FAILURE MAP
← Case archive

FA-35261 / Notification interfaces / Open access

Notification destructive-action confirmation: command-failure from executing · case 01

The command-failure event leaves a notification in succeeded instead of failed.

Verified by executionVariant 1 · 35 checks per implementationDownload source bundle ↓JSON ↗

ROOT CAUSE

Failed execution is presented as success.

THE FAILURE

Failed execution is presented as success.

Unsuccessful approach: Silently rearming loses the failure explanation.

Case contract

Notification destructive-action confirmation is a bounded visual-notification workflow with mutable policy state {'revision': 2, 'consented': None, 'submitted': [], 'withdrawn': False}. Its default transition relation is {('offered', 'destructive-click'): 'confirming', ('confirming', 'confirm-accept'): 'executing', ('confirming', 'confirm-cancel'): 'offered', ('executing', 'command-success'): 'succeeded', ('executing', 'command-failure'): 'failed', ('failed', 'retry-click'): 'confirming-retry', ('confirming-retry', 'retry-confirm-accept'): 'executing', ('confirming', 'notification-withdrawn'): 'confirmation-invalidated', ('confirmation-invalidated', 'late-confirm-accept'): 'withdrawn', ('executing', 'notification-withdrawn'): 'executing-withdrawn'}; domain inputs can suppress or redirect transitions and update policy fields, as specified in solve. Different-generation events are inert. Batches apply in order. Optional observe returns the selected policy field alongside the phase.

Why this case matters

Visual notification lifecycle ordering can leave an inbox or toast showing the wrong actionable state even when transport succeeds.

1 / The failure

Exit 1
"""Failure Map reference implementation. Python standard library only."""
import json

N = 1
observations = []
def solve(initial, events, generation, payload=None, observe=None):
    table = {('offered', 'destructive-click'): 'confirming', ('confirming', 'confirm-accept'): 'executing', ('confirming', 'confirm-cancel'): 'offered', ('executing', 'command-success'): 'succeeded', ('executing', 'command-failure'): 'succeeded', ('failed', 'retry-click'): 'confirming-retry', ('confirming-retry', 'retry-confirm-accept'): 'executing', ('confirming', 'notification-withdrawn'): 'confirmation-invalidated', ('confirmation-invalidated', 'late-confirm-accept'): 'withdrawn', ('executing', 'notification-withdrawn'): 'executing-withdrawn'}
    data = json.loads(json.dumps({'revision': 2, 'consented': None, 'submitted': [], 'withdrawn': False})) if payload is None else {**json.loads(json.dumps({'revision': 2, 'consented': None, 'submitted': [], 'withdrawn': False})), **json.loads(json.dumps(payload))}
    state = initial
    for delivery in events:
        event, event_generation = delivery[:2]
        arg = delivery[2] if len(delivery) > 2 else {}
        if event_generation == generation:
            previous = state
            if event in ('confirm-accept','retry-confirm-accept'):
                if data['withdrawn'] or arg.get('revision',data['revision']) != data['revision']: event = 'confirm-cancel'
                else: data['consented'] = data['revision']
            if event == 'notification-withdrawn': data['withdrawn'] = True
            state = table.get((state, event), state)
            if state == 'executing' and previous != 'executing': data['submitted'].append(data['revision'])
            if state == 'offered': data['consented'] = None
    return {'phase': state, 'value': data[observe]} if observe else state
def check(label, actual, expected):
    observations.append({"check": label, "actual": actual, "expected": expected, "passed": actual == expected})
check('offered / destructive-click', solve('offered', [('destructive-click', N)], N), 'confirming')
check('confirming / confirm-accept', solve('confirming', [('confirm-accept', N)], N), 'executing')
check('confirming / confirm-cancel', solve('confirming', [('confirm-cancel', N)], N), 'offered')
check('executing / command-success', solve('executing', [('command-success', N)], N), 'succeeded')
check('executing / command-failure', solve('executing', [('command-failure', N)], N), 'failed')
check('failed / retry-click', solve('failed', [('retry-click', N)], N), 'confirming-retry')
check('confirming-retry / retry-confirm-accept', solve('confirming-retry', [('retry-confirm-accept', N)], N), 'executing')
check('confirming / notification-withdrawn', solve('confirming', [('notification-withdrawn', N)], N), 'confirmation-invalidated')
check('confirmation-invalidated / late-confirm-accept', solve('confirmation-invalidated', [('late-confirm-accept', N)], N), 'withdrawn')
check('executing / notification-withdrawn', solve('executing', [('notification-withdrawn', N)], N), 'executing-withdrawn')
check('older notification incarnation', solve('offered', [('destructive-click', N - 1)], N), 'offered')
check('future notification incarnation', solve('offered', [('destructive-click', N + 1)], N), 'offered')
check('unknown event is inert', solve('offered', [('unknown-event', N)], N), 'offered')
check('empty delivery batch', solve('offered', [], N), 'offered')
check('N stale deliveries before current delivery', solve('offered', [('destructive-click', N - 1)] * N + [('destructive-click', N)], N), 'confirming')
check('trace destructive-click then confirm-accept', solve('offered', [('destructive-click', N), ('confirm-accept', N)], N), 'executing')
check('trace destructive-click then confirm-cancel', solve('offered', [('destructive-click', N), ('confirm-cancel', N)], N), 'offered')
check('trace destructive-click then notification-withdrawn', solve('offered', [('destructive-click', N), ('notification-withdrawn', N)], N), 'confirmation-invalidated')
check('trace confirm-accept then command-success', solve('confirming', [('confirm-accept', N), ('command-success', N)], N), 'succeeded')
check('trace confirm-accept then command-failure', solve('confirming', [('confirm-accept', N), ('command-failure', N)], N), 'failed')
check('trace confirm-accept then notification-withdrawn', solve('confirming', [('confirm-accept', N), ('notification-withdrawn', N)], N), 'executing-withdrawn')
check('trace confirm-cancel then destructive-click', solve('confirming', [('confirm-cancel', N), ('destructive-click', N)], N), 'confirming')
check('trace command-failure then retry-click', solve('executing', [('command-failure', N), ('retry-click', N)], N), 'confirming-retry')
check('trace retry-click then retry-confirm-accept', solve('failed', [('retry-click', N), ('retry-confirm-accept', N)], N), 'executing')
check('trace retry-confirm-accept then command-success', solve('confirming-retry', [('retry-confirm-accept', N), ('command-success', N)], N), 'succeeded')
check('trace retry-confirm-accept then command-failure', solve('confirming-retry', [('retry-confirm-accept', N), ('command-failure', N)], N), 'failed')
check('trace retry-confirm-accept then notification-withdrawn', solve('confirming-retry', [('retry-confirm-accept', N), ('notification-withdrawn', N)], N), 'executing-withdrawn')
check('trace notification-withdrawn then late-confirm-accept', solve('confirming', [('notification-withdrawn', N), ('late-confirm-accept', N)], N), 'withdrawn')
check('domain state regression 1: submitted', solve('confirming', [('confirm-accept', N, {'revision': 1})], N, {}, 'submitted'), {'phase': 'offered', 'value': []})
check('domain state regression 2: submitted', solve('confirming', [('confirm-accept', N, {'revision': 2})], N, {}, 'submitted'), {'phase': 'executing', 'value': [2]})
check('domain state regression 3: submitted', solve('confirming', [('confirm-accept', N, {})], N, {'withdrawn': True}, 'submitted'), {'phase': 'offered', 'value': []})
check('domain state regression 4: consented', solve('confirming', [('confirm-cancel', N, {})], N, {'consented': 2}, 'consented'), {'phase': 'offered', 'value': None})
check('domain state regression 5: submitted', solve('executing', [('notification-withdrawn', N, {})], N, {'submitted': [2]}, 'submitted'), {'phase': 'executing-withdrawn', 'value': [2]})
check('domain state regression 6: submitted', solve('confirmation-invalidated', [('late-confirm-accept', N, {})], N, {'withdrawn': True}, 'submitted'), {'phase': 'withdrawn', 'value': []})
check('domain state regression 7: submitted', solve('offered', [('destructive-click', N, {}), ('notification-withdrawn', N, {}), ('late-confirm-accept', N, {})], N, {}, 'submitted'), {'phase': 'withdrawn', 'value': []})
print(json.dumps({"observations": observations, "passed": all(x["passed"] for x in observations)}, ensure_ascii=False))
raise SystemExit(0 if all(x["passed"] for x in observations) else 1)
Boundary fixtureActualExpectedOutcome
offered / destructive-clickconfirmingconfirmingPassed
confirming / confirm-acceptexecutingexecutingPassed
confirming / confirm-cancelofferedofferedPassed
executing / command-successsucceededsucceededPassed
executing / command-failuresucceededfailedFailed
failed / retry-clickconfirming-retryconfirming-retryPassed
confirming-retry / retry-confirm-acceptexecutingexecutingPassed
confirming / notification-withdrawnconfirmation-invalidatedconfirmation-invalidatedPassed
confirmation-invalidated / late-confirm-acceptwithdrawnwithdrawnPassed
executing / notification-withdrawnexecuting-withdrawnexecuting-withdrawnPassed
older notification incarnationofferedofferedPassed
future notification incarnationofferedofferedPassed
unknown event is inertofferedofferedPassed
empty delivery batchofferedofferedPassed
N stale deliveries before current deliveryconfirmingconfirmingPassed
trace destructive-click then confirm-acceptexecutingexecutingPassed
trace destructive-click then confirm-cancelofferedofferedPassed
trace destructive-click then notification-withdrawnconfirmation-invalidatedconfirmation-invalidatedPassed
trace confirm-accept then command-successsucceededsucceededPassed
trace confirm-accept then command-failuresucceededfailedFailed
trace confirm-accept then notification-withdrawnexecuting-withdrawnexecuting-withdrawnPassed
trace confirm-cancel then destructive-clickconfirmingconfirmingPassed
trace command-failure then retry-clicksucceededconfirming-retryFailed
trace retry-click then retry-confirm-acceptexecutingexecutingPassed
trace retry-confirm-accept then command-successsucceededsucceededPassed
trace retry-confirm-accept then command-failuresucceededfailedFailed
trace retry-confirm-accept then notification-withdrawnexecuting-withdrawnexecuting-withdrawnPassed
trace notification-withdrawn then late-confirm-acceptwithdrawnwithdrawnPassed
domain state regression 1: submitted{'phase': 'offered', 'value': []}{'phase': 'offered', 'value': []}Passed
domain state regression 2: submitted{'phase': 'executing', 'value': [2]}{'phase': 'executing', 'value': [2]}Passed
domain state regression 3: submitted{'phase': 'offered', 'value': []}{'phase': 'offered', 'value': []}Passed
domain state regression 4: consented{'phase': 'offered', 'value': None}{'phase': 'offered', 'value': None}Passed
domain state regression 5: submitted{'phase': 'executing-withdrawn', 'value': [2]}{'phase': 'executing-withdrawn', 'value': [2]}Passed
domain state regression 6: submitted{'phase': 'withdrawn', 'value': []}{'phase': 'withdrawn', 'value': []}Passed
domain state regression 7: submitted{'phase': 'withdrawn', 'value': []}{'phase': 'withdrawn', 'value': []}Passed

SHA-256 / df7c7649b39dff62bd1ebe7fc21dba54da4358ff8427a34bcee5580193b375eb

2 / The unsuccessful fix

Exit 1
"""Failure Map reference implementation. Python standard library only."""
import json

N = 1
observations = []
def solve(initial, events, generation, payload=None, observe=None):
    table = {('offered', 'destructive-click'): 'confirming', ('confirming', 'confirm-accept'): 'executing', ('confirming', 'confirm-cancel'): 'offered', ('executing', 'command-success'): 'succeeded', ('executing', 'command-failure'): 'offered', ('failed', 'retry-click'): 'confirming-retry', ('confirming-retry', 'retry-confirm-accept'): 'executing', ('confirming', 'notification-withdrawn'): 'confirmation-invalidated', ('confirmation-invalidated', 'late-confirm-accept'): 'withdrawn', ('executing', 'notification-withdrawn'): 'executing-withdrawn'}
    data = json.loads(json.dumps({'revision': 2, 'consented': None, 'submitted': [], 'withdrawn': False})) if payload is None else {**json.loads(json.dumps({'revision': 2, 'consented': None, 'submitted': [], 'withdrawn': False})), **json.loads(json.dumps(payload))}
    state = initial
    for delivery in events:
        event, event_generation = delivery[:2]
        arg = delivery[2] if len(delivery) > 2 else {}
        if event_generation == generation:
            previous = state
            if event in ('confirm-accept','retry-confirm-accept'):
                if data['withdrawn'] or arg.get('revision',data['revision']) != data['revision']: event = 'confirm-cancel'
                else: data['consented'] = data['revision']
            if event == 'notification-withdrawn': data['withdrawn'] = True
            state = table.get((state, event), state)
            if state == 'executing' and previous != 'executing': data['submitted'].append(data['revision'])
            if state == 'offered': data['consented'] = None
    return {'phase': state, 'value': data[observe]} if observe else state
def check(label, actual, expected):
    observations.append({"check": label, "actual": actual, "expected": expected, "passed": actual == expected})
check('offered / destructive-click', solve('offered', [('destructive-click', N)], N), 'confirming')
check('confirming / confirm-accept', solve('confirming', [('confirm-accept', N)], N), 'executing')
check('confirming / confirm-cancel', solve('confirming', [('confirm-cancel', N)], N), 'offered')
check('executing / command-success', solve('executing', [('command-success', N)], N), 'succeeded')
check('executing / command-failure', solve('executing', [('command-failure', N)], N), 'failed')
check('failed / retry-click', solve('failed', [('retry-click', N)], N), 'confirming-retry')
check('confirming-retry / retry-confirm-accept', solve('confirming-retry', [('retry-confirm-accept', N)], N), 'executing')
check('confirming / notification-withdrawn', solve('confirming', [('notification-withdrawn', N)], N), 'confirmation-invalidated')
check('confirmation-invalidated / late-confirm-accept', solve('confirmation-invalidated', [('late-confirm-accept', N)], N), 'withdrawn')
check('executing / notification-withdrawn', solve('executing', [('notification-withdrawn', N)], N), 'executing-withdrawn')
check('older notification incarnation', solve('offered', [('destructive-click', N - 1)], N), 'offered')
check('future notification incarnation', solve('offered', [('destructive-click', N + 1)], N), 'offered')
check('unknown event is inert', solve('offered', [('unknown-event', N)], N), 'offered')
check('empty delivery batch', solve('offered', [], N), 'offered')
check('N stale deliveries before current delivery', solve('offered', [('destructive-click', N - 1)] * N + [('destructive-click', N)], N), 'confirming')
check('trace destructive-click then confirm-accept', solve('offered', [('destructive-click', N), ('confirm-accept', N)], N), 'executing')
check('trace destructive-click then confirm-cancel', solve('offered', [('destructive-click', N), ('confirm-cancel', N)], N), 'offered')
check('trace destructive-click then notification-withdrawn', solve('offered', [('destructive-click', N), ('notification-withdrawn', N)], N), 'confirmation-invalidated')
check('trace confirm-accept then command-success', solve('confirming', [('confirm-accept', N), ('command-success', N)], N), 'succeeded')
check('trace confirm-accept then command-failure', solve('confirming', [('confirm-accept', N), ('command-failure', N)], N), 'failed')
check('trace confirm-accept then notification-withdrawn', solve('confirming', [('confirm-accept', N), ('notification-withdrawn', N)], N), 'executing-withdrawn')
check('trace confirm-cancel then destructive-click', solve('confirming', [('confirm-cancel', N), ('destructive-click', N)], N), 'confirming')
check('trace command-failure then retry-click', solve('executing', [('command-failure', N), ('retry-click', N)], N), 'confirming-retry')
check('trace retry-click then retry-confirm-accept', solve('failed', [('retry-click', N), ('retry-confirm-accept', N)], N), 'executing')
check('trace retry-confirm-accept then command-success', solve('confirming-retry', [('retry-confirm-accept', N), ('command-success', N)], N), 'succeeded')
check('trace retry-confirm-accept then command-failure', solve('confirming-retry', [('retry-confirm-accept', N), ('command-failure', N)], N), 'failed')
check('trace retry-confirm-accept then notification-withdrawn', solve('confirming-retry', [('retry-confirm-accept', N), ('notification-withdrawn', N)], N), 'executing-withdrawn')
check('trace notification-withdrawn then late-confirm-accept', solve('confirming', [('notification-withdrawn', N), ('late-confirm-accept', N)], N), 'withdrawn')
check('domain state regression 1: submitted', solve('confirming', [('confirm-accept', N, {'revision': 1})], N, {}, 'submitted'), {'phase': 'offered', 'value': []})
check('domain state regression 2: submitted', solve('confirming', [('confirm-accept', N, {'revision': 2})], N, {}, 'submitted'), {'phase': 'executing', 'value': [2]})
check('domain state regression 3: submitted', solve('confirming', [('confirm-accept', N, {})], N, {'withdrawn': True}, 'submitted'), {'phase': 'offered', 'value': []})
check('domain state regression 4: consented', solve('confirming', [('confirm-cancel', N, {})], N, {'consented': 2}, 'consented'), {'phase': 'offered', 'value': None})
check('domain state regression 5: submitted', solve('executing', [('notification-withdrawn', N, {})], N, {'submitted': [2]}, 'submitted'), {'phase': 'executing-withdrawn', 'value': [2]})
check('domain state regression 6: submitted', solve('confirmation-invalidated', [('late-confirm-accept', N, {})], N, {'withdrawn': True}, 'submitted'), {'phase': 'withdrawn', 'value': []})
check('domain state regression 7: submitted', solve('offered', [('destructive-click', N, {}), ('notification-withdrawn', N, {}), ('late-confirm-accept', N, {})], N, {}, 'submitted'), {'phase': 'withdrawn', 'value': []})
print(json.dumps({"observations": observations, "passed": all(x["passed"] for x in observations)}, ensure_ascii=False))
raise SystemExit(0 if all(x["passed"] for x in observations) else 1)
Boundary fixtureActualExpectedOutcome
offered / destructive-clickconfirmingconfirmingPassed
confirming / confirm-acceptexecutingexecutingPassed
confirming / confirm-cancelofferedofferedPassed
executing / command-successsucceededsucceededPassed
executing / command-failureofferedfailedFailed
failed / retry-clickconfirming-retryconfirming-retryPassed
confirming-retry / retry-confirm-acceptexecutingexecutingPassed
confirming / notification-withdrawnconfirmation-invalidatedconfirmation-invalidatedPassed
confirmation-invalidated / late-confirm-acceptwithdrawnwithdrawnPassed
executing / notification-withdrawnexecuting-withdrawnexecuting-withdrawnPassed
older notification incarnationofferedofferedPassed
future notification incarnationofferedofferedPassed
unknown event is inertofferedofferedPassed
empty delivery batchofferedofferedPassed
N stale deliveries before current deliveryconfirmingconfirmingPassed
trace destructive-click then confirm-acceptexecutingexecutingPassed
trace destructive-click then confirm-cancelofferedofferedPassed
trace destructive-click then notification-withdrawnconfirmation-invalidatedconfirmation-invalidatedPassed
trace confirm-accept then command-successsucceededsucceededPassed
trace confirm-accept then command-failureofferedfailedFailed
trace confirm-accept then notification-withdrawnexecuting-withdrawnexecuting-withdrawnPassed
trace confirm-cancel then destructive-clickconfirmingconfirmingPassed
trace command-failure then retry-clickofferedconfirming-retryFailed
trace retry-click then retry-confirm-acceptexecutingexecutingPassed
trace retry-confirm-accept then command-successsucceededsucceededPassed
trace retry-confirm-accept then command-failureofferedfailedFailed
trace retry-confirm-accept then notification-withdrawnexecuting-withdrawnexecuting-withdrawnPassed
trace notification-withdrawn then late-confirm-acceptwithdrawnwithdrawnPassed
domain state regression 1: submitted{'phase': 'offered', 'value': []}{'phase': 'offered', 'value': []}Passed
domain state regression 2: submitted{'phase': 'executing', 'value': [2]}{'phase': 'executing', 'value': [2]}Passed
domain state regression 3: submitted{'phase': 'offered', 'value': []}{'phase': 'offered', 'value': []}Passed
domain state regression 4: consented{'phase': 'offered', 'value': None}{'phase': 'offered', 'value': None}Passed
domain state regression 5: submitted{'phase': 'executing-withdrawn', 'value': [2]}{'phase': 'executing-withdrawn', 'value': [2]}Passed
domain state regression 6: submitted{'phase': 'withdrawn', 'value': []}{'phase': 'withdrawn', 'value': []}Passed
domain state regression 7: submitted{'phase': 'withdrawn', 'value': []}{'phase': 'withdrawn', 'value': []}Passed

SHA-256 / 9661e23292a3d9198b304b1d9bc28b8ab3a15bf91a1bdf7b5b6561ed7d9b0f29

HELD IN THE MEMBER ARCHIVE

The verified repair and its recorded checks are member-only.

This mechanism has 35 recorded checks per implementation. The open-access tier publishes the failure and the unsuccessful fix; the repaired source that passes every check, and the observations that prove it, are available to members.

Every case sharing this mechanism uses the same contract and the same repair, so this one record is held back for all of them.

Member access is invitation-based. Sign in with your invited account to inspect the repair.

Sign in to the archive ↗

Verification & scope

Stipulated single-notification state and policy model only. Event delivery and acknowledgements are explicit test inputs. No DOM, accessibility announcements, live timers, networking, actual rendering, or production-platform conformance is simulated. This reproducer isolates one failure mechanism. Results cover the supplied fixtures. Variants within a family share a test contract and should remain grouped when constructing evaluation splits. Related mechanisms with a shared evaluation_group must also remain together; these controlled models are not independent production incidents.

Observations recorded using Python 3.12.14 at 2026-09-29T14:42:40.084854+00:00.

Case digest / e941318c3edd88d01dc5fd7606ed181339ced5a0e9b3b8272a45ef2cd927f930