FA-74006 / Feature flag rollout bucketing / Open access
Scheduled rollout ramp: Negative step percentages pass through · case 01
A mistyped -20 percent step reports a negative rollout that downstream gates treat inconsistently.
ROOT CAUSE
Only the upper clamp is applied to step percentages.
VERIFIED REPAIR
Clamp each numeric percent into [0, 100].
Unsuccessful approach: Clamping only the lower bound lets 150 percent through.
Case contract
steps is a possibly unsorted list of [epoch second, percent or None]. Order steps by time, breaking ties by list position (later entries apply later). Every step with time <= now is active in that order; a None percent is a hold that keeps the previous value; numeric percents are clamped to [0, 100]. Before the first step the percentage is 0. Return [percent, original list index of the last active step or -1].
Why this case matters
Scheduled ramps move production traffic unattended, so the percentage at any instant must be exact.
1 / The failure
Exit 1"""Failure Map reference implementation. Python standard library only."""
import json
N = 1
observations = []
def solve(steps, now):
order = sorted(range(len(steps)), key=lambda i: (steps[i][0], i))
current = 0
active = -1
for i in order:
at, pct = steps[i]
if at > now:
break
active = i
if pct is not None:
current = min(pct, 100)
return [current, active]
def check(label, actual, expected):
observations.append({"check": label, "actual": actual, "expected": expected, "passed": actual == expected})
fixtures = [[('step scheduled exactly now is active', [[[0, 5], [60, 25]], 60], [25, 1]),
('unsorted schedule is ordered by time', [[[60, 50], [0, 10], [30, 25]], 45], [25, 2]),
('later entry wins a timestamp tie', [[[0, 5], [30, 50], [30, 20]], 40], [20, 2]),
('hold step keeps previous percentage', [[[0, 25], [30, None]], 40], [25, 1]),
('explicit rollback to zero percent', [[[0, 25], [30, 0]], 40], [0, 1]),
('over-hundred percent is clamped', [[[0, 150]], 10], [100, 0]),
('negative percent is clamped to zero', [[[0, 10], [5, -20]], 10], [0, 1]),
('ramp schedule sample 1', [[[45, 0], [45, 5], [20, None], [45, 25], [60, -10], [45, None]], 45], [25, 5])],
[('unsorted schedule is ordered by time', [[[60, 50], [0, 10], [30, 25]], 45], [25, 2]),
('later entry wins a timestamp tie', [[[0, 5], [30, 50], [30, 20]], 40], [20, 2]),
('hold step keeps previous percentage', [[[0, 25], [30, None]], 40], [25, 1]),
('explicit rollback to zero percent', [[[0, 25], [30, 0]], 40], [0, 1]),
('over-hundred percent is clamped', [[[0, 150]], 10], [100, 0]),
('negative percent is clamped to zero', [[[0, 10], [5, -20]], 10], [0, 1]),
('ramp schedule sample 28', [[[60, 120], [20, 120], [45, 100], [10, 25], [0, -10]], 0], [0, 4]),
('ramp schedule sample 30', [[[20, 120], [10, 120], [0, 50], [20, None]], 20], [100, 3])],
[('later entry wins a timestamp tie', [[[0, 5], [30, 50], [30, 20]], 40], [20, 2]),
('hold step keeps previous percentage', [[[0, 25], [30, None]], 40], [25, 1]),
('explicit rollback to zero percent', [[[0, 25], [30, 0]], 40], [0, 1]),
('over-hundred percent is clamped', [[[0, 150]], 10], [100, 0]),
('negative percent is clamped to zero', [[[0, 10], [5, -20]], 10], [0, 1]),
('ramp schedule sample 11', [[[0, 5]], -5], [0, -1]),
('ramp schedule sample 48', [[[0, -10], [60, None], [20, -10]], 60], [0, 1]),
('ramp schedule sample 58', [[[30, 25], [30, 120], [10, 120], [30, None]], 30], [100, 3])],
[('hold step keeps previous percentage', [[[0, 25], [30, None]], 40], [25, 1]),
('explicit rollback to zero percent', [[[0, 25], [30, 0]], 40], [0, 1]),
('over-hundred percent is clamped', [[[0, 150]], 10], [100, 0]),
('negative percent is clamped to zero', [[[0, 10], [5, -20]], 10], [0, 1]),
('before first step is zero', [[[10, 50]], 5], [0, -1]),
('ramp schedule sample 8', [[[20, -10]], 30], [0, 0]),
('ramp schedule sample 16', [[[60, 120]], 60], [100, 0]),
('ramp schedule sample 17', [[[45, 5], [20, 120], [20, 50], [10, 100], [45, 75]], 20], [50, 2])],
[('explicit rollback to zero percent', [[[0, 25], [30, 0]], 40], [0, 1]),
('over-hundred percent is clamped', [[[0, 150]], 10], [100, 0]),
('negative percent is clamped to zero', [[[0, 10], [5, -20]], 10], [0, 1]),
('before first step is zero', [[[10, 50]], 5], [0, -1]),
('active index refers to original position', [[[20, 30], [10, 10]], 15], [10, 1]),
('ramp schedule sample 21', [[], 0], [0, -1]),
('ramp schedule sample 32', [[[60, 0], [0, -10], [20, 0]], 10], [0, 1]),
('ramp schedule sample 39', [[[0, 120], [30, None], [30, None], [20, -10]], 0], [100, 0])]]
for label, args, expected in fixtures[N - 1]:
check(label, solve(*args), expected)
print(json.dumps({"observations": observations, "passed": all(x["passed"] for x in observations)}, ensure_ascii=False))
raise SystemExit(0 if all(x["passed"] for x in observations) else 1)
| Boundary fixture | Actual | Expected | Outcome |
|---|---|---|---|
| step scheduled exactly now is active | [25, 1] | [25, 1] | Passed |
| unsorted schedule is ordered by time | [25, 2] | [25, 2] | Passed |
| later entry wins a timestamp tie | [20, 2] | [20, 2] | Passed |
| hold step keeps previous percentage | [25, 1] | [25, 1] | Passed |
| explicit rollback to zero percent | [0, 1] | [0, 1] | Passed |
| over-hundred percent is clamped | [100, 0] | [100, 0] | Passed |
| negative percent is clamped to zero | [-20, 1] | [0, 1] | Failed |
| ramp schedule sample 1 | [25, 5] | [25, 5] | Passed |
SHA-256 / 582dd01b45be8249ccbd6b0c8b3df74425719d81b4291dbdf653649c691cedba
2 / The unsuccessful fix
Exit 1"""Failure Map reference implementation. Python standard library only."""
import json
N = 1
observations = []
def solve(steps, now):
order = sorted(range(len(steps)), key=lambda i: (steps[i][0], i))
current = 0
active = -1
for i in order:
at, pct = steps[i]
if at > now:
break
active = i
if pct is not None:
current = max(pct, 0)
return [current, active]
def check(label, actual, expected):
observations.append({"check": label, "actual": actual, "expected": expected, "passed": actual == expected})
fixtures = [[('step scheduled exactly now is active', [[[0, 5], [60, 25]], 60], [25, 1]),
('unsorted schedule is ordered by time', [[[60, 50], [0, 10], [30, 25]], 45], [25, 2]),
('later entry wins a timestamp tie', [[[0, 5], [30, 50], [30, 20]], 40], [20, 2]),
('hold step keeps previous percentage', [[[0, 25], [30, None]], 40], [25, 1]),
('explicit rollback to zero percent', [[[0, 25], [30, 0]], 40], [0, 1]),
('over-hundred percent is clamped', [[[0, 150]], 10], [100, 0]),
('negative percent is clamped to zero', [[[0, 10], [5, -20]], 10], [0, 1]),
('ramp schedule sample 1', [[[45, 0], [45, 5], [20, None], [45, 25], [60, -10], [45, None]], 45], [25, 5])],
[('unsorted schedule is ordered by time', [[[60, 50], [0, 10], [30, 25]], 45], [25, 2]),
('later entry wins a timestamp tie', [[[0, 5], [30, 50], [30, 20]], 40], [20, 2]),
('hold step keeps previous percentage', [[[0, 25], [30, None]], 40], [25, 1]),
('explicit rollback to zero percent', [[[0, 25], [30, 0]], 40], [0, 1]),
('over-hundred percent is clamped', [[[0, 150]], 10], [100, 0]),
('negative percent is clamped to zero', [[[0, 10], [5, -20]], 10], [0, 1]),
('ramp schedule sample 28', [[[60, 120], [20, 120], [45, 100], [10, 25], [0, -10]], 0], [0, 4]),
('ramp schedule sample 30', [[[20, 120], [10, 120], [0, 50], [20, None]], 20], [100, 3])],
[('later entry wins a timestamp tie', [[[0, 5], [30, 50], [30, 20]], 40], [20, 2]),
('hold step keeps previous percentage', [[[0, 25], [30, None]], 40], [25, 1]),
('explicit rollback to zero percent', [[[0, 25], [30, 0]], 40], [0, 1]),
('over-hundred percent is clamped', [[[0, 150]], 10], [100, 0]),
('negative percent is clamped to zero', [[[0, 10], [5, -20]], 10], [0, 1]),
('ramp schedule sample 11', [[[0, 5]], -5], [0, -1]),
('ramp schedule sample 48', [[[0, -10], [60, None], [20, -10]], 60], [0, 1]),
('ramp schedule sample 58', [[[30, 25], [30, 120], [10, 120], [30, None]], 30], [100, 3])],
[('hold step keeps previous percentage', [[[0, 25], [30, None]], 40], [25, 1]),
('explicit rollback to zero percent', [[[0, 25], [30, 0]], 40], [0, 1]),
('over-hundred percent is clamped', [[[0, 150]], 10], [100, 0]),
('negative percent is clamped to zero', [[[0, 10], [5, -20]], 10], [0, 1]),
('before first step is zero', [[[10, 50]], 5], [0, -1]),
('ramp schedule sample 8', [[[20, -10]], 30], [0, 0]),
('ramp schedule sample 16', [[[60, 120]], 60], [100, 0]),
('ramp schedule sample 17', [[[45, 5], [20, 120], [20, 50], [10, 100], [45, 75]], 20], [50, 2])],
[('explicit rollback to zero percent', [[[0, 25], [30, 0]], 40], [0, 1]),
('over-hundred percent is clamped', [[[0, 150]], 10], [100, 0]),
('negative percent is clamped to zero', [[[0, 10], [5, -20]], 10], [0, 1]),
('before first step is zero', [[[10, 50]], 5], [0, -1]),
('active index refers to original position', [[[20, 30], [10, 10]], 15], [10, 1]),
('ramp schedule sample 21', [[], 0], [0, -1]),
('ramp schedule sample 32', [[[60, 0], [0, -10], [20, 0]], 10], [0, 1]),
('ramp schedule sample 39', [[[0, 120], [30, None], [30, None], [20, -10]], 0], [100, 0])]]
for label, args, expected in fixtures[N - 1]:
check(label, solve(*args), expected)
print(json.dumps({"observations": observations, "passed": all(x["passed"] for x in observations)}, ensure_ascii=False))
raise SystemExit(0 if all(x["passed"] for x in observations) else 1)
| Boundary fixture | Actual | Expected | Outcome |
|---|---|---|---|
| step scheduled exactly now is active | [25, 1] | [25, 1] | Passed |
| unsorted schedule is ordered by time | [25, 2] | [25, 2] | Passed |
| later entry wins a timestamp tie | [20, 2] | [20, 2] | Passed |
| hold step keeps previous percentage | [25, 1] | [25, 1] | Passed |
| explicit rollback to zero percent | [0, 1] | [0, 1] | Passed |
| over-hundred percent is clamped | [150, 0] | [100, 0] | Failed |
| negative percent is clamped to zero | [0, 1] | [0, 1] | Passed |
| ramp schedule sample 1 | [25, 5] | [25, 5] | Passed |
SHA-256 / 36b56c0ea0ab345108cd845df3ae44b75a65b3dce91417540469c0aaf2cb4d38
3 / The verified repair
Exit 0"""Failure Map reference implementation. Python standard library only."""
import json
N = 1
observations = []
def solve(steps, now):
order = sorted(range(len(steps)), key=lambda i: (steps[i][0], i))
current = 0
active = -1
for i in order:
at, pct = steps[i]
if at > now:
break
active = i
if pct is not None:
current = min(max(pct, 0), 100)
return [current, active]
def check(label, actual, expected):
observations.append({"check": label, "actual": actual, "expected": expected, "passed": actual == expected})
fixtures = [[('step scheduled exactly now is active', [[[0, 5], [60, 25]], 60], [25, 1]),
('unsorted schedule is ordered by time', [[[60, 50], [0, 10], [30, 25]], 45], [25, 2]),
('later entry wins a timestamp tie', [[[0, 5], [30, 50], [30, 20]], 40], [20, 2]),
('hold step keeps previous percentage', [[[0, 25], [30, None]], 40], [25, 1]),
('explicit rollback to zero percent', [[[0, 25], [30, 0]], 40], [0, 1]),
('over-hundred percent is clamped', [[[0, 150]], 10], [100, 0]),
('negative percent is clamped to zero', [[[0, 10], [5, -20]], 10], [0, 1]),
('ramp schedule sample 1', [[[45, 0], [45, 5], [20, None], [45, 25], [60, -10], [45, None]], 45], [25, 5])],
[('unsorted schedule is ordered by time', [[[60, 50], [0, 10], [30, 25]], 45], [25, 2]),
('later entry wins a timestamp tie', [[[0, 5], [30, 50], [30, 20]], 40], [20, 2]),
('hold step keeps previous percentage', [[[0, 25], [30, None]], 40], [25, 1]),
('explicit rollback to zero percent', [[[0, 25], [30, 0]], 40], [0, 1]),
('over-hundred percent is clamped', [[[0, 150]], 10], [100, 0]),
('negative percent is clamped to zero', [[[0, 10], [5, -20]], 10], [0, 1]),
('ramp schedule sample 28', [[[60, 120], [20, 120], [45, 100], [10, 25], [0, -10]], 0], [0, 4]),
('ramp schedule sample 30', [[[20, 120], [10, 120], [0, 50], [20, None]], 20], [100, 3])],
[('later entry wins a timestamp tie', [[[0, 5], [30, 50], [30, 20]], 40], [20, 2]),
('hold step keeps previous percentage', [[[0, 25], [30, None]], 40], [25, 1]),
('explicit rollback to zero percent', [[[0, 25], [30, 0]], 40], [0, 1]),
('over-hundred percent is clamped', [[[0, 150]], 10], [100, 0]),
('negative percent is clamped to zero', [[[0, 10], [5, -20]], 10], [0, 1]),
('ramp schedule sample 11', [[[0, 5]], -5], [0, -1]),
('ramp schedule sample 48', [[[0, -10], [60, None], [20, -10]], 60], [0, 1]),
('ramp schedule sample 58', [[[30, 25], [30, 120], [10, 120], [30, None]], 30], [100, 3])],
[('hold step keeps previous percentage', [[[0, 25], [30, None]], 40], [25, 1]),
('explicit rollback to zero percent', [[[0, 25], [30, 0]], 40], [0, 1]),
('over-hundred percent is clamped', [[[0, 150]], 10], [100, 0]),
('negative percent is clamped to zero', [[[0, 10], [5, -20]], 10], [0, 1]),
('before first step is zero', [[[10, 50]], 5], [0, -1]),
('ramp schedule sample 8', [[[20, -10]], 30], [0, 0]),
('ramp schedule sample 16', [[[60, 120]], 60], [100, 0]),
('ramp schedule sample 17', [[[45, 5], [20, 120], [20, 50], [10, 100], [45, 75]], 20], [50, 2])],
[('explicit rollback to zero percent', [[[0, 25], [30, 0]], 40], [0, 1]),
('over-hundred percent is clamped', [[[0, 150]], 10], [100, 0]),
('negative percent is clamped to zero', [[[0, 10], [5, -20]], 10], [0, 1]),
('before first step is zero', [[[10, 50]], 5], [0, -1]),
('active index refers to original position', [[[20, 30], [10, 10]], 15], [10, 1]),
('ramp schedule sample 21', [[], 0], [0, -1]),
('ramp schedule sample 32', [[[60, 0], [0, -10], [20, 0]], 10], [0, 1]),
('ramp schedule sample 39', [[[0, 120], [30, None], [30, None], [20, -10]], 0], [100, 0])]]
for label, args, expected in fixtures[N - 1]:
check(label, solve(*args), expected)
print(json.dumps({"observations": observations, "passed": all(x["passed"] for x in observations)}, ensure_ascii=False))
raise SystemExit(0 if all(x["passed"] for x in observations) else 1)
| Boundary fixture | Actual | Expected | Outcome |
|---|---|---|---|
| step scheduled exactly now is active | [25, 1] | [25, 1] | Passed |
| unsorted schedule is ordered by time | [25, 2] | [25, 2] | Passed |
| later entry wins a timestamp tie | [20, 2] | [20, 2] | Passed |
| hold step keeps previous percentage | [25, 1] | [25, 1] | Passed |
| explicit rollback to zero percent | [0, 1] | [0, 1] | Passed |
| over-hundred percent is clamped | [100, 0] | [100, 0] | Passed |
| negative percent is clamped to zero | [0, 1] | [0, 1] | Passed |
| ramp schedule sample 1 | [25, 5] | [25, 5] | Passed |
SHA-256 / 8963c8a232d4561a02c07aaae21a3ce9350f327c8a48738412e00b99ab27f4a3
Verification & scope
A deterministic toy flag-evaluation model with a stipulated contract; it does not reproduce any vendor SDK byte for byte. This reproducer isolates one failure mechanism. Results cover the supplied fixtures. Variants within a family share a test contract and should remain grouped when constructing evaluation splits. Related mechanisms with a shared evaluation_group must also remain together; these controlled models are not independent production incidents.
Observations recorded using Python 3.12.14 at 2026-09-29T14:48:52.624187+00:00.
Case digest / 8913df59dad792781fd8371b58d84d53cbeb92a5bd501200fb4d3c959e75883a