FA-9446 / Dependency resolution / Open access
Lockfile consistency report: Changed content at the same version is ignored · case 01
Changed content at the same version is ignored.
ROOT CAUSE
The implementation substitutes False for wanted[n][1] != locked[n][1], so changed content at the same version is ignored.
VERIFIED REPAIR
Compare content digests independently of versions.
Unsuccessful approach: The attempted repair substitutes wanted[n][1] == locked[n][1]. Fixture 4 still yields {'missing': [], 'extra': [], 'version': ['a'], 'digest': ['a'], 'source': []} instead of {'missing': [], 'extra': [], 'version': ['a'], 'digest': [], 'source': []}.
Case contract
Report missing names, extra names, version mismatches, digest mismatches, and source mismatches as separate sorted lists. Only compare names present on both sides.
Why this case matters
An offline model of lockfile consistency report, suitable for testing build and release tooling without external services.
1 / The failure
Exit 1"""Failure Map reference implementation. Python standard library only."""
import json
N = 1
observations = []
def solve(wanted, locked):
common = set(wanted) & set(locked)
return {
'missing': sorted(set(wanted) - set(locked)),
'extra': sorted(set(locked) - set(wanted)),
'version': sorted(n for n in common if wanted[n][0] != locked[n][0]),
'digest': sorted(n for n in common if False),
'source': sorted(n for n in common if wanted[n][2] != locked[n][2])
}
def check(label, actual, expected):
observations.append({"check": label, "actual": actual, "expected": expected, "passed": actual == expected})
check('fixture 1', solve({}, {}), {'missing': [], 'extra': [], 'version': [], 'digest': [], 'source': []})
check('fixture 2', solve({'a': ('1', 'd', 'public')}, {}), {'missing': ['a'], 'extra': [], 'version': [], 'digest': [], 'source': []})
check('fixture 3', solve({}, {'b': ('1', 'd', 'public')}), {'missing': [], 'extra': ['b'], 'version': [], 'digest': [], 'source': []})
check('fixture 4', solve({'a': ('1', 'd', 'public')}, {'a': ('2', 'd', 'public')}), {'missing': [], 'extra': [], 'version': ['a'], 'digest': [], 'source': []})
check('fixture 5', solve({'a': ('1', 'd', 'public')}, {'a': ('1', 'e', 'public')}), {'missing': [], 'extra': [], 'version': [], 'digest': ['a'], 'source': []})
check('fixture 6', solve({'a': ('1', 'd', 'public')}, {'a': ('1', 'd', 'private')}), {'missing': [], 'extra': [], 'version': [], 'digest': [], 'source': ['a']})
check('fixture 7', solve({'a': ('1', 'd', 'public')}, {'a': ('1', 'd', 'public')}), {'missing': [], 'extra': [], 'version': [], 'digest': [], 'source': []})
print(json.dumps({"observations": observations, "passed": all(x["passed"] for x in observations)}, ensure_ascii=False))
raise SystemExit(0 if all(x["passed"] for x in observations) else 1)
| Boundary fixture | Actual | Expected | Outcome |
|---|---|---|---|
| fixture 1 | {'digest': [], 'extra': [], 'missing': [], 'source': [], 'version': []} | {'digest': [], 'extra': [], 'missing': [], 'source': [], 'version': []} | Passed |
| fixture 2 | {'digest': [], 'extra': [], 'missing': ['a'], 'source': [], 'version': []} | {'digest': [], 'extra': [], 'missing': ['a'], 'source': [], 'version': []} | Passed |
| fixture 3 | {'digest': [], 'extra': ['b'], 'missing': [], 'source': [], 'version': []} | {'digest': [], 'extra': ['b'], 'missing': [], 'source': [], 'version': []} | Passed |
| fixture 4 | {'digest': [], 'extra': [], 'missing': [], 'source': [], 'version': ['a']} | {'digest': [], 'extra': [], 'missing': [], 'source': [], 'version': ['a']} | Passed |
| fixture 5 | {'digest': [], 'extra': [], 'missing': [], 'source': [], 'version': []} | {'digest': ['a'], 'extra': [], 'missing': [], 'source': [], 'version': []} | Failed |
| fixture 6 | {'digest': [], 'extra': [], 'missing': [], 'source': ['a'], 'version': []} | {'digest': [], 'extra': [], 'missing': [], 'source': ['a'], 'version': []} | Passed |
| fixture 7 | {'digest': [], 'extra': [], 'missing': [], 'source': [], 'version': []} | {'digest': [], 'extra': [], 'missing': [], 'source': [], 'version': []} | Passed |
SHA-256 / 86f2d5e5ed7d3ffd034464647e789a24c2d9037c9ca237201b1abdf4d93bef4d
2 / The unsuccessful fix
Exit 1"""Failure Map reference implementation. Python standard library only."""
import json
N = 1
observations = []
def solve(wanted, locked):
common = set(wanted) & set(locked)
return {
'missing': sorted(set(wanted) - set(locked)),
'extra': sorted(set(locked) - set(wanted)),
'version': sorted(n for n in common if wanted[n][0] != locked[n][0]),
'digest': sorted(n for n in common if wanted[n][1] == locked[n][1]),
'source': sorted(n for n in common if wanted[n][2] != locked[n][2])
}
def check(label, actual, expected):
observations.append({"check": label, "actual": actual, "expected": expected, "passed": actual == expected})
check('fixture 1', solve({}, {}), {'missing': [], 'extra': [], 'version': [], 'digest': [], 'source': []})
check('fixture 2', solve({'a': ('1', 'd', 'public')}, {}), {'missing': ['a'], 'extra': [], 'version': [], 'digest': [], 'source': []})
check('fixture 3', solve({}, {'b': ('1', 'd', 'public')}), {'missing': [], 'extra': ['b'], 'version': [], 'digest': [], 'source': []})
check('fixture 4', solve({'a': ('1', 'd', 'public')}, {'a': ('2', 'd', 'public')}), {'missing': [], 'extra': [], 'version': ['a'], 'digest': [], 'source': []})
check('fixture 5', solve({'a': ('1', 'd', 'public')}, {'a': ('1', 'e', 'public')}), {'missing': [], 'extra': [], 'version': [], 'digest': ['a'], 'source': []})
check('fixture 6', solve({'a': ('1', 'd', 'public')}, {'a': ('1', 'd', 'private')}), {'missing': [], 'extra': [], 'version': [], 'digest': [], 'source': ['a']})
check('fixture 7', solve({'a': ('1', 'd', 'public')}, {'a': ('1', 'd', 'public')}), {'missing': [], 'extra': [], 'version': [], 'digest': [], 'source': []})
print(json.dumps({"observations": observations, "passed": all(x["passed"] for x in observations)}, ensure_ascii=False))
raise SystemExit(0 if all(x["passed"] for x in observations) else 1)
| Boundary fixture | Actual | Expected | Outcome |
|---|---|---|---|
| fixture 1 | {'digest': [], 'extra': [], 'missing': [], 'source': [], 'version': []} | {'digest': [], 'extra': [], 'missing': [], 'source': [], 'version': []} | Passed |
| fixture 2 | {'digest': [], 'extra': [], 'missing': ['a'], 'source': [], 'version': []} | {'digest': [], 'extra': [], 'missing': ['a'], 'source': [], 'version': []} | Passed |
| fixture 3 | {'digest': [], 'extra': ['b'], 'missing': [], 'source': [], 'version': []} | {'digest': [], 'extra': ['b'], 'missing': [], 'source': [], 'version': []} | Passed |
| fixture 4 | {'digest': ['a'], 'extra': [], 'missing': [], 'source': [], 'version': ['a']} | {'digest': [], 'extra': [], 'missing': [], 'source': [], 'version': ['a']} | Failed |
| fixture 5 | {'digest': [], 'extra': [], 'missing': [], 'source': [], 'version': []} | {'digest': ['a'], 'extra': [], 'missing': [], 'source': [], 'version': []} | Failed |
| fixture 6 | {'digest': ['a'], 'extra': [], 'missing': [], 'source': ['a'], 'version': []} | {'digest': [], 'extra': [], 'missing': [], 'source': ['a'], 'version': []} | Failed |
| fixture 7 | {'digest': ['a'], 'extra': [], 'missing': [], 'source': [], 'version': []} | {'digest': [], 'extra': [], 'missing': [], 'source': [], 'version': []} | Failed |
SHA-256 / a517c531fe06297a294ed1130f3ea9872810f5631edfead1a3e20cd7617afdb7
3 / The verified repair
Exit 0"""Failure Map reference implementation. Python standard library only."""
import json
N = 1
observations = []
def solve(wanted, locked):
common = set(wanted) & set(locked)
return {
'missing': sorted(set(wanted) - set(locked)),
'extra': sorted(set(locked) - set(wanted)),
'version': sorted(n for n in common if wanted[n][0] != locked[n][0]),
'digest': sorted(n for n in common if wanted[n][1] != locked[n][1]),
'source': sorted(n for n in common if wanted[n][2] != locked[n][2])
}
def check(label, actual, expected):
observations.append({"check": label, "actual": actual, "expected": expected, "passed": actual == expected})
check('fixture 1', solve({}, {}), {'missing': [], 'extra': [], 'version': [], 'digest': [], 'source': []})
check('fixture 2', solve({'a': ('1', 'd', 'public')}, {}), {'missing': ['a'], 'extra': [], 'version': [], 'digest': [], 'source': []})
check('fixture 3', solve({}, {'b': ('1', 'd', 'public')}), {'missing': [], 'extra': ['b'], 'version': [], 'digest': [], 'source': []})
check('fixture 4', solve({'a': ('1', 'd', 'public')}, {'a': ('2', 'd', 'public')}), {'missing': [], 'extra': [], 'version': ['a'], 'digest': [], 'source': []})
check('fixture 5', solve({'a': ('1', 'd', 'public')}, {'a': ('1', 'e', 'public')}), {'missing': [], 'extra': [], 'version': [], 'digest': ['a'], 'source': []})
check('fixture 6', solve({'a': ('1', 'd', 'public')}, {'a': ('1', 'd', 'private')}), {'missing': [], 'extra': [], 'version': [], 'digest': [], 'source': ['a']})
check('fixture 7', solve({'a': ('1', 'd', 'public')}, {'a': ('1', 'd', 'public')}), {'missing': [], 'extra': [], 'version': [], 'digest': [], 'source': []})
print(json.dumps({"observations": observations, "passed": all(x["passed"] for x in observations)}, ensure_ascii=False))
raise SystemExit(0 if all(x["passed"] for x in observations) else 1)
| Boundary fixture | Actual | Expected | Outcome |
|---|---|---|---|
| fixture 1 | {'digest': [], 'extra': [], 'missing': [], 'source': [], 'version': []} | {'digest': [], 'extra': [], 'missing': [], 'source': [], 'version': []} | Passed |
| fixture 2 | {'digest': [], 'extra': [], 'missing': ['a'], 'source': [], 'version': []} | {'digest': [], 'extra': [], 'missing': ['a'], 'source': [], 'version': []} | Passed |
| fixture 3 | {'digest': [], 'extra': ['b'], 'missing': [], 'source': [], 'version': []} | {'digest': [], 'extra': ['b'], 'missing': [], 'source': [], 'version': []} | Passed |
| fixture 4 | {'digest': [], 'extra': [], 'missing': [], 'source': [], 'version': ['a']} | {'digest': [], 'extra': [], 'missing': [], 'source': [], 'version': ['a']} | Passed |
| fixture 5 | {'digest': ['a'], 'extra': [], 'missing': [], 'source': [], 'version': []} | {'digest': ['a'], 'extra': [], 'missing': [], 'source': [], 'version': []} | Passed |
| fixture 6 | {'digest': [], 'extra': [], 'missing': [], 'source': ['a'], 'version': []} | {'digest': [], 'extra': [], 'missing': [], 'source': ['a'], 'version': []} | Passed |
| fixture 7 | {'digest': [], 'extra': [], 'missing': [], 'source': [], 'version': []} | {'digest': [], 'extra': [], 'missing': [], 'source': [], 'version': []} | Passed |
SHA-256 / 6d068b8e742d9824d4234224771f4bbf5faf8b1df4b67e08124dfe59331b4905
Verification & scope
This reproducer isolates one failure mechanism. Results cover the supplied fixtures. Variants within a family share a test contract and should remain grouped when constructing evaluation splits. Related mechanisms with a shared evaluation_group must also remain together; these controlled models are not independent production incidents.
Observations recorded using Python 3.12.14 at 2026-09-29T14:38:30.041564+00:00.
Case digest / 959afefe64f75f4b64c0c6771b0b2b12bb28b6e28f8fb937f99fb3aa6025bd21