One thing that is interesting about this that Matthias didn't mention is that the problem only repros when running against MyFaces - ie. same test case works okay when using -Djsf=ri. I haven't had time to investigate yet, but will try to do so if Max or Andrew (who are actively working on the Ajax branch) don't beat me to it.
Andy