it seems here we manage to get the stopped notification and not the cancelfailed notification. Why ?

i think because we running in different thread and we wait

// wait for security analysis to actually run before trying to stop it
countDownLatch.await();

And because in this service we have a SecurityAnalysisProviderMock which make:

// creating a long completable future which is here to be canceled
return new CompletableFuture<SecurityAnalysisReport>().completeOnTimeout(REPORT, 3, TimeUnit.SECONDS);

then we have the time to cancel the computation and obtain a clean sa.stopped

Both of those code parts seems absent of other computation services (LF, SE,Dy, CC etc...)
Should add it