FA-34256 / Notification interfaces / Open access
Single-surface notification display ownership: lease-revoked from displaying · case 01
The lease-revoked event leaves a notification in displaying instead of withdrawing.
ROOT CAUSE
A revoked owner continues showing actionable content.
VERIFIED REPAIR
Commit the displaying / lease-revoked transition to withdrawing; preserve the other explicitly stipulated transitions.
Unsuccessful approach: Jumping directly to standby skips withdrawing the mounted surface.
Case contract
Single-surface notification display ownership is a bounded visual-notification workflow with mutable policy state {'token': 5, 'owner': 'local', 'mounted': False, 'released': []}. Its default transition relation is {('standby', 'request-display'): 'claiming', ('claiming', 'lease-granted'): 'displaying', ('claiming', 'lease-denied'): 'standby', ('displaying', 'lease-revoked'): 'withdrawing', ('withdrawing', 'unmounted'): 'standby', ('displaying', 'close-surface'): 'releasing', ('releasing', 'release-confirmed'): 'standby', ('claiming', 'cancel-display'): 'claim-canceled', ('claim-canceled', 'late-lease-granted'): 'releasing', ('standby', 'foreign-release'): 'standby'}; domain inputs can suppress or redirect transitions and update policy fields, as specified in solve. Different-generation events are inert. Batches apply in order. Optional observe returns the selected policy field alongside the phase.
Why this case matters
Visual notification lifecycle ordering can leave an inbox or toast showing the wrong actionable state even when transport succeeds.
1 / The failure
Exit 1"""Failure Map reference implementation. Python standard library only."""
import json
N = 1
observations = []
def solve(initial, events, generation, payload=None, observe=None):
table = {('standby', 'request-display'): 'claiming', ('claiming', 'lease-granted'): 'displaying', ('claiming', 'lease-denied'): 'standby', ('displaying', 'lease-revoked'): 'displaying', ('withdrawing', 'unmounted'): 'standby', ('displaying', 'close-surface'): 'releasing', ('releasing', 'release-confirmed'): 'standby', ('claiming', 'cancel-display'): 'claim-canceled', ('claim-canceled', 'late-lease-granted'): 'releasing', ('standby', 'foreign-release'): 'standby'}
data = json.loads(json.dumps({'token': 5, 'owner': 'local', 'mounted': False, 'released': []})) if payload is None else {**json.loads(json.dumps({'token': 5, 'owner': 'local', 'mounted': False, 'released': []})), **json.loads(json.dumps(payload))}
state = initial
for delivery in events:
event, event_generation = delivery[:2]
arg = delivery[2] if len(delivery) > 2 else {}
if event_generation == generation:
previous = state
if event in ('lease-granted','lease-revoked','release-confirmed','late-lease-granted') and arg.get('token',data['token']) != data['token']: event = 'unknown-event'
if event == 'foreign-release' and arg.get('owner','foreign') == data['owner']: event = 'release-confirmed'
state = table.get((state, event), state)
if state == 'displaying': data['mounted'] = True
if state in ('standby','withdrawing'): data['mounted'] = False
if state == 'releasing' and data['token'] not in data['released']: data['released'].append(data['token'])
return {'phase': state, 'value': data[observe]} if observe else state
def check(label, actual, expected):
observations.append({"check": label, "actual": actual, "expected": expected, "passed": actual == expected})
check('standby / request-display', solve('standby', [('request-display', N)], N), 'claiming')
check('claiming / lease-granted', solve('claiming', [('lease-granted', N)], N), 'displaying')
check('claiming / lease-denied', solve('claiming', [('lease-denied', N)], N), 'standby')
check('displaying / lease-revoked', solve('displaying', [('lease-revoked', N)], N), 'withdrawing')
check('withdrawing / unmounted', solve('withdrawing', [('unmounted', N)], N), 'standby')
check('displaying / close-surface', solve('displaying', [('close-surface', N)], N), 'releasing')
check('releasing / release-confirmed', solve('releasing', [('release-confirmed', N)], N), 'standby')
check('claiming / cancel-display', solve('claiming', [('cancel-display', N)], N), 'claim-canceled')
check('claim-canceled / late-lease-granted', solve('claim-canceled', [('late-lease-granted', N)], N), 'releasing')
check('standby / foreign-release', solve('standby', [('foreign-release', N)], N), 'standby')
check('older notification incarnation', solve('standby', [('request-display', N - 1)], N), 'standby')
check('future notification incarnation', solve('standby', [('request-display', N + 1)], N), 'standby')
check('unknown event is inert', solve('standby', [('unknown-event', N)], N), 'standby')
check('empty delivery batch', solve('standby', [], N), 'standby')
check('N stale deliveries before current delivery', solve('standby', [('request-display', N - 1)] * N + [('request-display', N)], N), 'claiming')
check('trace request-display then lease-granted', solve('standby', [('request-display', N), ('lease-granted', N)], N), 'displaying')
check('trace request-display then lease-denied', solve('standby', [('request-display', N), ('lease-denied', N)], N), 'standby')
check('trace request-display then cancel-display', solve('standby', [('request-display', N), ('cancel-display', N)], N), 'claim-canceled')
check('trace lease-granted then lease-revoked', solve('claiming', [('lease-granted', N), ('lease-revoked', N)], N), 'withdrawing')
check('trace lease-granted then close-surface', solve('claiming', [('lease-granted', N), ('close-surface', N)], N), 'releasing')
check('trace lease-denied then request-display', solve('claiming', [('lease-denied', N), ('request-display', N)], N), 'claiming')
check('trace lease-denied then foreign-release', solve('claiming', [('lease-denied', N), ('foreign-release', N)], N), 'standby')
check('trace lease-revoked then unmounted', solve('displaying', [('lease-revoked', N), ('unmounted', N)], N), 'standby')
check('trace unmounted then request-display', solve('withdrawing', [('unmounted', N), ('request-display', N)], N), 'claiming')
check('trace unmounted then foreign-release', solve('withdrawing', [('unmounted', N), ('foreign-release', N)], N), 'standby')
check('trace close-surface then release-confirmed', solve('displaying', [('close-surface', N), ('release-confirmed', N)], N), 'standby')
check('trace release-confirmed then request-display', solve('releasing', [('release-confirmed', N), ('request-display', N)], N), 'claiming')
check('trace release-confirmed then foreign-release', solve('releasing', [('release-confirmed', N), ('foreign-release', N)], N), 'standby')
check('trace cancel-display then late-lease-granted', solve('claiming', [('cancel-display', N), ('late-lease-granted', N)], N), 'releasing')
check('trace late-lease-granted then release-confirmed', solve('claim-canceled', [('late-lease-granted', N), ('release-confirmed', N)], N), 'standby')
check('trace foreign-release then request-display', solve('standby', [('foreign-release', N), ('request-display', N)], N), 'claiming')
check('trace foreign-release then foreign-release', solve('standby', [('foreign-release', N), ('foreign-release', N)], N), 'standby')
check('domain state regression 1: mounted', solve('claiming', [('lease-granted', N, {'token': 4})], N, {}, 'mounted'), {'phase': 'claiming', 'value': False})
check('domain state regression 2: mounted', solve('claiming', [('lease-granted', N, {'token': 5})], N, {}, 'mounted'), {'phase': 'displaying', 'value': True})
check('domain state regression 3: mounted', solve('displaying', [('lease-revoked', N, {'token': 4})], N, {'mounted': True}, 'mounted'), {'phase': 'displaying', 'value': True})
check('domain state regression 4: mounted', solve('displaying', [('lease-revoked', N, {'token': 5})], N, {'mounted': True}, 'mounted'), {'phase': 'withdrawing', 'value': False})
check('domain state regression 5: released', solve('claim-canceled', [('late-lease-granted', N, {})], N, {}, 'released'), {'phase': 'releasing', 'value': [5]})
check('domain state regression 6: released', solve('standby', [('foreign-release', N, {'owner': 'foreign'})], N, {}, 'released'), {'phase': 'standby', 'value': []})
check('domain state regression 7: released', solve('standby', [('request-display', N, {}), ('cancel-display', N, {}), ('late-lease-granted', N, {'token': 5})], N, {}, 'released'), {'phase': 'releasing', 'value': [5]})
print(json.dumps({"observations": observations, "passed": all(x["passed"] for x in observations)}, ensure_ascii=False))
raise SystemExit(0 if all(x["passed"] for x in observations) else 1)
| Boundary fixture | Actual | Expected | Outcome |
|---|---|---|---|
| standby / request-display | claiming | claiming | Passed |
| claiming / lease-granted | displaying | displaying | Passed |
| claiming / lease-denied | standby | standby | Passed |
| displaying / lease-revoked | displaying | withdrawing | Failed |
| withdrawing / unmounted | standby | standby | Passed |
| displaying / close-surface | releasing | releasing | Passed |
| releasing / release-confirmed | standby | standby | Passed |
| claiming / cancel-display | claim-canceled | claim-canceled | Passed |
| claim-canceled / late-lease-granted | releasing | releasing | Passed |
| standby / foreign-release | standby | standby | Passed |
| older notification incarnation | standby | standby | Passed |
| future notification incarnation | standby | standby | Passed |
| unknown event is inert | standby | standby | Passed |
| empty delivery batch | standby | standby | Passed |
| N stale deliveries before current delivery | claiming | claiming | Passed |
| trace request-display then lease-granted | displaying | displaying | Passed |
| trace request-display then lease-denied | standby | standby | Passed |
| trace request-display then cancel-display | claim-canceled | claim-canceled | Passed |
| trace lease-granted then lease-revoked | displaying | withdrawing | Failed |
| trace lease-granted then close-surface | releasing | releasing | Passed |
| trace lease-denied then request-display | claiming | claiming | Passed |
| trace lease-denied then foreign-release | standby | standby | Passed |
| trace lease-revoked then unmounted | displaying | standby | Failed |
| trace unmounted then request-display | claiming | claiming | Passed |
| trace unmounted then foreign-release | standby | standby | Passed |
| trace close-surface then release-confirmed | standby | standby | Passed |
| trace release-confirmed then request-display | claiming | claiming | Passed |
| trace release-confirmed then foreign-release | standby | standby | Passed |
| trace cancel-display then late-lease-granted | releasing | releasing | Passed |
| trace late-lease-granted then release-confirmed | standby | standby | Passed |
| trace foreign-release then request-display | claiming | claiming | Passed |
| trace foreign-release then foreign-release | standby | standby | Passed |
| domain state regression 1: mounted | {'phase': 'claiming', 'value': False} | {'phase': 'claiming', 'value': False} | Passed |
| domain state regression 2: mounted | {'phase': 'displaying', 'value': True} | {'phase': 'displaying', 'value': True} | Passed |
| domain state regression 3: mounted | {'phase': 'displaying', 'value': True} | {'phase': 'displaying', 'value': True} | Passed |
| domain state regression 4: mounted | {'phase': 'displaying', 'value': True} | {'phase': 'withdrawing', 'value': False} | Failed |
| domain state regression 5: released | {'phase': 'releasing', 'value': [5]} | {'phase': 'releasing', 'value': [5]} | Passed |
| domain state regression 6: released | {'phase': 'standby', 'value': []} | {'phase': 'standby', 'value': []} | Passed |
| domain state regression 7: released | {'phase': 'releasing', 'value': [5]} | {'phase': 'releasing', 'value': [5]} | Passed |
SHA-256 / c9b437ea73c84a2065c0197df69c88a995f9cfa144ef0e23d378f8c723253f3e
2 / The unsuccessful fix
Exit 1"""Failure Map reference implementation. Python standard library only."""
import json
N = 1
observations = []
def solve(initial, events, generation, payload=None, observe=None):
table = {('standby', 'request-display'): 'claiming', ('claiming', 'lease-granted'): 'displaying', ('claiming', 'lease-denied'): 'standby', ('displaying', 'lease-revoked'): 'standby', ('withdrawing', 'unmounted'): 'standby', ('displaying', 'close-surface'): 'releasing', ('releasing', 'release-confirmed'): 'standby', ('claiming', 'cancel-display'): 'claim-canceled', ('claim-canceled', 'late-lease-granted'): 'releasing', ('standby', 'foreign-release'): 'standby'}
data = json.loads(json.dumps({'token': 5, 'owner': 'local', 'mounted': False, 'released': []})) if payload is None else {**json.loads(json.dumps({'token': 5, 'owner': 'local', 'mounted': False, 'released': []})), **json.loads(json.dumps(payload))}
state = initial
for delivery in events:
event, event_generation = delivery[:2]
arg = delivery[2] if len(delivery) > 2 else {}
if event_generation == generation:
previous = state
if event in ('lease-granted','lease-revoked','release-confirmed','late-lease-granted') and arg.get('token',data['token']) != data['token']: event = 'unknown-event'
if event == 'foreign-release' and arg.get('owner','foreign') == data['owner']: event = 'release-confirmed'
state = table.get((state, event), state)
if state == 'displaying': data['mounted'] = True
if state in ('standby','withdrawing'): data['mounted'] = False
if state == 'releasing' and data['token'] not in data['released']: data['released'].append(data['token'])
return {'phase': state, 'value': data[observe]} if observe else state
def check(label, actual, expected):
observations.append({"check": label, "actual": actual, "expected": expected, "passed": actual == expected})
check('standby / request-display', solve('standby', [('request-display', N)], N), 'claiming')
check('claiming / lease-granted', solve('claiming', [('lease-granted', N)], N), 'displaying')
check('claiming / lease-denied', solve('claiming', [('lease-denied', N)], N), 'standby')
check('displaying / lease-revoked', solve('displaying', [('lease-revoked', N)], N), 'withdrawing')
check('withdrawing / unmounted', solve('withdrawing', [('unmounted', N)], N), 'standby')
check('displaying / close-surface', solve('displaying', [('close-surface', N)], N), 'releasing')
check('releasing / release-confirmed', solve('releasing', [('release-confirmed', N)], N), 'standby')
check('claiming / cancel-display', solve('claiming', [('cancel-display', N)], N), 'claim-canceled')
check('claim-canceled / late-lease-granted', solve('claim-canceled', [('late-lease-granted', N)], N), 'releasing')
check('standby / foreign-release', solve('standby', [('foreign-release', N)], N), 'standby')
check('older notification incarnation', solve('standby', [('request-display', N - 1)], N), 'standby')
check('future notification incarnation', solve('standby', [('request-display', N + 1)], N), 'standby')
check('unknown event is inert', solve('standby', [('unknown-event', N)], N), 'standby')
check('empty delivery batch', solve('standby', [], N), 'standby')
check('N stale deliveries before current delivery', solve('standby', [('request-display', N - 1)] * N + [('request-display', N)], N), 'claiming')
check('trace request-display then lease-granted', solve('standby', [('request-display', N), ('lease-granted', N)], N), 'displaying')
check('trace request-display then lease-denied', solve('standby', [('request-display', N), ('lease-denied', N)], N), 'standby')
check('trace request-display then cancel-display', solve('standby', [('request-display', N), ('cancel-display', N)], N), 'claim-canceled')
check('trace lease-granted then lease-revoked', solve('claiming', [('lease-granted', N), ('lease-revoked', N)], N), 'withdrawing')
check('trace lease-granted then close-surface', solve('claiming', [('lease-granted', N), ('close-surface', N)], N), 'releasing')
check('trace lease-denied then request-display', solve('claiming', [('lease-denied', N), ('request-display', N)], N), 'claiming')
check('trace lease-denied then foreign-release', solve('claiming', [('lease-denied', N), ('foreign-release', N)], N), 'standby')
check('trace lease-revoked then unmounted', solve('displaying', [('lease-revoked', N), ('unmounted', N)], N), 'standby')
check('trace unmounted then request-display', solve('withdrawing', [('unmounted', N), ('request-display', N)], N), 'claiming')
check('trace unmounted then foreign-release', solve('withdrawing', [('unmounted', N), ('foreign-release', N)], N), 'standby')
check('trace close-surface then release-confirmed', solve('displaying', [('close-surface', N), ('release-confirmed', N)], N), 'standby')
check('trace release-confirmed then request-display', solve('releasing', [('release-confirmed', N), ('request-display', N)], N), 'claiming')
check('trace release-confirmed then foreign-release', solve('releasing', [('release-confirmed', N), ('foreign-release', N)], N), 'standby')
check('trace cancel-display then late-lease-granted', solve('claiming', [('cancel-display', N), ('late-lease-granted', N)], N), 'releasing')
check('trace late-lease-granted then release-confirmed', solve('claim-canceled', [('late-lease-granted', N), ('release-confirmed', N)], N), 'standby')
check('trace foreign-release then request-display', solve('standby', [('foreign-release', N), ('request-display', N)], N), 'claiming')
check('trace foreign-release then foreign-release', solve('standby', [('foreign-release', N), ('foreign-release', N)], N), 'standby')
check('domain state regression 1: mounted', solve('claiming', [('lease-granted', N, {'token': 4})], N, {}, 'mounted'), {'phase': 'claiming', 'value': False})
check('domain state regression 2: mounted', solve('claiming', [('lease-granted', N, {'token': 5})], N, {}, 'mounted'), {'phase': 'displaying', 'value': True})
check('domain state regression 3: mounted', solve('displaying', [('lease-revoked', N, {'token': 4})], N, {'mounted': True}, 'mounted'), {'phase': 'displaying', 'value': True})
check('domain state regression 4: mounted', solve('displaying', [('lease-revoked', N, {'token': 5})], N, {'mounted': True}, 'mounted'), {'phase': 'withdrawing', 'value': False})
check('domain state regression 5: released', solve('claim-canceled', [('late-lease-granted', N, {})], N, {}, 'released'), {'phase': 'releasing', 'value': [5]})
check('domain state regression 6: released', solve('standby', [('foreign-release', N, {'owner': 'foreign'})], N, {}, 'released'), {'phase': 'standby', 'value': []})
check('domain state regression 7: released', solve('standby', [('request-display', N, {}), ('cancel-display', N, {}), ('late-lease-granted', N, {'token': 5})], N, {}, 'released'), {'phase': 'releasing', 'value': [5]})
print(json.dumps({"observations": observations, "passed": all(x["passed"] for x in observations)}, ensure_ascii=False))
raise SystemExit(0 if all(x["passed"] for x in observations) else 1)
| Boundary fixture | Actual | Expected | Outcome |
|---|---|---|---|
| standby / request-display | claiming | claiming | Passed |
| claiming / lease-granted | displaying | displaying | Passed |
| claiming / lease-denied | standby | standby | Passed |
| displaying / lease-revoked | standby | withdrawing | Failed |
| withdrawing / unmounted | standby | standby | Passed |
| displaying / close-surface | releasing | releasing | Passed |
| releasing / release-confirmed | standby | standby | Passed |
| claiming / cancel-display | claim-canceled | claim-canceled | Passed |
| claim-canceled / late-lease-granted | releasing | releasing | Passed |
| standby / foreign-release | standby | standby | Passed |
| older notification incarnation | standby | standby | Passed |
| future notification incarnation | standby | standby | Passed |
| unknown event is inert | standby | standby | Passed |
| empty delivery batch | standby | standby | Passed |
| N stale deliveries before current delivery | claiming | claiming | Passed |
| trace request-display then lease-granted | displaying | displaying | Passed |
| trace request-display then lease-denied | standby | standby | Passed |
| trace request-display then cancel-display | claim-canceled | claim-canceled | Passed |
| trace lease-granted then lease-revoked | standby | withdrawing | Failed |
| trace lease-granted then close-surface | releasing | releasing | Passed |
| trace lease-denied then request-display | claiming | claiming | Passed |
| trace lease-denied then foreign-release | standby | standby | Passed |
| trace lease-revoked then unmounted | standby | standby | Passed |
| trace unmounted then request-display | claiming | claiming | Passed |
| trace unmounted then foreign-release | standby | standby | Passed |
| trace close-surface then release-confirmed | standby | standby | Passed |
| trace release-confirmed then request-display | claiming | claiming | Passed |
| trace release-confirmed then foreign-release | standby | standby | Passed |
| trace cancel-display then late-lease-granted | releasing | releasing | Passed |
| trace late-lease-granted then release-confirmed | standby | standby | Passed |
| trace foreign-release then request-display | claiming | claiming | Passed |
| trace foreign-release then foreign-release | standby | standby | Passed |
| domain state regression 1: mounted | {'phase': 'claiming', 'value': False} | {'phase': 'claiming', 'value': False} | Passed |
| domain state regression 2: mounted | {'phase': 'displaying', 'value': True} | {'phase': 'displaying', 'value': True} | Passed |
| domain state regression 3: mounted | {'phase': 'displaying', 'value': True} | {'phase': 'displaying', 'value': True} | Passed |
| domain state regression 4: mounted | {'phase': 'standby', 'value': False} | {'phase': 'withdrawing', 'value': False} | Failed |
| domain state regression 5: released | {'phase': 'releasing', 'value': [5]} | {'phase': 'releasing', 'value': [5]} | Passed |
| domain state regression 6: released | {'phase': 'standby', 'value': []} | {'phase': 'standby', 'value': []} | Passed |
| domain state regression 7: released | {'phase': 'releasing', 'value': [5]} | {'phase': 'releasing', 'value': [5]} | Passed |
SHA-256 / bf5a5022a7d4cf710ea9a756b4ecf01b3f0b88a10343c1fb542086614adce9fb
3 / The verified repair
Exit 0"""Failure Map reference implementation. Python standard library only."""
import json
N = 1
observations = []
def solve(initial, events, generation, payload=None, observe=None):
table = {('standby', 'request-display'): 'claiming', ('claiming', 'lease-granted'): 'displaying', ('claiming', 'lease-denied'): 'standby', ('displaying', 'lease-revoked'): 'withdrawing', ('withdrawing', 'unmounted'): 'standby', ('displaying', 'close-surface'): 'releasing', ('releasing', 'release-confirmed'): 'standby', ('claiming', 'cancel-display'): 'claim-canceled', ('claim-canceled', 'late-lease-granted'): 'releasing', ('standby', 'foreign-release'): 'standby'}
data = json.loads(json.dumps({'token': 5, 'owner': 'local', 'mounted': False, 'released': []})) if payload is None else {**json.loads(json.dumps({'token': 5, 'owner': 'local', 'mounted': False, 'released': []})), **json.loads(json.dumps(payload))}
state = initial
for delivery in events:
event, event_generation = delivery[:2]
arg = delivery[2] if len(delivery) > 2 else {}
if event_generation == generation:
previous = state
if event in ('lease-granted','lease-revoked','release-confirmed','late-lease-granted') and arg.get('token',data['token']) != data['token']: event = 'unknown-event'
if event == 'foreign-release' and arg.get('owner','foreign') == data['owner']: event = 'release-confirmed'
state = table.get((state, event), state)
if state == 'displaying': data['mounted'] = True
if state in ('standby','withdrawing'): data['mounted'] = False
if state == 'releasing' and data['token'] not in data['released']: data['released'].append(data['token'])
return {'phase': state, 'value': data[observe]} if observe else state
def check(label, actual, expected):
observations.append({"check": label, "actual": actual, "expected": expected, "passed": actual == expected})
check('standby / request-display', solve('standby', [('request-display', N)], N), 'claiming')
check('claiming / lease-granted', solve('claiming', [('lease-granted', N)], N), 'displaying')
check('claiming / lease-denied', solve('claiming', [('lease-denied', N)], N), 'standby')
check('displaying / lease-revoked', solve('displaying', [('lease-revoked', N)], N), 'withdrawing')
check('withdrawing / unmounted', solve('withdrawing', [('unmounted', N)], N), 'standby')
check('displaying / close-surface', solve('displaying', [('close-surface', N)], N), 'releasing')
check('releasing / release-confirmed', solve('releasing', [('release-confirmed', N)], N), 'standby')
check('claiming / cancel-display', solve('claiming', [('cancel-display', N)], N), 'claim-canceled')
check('claim-canceled / late-lease-granted', solve('claim-canceled', [('late-lease-granted', N)], N), 'releasing')
check('standby / foreign-release', solve('standby', [('foreign-release', N)], N), 'standby')
check('older notification incarnation', solve('standby', [('request-display', N - 1)], N), 'standby')
check('future notification incarnation', solve('standby', [('request-display', N + 1)], N), 'standby')
check('unknown event is inert', solve('standby', [('unknown-event', N)], N), 'standby')
check('empty delivery batch', solve('standby', [], N), 'standby')
check('N stale deliveries before current delivery', solve('standby', [('request-display', N - 1)] * N + [('request-display', N)], N), 'claiming')
check('trace request-display then lease-granted', solve('standby', [('request-display', N), ('lease-granted', N)], N), 'displaying')
check('trace request-display then lease-denied', solve('standby', [('request-display', N), ('lease-denied', N)], N), 'standby')
check('trace request-display then cancel-display', solve('standby', [('request-display', N), ('cancel-display', N)], N), 'claim-canceled')
check('trace lease-granted then lease-revoked', solve('claiming', [('lease-granted', N), ('lease-revoked', N)], N), 'withdrawing')
check('trace lease-granted then close-surface', solve('claiming', [('lease-granted', N), ('close-surface', N)], N), 'releasing')
check('trace lease-denied then request-display', solve('claiming', [('lease-denied', N), ('request-display', N)], N), 'claiming')
check('trace lease-denied then foreign-release', solve('claiming', [('lease-denied', N), ('foreign-release', N)], N), 'standby')
check('trace lease-revoked then unmounted', solve('displaying', [('lease-revoked', N), ('unmounted', N)], N), 'standby')
check('trace unmounted then request-display', solve('withdrawing', [('unmounted', N), ('request-display', N)], N), 'claiming')
check('trace unmounted then foreign-release', solve('withdrawing', [('unmounted', N), ('foreign-release', N)], N), 'standby')
check('trace close-surface then release-confirmed', solve('displaying', [('close-surface', N), ('release-confirmed', N)], N), 'standby')
check('trace release-confirmed then request-display', solve('releasing', [('release-confirmed', N), ('request-display', N)], N), 'claiming')
check('trace release-confirmed then foreign-release', solve('releasing', [('release-confirmed', N), ('foreign-release', N)], N), 'standby')
check('trace cancel-display then late-lease-granted', solve('claiming', [('cancel-display', N), ('late-lease-granted', N)], N), 'releasing')
check('trace late-lease-granted then release-confirmed', solve('claim-canceled', [('late-lease-granted', N), ('release-confirmed', N)], N), 'standby')
check('trace foreign-release then request-display', solve('standby', [('foreign-release', N), ('request-display', N)], N), 'claiming')
check('trace foreign-release then foreign-release', solve('standby', [('foreign-release', N), ('foreign-release', N)], N), 'standby')
check('domain state regression 1: mounted', solve('claiming', [('lease-granted', N, {'token': 4})], N, {}, 'mounted'), {'phase': 'claiming', 'value': False})
check('domain state regression 2: mounted', solve('claiming', [('lease-granted', N, {'token': 5})], N, {}, 'mounted'), {'phase': 'displaying', 'value': True})
check('domain state regression 3: mounted', solve('displaying', [('lease-revoked', N, {'token': 4})], N, {'mounted': True}, 'mounted'), {'phase': 'displaying', 'value': True})
check('domain state regression 4: mounted', solve('displaying', [('lease-revoked', N, {'token': 5})], N, {'mounted': True}, 'mounted'), {'phase': 'withdrawing', 'value': False})
check('domain state regression 5: released', solve('claim-canceled', [('late-lease-granted', N, {})], N, {}, 'released'), {'phase': 'releasing', 'value': [5]})
check('domain state regression 6: released', solve('standby', [('foreign-release', N, {'owner': 'foreign'})], N, {}, 'released'), {'phase': 'standby', 'value': []})
check('domain state regression 7: released', solve('standby', [('request-display', N, {}), ('cancel-display', N, {}), ('late-lease-granted', N, {'token': 5})], N, {}, 'released'), {'phase': 'releasing', 'value': [5]})
print(json.dumps({"observations": observations, "passed": all(x["passed"] for x in observations)}, ensure_ascii=False))
raise SystemExit(0 if all(x["passed"] for x in observations) else 1)
| Boundary fixture | Actual | Expected | Outcome |
|---|---|---|---|
| standby / request-display | claiming | claiming | Passed |
| claiming / lease-granted | displaying | displaying | Passed |
| claiming / lease-denied | standby | standby | Passed |
| displaying / lease-revoked | withdrawing | withdrawing | Passed |
| withdrawing / unmounted | standby | standby | Passed |
| displaying / close-surface | releasing | releasing | Passed |
| releasing / release-confirmed | standby | standby | Passed |
| claiming / cancel-display | claim-canceled | claim-canceled | Passed |
| claim-canceled / late-lease-granted | releasing | releasing | Passed |
| standby / foreign-release | standby | standby | Passed |
| older notification incarnation | standby | standby | Passed |
| future notification incarnation | standby | standby | Passed |
| unknown event is inert | standby | standby | Passed |
| empty delivery batch | standby | standby | Passed |
| N stale deliveries before current delivery | claiming | claiming | Passed |
| trace request-display then lease-granted | displaying | displaying | Passed |
| trace request-display then lease-denied | standby | standby | Passed |
| trace request-display then cancel-display | claim-canceled | claim-canceled | Passed |
| trace lease-granted then lease-revoked | withdrawing | withdrawing | Passed |
| trace lease-granted then close-surface | releasing | releasing | Passed |
| trace lease-denied then request-display | claiming | claiming | Passed |
| trace lease-denied then foreign-release | standby | standby | Passed |
| trace lease-revoked then unmounted | standby | standby | Passed |
| trace unmounted then request-display | claiming | claiming | Passed |
| trace unmounted then foreign-release | standby | standby | Passed |
| trace close-surface then release-confirmed | standby | standby | Passed |
| trace release-confirmed then request-display | claiming | claiming | Passed |
| trace release-confirmed then foreign-release | standby | standby | Passed |
| trace cancel-display then late-lease-granted | releasing | releasing | Passed |
| trace late-lease-granted then release-confirmed | standby | standby | Passed |
| trace foreign-release then request-display | claiming | claiming | Passed |
| trace foreign-release then foreign-release | standby | standby | Passed |
| domain state regression 1: mounted | {'phase': 'claiming', 'value': False} | {'phase': 'claiming', 'value': False} | Passed |
| domain state regression 2: mounted | {'phase': 'displaying', 'value': True} | {'phase': 'displaying', 'value': True} | Passed |
| domain state regression 3: mounted | {'phase': 'displaying', 'value': True} | {'phase': 'displaying', 'value': True} | Passed |
| domain state regression 4: mounted | {'phase': 'withdrawing', 'value': False} | {'phase': 'withdrawing', 'value': False} | Passed |
| domain state regression 5: released | {'phase': 'releasing', 'value': [5]} | {'phase': 'releasing', 'value': [5]} | Passed |
| domain state regression 6: released | {'phase': 'standby', 'value': []} | {'phase': 'standby', 'value': []} | Passed |
| domain state regression 7: released | {'phase': 'releasing', 'value': [5]} | {'phase': 'releasing', 'value': [5]} | Passed |
SHA-256 / e418dfac00f4080d93dd829d607784e21d9d1c600d258a513262b94a0fc9a697
Verification & scope
Stipulated single-notification state and policy model only. Event delivery and acknowledgements are explicit test inputs. No DOM, accessibility announcements, live timers, networking, actual rendering, or production-platform conformance is simulated. This reproducer isolates one failure mechanism. Results cover the supplied fixtures. Variants within a family share a test contract and should remain grouped when constructing evaluation splits. Related mechanisms with a shared evaluation_group must also remain together; these controlled models are not independent production incidents.
Observations recorded using Python 3.12.14 at 2026-09-29T14:42:30.077241+00:00.
Case digest / 73f1e473d176f3388257ebc3ac57d8f8ab27e67d4b4a52cafaf86d685128cf0d