within a family share a test contract and should remain grouped when constructing evaluation splits. Related mechanisms with a shared evaluation_group must also remain together; these controlled models are not independent production incidents.
Observations recorded using Python 3.12.14 at 2026-09-29T14:41:32.371136+00:00.
Case digest / 1105f49f433340da1b7b5bf8eb6545105919ca5e5d81096153e131954b2ce331