From 7cfce18fcf245a2acd8071d32c85ad5f064172e1 Mon Sep 17 00:00:00 2001
From: Heimdall <heimdall@minds.heimdall.gamecult.org>
Date: Sun, 8 Nov 2026 21:28:41 +0000
Subject: [PATCH] Pin the vote page's two unpinned busy-refusal branches

A signed-in retract on a full account table must say busy with no sign-in offer (the
retract door passes its voter to Throttled), and a spent cast budget must say only
"too fast", for anonymous and signed-in voters alike. Both mutants survived Soul s4.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
---
 .../ConceptVoteRateLimitTests.cs              | 50 +++++++++++++++++++
 1 file changed, 50 insertions(+)

diff --git a/tests/Bifrost.Web.Tests/ConceptVoteRateLimitTests.cs b/tests/Bifrost.Web.Tests/ConceptVoteRateLimitTests.cs
index 04cdff4..d8e96fb 100644
--- a/tests/Bifrost.Web.Tests/ConceptVoteRateLimitTests.cs
+++ b/tests/Bifrost.Web.Tests/ConceptVoteRateLimitTests.cs
@@ -411,6 +411,56 @@ public sealed class ConceptVoteRateLimitTests : IClassFixture<ConceptVoteRateLim
         Assert.DoesNotContain("sign in", body, StringComparison.OrdinalIgnoreCase);
     }
 
+    [Fact]
+    public async Task A_signed_in_retract_on_a_full_account_table_is_busy_without_offering_sign_in()
+    {
+        var factory = Capped(4);
+        var collection = await NewSubject();
+        for (var i = 0; i < 4; i++)
+        {
+            var spender = new Client(factory, $"203.0.113.{170 + i}") { Account = ($"73{i:00}", $"retract-spent-{i}") };
+            for (var cast = 0; cast < 3; cast++)
+            {
+                using var ok = await spender.Post(collection, "Up");
+                Assert.Equal(HttpStatusCode.Redirect, ok.StatusCode);
+            }
+        }
+
+        using var fresh = await new Client(factory, "203.0.113.180") { Account = ("7399", "fresh-retractor") }
+            .Post(collection, "Retract");
+
+        Assert.Equal(HttpStatusCode.TooManyRequests, fresh.StatusCode);
+        var body = await fresh.Content.ReadAsStringAsync();
+        Assert.Contains("busy", body);
+        Assert.DoesNotContain("sign in", body, StringComparison.OrdinalIgnoreCase);
+    }
+
+    [Theory]
+    [InlineData(false)]
+    [InlineData(true)]
+    public async Task A_spent_cast_budget_says_only_that_voting_is_too_fast_never_offering_sign_in(bool signedIn)
+    {
+        var factory = Capped(1000);
+        var collection = await NewSubject();
+        var voter = new Client(factory, "203.0.113.190")
+        {
+            Account = signedIn ? ("7400", "fast-signed-in") : null
+        };
+        for (var cast = 0; cast < 3; cast++)
+        {
+            using var ok = await voter.Post(collection, "Up");
+            Assert.Equal(HttpStatusCode.Redirect, ok.StatusCode);
+        }
+
+        using var spent = await voter.Post(collection, "Up");
+
+        Assert.Equal(HttpStatusCode.TooManyRequests, spent.StatusCode);
+        var body = await spent.Content.ReadAsStringAsync();
+        Assert.Contains("too fast", body);
+        Assert.DoesNotContain("sign in", body, StringComparison.OrdinalIgnoreCase);
+        Assert.DoesNotContain("busy", body);
+    }
+
     [Fact]
     public async Task Posts_to_a_missing_subject_spend_no_budget_and_mint_no_device()
     {
-- 
2.47.3