FAILURE MAP
← Case archive

FA-35276 / Notification interfaces / Open access

Notification destructive-action confirmation: notification-withdrawn from confirming · case 01

The notification-withdrawn event leaves a notification in executing instead of confirmation-invalidated.

Verified by executionVariant 1 · 35 checks per implementationDownload source bundle ↓JSON ↗

ROOT CAUSE

Withdrawal still allows execution against obsolete notification context.

THE FAILURE

Withdrawal still allows execution against obsolete notification context.

Unsuccessful approach: Keeping the offer active permits another stale confirmation.

Case contract

Notification destructive-action confirmation is a bounded visual-notification workflow with mutable policy state {'revision': 2, 'consented': None, 'submitted': [], 'withdrawn': False}. Its default transition relation is {('offered', 'destructive-click'): 'confirming', ('confirming', 'confirm-accept'): 'executing', ('confirming', 'confirm-cancel'): 'offered', ('executing', 'command-success'): 'succeeded', ('executing', 'command-failure'): 'failed', ('failed', 'retry-click'): 'confirming-retry', ('confirming-retry', 'retry-confirm-accept'): 'executing', ('confirming', 'notification-withdrawn'): 'confirmation-invalidated', ('confirmation-invalidated', 'late-confirm-accept'): 'withdrawn', ('executing', 'notification-withdrawn'): 'executing-withdrawn'}; domain inputs can suppress or redirect transitions and update policy fields, as specified in solve. Different-generation events are inert. Batches apply in order. Optional observe returns the selected policy field alongside the phase.

Why this case matters

Visual notification lifecycle ordering can leave an inbox or toast showing the wrong actionable state even when transport succeeds.

1 / The failure

Exit 1
"""Failure Map reference implementation. Python standard library only."""
import json

N = 1
observations = []
def solve(initial, events, generation, payload=None, observe=None):
    table = {('offered', 'destructive-click'): 'confirming', ('confirming', 'confirm-accept'): 'executing', ('confirming', 'confirm-cancel'): 'offered', ('executing', 'command-success'): 'succeeded', ('executing', 'command-failure'): 'failed', ('failed', 'retry-click'): 'confirming-retry', ('confirming-retry', 'retry-confirm-accept'): 'executing', ('confirming', 'notification-withdrawn'): 'executing', ('confirmation-invalidated', 'late-confirm-accept'): 'withdrawn', ('executing', 'notification-withdrawn'): 'executing-withdrawn'}
    data = json.loads(json.dumps({'revision': 2, 'consented': None, 'submitted': [], 'withdrawn': False})) if payload is None else {**json.loads(json.dumps({'revision': 2, 'consented': None, 'submitted': [], 'withdrawn': False})), **json.loads(json.dumps(payload))}
    state = initial
    for delivery in events:
        event, event_generation = delivery[:2]
        arg = delivery[2] if len(delivery) > 2 else {}
        if event_generation == generation:
            previous = state
            if event in ('confirm-accept','retry-confirm-accept'):
                if data['withdrawn'] or arg.get('revision',data['revision']) != data['revision']: event = 'confirm-cancel'
                else: data['consented'] = data['revision']
            if event == 'notification-withdrawn': data['withdrawn'] = True
            state = table.get((state, event), state)
            if state == 'executing' and previous != 'executing': data['submitted'].append(data['revision'])
            if state == 'offered': data['consented'] = None
    return {'phase': state, 'value': data[observe]} if observe else state
def check(label, actual, expected):
    observations.append({"check": label, "actual": actual, "expected": expected, "passed": actual == expected})
check('offered / destructive-click', solve('offered', [('destructive-click', N)], N), 'confirming')
check('confirming / confirm-accept', solve('confirming', [('confirm-accept', N)], N), 'executing')
check('confirming / confirm-cancel', solve('confirming', [('confirm-cancel', N)], N), 'offered')
check('executing / command-success', solve('executing', [('command-success', N)], N), 'succeeded')
check('executing / command-failure', solve('executing', [('command-failure', N)], N), 'failed')
check('failed / retry-click', solve('failed', [('retry-click', N)], N), 'confirming-retry')
check('confirming-retry / retry-confirm-accept', solve('confirming-retry', [('retry-confirm-accept', N)], N), 'executing')
check('confirming / notification-withdrawn', solve('confirming', [('notification-withdrawn', N)], N), 'confirmation-invalidated')
check('confirmation-invalidated / late-confirm-accept', solve('confirmation-invalidated', [('late-confirm-accept', N)], N), 'withdrawn')
check('executing / notification-withdrawn', solve('executing', [('notification-withdrawn', N)], N), 'executing-withdrawn')
check('older notification incarnation', solve('offered', [('destructive-click', N - 1)], N), 'offered')
check('future notification incarnation', solve('offered', [('destructive-click', N + 1)], N), 'offered')
check('unknown event is inert', solve('offered', [('unknown-event', N)], N), 'offered')
check('empty delivery batch', solve('offered', [], N), 'offered')
check('N stale deliveries before current delivery', solve('offered', [('destructive-click', N - 1)] * N + [('destructive-click', N)], N), 'confirming')
check('trace destructive-click then confirm-accept', solve('offered', [('destructive-click', N), ('confirm-accept', N)], N), 'executing')
check('trace destructive-click then confirm-cancel', solve('offered', [('destructive-click', N), ('confirm-cancel', N)], N), 'offered')
check('trace destructive-click then notification-withdrawn', solve('offered', [('destructive-click', N), ('notification-withdrawn', N)], N), 'confirmation-invalidated')
check('trace confirm-accept then command-success', solve('confirming', [('confirm-accept', N), ('command-success', N)], N), 'succeeded')
check('trace confirm-accept then command-failure', solve('confirming', [('confirm-accept', N), ('command-failure', N)], N), 'failed')
check('trace confirm-accept then notification-withdrawn', solve('confirming', [('confirm-accept', N), ('notification-withdrawn', N)], N), 'executing-withdrawn')
check('trace confirm-cancel then destructive-click', solve('confirming', [('confirm-cancel', N), ('destructive-click', N)], N), 'confirming')
check('trace command-failure then retry-click', solve('executing', [('command-failure', N), ('retry-click', N)], N), 'confirming-retry')
check('trace retry-click then retry-confirm-accept', solve('failed', [('retry-click', N), ('retry-confirm-accept', N)], N), 'executing')
check('trace retry-confirm-accept then command-success', solve('confirming-retry', [('retry-confirm-accept', N), ('command-success', N)], N), 'succeeded')
check('trace retry-confirm-accept then command-failure', solve('confirming-retry', [('retry-confirm-accept', N), ('command-failure', N)], N), 'failed')
check('trace retry-confirm-accept then notification-withdrawn', solve('confirming-retry', [('retry-confirm-accept', N), ('notification-withdrawn', N)], N), 'executing-withdrawn')
check('trace notification-withdrawn then late-confirm-accept', solve('confirming', [('notification-withdrawn', N), ('late-confirm-accept', N)], N), 'withdrawn')
check('domain state regression 1: submitted', solve('confirming', [('confirm-accept', N, {'revision': 1})], N, {}, 'submitted'), {'phase': 'offered', 'value': []})
check('domain state regression 2: submitted', solve('confirming', [('confirm-accept', N, {'revision': 2})], N, {}, 'submitted'), {'phase': 'executing', 'value': [2]})
check('domain state regression 3: submitted', solve('confirming', [('confirm-accept', N, {})], N, {'withdrawn': True}, 'submitted'), {'phase': 'offered', 'value': []})
check('domain state regression 4: consented', solve('confirming', [('confirm-cancel', N, {})], N, {'consented': 2}, 'consented'), {'phase': 'offered', 'value': None})
check('domain state regression 5: submitted', solve('executing', [('notification-withdrawn', N, {})], N, {'submitted': [2]}, 'submitted'), {'phase': 'executing-withdrawn', 'value': [2]})
check('domain state regression 6: submitted', solve('confirmation-invalidated', [('late-confirm-accept', N, {})], N, {'withdrawn': True}, 'submitted'), {'phase': 'withdrawn', 'value': []})
check('domain state regression 7: submitted', solve('offered', [('destructive-click', N, {}), ('notification-withdrawn', N, {}), ('late-confirm-accept', N, {})], N, {}, 'submitted'), {'phase': 'withdrawn', 'value': []})
print(json.dumps({"observations": observations, "passed": all(x["passed"] for x in observations)}, ensure_ascii=False))
raise SystemExit(0 if all(x["passed"] for x in observations) else 1)
Boundary fixtureActualExpectedOutcome
offered / destructive-clickconfirmingconfirmingPassed
confirming / confirm-acceptexecutingexecutingPassed
confirming / confirm-cancelofferedofferedPassed
executing / command-successsucceededsucceededPassed
executing / command-failurefailedfailedPassed
failed / retry-clickconfirming-retryconfirming-retryPassed
confirming-retry / retry-confirm-acceptexecutingexecutingPassed
confirming / notification-withdrawnexecutingconfirmation-invalidatedFailed
confirmation-invalidated / late-confirm-acceptwithdrawnwithdrawnPassed
executing / notification-withdrawnexecuting-withdrawnexecuting-withdrawnPassed
older notification incarnationofferedofferedPassed
future notification incarnationofferedofferedPassed
unknown event is inertofferedofferedPassed
empty delivery batchofferedofferedPassed
N stale deliveries before current deliveryconfirmingconfirmingPassed
trace destructive-click then confirm-acceptexecutingexecutingPassed
trace destructive-click then confirm-cancelofferedofferedPassed
trace destructive-click then notification-withdrawnexecutingconfirmation-invalidatedFailed
trace confirm-accept then command-successsucceededsucceededPassed
trace confirm-accept then command-failurefailedfailedPassed
trace confirm-accept then notification-withdrawnexecuting-withdrawnexecuting-withdrawnPassed
trace confirm-cancel then destructive-clickconfirmingconfirmingPassed
trace command-failure then retry-clickconfirming-retryconfirming-retryPassed
trace retry-click then retry-confirm-acceptexecutingexecutingPassed
trace retry-confirm-accept then command-successsucceededsucceededPassed
trace retry-confirm-accept then command-failurefailedfailedPassed
trace retry-confirm-accept then notification-withdrawnexecuting-withdrawnexecuting-withdrawnPassed
trace notification-withdrawn then late-confirm-acceptexecutingwithdrawnFailed
domain state regression 1: submitted{'phase': 'offered', 'value': []}{'phase': 'offered', 'value': []}Passed
domain state regression 2: submitted{'phase': 'executing', 'value': [2]}{'phase': 'executing', 'value': [2]}Passed
domain state regression 3: submitted{'phase': 'offered', 'value': []}{'phase': 'offered', 'value': []}Passed
domain state regression 4: consented{'phase': 'offered', 'value': None}{'phase': 'offered', 'value': None}Passed
domain state regression 5: submitted{'phase': 'executing-withdrawn', 'value': [2]}{'phase': 'executing-withdrawn', 'value': [2]}Passed
domain state regression 6: submitted{'phase': 'withdrawn', 'value': []}{'phase': 'withdrawn', 'value': []}Passed
domain state regression 7: submitted{'phase': 'executing', 'value': [2]}{'phase': 'withdrawn', 'value': []}Failed

SHA-256 / e422e19246c7b1ec92abe55c0f58f516a5ec7a1addead72d3ca9da304f6cb06c

2 / The unsuccessful fix

Exit 1
"""Failure Map reference implementation. Python standard library only."""
import json

N = 1
observations = []
def solve(initial, events, generation, payload=None, observe=None):
    table = {('offered', 'destructive-click'): 'confirming', ('confirming', 'confirm-accept'): 'executing', ('confirming', 'confirm-cancel'): 'offered', ('executing', 'command-success'): 'succeeded', ('executing', 'command-failure'): 'failed', ('failed', 'retry-click'): 'confirming-retry', ('confirming-retry', 'retry-confirm-accept'): 'executing', ('confirming', 'notification-withdrawn'): 'offered', ('confirmation-invalidated', 'late-confirm-accept'): 'withdrawn', ('executing', 'notification-withdrawn'): 'executing-withdrawn'}
    data = json.loads(json.dumps({'revision': 2, 'consented': None, 'submitted': [], 'withdrawn': False})) if payload is None else {**json.loads(json.dumps({'revision': 2, 'consented': None, 'submitted': [], 'withdrawn': False})), **json.loads(json.dumps(payload))}
    state = initial
    for delivery in events:
        event, event_generation = delivery[:2]
        arg = delivery[2] if len(delivery) > 2 else {}
        if event_generation == generation:
            previous = state
            if event in ('confirm-accept','retry-confirm-accept'):
                if data['withdrawn'] or arg.get('revision',data['revision']) != data['revision']: event = 'confirm-cancel'
                else: data['consented'] = data['revision']
            if event == 'notification-withdrawn': data['withdrawn'] = True
            state = table.get((state, event), state)
            if state == 'executing' and previous != 'executing': data['submitted'].append(data['revision'])
            if state == 'offered': data['consented'] = None
    return {'phase': state, 'value': data[observe]} if observe else state
def check(label, actual, expected):
    observations.append({"check": label, "actual": actual, "expected": expected, "passed": actual == expected})
check('offered / destructive-click', solve('offered', [('destructive-click', N)], N), 'confirming')
check('confirming / confirm-accept', solve('confirming', [('confirm-accept', N)], N), 'executing')
check('confirming / confirm-cancel', solve('confirming', [('confirm-cancel', N)], N), 'offered')
check('executing / command-success', solve('executing', [('command-success', N)], N), 'succeeded')
check('executing / command-failure', solve('executing', [('command-failure', N)], N), 'failed')
check('failed / retry-click', solve('failed', [('retry-click', N)], N), 'confirming-retry')
check('confirming-retry / retry-confirm-accept', solve('confirming-retry', [('retry-confirm-accept', N)], N), 'executing')
check('confirming / notification-withdrawn', solve('confirming', [('notification-withdrawn', N)], N), 'confirmation-invalidated')
check('confirmation-invalidated / late-confirm-accept', solve('confirmation-invalidated', [('late-confirm-accept', N)], N), 'withdrawn')
check('executing / notification-withdrawn', solve('executing', [('notification-withdrawn', N)], N), 'executing-withdrawn')
check('older notification incarnation', solve('offered', [('destructive-click', N - 1)], N), 'offered')
check('future notification incarnation', solve('offered', [('destructive-click', N + 1)], N), 'offered')
check('unknown event is inert', solve('offered', [('unknown-event', N)], N), 'offered')
check('empty delivery batch', solve('offered', [], N), 'offered')
check('N stale deliveries before current delivery', solve('offered', [('destructive-click', N - 1)] * N + [('destructive-click', N)], N), 'confirming')
check('trace destructive-click then confirm-accept', solve('offered', [('destructive-click', N), ('confirm-accept', N)], N), 'executing')
check('trace destructive-click then confirm-cancel', solve('offered', [('destructive-click', N), ('confirm-cancel', N)], N), 'offered')
check('trace destructive-click then notification-withdrawn', solve('offered', [('destructive-click', N), ('notification-withdrawn', N)], N), 'confirmation-invalidated')
check('trace confirm-accept then command-success', solve('confirming', [('confirm-accept', N), ('command-success', N)], N), 'succeeded')
check('trace confirm-accept then command-failure', solve('confirming', [('confirm-accept', N), ('command-failure', N)], N), 'failed')
check('trace confirm-accept then notification-withdrawn', solve('confirming', [('confirm-accept', N), ('notification-withdrawn', N)], N), 'executing-withdrawn')
check('trace confirm-cancel then destructive-click', solve('confirming', [('confirm-cancel', N), ('destructive-click', N)], N), 'confirming')
check('trace command-failure then retry-click', solve('executing', [('command-failure', N), ('retry-click', N)], N), 'confirming-retry')
check('trace retry-click then retry-confirm-accept', solve('failed', [('retry-click', N), ('retry-confirm-accept', N)], N), 'executing')
check('trace retry-confirm-accept then command-success', solve('confirming-retry', [('retry-confirm-accept', N), ('command-success', N)], N), 'succeeded')
check('trace retry-confirm-accept then command-failure', solve('confirming-retry', [('retry-confirm-accept', N), ('command-failure', N)], N), 'failed')
check('trace retry-confirm-accept then notification-withdrawn', solve('confirming-retry', [('retry-confirm-accept', N), ('notification-withdrawn', N)], N), 'executing-withdrawn')
check('trace notification-withdrawn then late-confirm-accept', solve('confirming', [('notification-withdrawn', N), ('late-confirm-accept', N)], N), 'withdrawn')
check('domain state regression 1: submitted', solve('confirming', [('confirm-accept', N, {'revision': 1})], N, {}, 'submitted'), {'phase': 'offered', 'value': []})
check('domain state regression 2: submitted', solve('confirming', [('confirm-accept', N, {'revision': 2})], N, {}, 'submitted'), {'phase': 'executing', 'value': [2]})
check('domain state regression 3: submitted', solve('confirming', [('confirm-accept', N, {})], N, {'withdrawn': True}, 'submitted'), {'phase': 'offered', 'value': []})
check('domain state regression 4: consented', solve('confirming', [('confirm-cancel', N, {})], N, {'consented': 2}, 'consented'), {'phase': 'offered', 'value': None})
check('domain state regression 5: submitted', solve('executing', [('notification-withdrawn', N, {})], N, {'submitted': [2]}, 'submitted'), {'phase': 'executing-withdrawn', 'value': [2]})
check('domain state regression 6: submitted', solve('confirmation-invalidated', [('late-confirm-accept', N, {})], N, {'withdrawn': True}, 'submitted'), {'phase': 'withdrawn', 'value': []})
check('domain state regression 7: submitted', solve('offered', [('destructive-click', N, {}), ('notification-withdrawn', N, {}), ('late-confirm-accept', N, {})], N, {}, 'submitted'), {'phase': 'withdrawn', 'value': []})
print(json.dumps({"observations": observations, "passed": all(x["passed"] for x in observations)}, ensure_ascii=False))
raise SystemExit(0 if all(x["passed"] for x in observations) else 1)
Boundary fixtureActualExpectedOutcome
offered / destructive-clickconfirmingconfirmingPassed
confirming / confirm-acceptexecutingexecutingPassed
confirming / confirm-cancelofferedofferedPassed
executing / command-successsucceededsucceededPassed
executing / command-failurefailedfailedPassed
failed / retry-clickconfirming-retryconfirming-retryPassed
confirming-retry / retry-confirm-acceptexecutingexecutingPassed
confirming / notification-withdrawnofferedconfirmation-invalidatedFailed
confirmation-invalidated / late-confirm-acceptwithdrawnwithdrawnPassed
executing / notification-withdrawnexecuting-withdrawnexecuting-withdrawnPassed
older notification incarnationofferedofferedPassed
future notification incarnationofferedofferedPassed
unknown event is inertofferedofferedPassed
empty delivery batchofferedofferedPassed
N stale deliveries before current deliveryconfirmingconfirmingPassed
trace destructive-click then confirm-acceptexecutingexecutingPassed
trace destructive-click then confirm-cancelofferedofferedPassed
trace destructive-click then notification-withdrawnofferedconfirmation-invalidatedFailed
trace confirm-accept then command-successsucceededsucceededPassed
trace confirm-accept then command-failurefailedfailedPassed
trace confirm-accept then notification-withdrawnexecuting-withdrawnexecuting-withdrawnPassed
trace confirm-cancel then destructive-clickconfirmingconfirmingPassed
trace command-failure then retry-clickconfirming-retryconfirming-retryPassed
trace retry-click then retry-confirm-acceptexecutingexecutingPassed
trace retry-confirm-accept then command-successsucceededsucceededPassed
trace retry-confirm-accept then command-failurefailedfailedPassed
trace retry-confirm-accept then notification-withdrawnexecuting-withdrawnexecuting-withdrawnPassed
trace notification-withdrawn then late-confirm-acceptofferedwithdrawnFailed
domain state regression 1: submitted{'phase': 'offered', 'value': []}{'phase': 'offered', 'value': []}Passed
domain state regression 2: submitted{'phase': 'executing', 'value': [2]}{'phase': 'executing', 'value': [2]}Passed
domain state regression 3: submitted{'phase': 'offered', 'value': []}{'phase': 'offered', 'value': []}Passed
domain state regression 4: consented{'phase': 'offered', 'value': None}{'phase': 'offered', 'value': None}Passed
domain state regression 5: submitted{'phase': 'executing-withdrawn', 'value': [2]}{'phase': 'executing-withdrawn', 'value': [2]}Passed
domain state regression 6: submitted{'phase': 'withdrawn', 'value': []}{'phase': 'withdrawn', 'value': []}Passed
domain state regression 7: submitted{'phase': 'offered', 'value': []}{'phase': 'withdrawn', 'value': []}Failed

SHA-256 / 1a3cdff51b63c1aeac767dd281d516e7b545df661075d5c0123e11a40b820c85

HELD IN THE MEMBER ARCHIVE

The verified repair and its recorded checks are member-only.

This mechanism has 35 recorded checks per implementation. The open-access tier publishes the failure and the unsuccessful fix; the repaired source that passes every check, and the observations that prove it, are available to members.

Every case sharing this mechanism uses the same contract and the same repair, so this one record is held back for all of them.

Member access is invitation-based. Sign in with your invited account to inspect the repair.

Sign in to the archive ↗

Verification & scope

Stipulated single-notification state and policy model only. Event delivery and acknowledgements are explicit test inputs. No DOM, accessibility announcements, live timers, networking, actual rendering, or production-platform conformance is simulated. This reproducer isolates one failure mechanism. Results cover the supplied fixtures. Variants within a family share a test contract and should remain grouped when constructing evaluation splits. Related mechanisms with a shared evaluation_group must also remain together; these controlled models are not independent production incidents.

Observations recorded using Python 3.12.14 at 2026-09-29T14:42:40.084854+00:00.

Case digest / e8d558bd05ef1cb68ad99ff0236fd1e2f04790283e0c95a7b0005364cb0955c2