FA-29241 / HTTP redirects / Open access
Retain redirect-edge provenance when materializing a chain audit record: edge source sequence · case 01
Retain redirect-edge provenance when materializing a chain audit record: the edge source sequence branch emits an incorrect decision.
ROOT CAUSE
The edge-source-sequence decision uses '[e[1] for e in edges]'; this violates the stipulated controller policy.
VERIFIED REPAIR
At this decision use '[e[0] for e in edges]', preserving the other controller outputs.
Unsuccessful approach: The partial repair uses 'sorted(e[0] for e in edges)' and still fails an explicit boundary or control.
Case contract
Retain redirect-edge provenance when materializing a chain audit record. The explicit fixture inputs and outputs define a bounded offline policy; request identity must accompany the decision.
Why this case matters
Models a redirect controller decision before following a target or exposing a redirect result.
1 / The failure
Exit 1"""Failure Map reference implementation. Python standard library only."""
import json
from urllib.parse import urlsplit, unquote, quote
import posixpath
import re
N = 1
observations = []
def solve(request, edges, original, terminal, success):
return {'request': request, 'decision': [[e[1] for e in edges], [e[1] for e in edges], all(edges[i-1][1]==edges[i][0] for i in range(1,len(edges))), not edges or edges[0][0]==original, not edges or edges[-1][1]==terminal, sum(e[3]=='cache' for e in edges), sum(e[3]=='network' for e in edges), bool(edges) and all(e[2] in (301,308) for e in edges), success, [e[2] for e in edges]]}
def check(label, actual, expected):
observations.append({"check": label, "actual": actual, "expected": expected, "passed": actual == expected})
check('fixture 1', solve('/requests/' + str(N) + '/0', [['/a', '/b', 301, 'cache'], ['/b', '/c', 302, 'network']], '/a', '/c', True), {'request': '/requests/' + str(N) + '/0', 'decision': [['/a', '/b'], ['/b', '/c'], True, True, True, 1, 1, False, True, [301, 302]]})
check('fixture 2', solve('/requests/' + str(N) + '/1', [], '/x', '/x', True), {'request': '/requests/' + str(N) + '/1', 'decision': [[], [], True, True, True, 0, 0, False, True, []]})
check('fixture 3', solve('/requests/' + str(N) + '/2', [['/x', '/y', 307, 'network']], '/x', '/y', False), {'request': '/requests/' + str(N) + '/2', 'decision': [['/x'], ['/y'], True, True, True, 0, 1, False, False, [307]]})
check('fixture 4', solve('/requests/' + str(N) + '/3', [['/z', '/a', 308, 'cache'], ['/a', '/z', 308, 'cache']], '/z', '/z', False), {'request': '/requests/' + str(N) + '/3', 'decision': [['/z', '/a'], ['/a', '/z'], True, True, True, 2, 0, True, False, [308, 308]]})
check('fixture 5', solve('/requests/' + str(N) + '/4', [['/a', '/b', 303, 'network'], ['/b', '/c', 307, 'network']], '/a', '/c', True), {'request': '/requests/' + str(N) + '/4', 'decision': [['/a', '/b'], ['/b', '/c'], True, True, True, 0, 2, False, True, [303, 307]]})
check('fixture 6', solve('/requests/' + str(N) + '/5', [['/a', '/b', 301, 'network'], ['/x', '/c', 302, 'cache']], '/a', '/c', False), {'request': '/requests/' + str(N) + '/5', 'decision': [['/a', '/x'], ['/b', '/c'], False, True, True, 1, 1, False, False, [301, 302]]})
check('fixture 7', solve('/requests/' + str(N) + '/6', [['/a', '/b', 308, 'network'], ['/b', '/c', 301, 'network']], '/a', '/c', True), {'request': '/requests/' + str(N) + '/6', 'decision': [['/a', '/b'], ['/b', '/c'], True, True, True, 0, 2, True, True, [308, 301]]})
print(json.dumps({"observations": observations, "passed": all(x["passed"] for x in observations)}, ensure_ascii=False))
raise SystemExit(0 if all(x["passed"] for x in observations) else 1)
| Boundary fixture | Actual | Expected | Outcome |
|---|---|---|---|
| fixture 1 | {'decision': [['/b', '/c'], ['/b', '/c'], True, True, True, 1, 1, False, True, [301, 302]], 'request': '/requests/1/0'} | {'decision': [['/a', '/b'], ['/b', '/c'], True, True, True, 1, 1, False, True, [301, 302]], 'request': '/requests/1/0'} | Failed |
| fixture 2 | {'decision': [[], [], True, True, True, 0, 0, False, True, []], 'request': '/requests/1/1'} | {'decision': [[], [], True, True, True, 0, 0, False, True, []], 'request': '/requests/1/1'} | Passed |
| fixture 3 | {'decision': [['/y'], ['/y'], True, True, True, 0, 1, False, False, [307]], 'request': '/requests/1/2'} | {'decision': [['/x'], ['/y'], True, True, True, 0, 1, False, False, [307]], 'request': '/requests/1/2'} | Failed |
| fixture 4 | {'decision': [['/a', '/z'], ['/a', '/z'], True, True, True, 2, 0, True, False, [308, 308]], 'request': '/requests/1/3'} | {'decision': [['/z', '/a'], ['/a', '/z'], True, True, True, 2, 0, True, False, [308, 308]], 'request': '/requests/1/3'} | Failed |
| fixture 5 | {'decision': [['/b', '/c'], ['/b', '/c'], True, True, True, 0, 2, False, True, [303, 307]], 'request': '/requests/1/4'} | {'decision': [['/a', '/b'], ['/b', '/c'], True, True, True, 0, 2, False, True, [303, 307]], 'request': '/requests/1/4'} | Failed |
| fixture 6 | {'decision': [['/b', '/c'], ['/b', '/c'], False, True, True, 1, 1, False, False, [301, 302]], 'request': '/requests/1/5'} | {'decision': [['/a', '/x'], ['/b', '/c'], False, True, True, 1, 1, False, False, [301, 302]], 'request': '/requests/1/5'} | Failed |
| fixture 7 | {'decision': [['/b', '/c'], ['/b', '/c'], True, True, True, 0, 2, True, True, [308, 301]], 'request': '/requests/1/6'} | {'decision': [['/a', '/b'], ['/b', '/c'], True, True, True, 0, 2, True, True, [308, 301]], 'request': '/requests/1/6'} | Failed |
SHA-256 / 1b416aba13e91edbdbaabebab1a72f73cb87d7dc4e2b0f1f5147b5455c571a5f
2 / The unsuccessful fix
Exit 1"""Failure Map reference implementation. Python standard library only."""
import json
from urllib.parse import urlsplit, unquote, quote
import posixpath
import re
N = 1
observations = []
def solve(request, edges, original, terminal, success):
return {'request': request, 'decision': [sorted(e[0] for e in edges), [e[1] for e in edges], all(edges[i-1][1]==edges[i][0] for i in range(1,len(edges))), not edges or edges[0][0]==original, not edges or edges[-1][1]==terminal, sum(e[3]=='cache' for e in edges), sum(e[3]=='network' for e in edges), bool(edges) and all(e[2] in (301,308) for e in edges), success, [e[2] for e in edges]]}
def check(label, actual, expected):
observations.append({"check": label, "actual": actual, "expected": expected, "passed": actual == expected})
check('fixture 1', solve('/requests/' + str(N) + '/0', [['/a', '/b', 301, 'cache'], ['/b', '/c', 302, 'network']], '/a', '/c', True), {'request': '/requests/' + str(N) + '/0', 'decision': [['/a', '/b'], ['/b', '/c'], True, True, True, 1, 1, False, True, [301, 302]]})
check('fixture 2', solve('/requests/' + str(N) + '/1', [], '/x', '/x', True), {'request': '/requests/' + str(N) + '/1', 'decision': [[], [], True, True, True, 0, 0, False, True, []]})
check('fixture 3', solve('/requests/' + str(N) + '/2', [['/x', '/y', 307, 'network']], '/x', '/y', False), {'request': '/requests/' + str(N) + '/2', 'decision': [['/x'], ['/y'], True, True, True, 0, 1, False, False, [307]]})
check('fixture 4', solve('/requests/' + str(N) + '/3', [['/z', '/a', 308, 'cache'], ['/a', '/z', 308, 'cache']], '/z', '/z', False), {'request': '/requests/' + str(N) + '/3', 'decision': [['/z', '/a'], ['/a', '/z'], True, True, True, 2, 0, True, False, [308, 308]]})
check('fixture 5', solve('/requests/' + str(N) + '/4', [['/a', '/b', 303, 'network'], ['/b', '/c', 307, 'network']], '/a', '/c', True), {'request': '/requests/' + str(N) + '/4', 'decision': [['/a', '/b'], ['/b', '/c'], True, True, True, 0, 2, False, True, [303, 307]]})
check('fixture 6', solve('/requests/' + str(N) + '/5', [['/a', '/b', 301, 'network'], ['/x', '/c', 302, 'cache']], '/a', '/c', False), {'request': '/requests/' + str(N) + '/5', 'decision': [['/a', '/x'], ['/b', '/c'], False, True, True, 1, 1, False, False, [301, 302]]})
check('fixture 7', solve('/requests/' + str(N) + '/6', [['/a', '/b', 308, 'network'], ['/b', '/c', 301, 'network']], '/a', '/c', True), {'request': '/requests/' + str(N) + '/6', 'decision': [['/a', '/b'], ['/b', '/c'], True, True, True, 0, 2, True, True, [308, 301]]})
print(json.dumps({"observations": observations, "passed": all(x["passed"] for x in observations)}, ensure_ascii=False))
raise SystemExit(0 if all(x["passed"] for x in observations) else 1)
| Boundary fixture | Actual | Expected | Outcome |
|---|---|---|---|
| fixture 1 | {'decision': [['/a', '/b'], ['/b', '/c'], True, True, True, 1, 1, False, True, [301, 302]], 'request': '/requests/1/0'} | {'decision': [['/a', '/b'], ['/b', '/c'], True, True, True, 1, 1, False, True, [301, 302]], 'request': '/requests/1/0'} | Passed |
| fixture 2 | {'decision': [[], [], True, True, True, 0, 0, False, True, []], 'request': '/requests/1/1'} | {'decision': [[], [], True, True, True, 0, 0, False, True, []], 'request': '/requests/1/1'} | Passed |
| fixture 3 | {'decision': [['/x'], ['/y'], True, True, True, 0, 1, False, False, [307]], 'request': '/requests/1/2'} | {'decision': [['/x'], ['/y'], True, True, True, 0, 1, False, False, [307]], 'request': '/requests/1/2'} | Passed |
| fixture 4 | {'decision': [['/a', '/z'], ['/a', '/z'], True, True, True, 2, 0, True, False, [308, 308]], 'request': '/requests/1/3'} | {'decision': [['/z', '/a'], ['/a', '/z'], True, True, True, 2, 0, True, False, [308, 308]], 'request': '/requests/1/3'} | Failed |
| fixture 5 | {'decision': [['/a', '/b'], ['/b', '/c'], True, True, True, 0, 2, False, True, [303, 307]], 'request': '/requests/1/4'} | {'decision': [['/a', '/b'], ['/b', '/c'], True, True, True, 0, 2, False, True, [303, 307]], 'request': '/requests/1/4'} | Passed |
| fixture 6 | {'decision': [['/a', '/x'], ['/b', '/c'], False, True, True, 1, 1, False, False, [301, 302]], 'request': '/requests/1/5'} | {'decision': [['/a', '/x'], ['/b', '/c'], False, True, True, 1, 1, False, False, [301, 302]], 'request': '/requests/1/5'} | Passed |
| fixture 7 | {'decision': [['/a', '/b'], ['/b', '/c'], True, True, True, 0, 2, True, True, [308, 301]], 'request': '/requests/1/6'} | {'decision': [['/a', '/b'], ['/b', '/c'], True, True, True, 0, 2, True, True, [308, 301]], 'request': '/requests/1/6'} | Passed |
SHA-256 / 9f5866c7b4704add25061da9a102dc9aa77b50b1653b6dba20455424923f8f60
3 / The verified repair
Exit 0"""Failure Map reference implementation. Python standard library only."""
import json
from urllib.parse import urlsplit, unquote, quote
import posixpath
import re
N = 1
observations = []
def solve(request, edges, original, terminal, success):
return {'request': request, 'decision': [[e[0] for e in edges], [e[1] for e in edges], all(edges[i-1][1]==edges[i][0] for i in range(1,len(edges))), not edges or edges[0][0]==original, not edges or edges[-1][1]==terminal, sum(e[3]=='cache' for e in edges), sum(e[3]=='network' for e in edges), bool(edges) and all(e[2] in (301,308) for e in edges), success, [e[2] for e in edges]]}
def check(label, actual, expected):
observations.append({"check": label, "actual": actual, "expected": expected, "passed": actual == expected})
check('fixture 1', solve('/requests/' + str(N) + '/0', [['/a', '/b', 301, 'cache'], ['/b', '/c', 302, 'network']], '/a', '/c', True), {'request': '/requests/' + str(N) + '/0', 'decision': [['/a', '/b'], ['/b', '/c'], True, True, True, 1, 1, False, True, [301, 302]]})
check('fixture 2', solve('/requests/' + str(N) + '/1', [], '/x', '/x', True), {'request': '/requests/' + str(N) + '/1', 'decision': [[], [], True, True, True, 0, 0, False, True, []]})
check('fixture 3', solve('/requests/' + str(N) + '/2', [['/x', '/y', 307, 'network']], '/x', '/y', False), {'request': '/requests/' + str(N) + '/2', 'decision': [['/x'], ['/y'], True, True, True, 0, 1, False, False, [307]]})
check('fixture 4', solve('/requests/' + str(N) + '/3', [['/z', '/a', 308, 'cache'], ['/a', '/z', 308, 'cache']], '/z', '/z', False), {'request': '/requests/' + str(N) + '/3', 'decision': [['/z', '/a'], ['/a', '/z'], True, True, True, 2, 0, True, False, [308, 308]]})
check('fixture 5', solve('/requests/' + str(N) + '/4', [['/a', '/b', 303, 'network'], ['/b', '/c', 307, 'network']], '/a', '/c', True), {'request': '/requests/' + str(N) + '/4', 'decision': [['/a', '/b'], ['/b', '/c'], True, True, True, 0, 2, False, True, [303, 307]]})
check('fixture 6', solve('/requests/' + str(N) + '/5', [['/a', '/b', 301, 'network'], ['/x', '/c', 302, 'cache']], '/a', '/c', False), {'request': '/requests/' + str(N) + '/5', 'decision': [['/a', '/x'], ['/b', '/c'], False, True, True, 1, 1, False, False, [301, 302]]})
check('fixture 7', solve('/requests/' + str(N) + '/6', [['/a', '/b', 308, 'network'], ['/b', '/c', 301, 'network']], '/a', '/c', True), {'request': '/requests/' + str(N) + '/6', 'decision': [['/a', '/b'], ['/b', '/c'], True, True, True, 0, 2, True, True, [308, 301]]})
print(json.dumps({"observations": observations, "passed": all(x["passed"] for x in observations)}, ensure_ascii=False))
raise SystemExit(0 if all(x["passed"] for x in observations) else 1)
| Boundary fixture | Actual | Expected | Outcome |
|---|---|---|---|
| fixture 1 | {'decision': [['/a', '/b'], ['/b', '/c'], True, True, True, 1, 1, False, True, [301, 302]], 'request': '/requests/1/0'} | {'decision': [['/a', '/b'], ['/b', '/c'], True, True, True, 1, 1, False, True, [301, 302]], 'request': '/requests/1/0'} | Passed |
| fixture 2 | {'decision': [[], [], True, True, True, 0, 0, False, True, []], 'request': '/requests/1/1'} | {'decision': [[], [], True, True, True, 0, 0, False, True, []], 'request': '/requests/1/1'} | Passed |
| fixture 3 | {'decision': [['/x'], ['/y'], True, True, True, 0, 1, False, False, [307]], 'request': '/requests/1/2'} | {'decision': [['/x'], ['/y'], True, True, True, 0, 1, False, False, [307]], 'request': '/requests/1/2'} | Passed |
| fixture 4 | {'decision': [['/z', '/a'], ['/a', '/z'], True, True, True, 2, 0, True, False, [308, 308]], 'request': '/requests/1/3'} | {'decision': [['/z', '/a'], ['/a', '/z'], True, True, True, 2, 0, True, False, [308, 308]], 'request': '/requests/1/3'} | Passed |
| fixture 5 | {'decision': [['/a', '/b'], ['/b', '/c'], True, True, True, 0, 2, False, True, [303, 307]], 'request': '/requests/1/4'} | {'decision': [['/a', '/b'], ['/b', '/c'], True, True, True, 0, 2, False, True, [303, 307]], 'request': '/requests/1/4'} | Passed |
| fixture 6 | {'decision': [['/a', '/x'], ['/b', '/c'], False, True, True, 1, 1, False, False, [301, 302]], 'request': '/requests/1/5'} | {'decision': [['/a', '/x'], ['/b', '/c'], False, True, True, 1, 1, False, False, [301, 302]], 'request': '/requests/1/5'} | Passed |
| fixture 7 | {'decision': [['/a', '/b'], ['/b', '/c'], True, True, True, 0, 2, True, True, [308, 301]], 'request': '/requests/1/6'} | {'decision': [['/a', '/b'], ['/b', '/c'], True, True, True, 0, 2, True, True, [308, 301]], 'request': '/requests/1/6'} | Passed |
SHA-256 / 38b69cf1dcaeb10c8e865a4ce5de2086c3fbd6275f53c5aa1b07600f6c946d3e
Verification & scope
Stipulated offline redirect policy, not a complete HTTP, browser, URL, cache, or security implementation. Numbered variants vary request correlation identity. This reproducer isolates one failure mechanism. Results cover the supplied fixtures. Variants within a family share a test contract and should remain grouped when constructing evaluation splits. Related mechanisms with a shared evaluation_group must also remain together; these controlled models are not independent production incidents.
Observations recorded using Python 3.12.14 at 2026-09-29T14:41:41.274389+00:00.
Case digest / ad96e4b0ff74ad122b9d568da054425af6ac2597a7e834d8f5726aec224e34bb