FAILURE MAP
← Case archive

FA-34251 / Notification interfaces / Open access

Single-surface notification display ownership: lease-denied from claiming · case 01

The lease-denied event leaves a notification in displaying instead of standby.

Verified by executionVariant 1 · 39 checks per implementationDownload source bundle ↓JSON ↗

ROOT CAUSE

A losing surface still shows the notification.

THE FAILURE

A losing surface still shows the notification.

Unsuccessful approach: Releasing another surface's lease can duplicate future ownership.

Case contract

Single-surface notification display ownership is a bounded visual-notification workflow with mutable policy state {'token': 5, 'owner': 'local', 'mounted': False, 'released': []}. Its default transition relation is {('standby', 'request-display'): 'claiming', ('claiming', 'lease-granted'): 'displaying', ('claiming', 'lease-denied'): 'standby', ('displaying', 'lease-revoked'): 'withdrawing', ('withdrawing', 'unmounted'): 'standby', ('displaying', 'close-surface'): 'releasing', ('releasing', 'release-confirmed'): 'standby', ('claiming', 'cancel-display'): 'claim-canceled', ('claim-canceled', 'late-lease-granted'): 'releasing', ('standby', 'foreign-release'): 'standby'}; domain inputs can suppress or redirect transitions and update policy fields, as specified in solve. Different-generation events are inert. Batches apply in order. Optional observe returns the selected policy field alongside the phase.

Why this case matters

Visual notification lifecycle ordering can leave an inbox or toast showing the wrong actionable state even when transport succeeds.

1 / The failure

Exit 1
"""Failure Map reference implementation. Python standard library only."""
import json

N = 1
observations = []
def solve(initial, events, generation, payload=None, observe=None):
    table = {('standby', 'request-display'): 'claiming', ('claiming', 'lease-granted'): 'displaying', ('claiming', 'lease-denied'): 'displaying', ('displaying', 'lease-revoked'): 'withdrawing', ('withdrawing', 'unmounted'): 'standby', ('displaying', 'close-surface'): 'releasing', ('releasing', 'release-confirmed'): 'standby', ('claiming', 'cancel-display'): 'claim-canceled', ('claim-canceled', 'late-lease-granted'): 'releasing', ('standby', 'foreign-release'): 'standby'}
    data = json.loads(json.dumps({'token': 5, 'owner': 'local', 'mounted': False, 'released': []})) if payload is None else {**json.loads(json.dumps({'token': 5, 'owner': 'local', 'mounted': False, 'released': []})), **json.loads(json.dumps(payload))}
    state = initial
    for delivery in events:
        event, event_generation = delivery[:2]
        arg = delivery[2] if len(delivery) > 2 else {}
        if event_generation == generation:
            previous = state
            if event in ('lease-granted','lease-revoked','release-confirmed','late-lease-granted') and arg.get('token',data['token']) != data['token']: event = 'unknown-event'
            if event == 'foreign-release' and arg.get('owner','foreign') == data['owner']: event = 'release-confirmed'
            state = table.get((state, event), state)
            if state == 'displaying': data['mounted'] = True
            if state in ('standby','withdrawing'): data['mounted'] = False
            if state == 'releasing' and data['token'] not in data['released']: data['released'].append(data['token'])
    return {'phase': state, 'value': data[observe]} if observe else state
def check(label, actual, expected):
    observations.append({"check": label, "actual": actual, "expected": expected, "passed": actual == expected})
check('standby / request-display', solve('standby', [('request-display', N)], N), 'claiming')
check('claiming / lease-granted', solve('claiming', [('lease-granted', N)], N), 'displaying')
check('claiming / lease-denied', solve('claiming', [('lease-denied', N)], N), 'standby')
check('displaying / lease-revoked', solve('displaying', [('lease-revoked', N)], N), 'withdrawing')
check('withdrawing / unmounted', solve('withdrawing', [('unmounted', N)], N), 'standby')
check('displaying / close-surface', solve('displaying', [('close-surface', N)], N), 'releasing')
check('releasing / release-confirmed', solve('releasing', [('release-confirmed', N)], N), 'standby')
check('claiming / cancel-display', solve('claiming', [('cancel-display', N)], N), 'claim-canceled')
check('claim-canceled / late-lease-granted', solve('claim-canceled', [('late-lease-granted', N)], N), 'releasing')
check('standby / foreign-release', solve('standby', [('foreign-release', N)], N), 'standby')
check('older notification incarnation', solve('standby', [('request-display', N - 1)], N), 'standby')
check('future notification incarnation', solve('standby', [('request-display', N + 1)], N), 'standby')
check('unknown event is inert', solve('standby', [('unknown-event', N)], N), 'standby')
check('empty delivery batch', solve('standby', [], N), 'standby')
check('N stale deliveries before current delivery', solve('standby', [('request-display', N - 1)] * N + [('request-display', N)], N), 'claiming')
check('trace request-display then lease-granted', solve('standby', [('request-display', N), ('lease-granted', N)], N), 'displaying')
check('trace request-display then lease-denied', solve('standby', [('request-display', N), ('lease-denied', N)], N), 'standby')
check('trace request-display then cancel-display', solve('standby', [('request-display', N), ('cancel-display', N)], N), 'claim-canceled')
check('trace lease-granted then lease-revoked', solve('claiming', [('lease-granted', N), ('lease-revoked', N)], N), 'withdrawing')
check('trace lease-granted then close-surface', solve('claiming', [('lease-granted', N), ('close-surface', N)], N), 'releasing')
check('trace lease-denied then request-display', solve('claiming', [('lease-denied', N), ('request-display', N)], N), 'claiming')
check('trace lease-denied then foreign-release', solve('claiming', [('lease-denied', N), ('foreign-release', N)], N), 'standby')
check('trace lease-revoked then unmounted', solve('displaying', [('lease-revoked', N), ('unmounted', N)], N), 'standby')
check('trace unmounted then request-display', solve('withdrawing', [('unmounted', N), ('request-display', N)], N), 'claiming')
check('trace unmounted then foreign-release', solve('withdrawing', [('unmounted', N), ('foreign-release', N)], N), 'standby')
check('trace close-surface then release-confirmed', solve('displaying', [('close-surface', N), ('release-confirmed', N)], N), 'standby')
check('trace release-confirmed then request-display', solve('releasing', [('release-confirmed', N), ('request-display', N)], N), 'claiming')
check('trace release-confirmed then foreign-release', solve('releasing', [('release-confirmed', N), ('foreign-release', N)], N), 'standby')
check('trace cancel-display then late-lease-granted', solve('claiming', [('cancel-display', N), ('late-lease-granted', N)], N), 'releasing')
check('trace late-lease-granted then release-confirmed', solve('claim-canceled', [('late-lease-granted', N), ('release-confirmed', N)], N), 'standby')
check('trace foreign-release then request-display', solve('standby', [('foreign-release', N), ('request-display', N)], N), 'claiming')
check('trace foreign-release then foreign-release', solve('standby', [('foreign-release', N), ('foreign-release', N)], N), 'standby')
check('domain state regression 1: mounted', solve('claiming', [('lease-granted', N, {'token': 4})], N, {}, 'mounted'), {'phase': 'claiming', 'value': False})
check('domain state regression 2: mounted', solve('claiming', [('lease-granted', N, {'token': 5})], N, {}, 'mounted'), {'phase': 'displaying', 'value': True})
check('domain state regression 3: mounted', solve('displaying', [('lease-revoked', N, {'token': 4})], N, {'mounted': True}, 'mounted'), {'phase': 'displaying', 'value': True})
check('domain state regression 4: mounted', solve('displaying', [('lease-revoked', N, {'token': 5})], N, {'mounted': True}, 'mounted'), {'phase': 'withdrawing', 'value': False})
check('domain state regression 5: released', solve('claim-canceled', [('late-lease-granted', N, {})], N, {}, 'released'), {'phase': 'releasing', 'value': [5]})
check('domain state regression 6: released', solve('standby', [('foreign-release', N, {'owner': 'foreign'})], N, {}, 'released'), {'phase': 'standby', 'value': []})
check('domain state regression 7: released', solve('standby', [('request-display', N, {}), ('cancel-display', N, {}), ('late-lease-granted', N, {'token': 5})], N, {}, 'released'), {'phase': 'releasing', 'value': [5]})
print(json.dumps({"observations": observations, "passed": all(x["passed"] for x in observations)}, ensure_ascii=False))
raise SystemExit(0 if all(x["passed"] for x in observations) else 1)
Boundary fixtureActualExpectedOutcome
standby / request-displayclaimingclaimingPassed
claiming / lease-granteddisplayingdisplayingPassed
claiming / lease-denieddisplayingstandbyFailed
displaying / lease-revokedwithdrawingwithdrawingPassed
withdrawing / unmountedstandbystandbyPassed
displaying / close-surfacereleasingreleasingPassed
releasing / release-confirmedstandbystandbyPassed
claiming / cancel-displayclaim-canceledclaim-canceledPassed
claim-canceled / late-lease-grantedreleasingreleasingPassed
standby / foreign-releasestandbystandbyPassed
older notification incarnationstandbystandbyPassed
future notification incarnationstandbystandbyPassed
unknown event is inertstandbystandbyPassed
empty delivery batchstandbystandbyPassed
N stale deliveries before current deliveryclaimingclaimingPassed
trace request-display then lease-granteddisplayingdisplayingPassed
trace request-display then lease-denieddisplayingstandbyFailed
trace request-display then cancel-displayclaim-canceledclaim-canceledPassed
trace lease-granted then lease-revokedwithdrawingwithdrawingPassed
trace lease-granted then close-surfacereleasingreleasingPassed
trace lease-denied then request-displaydisplayingclaimingFailed
trace lease-denied then foreign-releasedisplayingstandbyFailed
trace lease-revoked then unmountedstandbystandbyPassed
trace unmounted then request-displayclaimingclaimingPassed
trace unmounted then foreign-releasestandbystandbyPassed
trace close-surface then release-confirmedstandbystandbyPassed
trace release-confirmed then request-displayclaimingclaimingPassed
trace release-confirmed then foreign-releasestandbystandbyPassed
trace cancel-display then late-lease-grantedreleasingreleasingPassed
trace late-lease-granted then release-confirmedstandbystandbyPassed
trace foreign-release then request-displayclaimingclaimingPassed
trace foreign-release then foreign-releasestandbystandbyPassed
domain state regression 1: mounted{'phase': 'claiming', 'value': False}{'phase': 'claiming', 'value': False}Passed
domain state regression 2: mounted{'phase': 'displaying', 'value': True}{'phase': 'displaying', 'value': True}Passed
domain state regression 3: mounted{'phase': 'displaying', 'value': True}{'phase': 'displaying', 'value': True}Passed
domain state regression 4: mounted{'phase': 'withdrawing', 'value': False}{'phase': 'withdrawing', 'value': False}Passed
domain state regression 5: released{'phase': 'releasing', 'value': [5]}{'phase': 'releasing', 'value': [5]}Passed
domain state regression 6: released{'phase': 'standby', 'value': []}{'phase': 'standby', 'value': []}Passed
domain state regression 7: released{'phase': 'releasing', 'value': [5]}{'phase': 'releasing', 'value': [5]}Passed

SHA-256 / d694fb59a26ba543b1fbd168141ca7b11400706c9c29a53054057e415c9fffdd

2 / The unsuccessful fix

Exit 1
"""Failure Map reference implementation. Python standard library only."""
import json

N = 1
observations = []
def solve(initial, events, generation, payload=None, observe=None):
    table = {('standby', 'request-display'): 'claiming', ('claiming', 'lease-granted'): 'displaying', ('claiming', 'lease-denied'): 'releasing', ('displaying', 'lease-revoked'): 'withdrawing', ('withdrawing', 'unmounted'): 'standby', ('displaying', 'close-surface'): 'releasing', ('releasing', 'release-confirmed'): 'standby', ('claiming', 'cancel-display'): 'claim-canceled', ('claim-canceled', 'late-lease-granted'): 'releasing', ('standby', 'foreign-release'): 'standby'}
    data = json.loads(json.dumps({'token': 5, 'owner': 'local', 'mounted': False, 'released': []})) if payload is None else {**json.loads(json.dumps({'token': 5, 'owner': 'local', 'mounted': False, 'released': []})), **json.loads(json.dumps(payload))}
    state = initial
    for delivery in events:
        event, event_generation = delivery[:2]
        arg = delivery[2] if len(delivery) > 2 else {}
        if event_generation == generation:
            previous = state
            if event in ('lease-granted','lease-revoked','release-confirmed','late-lease-granted') and arg.get('token',data['token']) != data['token']: event = 'unknown-event'
            if event == 'foreign-release' and arg.get('owner','foreign') == data['owner']: event = 'release-confirmed'
            state = table.get((state, event), state)
            if state == 'displaying': data['mounted'] = True
            if state in ('standby','withdrawing'): data['mounted'] = False
            if state == 'releasing' and data['token'] not in data['released']: data['released'].append(data['token'])
    return {'phase': state, 'value': data[observe]} if observe else state
def check(label, actual, expected):
    observations.append({"check": label, "actual": actual, "expected": expected, "passed": actual == expected})
check('standby / request-display', solve('standby', [('request-display', N)], N), 'claiming')
check('claiming / lease-granted', solve('claiming', [('lease-granted', N)], N), 'displaying')
check('claiming / lease-denied', solve('claiming', [('lease-denied', N)], N), 'standby')
check('displaying / lease-revoked', solve('displaying', [('lease-revoked', N)], N), 'withdrawing')
check('withdrawing / unmounted', solve('withdrawing', [('unmounted', N)], N), 'standby')
check('displaying / close-surface', solve('displaying', [('close-surface', N)], N), 'releasing')
check('releasing / release-confirmed', solve('releasing', [('release-confirmed', N)], N), 'standby')
check('claiming / cancel-display', solve('claiming', [('cancel-display', N)], N), 'claim-canceled')
check('claim-canceled / late-lease-granted', solve('claim-canceled', [('late-lease-granted', N)], N), 'releasing')
check('standby / foreign-release', solve('standby', [('foreign-release', N)], N), 'standby')
check('older notification incarnation', solve('standby', [('request-display', N - 1)], N), 'standby')
check('future notification incarnation', solve('standby', [('request-display', N + 1)], N), 'standby')
check('unknown event is inert', solve('standby', [('unknown-event', N)], N), 'standby')
check('empty delivery batch', solve('standby', [], N), 'standby')
check('N stale deliveries before current delivery', solve('standby', [('request-display', N - 1)] * N + [('request-display', N)], N), 'claiming')
check('trace request-display then lease-granted', solve('standby', [('request-display', N), ('lease-granted', N)], N), 'displaying')
check('trace request-display then lease-denied', solve('standby', [('request-display', N), ('lease-denied', N)], N), 'standby')
check('trace request-display then cancel-display', solve('standby', [('request-display', N), ('cancel-display', N)], N), 'claim-canceled')
check('trace lease-granted then lease-revoked', solve('claiming', [('lease-granted', N), ('lease-revoked', N)], N), 'withdrawing')
check('trace lease-granted then close-surface', solve('claiming', [('lease-granted', N), ('close-surface', N)], N), 'releasing')
check('trace lease-denied then request-display', solve('claiming', [('lease-denied', N), ('request-display', N)], N), 'claiming')
check('trace lease-denied then foreign-release', solve('claiming', [('lease-denied', N), ('foreign-release', N)], N), 'standby')
check('trace lease-revoked then unmounted', solve('displaying', [('lease-revoked', N), ('unmounted', N)], N), 'standby')
check('trace unmounted then request-display', solve('withdrawing', [('unmounted', N), ('request-display', N)], N), 'claiming')
check('trace unmounted then foreign-release', solve('withdrawing', [('unmounted', N), ('foreign-release', N)], N), 'standby')
check('trace close-surface then release-confirmed', solve('displaying', [('close-surface', N), ('release-confirmed', N)], N), 'standby')
check('trace release-confirmed then request-display', solve('releasing', [('release-confirmed', N), ('request-display', N)], N), 'claiming')
check('trace release-confirmed then foreign-release', solve('releasing', [('release-confirmed', N), ('foreign-release', N)], N), 'standby')
check('trace cancel-display then late-lease-granted', solve('claiming', [('cancel-display', N), ('late-lease-granted', N)], N), 'releasing')
check('trace late-lease-granted then release-confirmed', solve('claim-canceled', [('late-lease-granted', N), ('release-confirmed', N)], N), 'standby')
check('trace foreign-release then request-display', solve('standby', [('foreign-release', N), ('request-display', N)], N), 'claiming')
check('trace foreign-release then foreign-release', solve('standby', [('foreign-release', N), ('foreign-release', N)], N), 'standby')
check('domain state regression 1: mounted', solve('claiming', [('lease-granted', N, {'token': 4})], N, {}, 'mounted'), {'phase': 'claiming', 'value': False})
check('domain state regression 2: mounted', solve('claiming', [('lease-granted', N, {'token': 5})], N, {}, 'mounted'), {'phase': 'displaying', 'value': True})
check('domain state regression 3: mounted', solve('displaying', [('lease-revoked', N, {'token': 4})], N, {'mounted': True}, 'mounted'), {'phase': 'displaying', 'value': True})
check('domain state regression 4: mounted', solve('displaying', [('lease-revoked', N, {'token': 5})], N, {'mounted': True}, 'mounted'), {'phase': 'withdrawing', 'value': False})
check('domain state regression 5: released', solve('claim-canceled', [('late-lease-granted', N, {})], N, {}, 'released'), {'phase': 'releasing', 'value': [5]})
check('domain state regression 6: released', solve('standby', [('foreign-release', N, {'owner': 'foreign'})], N, {}, 'released'), {'phase': 'standby', 'value': []})
check('domain state regression 7: released', solve('standby', [('request-display', N, {}), ('cancel-display', N, {}), ('late-lease-granted', N, {'token': 5})], N, {}, 'released'), {'phase': 'releasing', 'value': [5]})
print(json.dumps({"observations": observations, "passed": all(x["passed"] for x in observations)}, ensure_ascii=False))
raise SystemExit(0 if all(x["passed"] for x in observations) else 1)
Boundary fixtureActualExpectedOutcome
standby / request-displayclaimingclaimingPassed
claiming / lease-granteddisplayingdisplayingPassed
claiming / lease-deniedreleasingstandbyFailed
displaying / lease-revokedwithdrawingwithdrawingPassed
withdrawing / unmountedstandbystandbyPassed
displaying / close-surfacereleasingreleasingPassed
releasing / release-confirmedstandbystandbyPassed
claiming / cancel-displayclaim-canceledclaim-canceledPassed
claim-canceled / late-lease-grantedreleasingreleasingPassed
standby / foreign-releasestandbystandbyPassed
older notification incarnationstandbystandbyPassed
future notification incarnationstandbystandbyPassed
unknown event is inertstandbystandbyPassed
empty delivery batchstandbystandbyPassed
N stale deliveries before current deliveryclaimingclaimingPassed
trace request-display then lease-granteddisplayingdisplayingPassed
trace request-display then lease-deniedreleasingstandbyFailed
trace request-display then cancel-displayclaim-canceledclaim-canceledPassed
trace lease-granted then lease-revokedwithdrawingwithdrawingPassed
trace lease-granted then close-surfacereleasingreleasingPassed
trace lease-denied then request-displayreleasingclaimingFailed
trace lease-denied then foreign-releasereleasingstandbyFailed
trace lease-revoked then unmountedstandbystandbyPassed
trace unmounted then request-displayclaimingclaimingPassed
trace unmounted then foreign-releasestandbystandbyPassed
trace close-surface then release-confirmedstandbystandbyPassed
trace release-confirmed then request-displayclaimingclaimingPassed
trace release-confirmed then foreign-releasestandbystandbyPassed
trace cancel-display then late-lease-grantedreleasingreleasingPassed
trace late-lease-granted then release-confirmedstandbystandbyPassed
trace foreign-release then request-displayclaimingclaimingPassed
trace foreign-release then foreign-releasestandbystandbyPassed
domain state regression 1: mounted{'phase': 'claiming', 'value': False}{'phase': 'claiming', 'value': False}Passed
domain state regression 2: mounted{'phase': 'displaying', 'value': True}{'phase': 'displaying', 'value': True}Passed
domain state regression 3: mounted{'phase': 'displaying', 'value': True}{'phase': 'displaying', 'value': True}Passed
domain state regression 4: mounted{'phase': 'withdrawing', 'value': False}{'phase': 'withdrawing', 'value': False}Passed
domain state regression 5: released{'phase': 'releasing', 'value': [5]}{'phase': 'releasing', 'value': [5]}Passed
domain state regression 6: released{'phase': 'standby', 'value': []}{'phase': 'standby', 'value': []}Passed
domain state regression 7: released{'phase': 'releasing', 'value': [5]}{'phase': 'releasing', 'value': [5]}Passed

SHA-256 / 52490dbc583736a271de3be6ebdf3e76d4e667f4986c002edc8ff2dcc46ff7f5

HELD IN THE MEMBER ARCHIVE

The verified repair and its recorded checks are member-only.

This mechanism has 39 recorded checks per implementation. The open-access tier publishes the failure and the unsuccessful fix; the repaired source that passes every check, and the observations that prove it, are available to members.

Every case sharing this mechanism uses the same contract and the same repair, so this one record is held back for all of them.

Member access is invitation-based. Sign in with your invited account to inspect the repair.

Sign in to the archive ↗

Verification & scope

Stipulated single-notification state and policy model only. Event delivery and acknowledgements are explicit test inputs. No DOM, accessibility announcements, live timers, networking, actual rendering, or production-platform conformance is simulated. This reproducer isolates one failure mechanism. Results cover the supplied fixtures. Variants within a family share a test contract and should remain grouped when constructing evaluation splits. Related mechanisms with a shared evaluation_group must also remain together; these controlled models are not independent production incidents.

Observations recorded using Python 3.12.14 at 2026-09-29T14:42:30.391119+00:00.

Case digest / 2aac622a5348452220947dccbe8d5d9c43d5c43b2ef51065eb068d698f45917e