FA-29216 / HTTP redirects / Open access
Compose explicit redirect policy decisions with veto precedence and reason retention: manual veto still visible · case 01
Compose explicit redirect policy decisions with veto precedence and reason retention: the manual veto still visible branch emits an incorrect decision.
ROOT CAUSE
The manual-veto-still-visible decision uses "mode == 'manual' and all(v for k,v in decisions)"; this violates the stipulated controller policy.
VERIFIED REPAIR
At this decision use "mode == 'manual'", preserving the other controller outputs.
Unsuccessful approach: The partial repair uses "mode != 'follow'" and still fails an explicit boundary or control.
Case contract
Compose explicit redirect policy decisions with veto precedence and reason retention. The explicit fixture inputs and outputs define a bounded offline policy; request identity must accompany the decision.
Why this case matters
Models a redirect controller decision before following a target or exposing a redirect result.
1 / The failure
Exit 1"""Failure Map reference implementation. Python standard library only."""
import json
from urllib.parse import urlsplit, unquote, quote
import posixpath
import re
N = 1
observations = []
def solve(request, decisions, mode, inspected, override, target):
return {'request': request, 'decision': [all(v for k,v in decisions), next((k for k,v in decisions if not v),None), [k for k,v in decisions if not v], mode == 'follow' and inspected, override and mode != 'error', mode == 'manual' and all(v for k,v in decisions), [k for k,v in decisions], target is not None and override, sum(not v for k,v in decisions), inspected and all(v for k,v in decisions)]}
def check(label, actual, expected):
observations.append({"check": label, "actual": actual, "expected": expected, "passed": actual == expected})
check('fixture 1', solve('/requests/' + str(N) + '/0', [['scheme', True], ['host', False], ['port', True]], 'follow', True, False, '/b'), {'request': '/requests/' + str(N) + '/0', 'decision': [False, 'host', ['host'], True, False, False, ['scheme', 'host', 'port'], False, 1, False]})
check('fixture 2', solve('/requests/' + str(N) + '/1', [['scheme', True], ['host', True]], 'manual', False, False, '/c'), {'request': '/requests/' + str(N) + '/1', 'decision': [True, None, [], False, False, True, ['scheme', 'host'], False, 0, False]})
check('fixture 3', solve('/requests/' + str(N) + '/2', [], 'error', True, True, '/d'), {'request': '/requests/' + str(N) + '/2', 'decision': [True, None, [], False, False, False, [], True, 0, True]})
check('fixture 4', solve('/requests/' + str(N) + '/3', [['host', False], ['port', False]], 'follow', True, True, '/e'), {'request': '/requests/' + str(N) + '/3', 'decision': [False, 'host', ['host', 'port'], True, True, False, ['host', 'port'], True, 2, False]})
check('fixture 5', solve('/requests/' + str(N) + '/4', [['scheme', True]], 'follow', False, False, None), {'request': '/requests/' + str(N) + '/4', 'decision': [True, None, [], False, False, False, ['scheme'], False, 0, False]})
check('fixture 6', solve('/requests/' + str(N) + '/5', [['scheme', False], ['host', True]], 'manual', True, True, '/f'), {'request': '/requests/' + str(N) + '/5', 'decision': [False, 'scheme', ['scheme'], False, True, True, ['scheme', 'host'], True, 1, False]})
check('fixture 7', solve('/requests/' + str(N) + '/6', [['x', True]], 'follow', True, True, None), {'request': '/requests/' + str(N) + '/6', 'decision': [True, None, [], True, True, False, ['x'], False, 0, True]})
print(json.dumps({"observations": observations, "passed": all(x["passed"] for x in observations)}, ensure_ascii=False))
raise SystemExit(0 if all(x["passed"] for x in observations) else 1)
| Boundary fixture | Actual | Expected | Outcome |
|---|---|---|---|
| fixture 1 | {'decision': [False, 'host', ['host'], True, False, False, ['scheme', 'host', 'port'], False, 1, False], 'request': '/requests/1/0'} | {'decision': [False, 'host', ['host'], True, False, False, ['scheme', 'host', 'port'], False, 1, False], 'request': '/requests/1/0'} | Passed |
| fixture 2 | {'decision': [True, None, [], False, False, True, ['scheme', 'host'], False, 0, False], 'request': '/requests/1/1'} | {'decision': [True, None, [], False, False, True, ['scheme', 'host'], False, 0, False], 'request': '/requests/1/1'} | Passed |
| fixture 3 | {'decision': [True, None, [], False, False, False, [], True, 0, True], 'request': '/requests/1/2'} | {'decision': [True, None, [], False, False, False, [], True, 0, True], 'request': '/requests/1/2'} | Passed |
| fixture 4 | {'decision': [False, 'host', ['host', 'port'], True, True, False, ['host', 'port'], True, 2, False], 'request': '/requests/1/3'} | {'decision': [False, 'host', ['host', 'port'], True, True, False, ['host', 'port'], True, 2, False], 'request': '/requests/1/3'} | Passed |
| fixture 5 | {'decision': [True, None, [], False, False, False, ['scheme'], False, 0, False], 'request': '/requests/1/4'} | {'decision': [True, None, [], False, False, False, ['scheme'], False, 0, False], 'request': '/requests/1/4'} | Passed |
| fixture 6 | {'decision': [False, 'scheme', ['scheme'], False, True, False, ['scheme', 'host'], True, 1, False], 'request': '/requests/1/5'} | {'decision': [False, 'scheme', ['scheme'], False, True, True, ['scheme', 'host'], True, 1, False], 'request': '/requests/1/5'} | Failed |
| fixture 7 | {'decision': [True, None, [], True, True, False, ['x'], False, 0, True], 'request': '/requests/1/6'} | {'decision': [True, None, [], True, True, False, ['x'], False, 0, True], 'request': '/requests/1/6'} | Passed |
SHA-256 / 21991df288a93e09bc1ade55c0fb557bf05d98046ea85d25c2a0ad4851111c7b
2 / The unsuccessful fix
Exit 1"""Failure Map reference implementation. Python standard library only."""
import json
from urllib.parse import urlsplit, unquote, quote
import posixpath
import re
N = 1
observations = []
def solve(request, decisions, mode, inspected, override, target):
return {'request': request, 'decision': [all(v for k,v in decisions), next((k for k,v in decisions if not v),None), [k for k,v in decisions if not v], mode == 'follow' and inspected, override and mode != 'error', mode != 'follow', [k for k,v in decisions], target is not None and override, sum(not v for k,v in decisions), inspected and all(v for k,v in decisions)]}
def check(label, actual, expected):
observations.append({"check": label, "actual": actual, "expected": expected, "passed": actual == expected})
check('fixture 1', solve('/requests/' + str(N) + '/0', [['scheme', True], ['host', False], ['port', True]], 'follow', True, False, '/b'), {'request': '/requests/' + str(N) + '/0', 'decision': [False, 'host', ['host'], True, False, False, ['scheme', 'host', 'port'], False, 1, False]})
check('fixture 2', solve('/requests/' + str(N) + '/1', [['scheme', True], ['host', True]], 'manual', False, False, '/c'), {'request': '/requests/' + str(N) + '/1', 'decision': [True, None, [], False, False, True, ['scheme', 'host'], False, 0, False]})
check('fixture 3', solve('/requests/' + str(N) + '/2', [], 'error', True, True, '/d'), {'request': '/requests/' + str(N) + '/2', 'decision': [True, None, [], False, False, False, [], True, 0, True]})
check('fixture 4', solve('/requests/' + str(N) + '/3', [['host', False], ['port', False]], 'follow', True, True, '/e'), {'request': '/requests/' + str(N) + '/3', 'decision': [False, 'host', ['host', 'port'], True, True, False, ['host', 'port'], True, 2, False]})
check('fixture 5', solve('/requests/' + str(N) + '/4', [['scheme', True]], 'follow', False, False, None), {'request': '/requests/' + str(N) + '/4', 'decision': [True, None, [], False, False, False, ['scheme'], False, 0, False]})
check('fixture 6', solve('/requests/' + str(N) + '/5', [['scheme', False], ['host', True]], 'manual', True, True, '/f'), {'request': '/requests/' + str(N) + '/5', 'decision': [False, 'scheme', ['scheme'], False, True, True, ['scheme', 'host'], True, 1, False]})
check('fixture 7', solve('/requests/' + str(N) + '/6', [['x', True]], 'follow', True, True, None), {'request': '/requests/' + str(N) + '/6', 'decision': [True, None, [], True, True, False, ['x'], False, 0, True]})
print(json.dumps({"observations": observations, "passed": all(x["passed"] for x in observations)}, ensure_ascii=False))
raise SystemExit(0 if all(x["passed"] for x in observations) else 1)
| Boundary fixture | Actual | Expected | Outcome |
|---|---|---|---|
| fixture 1 | {'decision': [False, 'host', ['host'], True, False, False, ['scheme', 'host', 'port'], False, 1, False], 'request': '/requests/1/0'} | {'decision': [False, 'host', ['host'], True, False, False, ['scheme', 'host', 'port'], False, 1, False], 'request': '/requests/1/0'} | Passed |
| fixture 2 | {'decision': [True, None, [], False, False, True, ['scheme', 'host'], False, 0, False], 'request': '/requests/1/1'} | {'decision': [True, None, [], False, False, True, ['scheme', 'host'], False, 0, False], 'request': '/requests/1/1'} | Passed |
| fixture 3 | {'decision': [True, None, [], False, False, True, [], True, 0, True], 'request': '/requests/1/2'} | {'decision': [True, None, [], False, False, False, [], True, 0, True], 'request': '/requests/1/2'} | Failed |
| fixture 4 | {'decision': [False, 'host', ['host', 'port'], True, True, False, ['host', 'port'], True, 2, False], 'request': '/requests/1/3'} | {'decision': [False, 'host', ['host', 'port'], True, True, False, ['host', 'port'], True, 2, False], 'request': '/requests/1/3'} | Passed |
| fixture 5 | {'decision': [True, None, [], False, False, False, ['scheme'], False, 0, False], 'request': '/requests/1/4'} | {'decision': [True, None, [], False, False, False, ['scheme'], False, 0, False], 'request': '/requests/1/4'} | Passed |
| fixture 6 | {'decision': [False, 'scheme', ['scheme'], False, True, True, ['scheme', 'host'], True, 1, False], 'request': '/requests/1/5'} | {'decision': [False, 'scheme', ['scheme'], False, True, True, ['scheme', 'host'], True, 1, False], 'request': '/requests/1/5'} | Passed |
| fixture 7 | {'decision': [True, None, [], True, True, False, ['x'], False, 0, True], 'request': '/requests/1/6'} | {'decision': [True, None, [], True, True, False, ['x'], False, 0, True], 'request': '/requests/1/6'} | Passed |
SHA-256 / d40fb7b1ad729ccacf62295497eae6dcf0b8eeaf65653aacc899662792cf544e
3 / The verified repair
Exit 0"""Failure Map reference implementation. Python standard library only."""
import json
from urllib.parse import urlsplit, unquote, quote
import posixpath
import re
N = 1
observations = []
def solve(request, decisions, mode, inspected, override, target):
return {'request': request, 'decision': [all(v for k,v in decisions), next((k for k,v in decisions if not v),None), [k for k,v in decisions if not v], mode == 'follow' and inspected, override and mode != 'error', mode == 'manual', [k for k,v in decisions], target is not None and override, sum(not v for k,v in decisions), inspected and all(v for k,v in decisions)]}
def check(label, actual, expected):
observations.append({"check": label, "actual": actual, "expected": expected, "passed": actual == expected})
check('fixture 1', solve('/requests/' + str(N) + '/0', [['scheme', True], ['host', False], ['port', True]], 'follow', True, False, '/b'), {'request': '/requests/' + str(N) + '/0', 'decision': [False, 'host', ['host'], True, False, False, ['scheme', 'host', 'port'], False, 1, False]})
check('fixture 2', solve('/requests/' + str(N) + '/1', [['scheme', True], ['host', True]], 'manual', False, False, '/c'), {'request': '/requests/' + str(N) + '/1', 'decision': [True, None, [], False, False, True, ['scheme', 'host'], False, 0, False]})
check('fixture 3', solve('/requests/' + str(N) + '/2', [], 'error', True, True, '/d'), {'request': '/requests/' + str(N) + '/2', 'decision': [True, None, [], False, False, False, [], True, 0, True]})
check('fixture 4', solve('/requests/' + str(N) + '/3', [['host', False], ['port', False]], 'follow', True, True, '/e'), {'request': '/requests/' + str(N) + '/3', 'decision': [False, 'host', ['host', 'port'], True, True, False, ['host', 'port'], True, 2, False]})
check('fixture 5', solve('/requests/' + str(N) + '/4', [['scheme', True]], 'follow', False, False, None), {'request': '/requests/' + str(N) + '/4', 'decision': [True, None, [], False, False, False, ['scheme'], False, 0, False]})
check('fixture 6', solve('/requests/' + str(N) + '/5', [['scheme', False], ['host', True]], 'manual', True, True, '/f'), {'request': '/requests/' + str(N) + '/5', 'decision': [False, 'scheme', ['scheme'], False, True, True, ['scheme', 'host'], True, 1, False]})
check('fixture 7', solve('/requests/' + str(N) + '/6', [['x', True]], 'follow', True, True, None), {'request': '/requests/' + str(N) + '/6', 'decision': [True, None, [], True, True, False, ['x'], False, 0, True]})
print(json.dumps({"observations": observations, "passed": all(x["passed"] for x in observations)}, ensure_ascii=False))
raise SystemExit(0 if all(x["passed"] for x in observations) else 1)
| Boundary fixture | Actual | Expected | Outcome |
|---|---|---|---|
| fixture 1 | {'decision': [False, 'host', ['host'], True, False, False, ['scheme', 'host', 'port'], False, 1, False], 'request': '/requests/1/0'} | {'decision': [False, 'host', ['host'], True, False, False, ['scheme', 'host', 'port'], False, 1, False], 'request': '/requests/1/0'} | Passed |
| fixture 2 | {'decision': [True, None, [], False, False, True, ['scheme', 'host'], False, 0, False], 'request': '/requests/1/1'} | {'decision': [True, None, [], False, False, True, ['scheme', 'host'], False, 0, False], 'request': '/requests/1/1'} | Passed |
| fixture 3 | {'decision': [True, None, [], False, False, False, [], True, 0, True], 'request': '/requests/1/2'} | {'decision': [True, None, [], False, False, False, [], True, 0, True], 'request': '/requests/1/2'} | Passed |
| fixture 4 | {'decision': [False, 'host', ['host', 'port'], True, True, False, ['host', 'port'], True, 2, False], 'request': '/requests/1/3'} | {'decision': [False, 'host', ['host', 'port'], True, True, False, ['host', 'port'], True, 2, False], 'request': '/requests/1/3'} | Passed |
| fixture 5 | {'decision': [True, None, [], False, False, False, ['scheme'], False, 0, False], 'request': '/requests/1/4'} | {'decision': [True, None, [], False, False, False, ['scheme'], False, 0, False], 'request': '/requests/1/4'} | Passed |
| fixture 6 | {'decision': [False, 'scheme', ['scheme'], False, True, True, ['scheme', 'host'], True, 1, False], 'request': '/requests/1/5'} | {'decision': [False, 'scheme', ['scheme'], False, True, True, ['scheme', 'host'], True, 1, False], 'request': '/requests/1/5'} | Passed |
| fixture 7 | {'decision': [True, None, [], True, True, False, ['x'], False, 0, True], 'request': '/requests/1/6'} | {'decision': [True, None, [], True, True, False, ['x'], False, 0, True], 'request': '/requests/1/6'} | Passed |
SHA-256 / fb563b1f5f08ef10911f65f17f57dbebd0f4556acb5033f9c14fe03e177e65e1
Verification & scope
Stipulated offline redirect policy, not a complete HTTP, browser, URL, cache, or security implementation. Numbered variants vary request correlation identity. This reproducer isolates one failure mechanism. Results cover the supplied fixtures. Variants within a family share a test contract and should remain grouped when constructing evaluation splits. Related mechanisms with a shared evaluation_group must also remain together; these controlled models are not independent production incidents.
Observations recorded using Python 3.12.14 at 2026-09-29T14:41:41.024989+00:00.
Case digest / 3f70c314ba96cf0a18b700d8ee464a15aa4ab70a8dfb5d0c34f9da7392c04610