GET /seller/listingsVerified root cause · seed invariant for the search
ORIGINALRoot cause → sibling paths
One verified bug should teach the repository something.
Generalize the broken invariant carefully, search related paths, refute lookalikes, and compile regression coverage.variant-analysis / SHX-AUTHZ-L02-DEMOVerified root cause
ConfirmedSeller identity omitted from repository ownership constraint
Original finding: GET /seller/listings · invariant: caller identity must reach the repository predicate
GET /seller/ordersSame ownership helper absent · same invariant, different route
VARIANTPOST /seller/exportSibling repository query crosses the same boundary
VARIANTGET /seller/filesCentral ownership guard present with recorded evidence
REFUTEDWS seller:inventoryReachability evidence unknown · stays open, never assumed safe
BLOCKED01Match the originalProve the query pattern and ownership omission are represented precisely.
02Generalize one dimensionKeep the security invariant stable while varying route, repository, or transport.
03Refute candidatesCompensating controls and unreachable paths reject false similarity.
04Compile regressionTurn the verified class into durable tests or static rules.