@openwop/openwop-conformance 1.153.0 → 1.154.0

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # `@openwop/openwop-conformance` Changelog
 
+## [1.154.0] — 2026-09-02 — the tarball carries the suite and nothing else; the vendored contract is digest-checked (v2 charter Phase 1)
+
+No new scenario file. Three packed changes:
+
+- **Corpus-coherence scenarios and suite self-tests leave the package.** The 28 `SPEC_COHERENCE_SCENARIOS` (they read `spec/v1`, assert nothing about a host, and reported `blocked`/`inapplicable` in every host bundle) and every `src/lib/*.test.ts` are excluded via `package.json` `files` negations; `scripts/check-npm-pack-contents.sh` fails if either returns. The list is published as `conformance/spec-coherence-scenarios.json`. The published layout now collects 1,430 tests across 324 files; the layout gate's floors are re-measured (1,350 / 300).
+- **`schemas/CORPUS-STAMP.json` carries per-file SHA-256 digests** of every vendored `api/` and `schemas/` file, written at `prepack`. `src/lib/corpus-stamp.ts` verifies them at global setup in the published layout and **refuses to run on a mismatch** (missing, altered, or extra vendored files are each named); repo layout and pre-1.154.0 stamps report `not checked`, never a silent pass. This removes the mechanism behind the 1.138.1 defect one layer down: a package can no longer identify its contract by a commit hash it cannot check.
+- **`--offline` is a declared property:** exactly `fixtures-valid.test.ts` (the only server-free scenario that ships and runs in the published layout). `spec-corpus-validity.test.ts` left the set with the coherence scenarios. Documented in README §"--offline".
+
 ## [1.153.0] — 2026-09-02 — per-`it` requirement rows and the requirement registry (RFC 0148 §A / G3; v2 charter Phase 1)
 
 No new scenario file. Three packed changes, all additive to bundle v2:

package/README.md

@@ -92,6 +92,15 @@ Exit code is non-zero on any failed assertion. `--certify` distinguishes: `0`
 
 ---
 
+
+### `--offline` — a declared set
+
+`openwop-conformance --offline` runs exactly **`src/scenarios/fixtures-valid.test.ts`**: the server-free scenario that ships in the tarball and runs in the published layout. That is the whole set, by declaration (suite 1.154.0), not by whatever happens to skip cleanly. `spec-corpus-validity.test.ts` and the other 27 corpus-coherence scenarios (`spec-coherence-scenarios.json`) read `spec/v1`, assert nothing about a host, and are not packed; run them from a spec checkout with `npm run openwop:check`.
+
+### The vendored contract is digest-checked
+
+`schemas/CORPUS-STAMP.json` carries `suiteVersion`, `corpusCommit`, and — from 1.154.0 — `files`: a SHA-256 for every vendored `api/` and `schemas/` file. At global setup in the published layout the suite verifies the map and **refuses to run on a mismatch**, naming each missing, altered, or extra file. A hand-patched vendored schema therefore cannot produce evidence. In a spec checkout nothing is vendored and the log line says `corpus stamp not checked`; an older tarball without `files` says so too. Three outcomes, never folded.
+
 ## What's Covered
 
 The current suite has 468 scenario files under `src/scenarios/`.

package/dist/cli.js

@@ -161,7 +161,7 @@ Required (unless --offline):
   --api-key <key>       Bearer-style API key (or set OPENWOP_API_KEY env var)
 
 Filtering:
-  --offline             Run only the server-free subset (fixtures + spec corpus)
+  --offline             Run only the declared server-free subset (fixtures-valid; see README §"--offline")
   --filter <pattern>    Pass through to vitest --testNamePattern
 
 Implementation labels (cosmetic — surface in failure messages):
@@ -572,7 +572,12 @@ async function main() {
     // the conformance package is used as a workspace member.
     const vitestArgs = ['run', '--config', resolvePath(conformanceRoot, 'vitest.config.ts')];
     if (args.offline) {
-        vitestArgs.push('src/scenarios/fixtures-valid.test.ts', 'src/scenarios/spec-corpus-validity.test.ts');
+        // Suite 1.154.0: the offline set is a DECLARED property of the package —
+        // exactly the server-free scenarios that ship in the tarball and run in
+        // the published layout. `spec-corpus-validity.test.ts` left the set: it is
+        // a corpus-coherence scenario (reads spec/v1, asserts nothing about a host)
+        // and is no longer packed. See conformance/README.md §"--offline".
+        vitestArgs.push('src/scenarios/fixtures-valid.test.ts');
     }
     if (args.filter) {
         vitestArgs.push('--testNamePattern', args.filter);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openwop/openwop-conformance",
-  "version": "1.153.0",
+  "version": "1.154.0",
   "description": "Production-ready black-box conformance suite for OpenWOP v1.0 compliant servers.",
   "repository": {
     "type": "git",
@@ -26,7 +26,36 @@
     "vitest.config.ts",
     "README.md",
     "CHANGELOG.md",
-    "LICENSE"
+    "LICENSE",
+    "!src/lib/*.test.ts",
+    "!src/scenarios/artifact-schema-compile-bounded.test.ts",
+    "!src/scenarios/artifact-type-legacy-ids.test.ts",
+    "!src/scenarios/capability-example-root-layout.test.ts",
+    "!src/scenarios/certification-floor-enforcement.test.ts",
+    "!src/scenarios/chain-subchain-unsupported-refused.test.ts",
+    "!src/scenarios/compensation-profile.test.ts",
+    "!src/scenarios/core-manifest-and-extension-registry.test.ts",
+    "!src/scenarios/discovery-canonical-family-no-shadow.test.ts",
+    "!src/scenarios/edge-condition-truthy-falsy.test.ts",
+    "!src/scenarios/effect-identity-composition.test.ts",
+    "!src/scenarios/effect-identity-cross-scope.test.ts",
+    "!src/scenarios/error-envelope-canonical-shape.test.ts",
+    "!src/scenarios/form-content-packs.test.ts",
+    "!src/scenarios/multi-region-effect-vocabulary.test.ts",
+    "!src/scenarios/normative-example-extraction.test.ts",
+    "!src/scenarios/openapi-asyncapi-sdk-parity.test.ts",
+    "!src/scenarios/pack-manifest-extensions.test.ts",
+    "!src/scenarios/protocol-version-grammar.test.ts",
+    "!src/scenarios/registry-declarative-kinds.test.ts",
+    "!src/scenarios/rfc-0147-self-audit.test.ts",
+    "!src/scenarios/rfc-lifecycle-coherence.test.ts",
+    "!src/scenarios/semantic-digest-v2.test.ts",
+    "!src/scenarios/spec-corpus-validity.test.ts",
+    "!src/scenarios/spec-section-citations.test.ts",
+    "!src/scenarios/tool-result-trust-monotone.test.ts",
+    "!src/scenarios/versioned-composition-profiles.test.ts",
+    "!src/scenarios/workflow-chain-internal-flag.test.ts",
+    "!src/scenarios/workload-identity-profile.test.ts"
   ],
   "scripts": {
     "test": "vitest run",

package/schemas/CORPUS-STAMP.json

@@ -1,5 +1,101 @@
 {
-  "_comment": "Provenance of this vendored schemas/ copy. See conformance/README.md \u00a7\"Resolving the contract\". Compare against the stamp in your installed @openwop/openwop-conformance to detect a stale hand-copied contract.",
-  "suiteVersion": "1.153.0",
-  "corpusCommit": "6c84ef16e2cae24b7e7b8d8bf09b9f46634bf9a5"
+  "_comment": "Provenance of this vendored schemas/ copy. See conformance/README.md §\"Resolving the contract\". Compare against the stamp in your installed @openwop/openwop-conformance to detect a stale hand-copied contract.",
+  "suiteVersion": "1.154.0",
+  "corpusCommit": "07f4573cca4a742445d1078773f422d28f986ee5",
+  "files": {
+    "api/.redocly.lint-ignore.yaml": "bf5a8350b88a72fa43f59605ed8d903ed24b6cfccda5e45509c9f6ed9ee4e712",
+    "api/asyncapi.yaml": "d5ecb9ee6114582be3b1f662c84bfac9ae96dae7bacb853e461168f70a8e1c7d",
+    "api/grpc/openwop.proto": "c3e72bb17cba514ee98feb6434e6c9b6ea6795bfd086489ec69fd882dd1ad977",
+    "api/openapi.yaml": "105e7bc27d216eb29fbb526b3548b5545711ec2a18c004bce20b08f5af38b750",
+    "api/redocly.yaml": "9f2374405b9ca58994ae076ada9fbe4dfb8265b77e4bf65331d1493192c0bd3a",
+    "schemas/README.md": "d9624e98ba3534b27fe4823227e8c2ac8df3ffd4bc4f57b4a023c91f5addefd6",
+    "schemas/a2a-task-state.schema.json": "c9365918f993f943b4b619d42551eb066a1ed33a08d895d51b395432a5b1f1bc",
+    "schemas/a2ui-surface-delta-frame.schema.json": "970d434e4fdcb925de64aaace91eb83bfbcfd8f76757a9ce9f339eda5fb3f4e8",
+    "schemas/agent-deployment-transition.schema.json": "1ac987fed0f380fa5b4e9a40e8e13316e5ae42d03a0ff42db4be6273e1bfe9f4",
+    "schemas/agent-deployment.schema.json": "0a71f0c7ab8cdf4fcac15e8652514f926cd84dfc7db32c47c9f3f3c9bd04f512",
+    "schemas/agent-eval-suite.schema.json": "d1aea50a48ddfe5ba8e25e9ddcc2c6e28eb1d953ef81b103518999a50e0967f7",
+    "schemas/agent-inventory-response.schema.json": "3a64dde3b95ece16ad73b95051ca99a1ca285f60255b5b506bed655676d82687",
+    "schemas/agent-manifest.schema.json": "b82738459792e24b14c4fe43622e8feb0df2250bda02054caa960c3556438b2c",
+    "schemas/agent-org-chart.schema.json": "2ca433503e76b29a70be35db22cce24bb698e6aa2f8b79c6fe6025f988f94fb0",
+    "schemas/agent-ref.schema.json": "b411bd51439e26d862393d546215d6b26d9349e6c9bdd92b353ca0fde2a51fb2",
+    "schemas/agent-roster-entry.schema.json": "3e0d8dfc0c66afb887bd05974a1ffbf79eece391255c09d2d0f7c5536aa219fd",
+    "schemas/agent-roster-response.schema.json": "1f6057bddd95d1cd31fdcef2fc87ae4560003c6e0c6d9e3fd1a148bac537c0b8",
+    "schemas/ai-envelope.schema.json": "78167a5767809286071bfcfcdfeceed0ed04c8b9f8c13079019d70eff4f351c1",
+    "schemas/annotation-create.schema.json": "567e8327777968e0ddab8e1547b4acd7beda734cf9d1fc6cde17037d8d9540d4",
+    "schemas/annotation.schema.json": "b26d22f9a97e1ae7c195e8799964aca804e78452a079ca3a0d61ea013907ce91",
+    "schemas/artifact-type-pack-manifest.schema.json": "13932ea58e819e01b3a0cc7a65590b70683dd5fe9208fc06c64c339943d3c4ce",
+    "schemas/audit-verify-result.schema.json": "e8fd013fb610ba5db27ab0113ec2eb18e7da5f9310dd3de2dd3dc87a259c21fe",
+    "schemas/budget-policy.schema.json": "3d4fe30ae129fe136ab9ece395f2a2a42a76360786b1b9a1d5f1cbc753eb5b39",
+    "schemas/capabilities.schema.json": "594d92806866886f3aefa7855e1ef5f33fec6459b06ef1ce6c07220c396b5661",
+    "schemas/certification-bundle-v2.schema.json": "3540232676086869ae78d24f3b9c2154f9c4a8a5eeb976512d6a7409f8cf19bb",
+    "schemas/channel-presence-payload.schema.json": "f9d0ef4219814c2b765baf3e68cbe5eea2cb42379f516a93a0459dcd5f7db47e",
+    "schemas/channel-written-payload.schema.json": "54723a56bc5a35232f64544ca686ac1ac959a5fb05b32b2401facca6b3ef51a3",
+    "schemas/chat-card-pack-manifest.schema.json": "402f7e9081cc39857a52e772061f4e034a957dcbc17501fe6e8e0bcb3d337e42",
+    "schemas/compact-tool-descriptor.schema.json": "4856d52aed0438d366b4328e53e4d248126e46f57137ad25fb04c3cc22bba1be",
+    "schemas/compensation-policy.schema.json": "6038bf939a982be1105d92b8a0bb70fae936b49d5e8187e1215660d265e2c382",
+    "schemas/conformance-certification-bundle.schema.json": "30a1f7fc35ed06098b7abb6fcf3b6f46b5716f29fbae35e0de1247f1f8cbe54c",
+    "schemas/connection-pack-manifest.schema.json": "35aca9fc3b3c8322babebe77ef77a8033673254f948025fb2f37191f4cfd05b5",
+    "schemas/conversation-event.schema.json": "bfcb88ce8dfe4dd7a3a40e56519a2833c7d25487fd2ab4104f6a23195120c0d9",
+    "schemas/conversation-turn.schema.json": "7c025df336aef9456d07f3a1a6959fc6d1c6fa62859e884354d71efee705ca3c",
+    "schemas/core-conformance-mock-agent-config.schema.json": "2253e1fb0cd8823ef2bfbae9b957ac374a7b617f62c1eb15d819e3536296feb3",
+    "schemas/credential-provenance.schema.json": "7675889469a67c68f31b8d0b28fd0b0a3c837f21ef51ce3b3c676064d3f58597",
+    "schemas/credential-reference.schema.json": "14927f095c235367a0645cc4811f4cfcfa3bed152bf05b970881831c62178b56",
+    "schemas/debug-bundle.schema.json": "8bd626e4cfbdaa774231e7182f61f2b5a4a42c3afeb8672c8388ea41e3fb7f2e",
+    "schemas/dispatch-config.schema.json": "131767797315e980f182b2480a1e2ed562d3326a2db08628704273f5b38c9e26",
+    "schemas/envelopes/clarification.request.schema.json": "3b3520a9ca2e40b4fb54b3a8741b2d3f2d414a0dfc004ba7c71dcf3786c32603",
+    "schemas/envelopes/error.schema.json": "845261720e8398975042ddfe78012491e42f8a39ed195b524c389cc9bc25f5c0",
+    "schemas/envelopes/media.audio.schema.json": "6c23f7398558ed781a36295c980a7ca9c585cc51faac8dd0ea56973be9dc96df",
+    "schemas/envelopes/media.file.schema.json": "3eb9ba4d3727a86640d82d566dca4fbcc06f6f0f3f80cfd100be869e9739d0b4",
+    "schemas/envelopes/media.image.schema.json": "1517b2036450226a20a55c223583d3cb2b606d157698a0806e00ca9ea1ea413e",
+    "schemas/envelopes/schema.request.schema.json": "16f6523778bdae67c715c10b0eb61fb8c7abaed4673d888957d6cc46f604be8c",
+    "schemas/envelopes/schema.response.schema.json": "35323b628db30a2b51efb66192f8f1219e184afa130126395524165a98539c6b",
+    "schemas/envelopes/ui.a2ui-surface.schema.json": "68f977c11b9bb40435a9c5727b66d76275f8dcfa0b380086622a837c84b8c5e4",
+    "schemas/error-envelope.schema.json": "1f2addeabbaa3cd7957c77816a1609b0c5005e0730cff78162bbc2804ff7c4aa",
+    "schemas/eval-summary.schema.json": "cda7ea443069f5cfd088cd000dccb4ea8b6e8268cfcc3af740295241bf77fa10",
+    "schemas/export-bundle.schema.json": "1ed674786293fc33f3474fb93cd3e5a1d8f85d0cb09636a09856bd8671e62c90",
+    "schemas/form-content-pack-manifest.schema.json": "bd373116c8912e2cd8a0e4df1f7a56086c0fdae472320f695552dd46b1b48a45",
+    "schemas/frontend-plugin-manifest.schema.json": "33d4e4eea5753900669c7ed6416e314376395a0256a9d656bf03a18845c16e84",
+    "schemas/goal.schema.json": "66aab339cda217318dab40e40ea0b46ea949164e7f2482e865284d6b2e3383db",
+    "schemas/heartbeat-evaluated.schema.json": "d3caa3fae3d935cc782c2359afa2d6bf11feb1ce9d71b9345b8e5716a9348c61",
+    "schemas/heartbeat-state-changed.schema.json": "6b66086582436ac72bd929d2830d0539d932a41b8ddf90263e2b8ca903d60584",
+    "schemas/localized-content-language-settings.schema.json": "6ba0e2918e08756493648a64d6169829eed0ead91fb6c3f2a76dec5c451b2d77",
+    "schemas/localized-content-page-response.schema.json": "3fd47db2484c40417ab7a555ec42bf443d48deca0c38ecdbe008a3bdcd1a6809",
+    "schemas/localized-content-page.schema.json": "2ca2d591d197562c4bf668b338e47803256cfa0c9105abdf64bd79e8469f15a8",
+    "schemas/localized-content-section.schema.json": "3e183eb2e80b985dc9b3770e97865247059d32ffbab2957f4a5c0addfdfedc2e",
+    "schemas/memory-entry.schema.json": "f5d806c934e900a979e14ccd961224d55eede954ffd10c5369f4cb97654e142b",
+    "schemas/memory-list-options.schema.json": "fd3e61c0caf984c6cf14f8acf55c0e84b6b579d62a702be45e20dbedfc9fffce",
+    "schemas/node-pack-manifest.schema.json": "3c7812fc8aae840edd8afe6d51fcb58571a50008e0b7ade4b7c5d55e8da9fcb8",
+    "schemas/orchestrator-decision.schema.json": "9dbcc9e7595df1781db91b1e8764fec67feca7d232b07d151094400aa53750e7",
+    "schemas/org-chart-responsibility-view.schema.json": "9bf2cc7b2ac8b6d7c28d360e8263da5706f691c364c30d20f16fd46b21fdd278",
+    "schemas/pack-lockfile.schema.json": "e6c6fd6c042485a3a16c5aedf184a3304b3068c6dd0cf8a22cba1e2e58781556",
+    "schemas/prompt-kind.schema.json": "fcf4305b430dc9d2d34b6f2971f4185fd2ed7f617013720d975bfc3ab665e000",
+    "schemas/prompt-pack-manifest.schema.json": "d473d827797ce6c9fe4fe03e439840a9dbc78d899bfb9ff05ff3e6a747380977",
+    "schemas/prompt-ref.schema.json": "2fffd62cb27c36ddfa32363922b2cb5339091716112c54ded32c21a8c26398bb",
+    "schemas/prompt-template.schema.json": "54fc1f0d22b938d171dff214f3d446ae911ef0c3cdb2056929b93d01248e0969",
+    "schemas/proposal.schema.json": "472ac8c6bcbb4e34ae8fe7a0757567de4875e69aa5058dac4dc9226ddba6c731",
+    "schemas/registry-version-manifest.schema.json": "437890063087beab3cadbdb0dae354e9f92a3ebbecdd90a1d0487df71d34ed93",
+    "schemas/residency.schema.json": "b45fdc91ae88091251914dbd6787a1e2ce687580b91d31a759217b7a1f0010c0",
+    "schemas/run-ancestry-response.schema.json": "963a5763b03216aa72fc2854560c778e53994f8cb06ea9a4053e541273c87f5c",
+    "schemas/run-diff-response.schema.json": "d9d196730b5d5d8a04a591d21a8fc6b44be7fa134f11827ff7e4f1a86d47e83d",
+    "schemas/run-event-payloads.schema.json": "6907c2a388d27169756781e1a5771e411238b465d9f0917698cde25dde6bccae",
+    "schemas/run-event.schema.json": "c70c06932b9831295042836213e617c8e946f20ddd49cf4e889b74d89d2175a8",
+    "schemas/run-options.schema.json": "f8241ece6ddc6527de9160d811d42c231b4f77b935f2e107b3c05608545c59ab",
+    "schemas/run-orchestrator-decided-event.schema.json": "17a43a3c44680a24d411141357a867b3caed6107d56de88fe2e062eaf93fa2c1",
+    "schemas/run-snapshot.schema.json": "05c406120e1958984ac7e06deff369f2df9f4d7b72ced9b624c327c1c86999e8",
+    "schemas/security-advisory.schema.json": "9c550f0bf10a3193dcca4a127081fb66fe5dc1b6f729c4c17bfaea3ba3ce05fc",
+    "schemas/self-hosted-runner-dispatch-frame.schema.json": "3f1d7edd572c6747657299525d8e85329b93b6fadf670e3a19c74d53e725adec",
+    "schemas/self-hosted-runner-registration.schema.json": "6c781adf1bb915a9e47796494f4a527353cbbf72b480e5a05be4aac65a6d0c6e",
+    "schemas/self-hosted-runner-result-frame.schema.json": "16f2f711b6071c797d8d4065f6f5ff39102ff03890fefce7a88a669831566296",
+    "schemas/suspend-request.schema.json": "1aa39f2a947934bedc9f9696bf45fcb6119395c580d5ca282efb9443bd94a7bb",
+    "schemas/tool-descriptor.schema.json": "7f6adbae63003c1f1311f6a436f7f286542be62aa19a27b46730f2c2810857f7",
+    "schemas/trigger-event.schema.json": "59d63b79dca3593f45d281776cbfe43ae4d85ee25519b82ad59f162a9efb592c",
+    "schemas/trigger-subscription-registration.schema.json": "929d628bad08e1def696e47e9a148aba00fa801e28d49bbd0dc2360b08673435",
+    "schemas/trigger-subscription.schema.json": "4f7b067f20032073b140c4bb15dc9a9914c4f6421a252ff1ff261cbdd8edf270",
+    "schemas/ui-plugin-message.schema.json": "346638babf1f8ea7b161cde75c0038b518cd2cc5bf0631772e20a9b74c96b5dd",
+    "schemas/workflow-chain-pack-manifest.schema.json": "c027571913c44d8d9678750c72701a710a02fa0df55e86849da03e13e95c333a",
+    "schemas/workflow-definition.schema.json": "28b050ffe22121796c9d4a5a8c7e57c901bb283bd08d3fd3ff2ea25a898108c1",
+    "schemas/workload-identity.schema.json": "64ed93e12cc9f0657e56ff9b8f045e5d68d397df5276d103c07f42c7f34f0579",
+    "schemas/workspace-file-create.schema.json": "70a23b92c2958c0165d7d29aea9020a045dc7816af82c80c5f50d0aac19c4856",
+    "schemas/workspace-file.schema.json": "464de85c2a068243084ee9c1d969bc7cd5d8f7948574e58450d6493c38a0e1e4"
+  }
 }

package/src/cli.ts

@@ -195,7 +195,7 @@ Required (unless --offline):
   --api-key <key>       Bearer-style API key (or set OPENWOP_API_KEY env var)
 
 Filtering:
-  --offline             Run only the server-free subset (fixtures + spec corpus)
+  --offline             Run only the declared server-free subset (fixtures-valid; see README §"--offline")
   --filter <pattern>    Pass through to vitest --testNamePattern
 
 Implementation labels (cosmetic — surface in failure messages):
@@ -656,10 +656,12 @@ async function main(): Promise<never> {
   // the conformance package is used as a workspace member.
   const vitestArgs: string[] = ['run', '--config', resolvePath(conformanceRoot, 'vitest.config.ts')];
   if (args.offline) {
-    vitestArgs.push(
-      'src/scenarios/fixtures-valid.test.ts',
-      'src/scenarios/spec-corpus-validity.test.ts',
-    );
+    // Suite 1.154.0: the offline set is a DECLARED property of the package —
+    // exactly the server-free scenarios that ship in the tarball and run in
+    // the published layout. `spec-corpus-validity.test.ts` left the set: it is
+    // a corpus-coherence scenario (reads spec/v1, asserts nothing about a host)
+    // and is no longer packed. See conformance/README.md §"--offline".
+    vitestArgs.push('src/scenarios/fixtures-valid.test.ts');
   }
   if (args.filter) {
     vitestArgs.push('--testNamePattern', args.filter);

package/src/global-setup.ts

@@ -56,6 +56,8 @@ const MAX_ROWS = 40;
 // at runtime, so this costs nothing and makes the compiler the oracle: rename
 // a ledger field and this file stops building instead of silently degrading.
 import type { LedgerEntry } from './lib/requirement-ledger.js';
+import { LAYOUT, PKG_ROOT_PATH } from './lib/paths.js';
+import { describeVerdict, verifyCorpusStamp } from './lib/corpus-stamp.js';
 
 /** What a JSONL line parses to before validation — every field may be absent. */
 type LedgerLine = Partial<Record<keyof LedgerEntry, unknown>>;
@@ -64,6 +66,17 @@ let ownedDir: string | null = null;
 let ledgerPath: string | null = null;
 
 export function setup(): void {
+  // Suite 1.154.0 — the vendored contract must be the one this suite shipped.
+  // In the published layout every api/ + schemas/ file is checked against the
+  // SHA-256 map pack-vendor.sh wrote into schemas/CORPUS-STAMP.json; a mismatch
+  // aborts the run (a suite validating a host against a schema it did not ship
+  // is evidence about nothing). Repo layout: nothing vendored, nothing to check,
+  // and the log line says so rather than implying a pass.
+  const stamp = verifyCorpusStamp(PKG_ROOT_PATH, LAYOUT);
+  process.stderr.write(`${describeVerdict(stamp)}\n`);
+  if (stamp.kind === 'mismatch') {
+    throw new Error('openwop-conformance: refusing to run — schemas/CORPUS-STAMP.json digests do not match the vendored api/ + schemas/ files. Reinstall the package; do not hand-patch vendored contract files.');
+  }
   if (process.env['OPENWOP_DISPOSITION_SUMMARY'] === 'false') return;
   // `--certify` already routes the ledger to its own report dir and reads it
   // there. Never take it over — this exists only for the path that had no

package/src/lib/corpus-stamp.ts

@@ -0,0 +1,125 @@
+/**
+ * Corpus-stamp digest verification (v2 charter Phase 1, suite 1.154.0).
+ *
+ * The published suite vendors `api/` and `schemas/` at `prepack` and writes
+ * `schemas/CORPUS-STAMP.json` (RFC 0145 G2) — until 1.154.0 that stamp carried
+ * only `suiteVersion` + `corpusCommit`, so a tarball whose vendored files had
+ * been altered, partially copied, or hand-patched after install still read as
+ * "the 1.x contract". That is the generated-surface-drift class the charter's
+ * §A names (`@openwop/openwop-conformance@1.138.1` on npm was not the 1.138.1 in
+ * the tree), one layer down: the package identified its corpus by a commit
+ * hash it could not check.
+ *
+ * From 1.154.0 the stamp also carries `files`: a map of every vendored path
+ * (relative to the package root) to its SHA-256. In the PUBLISHED layout the
+ * suite verifies the map at global setup and refuses to run on a mismatch —
+ * a suite that validated a host against a schema it did not ship would be
+ * evidence about nothing. In the REPO layout (a spec checkout) there is no
+ * vendored copy and nothing to verify; the check is skipped and says so.
+ *
+ * Three outcomes, never folded (OK / FAIL / UNKNOWN): `verified` when every
+ * digest matches; `mismatch` (throws) when any file is missing or altered;
+ * `not-applicable` when the layout is not published or the stamp predates
+ * 1.154.0 (older tarballs cannot be verified and the run says so rather than
+ * pretending).
+ */
+
+import { createHash } from 'node:crypto';
+import { existsSync, readFileSync, readdirSync, statSync } from 'node:fs';
+import { join, relative, sep } from 'node:path';
+
+export interface CorpusStamp {
+  readonly suiteVersion?: string;
+  readonly corpusCommit?: string;
+  /** `<relative path>` → lowercase hex SHA-256. Present from suite 1.154.0. */
+  readonly files?: Readonly<Record<string, string>>;
+}
+
+export type StampVerdict =
+  | { readonly kind: 'verified'; readonly files: number }
+  | { readonly kind: 'not-applicable'; readonly reason: string }
+  | { readonly kind: 'mismatch'; readonly missing: readonly string[]; readonly altered: readonly string[]; readonly extra: readonly string[] };
+
+export const STAMP_RELATIVE_PATH = join('schemas', 'CORPUS-STAMP.json');
+
+/** SHA-256 of a file's bytes, lowercase hex. */
+export function sha256File(path: string): string {
+  return createHash('sha256').update(readFileSync(path)).digest('hex');
+}
+
+/** Every regular file under `dir`, as package-relative POSIX paths, sorted. */
+export function listVendoredFiles(root: string, dirs: readonly string[] = ['api', 'schemas']): string[] {
+  const out: string[] = [];
+  const walk = (d: string): void => {
+    if (!existsSync(d)) return;
+    for (const name of readdirSync(d).sort()) {
+      const p = join(d, name);
+      if (statSync(p).isDirectory()) walk(p);
+      else out.push(relative(root, p).split(sep).join('/'));
+    }
+  };
+  for (const d of dirs) walk(join(root, d));
+  return out.filter((p) => p !== STAMP_RELATIVE_PATH.split(sep).join('/')).sort();
+}
+
+/** Build the `files` map for a package root (used by pack-vendor at prepack). */
+export function digestVendoredFiles(root: string): Record<string, string> {
+  const map: Record<string, string> = {};
+  for (const rel of listVendoredFiles(root)) map[rel] = sha256File(join(root, ...rel.split('/')));
+  return map;
+}
+
+/**
+ * Compare the stamp's `files` map against the bytes on disk. Pure: reads,
+ * never writes, never throws on a mismatch — the caller decides how loud.
+ */
+export function verifyCorpusStamp(root: string, layout: string): StampVerdict {
+  if (layout !== 'published') {
+    return { kind: 'not-applicable', reason: `layout is '${layout}' — the vendored copy exists only in the published package` };
+  }
+  const stampPath = join(root, STAMP_RELATIVE_PATH);
+  if (!existsSync(stampPath)) {
+    return { kind: 'not-applicable', reason: 'schemas/CORPUS-STAMP.json is absent — not a packed suite' };
+  }
+  let stamp: CorpusStamp;
+  try {
+    stamp = JSON.parse(readFileSync(stampPath, 'utf8')) as CorpusStamp;
+  } catch (e) {
+    return { kind: 'mismatch', missing: [STAMP_RELATIVE_PATH], altered: [], extra: [] };
+  }
+  if (stamp.files === undefined) {
+    return { kind: 'not-applicable', reason: `stamp ${stamp.suiteVersion ?? '?'} predates per-file digests (suite < 1.154.0); the vendored contract cannot be verified` };
+  }
+  const expected = stamp.files;
+  const onDisk = new Set(listVendoredFiles(root));
+  const missing: string[] = [];
+  const altered: string[] = [];
+  for (const [rel, digest] of Object.entries(expected).sort()) {
+    const p = join(root, ...rel.split('/'));
+    if (!existsSync(p)) {
+      missing.push(rel);
+      continue;
+    }
+    if (sha256File(p) !== digest) altered.push(rel);
+    onDisk.delete(rel);
+  }
+  const extra = [...onDisk].sort();
+  if (missing.length > 0 || altered.length > 0 || extra.length > 0) return { kind: 'mismatch', missing, altered, extra };
+  return { kind: 'verified', files: Object.keys(expected).length };
+}
+
+/** One-line, greppable rendering for the run log. */
+export function describeVerdict(v: StampVerdict): string {
+  switch (v.kind) {
+    case 'verified':
+      return `[openwop-conformance] corpus stamp VERIFIED — ${v.files} vendored api/ + schemas/ files match their SHA-256 digests`;
+    case 'not-applicable':
+      return `[openwop-conformance] corpus stamp not checked — ${v.reason}`;
+    case 'mismatch':
+      return (
+        `[openwop-conformance] corpus stamp MISMATCH — the vendored contract is not the one this suite shipped ` +
+        `(missing ${v.missing.length}, altered ${v.altered.length}, extra ${v.extra.length}): ` +
+        [...v.missing.map((f) => `missing ${f}`), ...v.altered.map((f) => `altered ${f}`), ...v.extra.map((f) => `extra ${f}`)].slice(0, 12).join('; ')
+      );
+  }
+}

package/src/lib/capabilities-auth-subject-link.test.ts

@@ -1,103 +0,0 @@
-/**
- * Server-free pin of the RFC 0163 §C schema conditional in
- * `schemas/capabilities.schema.json`:
- *
- *   auth.subjectLinking: true  ⇒  auth.subjectLinkKey required            (RFC 0163)
- *   auth.subjectLinkKey        ∈  { opaque-idp, configured-immutable }   (RFC 0163)
- *   profiles ⊇ {saml, scim}    ⇒  subjectLinking const true + key required (RFC 0164)
- *
- * This checks the SCHEMA ARTIFACT, not any host, which is why it lives under
- * `src/lib/` (no scenario ledger row — see `saml-idp.test.ts` for the G8
- * reasoning). The host-facing assertion is the advertisement leg of
- * `scenarios/auth-subject-link-key-class.test.ts`, gated on the flag.
- *
- * @see RFCS/0163-subject-linking-hardening.md §C
- * @see spec/v1/auth-profiles.md §"Subject linking (SAML ⟷ SCIM)"
- */
-
-import { describe, it, expect } from 'vitest';
-import { readFileSync, readdirSync } from 'node:fs';
-import { join } from 'node:path';
-import Ajv2020 from 'ajv/dist/2020.js';
-import addFormats from 'ajv-formats';
-import { SCHEMAS_DIR } from './paths.js';
-
-function compileCapabilities() {
-  const ajv = new Ajv2020({ allErrors: true, strict: false });
-  addFormats(ajv);
-  for (const file of readdirSync(SCHEMAS_DIR).filter((f) => f.endsWith('.schema.json'))) {
-    const s = JSON.parse(readFileSync(join(SCHEMAS_DIR, file), 'utf8')) as { $id?: string };
-    ajv.addSchema(s, file);
-    ajv.addSchema(s, `./${file}`);
-  }
-  // Validate the `auth` block in isolation: the conditional lives on that
-  // object, and a full discovery document would drag in every root-level
-  // required family (supportedEnvelopes, schemaVersions, limits, …) that has
-  // nothing to do with what this file pins.
-  return ajv.compile({ $ref: 'capabilities.schema.json#/properties/auth' });
-}
-
-const PROFILES = ['openwop-auth-saml', 'openwop-auth-scim'];
-function doc(auth: Record<string, unknown>) {
-  return auth;
-}
-
-describe('capabilities.schema.json: auth.subjectLinkKey conditional (RFC 0163 §C)', () => {
-  const validate = compileCapabilities();
-
-  it('subjectLinking:true WITHOUT subjectLinkKey fails validation (§A.1 co-requirement is in the schema, not only prose)', () => {
-    const ok = validate(doc({ profiles: PROFILES, subjectLinking: true }));
-    expect(ok, JSON.stringify(validate.errors)).toBe(false);
-    expect(JSON.stringify(validate.errors)).toContain('subjectLinkKey');
-  });
-
-  it('subjectLinking:true with a class member validates', () => {
-    for (const k of ['opaque-idp', 'configured-immutable']) {
-      const ok = validate(doc({ profiles: PROFILES, subjectLinking: true, subjectLinkKey: k }));
-      expect(ok, `${k}: ${JSON.stringify(validate.errors)}`).toBe(true);
-    }
-  });
-
-  it('a mutable/PII key is INEXPRESSIBLE: "email" fails the enum', () => {
-    const ok = validate(doc({ profiles: PROFILES, subjectLinking: true, subjectLinkKey: 'email' }));
-    expect(ok).toBe(false);
-  });
-
-  it('the retired Draft-era attribute names are not members (the enum names classes)', () => {
-    for (const k of ['oid', 'immutable-id']) {
-      expect(validate(doc({ profiles: PROFILES, subjectLinking: true, subjectLinkKey: k })), k).toBe(false);
-    }
-  });
-
-  it('one profile alone does not require the flag or a key (SAML-only / SCIM-only hosts are unaffected)', () => {
-    expect(validate(doc({ profiles: ['openwop-auth-saml'] }))).toBe(true);
-    expect(validate(doc({ profiles: ['openwop-auth-scim'], subjectLinking: false }))).toBe(true);
-  });
-});
-
-describe('capabilities.schema.json: the profile pair implies the contract (RFC 0164 §B)', () => {
-  const validate = compileCapabilities();
-
-  it('BOTH profiles with subjectLinking absent fails validation (the vulnerable pre-0164 shape)', () => {
-    const ok = validate(doc({ profiles: PROFILES }));
-    expect(ok, JSON.stringify(validate.errors)).toBe(false);
-    expect(JSON.stringify(validate.errors)).toContain('subjectLinking');
-  });
-
-  it('BOTH profiles with subjectLinking:false fails validation (the flag is derived, not a choice)', () => {
-    expect(validate(doc({ profiles: PROFILES, subjectLinking: false, subjectLinkKey: 'opaque-idp' }))).toBe(false);
-  });
-
-  it('BOTH profiles with subjectLinking:true but no subjectLinkKey fails validation', () => {
-    expect(validate(doc({ profiles: PROFILES, subjectLinking: true }))).toBe(false);
-  });
-
-  it('BOTH profiles with subjectLinking:true + a class member validates (the derived advertisement)', () => {
-    expect(validate(doc({ profiles: PROFILES, subjectLinking: true, subjectLinkKey: 'opaque-idp' }))).toBe(true);
-  });
-
-  it('profile order does not matter', () => {
-    expect(validate(doc({ profiles: ['openwop-auth-scim', 'openwop-auth-api-key-rotation', 'openwop-auth-saml'], subjectLinking: true, subjectLinkKey: 'configured-immutable' }))).toBe(true);
-    expect(validate(doc({ profiles: ['openwop-auth-scim', 'openwop-auth-api-key-rotation', 'openwop-auth-saml'] }))).toBe(false);
-  });
-});

package/src/lib/fork-availability.test.ts

@@ -1,69 +0,0 @@
-/**
- * Pins `forkDeclined` (RFC 0148 §A).
- *
- * The risk in a helper like this is not that it misses a status — that shows up
- * as a red test somebody investigates. It is that it swallows one: every status
- * it accepts turns an assertion into a skip, silently, and a suite that skips
- * is indistinguishable from a suite that passes unless something records why.
- * So the load-bearing cases here are the NEGATIVE ones.
- */
-
-import { describe, expect, it, beforeEach } from 'vitest';
-import { forkDeclined } from './fork-availability.js';
-import { resetSoftSkips, softSkipDisposition } from './soft-skip.js';
-
-describe('forkDeclined', () => {
-  beforeEach(() => resetSoftSkips());
-
-  it('treats 404 and 403 the same as 501 — route absent is not weaker than route-declines', () => {
-    // The asymmetry this fixes: every replay scenario handled 501 and none
-    // handled 404. `501` means "I know this route and decline"; `404` means
-    // "there is no such route" — strictly less implemented. The suite treated
-    // the weaker signal as a skip and the stronger one as a defect, so a host
-    // had to implement the route in order to say it had not implemented it.
-    for (const status of [404, 403, 501]) {
-      expect(forkDeclined(status, 'leg'), `status ${status} means the fork did not happen`).toBe(true);
-    }
-  });
-
-  it('does NOT swallow any other status — a 500 is still a defect, not a skip', () => {
-    // If this ever goes green for one of these, a real failure has become a
-    // silent skip and no assertion downstream will ever run again.
-    for (const status of [200, 201, 202, 400, 409, 422, 500, 502, 503]) {
-      expect(forkDeclined(status, 'leg'), `status ${status} must reach the assertion`).toBe(false);
-    }
-  });
-
-  it('records WHY, so the ledger row is not an unclassified return', () => {
-    // Two of the eleven original call sites were a bare `return`. A bare return
-    // in a file whose OTHER tests assert is invisible: the file records
-    // `executed-pass` and the leg that never ran leaves no trace.
-    forkDeclined(404, 'fanout-suppression replay fork');
-    const noted = softSkipDisposition('fork-availability.test.ts');
-    expect(noted?.kind).toBe('blocked');
-    expect(noted?.reason).toContain('404');
-    expect(noted?.reason).toContain('fanout-suppression replay fork');
-    expect(noted?.reason).toContain('not mounted');
-  });
-
-  it('records nothing when the status is not a decline', () => {
-    forkDeclined(201, 'leg');
-    expect(softSkipDisposition('fork-availability.test.ts')).toBeNull();
-  });
-
-  it('names the leg, so one file with several forks stays attributable', () => {
-    forkDeclined(501, 'branch fork');
-    expect(softSkipDisposition('fork-availability.test.ts')?.reason).toContain('branch fork');
-  });
-
-  it('distinguishes the three declines in its reason text', () => {
-    forkDeclined(404, 'a');
-    const a = softSkipDisposition('fork-availability.test.ts')?.reason ?? '';
-    resetSoftSkips();
-    forkDeclined(501, 'a');
-    const b = softSkipDisposition('fork-availability.test.ts')?.reason ?? '';
-    // `blocked` alone does not tell a bundle reader whether the host lacks the
-    // route or declines the range; the reason must.
-    expect(a).not.toBe(b);
-  });
-});

package/src/lib/global-setup.test.ts

@@ -1,76 +0,0 @@
-/**
- * Pins the run-end disposition summary (`src/global-setup.ts`, RFC 0148 §A).
- *
- * The defect this guards is not "the summary is ugly" — it is that the suite
- * computed an honest disposition on every run and PUBLISHED it on one. Two
- * host implementers read vitest's `1 passed` as coverage for a requirement the
- * suite had internally classified `blocked`, because the classification had no
- * reader outside `--certify`.
- *
- * Server-free and pure: `summarise` takes the raw JSONL and returns the text.
- */
-
-import { describe, expect, it } from 'vitest';
-import { summarise } from '../global-setup.js';
-
-const line = (o: Record<string, unknown>): string => JSON.stringify(o);
-
-describe('global-setup: RFC 0148 §A disposition summary', () => {
-  it('reads the ledger key the ledger actually writes (`requirementId`, not `id`)', () => {
-    // Regression: the first draft of this reader keyed on `entry.id`, a field
-    // `recordRequirement` has never written, and fell back to `(unnamed)`.
-    // The fallback made a WRONG READER look like MISSING DATA — the same
-    // failure shape the summary exists to expose, reproduced in the exposer.
-    const out = summarise(
-      line({ requirementId: 'openwop.scenario.webhook-signed-delivery', disposition: 'blocked', detail: 'guard rejected loopback' }),
-    );
-    expect(out).toContain('openwop.scenario.webhook-signed-delivery');
-    expect(out).not.toContain('(unnamed)');
-  });
-
-  it('lists blocked / skipped / inapplicable as NOT witnessed, with the reason', () => {
-    const out = summarise(
-      [
-        line({ requirementId: 'a', disposition: 'blocked', detail: 'seam absent' }),
-        line({ requirementId: 'b', disposition: 'skipped', detail: 'operator opted out' }),
-        line({ requirementId: 'c', disposition: 'inapplicable', detail: 'profile not advertised' }),
-      ].join('\n'),
-    );
-    expect(out).toContain('did NOT witness');
-    for (const s of ['seam absent', 'operator opted out', 'profile not advertised']) {
-      expect(out).toContain(s);
-    }
-  });
-
-  it('flags an executed-pass that asserted nothing — the other RFC 0148 §A vacuity shape', () => {
-    const out = summarise(line({ requirementId: 'vacuous', disposition: 'executed-pass', assertionCount: 0 }));
-    expect(out).toContain('executed-pass (0 assertions)');
-    expect(out).toContain('vacuous');
-  });
-
-  it('does NOT flag a real executed-pass', () => {
-    const out = summarise(line({ requirementId: 'real', disposition: 'executed-pass', assertionCount: 12 }));
-    expect(out).toContain('executed-pass 1');
-    expect(out).not.toContain('did NOT witness');
-  });
-
-  it('announces truncation rather than capping silently', () => {
-    // A capped list that does not say it was capped reads as a complete one.
-    const many = Array.from({ length: 45 }, (_, i) =>
-      line({ requirementId: `r${i}`, disposition: 'blocked', detail: 'why' }),
-    ).join('\n');
-    const out = summarise(many);
-    expect(out).toContain('5 more not listed');
-  });
-
-  it('returns null on an empty ledger so teardown prints nothing', () => {
-    expect(summarise('')).toBeNull();
-    expect(summarise('\n\n')).toBeNull();
-  });
-
-  it('skips unparseable lines without discarding the rest of the run', () => {
-    const out = summarise(['{ not json', line({ requirementId: 'ok', disposition: 'blocked', detail: 'r' })].join('\n'));
-    expect(out).toContain('ok');
-    expect(out).toContain('blocked 1');
-  });
-});