FA-33196 / Menu interactions / Open access

Hidden menu surface receives an unnecessary provider redraw · case 01

Hidden menu surface receives an unnecessary provider redraw.

Verified by executionVariant 1 · 8 checks per implementationDownload source bundle ↓JSON ↗

ROOT CAUSE

The menu-provider-leases model applies `[x['id'] for x in p if x['attached']]` at its visible-recipients operation instead of the stipulated transformation.

VERIFIED REPAIR

Apply `[x['id'] for x in p if x['visible'] and x['attached']]` at visible-recipients.

Unsuccessful approach: The attempted repair `[x['id'] for x in p if x['visible']]` still violates the visible-recipients oracle.

Case contract

Providers can be shared by multiple menu surfaces; leases control attachment lifetime and only visible subscribers receive presentation updates.

Why this case matters

Cascading and context menus require coherent command and session state as content changes.

1 / The failure

Exit 1

"""Failure Map reference implementation. Python standard library only."""
import json
import math
import unicodedata
N = 1
observations = []
def solve(action, p):
    if action == 'acquire':
        return sorted(p['holders'] | {p['id']})
    if action == 'release':
        return sorted(p['holders']-{p['id']})
    if action == 'dispose':
        return not p['holders']
    if action == 'visible-recipients':
        return [x['id'] for x in p if x['attached']]
    if action == 'load-more':
        return p['next'] is not None and not p['pending_page']
    if action == 'new-load':
        return not p['loaded'] and not p['pending']
    return {'error': 'unsupported menu operation'}
def check(label, actual, expected):
    observations.append({"check": label, "actual": actual, "expected": expected, "passed": actual == expected})
check('acquire contract', solve('acquire', {'holders':{'a'},'id':'b'+str(N)}), ['a','b'+str(N)])
check('release contract', solve('release', {'holders':{'a','b'+str(N)},'id':'a'}), ['b'+str(N)])
check('dispose contract', solve('dispose', {'holders':['menu'+str(N)]}), False)
check('visible-recipients contract', solve('visible-recipients', [{'id':N,'visible':False,'attached':True},{'id':N+1,'visible':True,'attached':False}]), [])
check('load-more contract', solve('load-more', {'next':'cursor'+str(N),'pending_page':True}), False)
check('new-load contract', solve('new-load', {'loaded':False,'pending':True,'leases':N}), False)
check('unknown operation', solve('unknown', {}), {'error': 'unsupported menu operation'})
check('empty opaque cursor is valid',solve('load-more',{'next':'','pending_page':False,'generation':N}),True)
print(json.dumps({"observations": observations, "passed": all(x["passed"] for x in observations)}, ensure_ascii=False))
raise SystemExit(0 if all(x["passed"] for x in observations) else 1)

Boundary fixture	Actual	Expected	Outcome
acquire contract	`['a', 'b1']`	`['a', 'b1']`	Passed
release contract	`['b1']`	`['b1']`	Passed
dispose contract	`False`	`False`	Passed
visible-recipients contract	`[1]`	`[]`	Failed
load-more contract	`False`	`False`	Passed
new-load contract	`False`	`False`	Passed
unknown operation	`{'error': 'unsupported menu operation'}`	`{'error': 'unsupported menu operation'}`	Passed
empty opaque cursor is valid	`True`	`True`	Passed

SHA-256 / baad0617fc1c22ac6b158a27cff2ba7edca10628b340528413d15b360ab7e8c3

2 / The unsuccessful fix

Exit 1

"""Failure Map reference implementation. Python standard library only."""
import json
import math
import unicodedata
N = 1
observations = []
def solve(action, p):
    if action == 'acquire':
        return sorted(p['holders'] | {p['id']})
    if action == 'release':
        return sorted(p['holders']-{p['id']})
    if action == 'dispose':
        return not p['holders']
    if action == 'visible-recipients':
        return [x['id'] for x in p if x['visible']]
    if action == 'load-more':
        return p['next'] is not None and not p['pending_page']
    if action == 'new-load':
        return not p['loaded'] and not p['pending']
    return {'error': 'unsupported menu operation'}
def check(label, actual, expected):
    observations.append({"check": label, "actual": actual, "expected": expected, "passed": actual == expected})
check('acquire contract', solve('acquire', {'holders':{'a'},'id':'b'+str(N)}), ['a','b'+str(N)])
check('release contract', solve('release', {'holders':{'a','b'+str(N)},'id':'a'}), ['b'+str(N)])
check('dispose contract', solve('dispose', {'holders':['menu'+str(N)]}), False)
check('visible-recipients contract', solve('visible-recipients', [{'id':N,'visible':False,'attached':True},{'id':N+1,'visible':True,'attached':False}]), [])
check('load-more contract', solve('load-more', {'next':'cursor'+str(N),'pending_page':True}), False)
check('new-load contract', solve('new-load', {'loaded':False,'pending':True,'leases':N}), False)
check('unknown operation', solve('unknown', {}), {'error': 'unsupported menu operation'})
check('empty opaque cursor is valid',solve('load-more',{'next':'','pending_page':False,'generation':N}),True)
print(json.dumps({"observations": observations, "passed": all(x["passed"] for x in observations)}, ensure_ascii=False))
raise SystemExit(0 if all(x["passed"] for x in observations) else 1)

Boundary fixture	Actual	Expected	Outcome
acquire contract	`['a', 'b1']`	`['a', 'b1']`	Passed
release contract	`['b1']`	`['b1']`	Passed
dispose contract	`False`	`False`	Passed
visible-recipients contract	`[2]`	`[]`	Failed
load-more contract	`False`	`False`	Passed
new-load contract	`False`	`False`	Passed
unknown operation	`{'error': 'unsupported menu operation'}`	`{'error': 'unsupported menu operation'}`	Passed
empty opaque cursor is valid	`True`	`True`	Passed

SHA-256 / c4645d33f751f1b581d3a8ae965b8ee6cce4a2ab12612902cff87d34c9a70601

3 / The verified repair

Exit 0

"""Failure Map reference implementation. Python standard library only."""
import json
import math
import unicodedata
N = 1
observations = []
def solve(action, p):
    if action == 'acquire':
        return sorted(p['holders'] | {p['id']})
    if action == 'release':
        return sorted(p['holders']-{p['id']})
    if action == 'dispose':
        return not p['holders']
    if action == 'visible-recipients':
        return [x['id'] for x in p if x['visible'] and x['attached']]
    if action == 'load-more':
        return p['next'] is not None and not p['pending_page']
    if action == 'new-load':
        return not p['loaded'] and not p['pending']
    return {'error': 'unsupported menu operation'}
def check(label, actual, expected):
    observations.append({"check": label, "actual": actual, "expected": expected, "passed": actual == expected})
check('acquire contract', solve('acquire', {'holders':{'a'},'id':'b'+str(N)}), ['a','b'+str(N)])
check('release contract', solve('release', {'holders':{'a','b'+str(N)},'id':'a'}), ['b'+str(N)])
check('dispose contract', solve('dispose', {'holders':['menu'+str(N)]}), False)
check('visible-recipients contract', solve('visible-recipients', [{'id':N,'visible':False,'attached':True},{'id':N+1,'visible':True,'attached':False}]), [])
check('load-more contract', solve('load-more', {'next':'cursor'+str(N),'pending_page':True}), False)
check('new-load contract', solve('new-load', {'loaded':False,'pending':True,'leases':N}), False)
check('unknown operation', solve('unknown', {}), {'error': 'unsupported menu operation'})
check('empty opaque cursor is valid',solve('load-more',{'next':'','pending_page':False,'generation':N}),True)
print(json.dumps({"observations": observations, "passed": all(x["passed"] for x in observations)}, ensure_ascii=False))
raise SystemExit(0 if all(x["passed"] for x in observations) else 1)

Boundary fixture	Actual	Expected	Outcome
acquire contract	`['a', 'b1']`	`['a', 'b1']`	Passed
release contract	`['b1']`	`['b1']`	Passed
dispose contract	`False`	`False`	Passed
visible-recipients contract	`[]`	`[]`	Passed
load-more contract	`False`	`False`	Passed
new-load contract	`False`	`False`	Passed
unknown operation	`{'error': 'unsupported menu operation'}`	`{'error': 'unsupported menu operation'}`	Passed
empty opaque cursor is valid	`True`	`True`	Passed

SHA-256 / 240bb7f27608ed88d3489ba59a84e602796817ee4fb98c005103f318844a3113

Verification & scope

Offline supplied-valid-payload model; excludes DOM, keyboard, focus, selection, announcements and browser conformance. This reproducer isolates one failure mechanism. Results cover the supplied fixtures. Variants within a family share a test contract and should remain grouped when constructing evaluation splits. Related mechanisms with a shared evaluation_group must also remain together; these controlled models are not independent production incidents.

Observations recorded using Python 3.12.14 at 2026-09-29T14:42:19.907334+00:00.

Case digest / ce69a7ee53038858c4ce2c20524b918359e78ca562bab8b21ab5caaddaecb742