@openwop/openwop-conformance 1.153.0 → 1.155.0

package/CHANGELOG.md

@@ -1,5 +1,22 @@
 # `@openwop/openwop-conformance` Changelog
 
+## [1.155.0] — 2026-09-02 — RFC 0165 `Draft → Active`: `protocolVersions[]`, the Subject record, header dual emission
+
+Three new scenario files (468 → 471) and four added legs, all additive:
+
+- `protocol-versions-array.test.ts` — server-free: the schema declares root `protocolVersions` with the scalar's strict grammar; presence-gated: items match, are unique, contain `protocolVersion`, and profile derivation is unchanged by the array.
+- `owner-subject-shape.test.ts` — server-free: `subject.schema.json` compiles; legacy and workload forms accepted; email/whitespace `subjectId` rejected (invariant `subject-record-opaque`); `keyClass` iff saml/scim; both `owner` sub-objects declare `subject` and the `run.started` echo declares `principalKind`.
+- `owner-subject-echo.test.ts` — gated on a snapshot carrying `owner.subject`: consistency with the owner triple, actor depth ≤ 4, `run.started` echo, fork copies tenant + subject verbatim.
+- Legs: `discovery.test.ts` (standard `ETag` + `If-None-Match` → 304, presence-gated); `webhook-signed-delivery.test.ts` (the `OpenWOP-*` family equals `X-openwop-*` and verifies, presence-gated); `auth-subject-link.test.ts` (legacy subjects never linked — seam-gated, records `blocked`); `identity-owner-shape.test.ts` registers `subject.schema.json`.
+
+## [1.154.0] — 2026-09-02 — the tarball carries the suite and nothing else; the vendored contract is digest-checked (v2 charter Phase 1)
+
+No new scenario file. Three packed changes:
+
+- **Corpus-coherence scenarios and suite self-tests leave the package.** The 28 `SPEC_COHERENCE_SCENARIOS` (they read `spec/v1`, assert nothing about a host, and reported `blocked`/`inapplicable` in every host bundle) and every `src/lib/*.test.ts` are excluded via `package.json` `files` negations; `scripts/check-npm-pack-contents.sh` fails if either returns. The list is published as `conformance/spec-coherence-scenarios.json`. The published layout now collects 1,430 tests across 324 files; the layout gate's floors are re-measured (1,350 / 300).
+- **`schemas/CORPUS-STAMP.json` carries per-file SHA-256 digests** of every vendored `api/` and `schemas/` file, written at `prepack`. `src/lib/corpus-stamp.ts` verifies them at global setup in the published layout and **refuses to run on a mismatch** (missing, altered, or extra vendored files are each named); repo layout and pre-1.154.0 stamps report `not checked`, never a silent pass. This removes the mechanism behind the 1.138.1 defect one layer down: a package can no longer identify its contract by a commit hash it cannot check.
+- **`--offline` is a declared property:** exactly `fixtures-valid.test.ts` (the only server-free scenario that ships and runs in the published layout). `spec-corpus-validity.test.ts` left the set with the coherence scenarios. Documented in README §"--offline".
+
 ## [1.153.0] — 2026-09-02 — per-`it` requirement rows and the requirement registry (RFC 0148 §A / G3; v2 charter Phase 1)
 
 No new scenario file. Three packed changes, all additive to bundle v2:

package/README.md

@@ -92,9 +92,18 @@ Exit code is non-zero on any failed assertion. `--certify` distinguishes: `0`
 
 ---
 
+
+### `--offline` — a declared set
+
+`openwop-conformance --offline` runs exactly **`src/scenarios/fixtures-valid.test.ts`**: the server-free scenario that ships in the tarball and runs in the published layout. That is the whole set, by declaration (suite 1.154.0), not by whatever happens to skip cleanly. `spec-corpus-validity.test.ts` and the other 27 corpus-coherence scenarios (`spec-coherence-scenarios.json`) read `spec/v1`, assert nothing about a host, and are not packed; run them from a spec checkout with `npm run openwop:check`.
+
+### The vendored contract is digest-checked
+
+`schemas/CORPUS-STAMP.json` carries `suiteVersion`, `corpusCommit`, and — from 1.154.0 — `files`: a SHA-256 for every vendored `api/` and `schemas/` file. At global setup in the published layout the suite verifies the map and **refuses to run on a mismatch**, naming each missing, altered, or extra file. A hand-patched vendored schema therefore cannot produce evidence. In a spec checkout nothing is vendored and the log line says `corpus stamp not checked`; an older tarball without `files` says so too. Three outcomes, never folded.
+
 ## What's Covered
 
-The current suite has 468 scenario files under `src/scenarios/`.
+The current suite has 471 scenario files under `src/scenarios/`.
 - 2026-08-19 (suite `1.137.0 → 1.138.0`): NEW `durability-poison-exhaustion.test.ts` — RFC 0158 §C.8, the FIRST row of that RFC's conformance table to land. Asserts what `failure-path.test.ts` cannot: not just that deterministically failing work reaches terminal, but that attempts STOP — counted on the log, re-counted after a scaled quiet window, asserted unchanged. A host still redelivering records more. Seam-gated on the existing event-log seam (`blocked` = unobservable, not unmet) and outside every profile floor.
 - 2026-08-19 (suite `1.136.15 → 1.137.0`): NEW `replay-fanout-suppression.test.ts` — capability-gated on `webhooks.supported`, **outside every profile floor**; witnesses `replay.md` §"Host-initiated fan-out is an external effect", which was the largest normative MUST NOT on the replay surface with no scenario and no SECURITY invariant. Three legs in ONE `it` against ONE receiver and ONE subscription — a positive control, the MUST NOT, and a `branch` boundary leg — because "no delivery arrived" passes identically when delivery never worked, so absence is asserted only after presence is proven on that exact wiring. A host with an SSRF guard correctly refuses the loopback receiver and records `blocked`: **unobservable, not unmet.**
 - 2026-08-18 (suite `1.136.7 → 1.136.8`, SP-04): NEW `spec-section-citations.test.ts` — server-free; a `<doc>.md §"<Section>"` citation of a checked doc MUST resolve to a heading that exists. `storage-adapters.md §"Claim acquisition"` was cited by four artifacts, including a normative MUST in `production-profile.md` §Durability, and the section did not exist for the life of RFC 0009. Scoped to the docs whose section citations carry the durability contract; a corpus-wide sweep finds ~260 unresolved citations that need triage before they can gate.
@@ -438,7 +447,7 @@ Server-required (added in 1.7.0):
 | ------------- | ----------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
 | **Redaction** | [`capabilities.md`](../spec/v1/capabilities.md) §"Secrets" + NFR-7 + §"aiProviders" | Vendor-neutral assertions that the server doesn't leak secret material. Three scenario groups: (a) discovery shape contract — `secrets` + `aiProviders` advertisements are well-formed regardless of `secrets.supported`; when `supported === true`, scopes MUST be non-empty + `resolution === 'host-managed'`; `byok ⊆ supported`. (b) bearer-token redaction — invalid Bearer canary in `Authorization` header is not echoed in the 401 response body. (c) credentialRef echo control — gated on `secrets.supported === true`; canary planted in `configurable.ai.credentialRef` MUST NOT appear in any RunEvent payload (poll-based capture; transport-agnostic). Uses runtime-built canary fixtures (`lib/canaries.ts`) that defeat static secret scanners. 6 scenarios. |
 
-Current source tree: 468 scenario files. Use [`coverage.md`](./coverage.md) for current grade/gap tracking.
+Current source tree: 471 scenario files. Use [`coverage.md`](./coverage.md) for current grade/gap tracking.
 
 ## Remaining Gaps
 

package/api/openapi.yaml

@@ -109,6 +109,14 @@ paths:
       summary: Capability declaration handshake.
       operationId: getCapabilities
       security: []
+      parameters:
+        - name: If-None-Match
+          in: header
+          required: false
+          schema: { type: string }
+          description: >-
+            RFC 0165 §C.2. Standard conditional request against the discovery document's `ETag`;
+            a matching value SHOULD yield `304 Not Modified`.
       responses:
         '200':
           description: Capabilities object — see `capabilities.md`.
@@ -116,13 +124,21 @@ paths:
             Cache-Control:
               schema: { type: string }
               example: 'public, max-age=300'
+            ETag:
+              schema: { type: string }
+              description: >-
+                RFC 0165 §C.2. Standard strong validator for the response bytes (SHOULD be sent).
+                Distinct from `Capabilities-Etag`, which validates negotiation safety
+                (`capabilities-change-detection.md` §"Cache validators").
             Capabilities-Etag:
               schema: { type: string }
-              description: Optional probe handle for mid-session capability change detection.
+              description: Optional probe handle for mid-session capability change detection. Deprecated toward v2 (RFC 0165 §C.2).
           content:
             application/json:
               schema:
                 $ref: '#/components/schemas/Capabilities'
+        '304':
+          description: RFC 0165 §C.2 — `If-None-Match` matched the current `ETag`; the body is unchanged.
         '503':
           description: Server unable to compute capabilities (transient).
           content:

package/coverage.md

@@ -112,6 +112,9 @@ The scenario groups in the table below (one row per group; count the rows — th
 | `oauth-authorization-code-roundtrip.test.ts`                                                                                                                                                                                                            | `capabilities.oauth` (RFC 0047 §C) + `SECURITY/invariants.yaml` `credential-payload-redaction`                                                                                                                                                                                                                          | A (capability-gated on `oauth.supported` + `grants` ∋ `authorization_code`; behavioral roundtrip via optional `POST /v1/host/sample/oauth/authorize-code-roundtrip` seam against the one canonical synthetic provider in `fixtures/oauth-providers/synthetic.json` — returns a credential REFERENCE; the authorization code / state / PKCE verifier / acquired access+refresh tokens are absent from every observable surface; `connector.authorized` carries the ref not the token)                                                                                                                                                                                                                | `host-pending`                                                                                                                   | Capability+grant-gated; behavioral probe soft-skips on 404. Closes the RFC 0047 Tier-2 gap — exercises the actual authorization-code dance (shape + redaction scenarios existed; the grant itself was unexercised).                                                                                                                                                                                                                                                                                                                                                                                                                     |
 | `connector-manifest-validity.test.ts`                                                                                                                                                                                                                   | `node-pack-manifest.schema.json` §Connector (RFC 0045, `node-packs.md` §Connectors)                                                                                                                                                                                                                                     | Server-free (schema validity of the `connector` block incl. both ConnectorAuth variants + positive/negative round-trip; §B action/trigger typeId-resolution semantics — `connector_action_unresolved` on an unknown typeId)                                                                                                                                                                                                                                                                                                                                                                                                                                                                         | host-pass (server-free)                                                                                                          | Always runs; no host needed. Behavioral idempotency-hint + rate-limit-honored scenarios deferred until a host advertises a connector.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   |
 | `identity-owner-shape.test.ts`                                                                                                                                                                                                                          | `run-snapshot.schema.json` properties.owner (RFC 0048 §C, `auth.md` §Identity claims)                                                                                                                                                                                                                                   | Server-free (owner triple schema validity: positive `{tenant}` + full triple; negative missing-tenant + unknown-prop)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               | host-pass (server-free)                                                                                                          | Always runs; no host needed.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            |
+| `protocol-versions-array.test.ts` | RFC 0165 §A (`version-negotiation.md` §"`protocolVersions[]`") | A (server-free: schema declares the array with the scalar's grammar) + B (presence-gated: items match, unique, contain `protocolVersion`; profile derivation unchanged) | host-pending (presence-gated) | A host that omits the array records `inapplicable`. |
+| `owner-subject-shape.test.ts` | RFC 0165 §B.1–§B.2 (`schemas/subject.schema.json`; both `owner` sub-objects) | Server-free: subject compiles; legacy + workload forms accepted; email/whitespace `subjectId` rejected (invariant `subject-record-opaque`); keyClass iff saml/scim; both owner sub-objects declare `subject` and the echo declares `principalKind` | host-pass (server-free) | Always runs; no host needed. |
+| `owner-subject-echo.test.ts` | RFC 0165 §B.2, §B.4, §B.5 (`auth.md` §"The Subject record", `replay.md` §"Fork ownership") | B (gated on a snapshot carrying `owner.subject`): tenant/subjectId/kind/keyClass consistency, actor depth ≤ 4, `run.started` echo equals the snapshot, fork copies tenant + subject verbatim | host-pending (gated) | A host that does not emit `owner.subject` records `inapplicable`. |
 | `cross-workspace-isolation.test.ts`                                                                                                                                                                                                                     | RFC 0048 §C/§D (`auth.md` §Identity claims, `rest-endpoints.md` `run_forbidden`)                                                                                                                                                                                                                                        | A (owner-echo shape if a sample run is readable; §D isolation MUST-NOT via optional `POST /v1/host/sample/identity/cross-workspace-read` seam — cross-workspace read fails closed with `run_forbidden`/`not_found`)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 | `host-pending`                                                                                                                   | Behavioral probe soft-skips on 404; no host advertises run ownership yet (RFC 0048 `Draft`).                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            |
 | `authorization-roles-shape.test.ts`                                                                                                                                                                                                                     | `capabilities.authorization` (RFC 0049 §A, `auth.md` §"Role-based authorization")                                                                                                                                                                                                                                       | A (advertisement shape always — `supported` boolean; `failClosed` const true; every `roles[].role` non-empty + `scopes` array)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      | `host-pending`                                                                                                                   | Always runs; asserts the block is absent or well-formed.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                |
 | `authorization-fail-closed.test.ts`                                                                                                                                                                                                                     | `capabilities.authorization` (RFC 0049 §C) + `SECURITY/invariants.yaml` `authorization-fail-closed`                                                                                                                                                                                                                     | A (advertisement `failClosed===true` always; fail-closed MUST-NOT via optional `POST /v1/host/sample/authorization/decide` seam — an unseeded-role principal resolves `allowed:false`)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              | `host-pending`                                                                                                                   | Capability-gated on `authorization.supported`; behavioral probe soft-skips on 404. Scope-match + denial-audited scenarios deferred to a host.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           |

package/dist/cli.js

@@ -161,7 +161,7 @@ Required (unless --offline):
   --api-key <key>       Bearer-style API key (or set OPENWOP_API_KEY env var)
 
 Filtering:
-  --offline             Run only the server-free subset (fixtures + spec corpus)
+  --offline             Run only the declared server-free subset (fixtures-valid; see README §"--offline")
   --filter <pattern>    Pass through to vitest --testNamePattern
 
 Implementation labels (cosmetic — surface in failure messages):
@@ -572,7 +572,12 @@ async function main() {
     // the conformance package is used as a workspace member.
     const vitestArgs = ['run', '--config', resolvePath(conformanceRoot, 'vitest.config.ts')];
     if (args.offline) {
-        vitestArgs.push('src/scenarios/fixtures-valid.test.ts', 'src/scenarios/spec-corpus-validity.test.ts');
+        // Suite 1.154.0: the offline set is a DECLARED property of the package —
+        // exactly the server-free scenarios that ship in the tarball and run in
+        // the published layout. `spec-corpus-validity.test.ts` left the set: it is
+        // a corpus-coherence scenario (reads spec/v1, asserts nothing about a host)
+        // and is no longer packed. See conformance/README.md §"--offline".
+        vitestArgs.push('src/scenarios/fixtures-valid.test.ts');
     }
     if (args.filter) {
         vitestArgs.push('--testNamePattern', args.filter);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openwop/openwop-conformance",
-  "version": "1.153.0",
+  "version": "1.155.0",
   "description": "Production-ready black-box conformance suite for OpenWOP v1.0 compliant servers.",
   "repository": {
     "type": "git",
@@ -26,7 +26,36 @@
     "vitest.config.ts",
     "README.md",
     "CHANGELOG.md",
-    "LICENSE"
+    "LICENSE",
+    "!src/lib/*.test.ts",
+    "!src/scenarios/artifact-schema-compile-bounded.test.ts",
+    "!src/scenarios/artifact-type-legacy-ids.test.ts",
+    "!src/scenarios/capability-example-root-layout.test.ts",
+    "!src/scenarios/certification-floor-enforcement.test.ts",
+    "!src/scenarios/chain-subchain-unsupported-refused.test.ts",
+    "!src/scenarios/compensation-profile.test.ts",
+    "!src/scenarios/core-manifest-and-extension-registry.test.ts",
+    "!src/scenarios/discovery-canonical-family-no-shadow.test.ts",
+    "!src/scenarios/edge-condition-truthy-falsy.test.ts",
+    "!src/scenarios/effect-identity-composition.test.ts",
+    "!src/scenarios/effect-identity-cross-scope.test.ts",
+    "!src/scenarios/error-envelope-canonical-shape.test.ts",
+    "!src/scenarios/form-content-packs.test.ts",
+    "!src/scenarios/multi-region-effect-vocabulary.test.ts",
+    "!src/scenarios/normative-example-extraction.test.ts",
+    "!src/scenarios/openapi-asyncapi-sdk-parity.test.ts",
+    "!src/scenarios/pack-manifest-extensions.test.ts",
+    "!src/scenarios/protocol-version-grammar.test.ts",
+    "!src/scenarios/registry-declarative-kinds.test.ts",
+    "!src/scenarios/rfc-0147-self-audit.test.ts",
+    "!src/scenarios/rfc-lifecycle-coherence.test.ts",
+    "!src/scenarios/semantic-digest-v2.test.ts",
+    "!src/scenarios/spec-corpus-validity.test.ts",
+    "!src/scenarios/spec-section-citations.test.ts",
+    "!src/scenarios/tool-result-trust-monotone.test.ts",
+    "!src/scenarios/versioned-composition-profiles.test.ts",
+    "!src/scenarios/workflow-chain-internal-flag.test.ts",
+    "!src/scenarios/workload-identity-profile.test.ts"
   ],
   "scripts": {
     "test": "vitest run",

package/requirements.json

@@ -2,9 +2,9 @@
   "$comment": "GENERATED by conformance/scripts/generate-requirement-registry.mjs — do not edit. One record per it()/test() in src/scenarios. Ids: openwop.it.<file-stem>.<title-slug>[~n] (src/lib/requirement-ids.ts). A record with id null has an interpolated title; its run-time row is keyed by the rendered title and maps here by file+line only. Renamed ids need a row in requirement-aliases.json.",
   "generatedFrom": "src/scenarios/*.test.ts",
   "counts": {
-    "files": 468,
-    "tests": 1950,
-    "withStableId": 1927,
+    "files": 471,
+    "tests": 1968,
+    "withStableId": 1945,
     "interpolatedTitles": 23,
     "explicitIds": 0
   },
@@ -3479,7 +3479,7 @@
     {
       "id": "openwop.it.anonymous-actor-shape.a-content-free-anon-grant-deny-record-validates-against-the-existing-def",
       "file": "anonymous-actor-shape.test.ts",
-      "line": 142,
+      "line": 147,
       "title": "a content-free anon grant + deny record validates against the existing $def",
       "explicitId": null,
       "citations": []
@@ -3487,7 +3487,7 @@
     {
       "id": "openwop.it.anonymous-actor-shape.authorization-decided-is-in-the-runeventtype-enum-the-reused-audit-event",
       "file": "anonymous-actor-shape.test.ts",
-      "line": 168,
+      "line": 173,
       "title": "authorization.decided is in the RunEventType enum (the reused audit event)",
       "explicitId": null,
       "citations": []
@@ -4531,6 +4531,14 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.auth-subject-link.a-scim-deactivation-does-not-deny-a-saml-login-whose-run-subject-is-legacy-issue",
+      "file": "auth-subject-link.test.ts",
+      "line": 201,
+      "title": "a SCIM deactivation does not deny a SAML login whose run subject is legacy-issued",
+      "explicitId": null,
+      "citations": []
+    },
     {
       "id": "openwop.it.auth.returns-401-with-canonical-error-envelope-per-auth-md-3",
       "file": "auth.test.ts",
@@ -7998,7 +8006,7 @@
     {
       "id": "openwop.it.discovery.returns-200-with-required-capabilities-fields-per-capabilities-md-2",
       "file": "discovery.test.ts",
-      "line": 15,
+      "line": 16,
       "title": "returns 200 with required Capabilities fields per capabilities.md §2",
       "explicitId": null,
       "citations": [
@@ -8020,7 +8028,7 @@
     {
       "id": "openwop.it.discovery.serves-cache-control-per-capabilities-md-4-caching-guidance",
       "file": "discovery.test.ts",
-      "line": 35,
+      "line": 36,
       "title": "serves Cache-Control per capabilities.md §4 (caching guidance)",
       "explicitId": null,
       "citations": [
@@ -8030,10 +8038,27 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.discovery.if-a-standard-etag-is-present-a-matching-if-none-match-yields-304-rfc-0165-c-2-p",
+      "file": "discovery.test.ts",
+      "line": 46,
+      "title": "IF a standard ETag is present, a matching If-None-Match yields 304 (RFC 0165 §C.2 — presence-gated)",
+      "explicitId": null,
+      "citations": [
+        {
+          "section": "RFC 0165 §C.2",
+          "requirement": "ETag, when present, MUST be a non-empty validator"
+        },
+        {
+          "section": "capabilities-change-detection.md §\"Cache validators\"",
+          "requirement": "a matching If-None-Match SHOULD yield 304 Not Modified"
+        }
+      ]
+    },
     {
       "id": "openwop.it.discovery.if-capabilities-etag-is-present-it-is-non-empty-and-stable-within-the-cache-wind",
       "file": "discovery.test.ts",
-      "line": 45,
+      "line": 57,
       "title": "IF Capabilities-Etag is present, it is non-empty and stable within the cache window",
       "explicitId": null,
       "citations": [
@@ -8054,7 +8079,7 @@
     {
       "id": "openwop.it.discovery.declares-non-zero-limits-per-capabilities-md-3-capabilitylimiter-shape",
       "file": "discovery.test.ts",
-      "line": 71,
+      "line": 83,
       "title": "declares non-zero limits per capabilities.md §3 (CapabilityLimiter shape)",
       "explicitId": null,
       "citations": [
@@ -8077,7 +8102,7 @@
     {
       "id": "openwop.it.discovery.if-fixtures-is-present-it-must-be-a-string-of-unique-non-empty-entries",
       "file": "discovery.test.ts",
-      "line": 95,
+      "line": 107,
       "title": "IF fixtures is present, it MUST be a string[] of unique non-empty entries",
       "explicitId": null,
       "citations": [
@@ -8102,7 +8127,7 @@
     {
       "id": "openwop.it.discovery.returns-200-with-a-parseable-openapi-3-1-document",
       "file": "discovery.test.ts",
-      "line": 135,
+      "line": 147,
       "title": "returns 200 with a parseable OpenAPI 3.1 document",
       "explicitId": null,
       "citations": [
@@ -8119,7 +8144,7 @@
     {
       "id": "openwop.it.discovery.host-claiming-auth-scoped-discovery-advertises-required-fields",
       "file": "discovery.test.ts",
-      "line": 194,
+      "line": 206,
       "title": "host claiming auth-scoped discovery advertises required fields",
       "explicitId": null,
       "citations": [
@@ -8140,7 +8165,7 @@
     {
       "id": "openwop.it.discovery.authenticated-discovery-preserves-required-capabilities-fields",
       "file": "discovery.test.ts",
-      "line": 230,
+      "line": 242,
       "title": "authenticated discovery preserves required Capabilities fields",
       "explicitId": null,
       "citations": [
@@ -8158,7 +8183,7 @@
     {
       "id": "openwop.it.discovery.unauthorized-key-must-not-reveal-capabilities-outside-its-authorization",
       "file": "discovery.test.ts",
-      "line": 271,
+      "line": 283,
       "title": "unauthorized key MUST NOT reveal capabilities outside its authorization",
       "explicitId": null,
       "citations": [
@@ -11581,7 +11606,7 @@
     {
       "id": "openwop.it.identity-owner-shape.run-snapshot-schema-json-defines-an-optional-owner-triple",
       "file": "identity-owner-shape.test.ts",
-      "line": 35,
+      "line": 37,
       "title": "run-snapshot.schema.json defines an optional owner triple",
       "explicitId": null,
       "citations": []
@@ -11589,7 +11614,7 @@
     {
       "id": "openwop.it.identity-owner-shape.positive-tenant-only-owner-validates",
       "file": "identity-owner-shape.test.ts",
-      "line": 46,
+      "line": 50,
       "title": "positive: tenant-only owner validates",
       "explicitId": null,
       "citations": []
@@ -11597,7 +11622,7 @@
     {
       "id": "openwop.it.identity-owner-shape.positive-full-triple-validates",
       "file": "identity-owner-shape.test.ts",
-      "line": 50,
+      "line": 54,
       "title": "positive: full triple validates",
       "explicitId": null,
       "citations": []
@@ -11605,7 +11630,7 @@
     {
       "id": "openwop.it.identity-owner-shape.negative-owner-missing-tenant-is-rejected-tenant-is-required",
       "file": "identity-owner-shape.test.ts",
-      "line": 57,
+      "line": 61,
       "title": "negative: owner missing tenant is rejected (tenant is required)",
       "explicitId": null,
       "citations": []
@@ -11613,7 +11638,7 @@
     {
       "id": "openwop.it.identity-owner-shape.negative-unknown-owner-property-is-rejected-additionalproperties-false",
       "file": "identity-owner-shape.test.ts",
-      "line": 61,
+      "line": 65,
       "title": "negative: unknown owner property is rejected (additionalProperties:false)",
       "explicitId": null,
       "citations": []
@@ -14556,6 +14581,141 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.owner-subject-echo.subject-is-consistent-with-the-owner-triple-b-2-and-the-actor-chain-is-bounded-b",
+      "file": "owner-subject-echo.test.ts",
+      "line": 77,
+      "title": "subject is consistent with the owner triple (§B.2) and the actor chain is bounded (§B.5)",
+      "explicitId": null,
+      "citations": [
+        {
+          "section": "RFC 0165 §B.2",
+          "requirement": "subject.tenant MUST equal owner.tenant"
+        },
+        {
+          "section": "RFC 0165 §B.2",
+          "requirement": "subject.subjectId MUST equal owner.principal when both are present"
+        },
+        {
+          "section": "RFC 0165 §B.2",
+          "requirement": "subject.kind MUST equal owner.principalKind when both are present"
+        },
+        {
+          "section": "RFC 0165 §B.2",
+          "requirement": "keyClass MUST be present on a linkable lane"
+        },
+        {
+          "section": "RFC 0165 §B.2",
+          "requirement": "keyClass MUST be absent off the linkable lanes"
+        },
+        {
+          "section": "RFC 0165 §B.5",
+          "requirement": "actor chain depth MUST NOT exceed 4"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.owner-subject-echo.run-started-echoes-the-snapshot-subject-verbatim-b-2-rfc-0048-c",
+      "file": "owner-subject-echo.test.ts",
+      "line": 99,
+      "title": "run.started echoes the snapshot subject verbatim (§B.2, RFC 0048 §C)",
+      "explicitId": null,
+      "citations": [
+        {
+          "section": "RFC 0048 §C",
+          "requirement": "run.started MUST be present in the event log"
+        },
+        {
+          "section": "RFC 0165 §B.2",
+          "requirement": "run.started owner.subject MUST equal RunSnapshot.owner.subject"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.owner-subject-echo.a-fork-copies-owner-tenant-and-owner-subject-verbatim-onto-the-child-b-4",
+      "file": "owner-subject-echo.test.ts",
+      "line": 110,
+      "title": "a fork copies owner.tenant and owner.subject verbatim onto the child (§B.4)",
+      "explicitId": null,
+      "citations": [
+        {
+          "section": "replay.md §\"Fork ownership\"",
+          "requirement": ":fork MUST return 201 for a completed noop run"
+        },
+        {
+          "section": "RFC 0165 §B.4",
+          "requirement": "the child owner.tenant MUST equal the source"
+        },
+        {
+          "section": "RFC 0165 §B.4",
+          "requirement": "the child owner.subject MUST be copied verbatim from the source"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.owner-subject-shape.compiles-and-accepts-a-full-saml-subject",
+      "file": "owner-subject-shape.test.ts",
+      "line": 43,
+      "title": "compiles and accepts a full SAML subject",
+      "explicitId": null,
+      "citations": []
+    },
+    {
+      "id": "openwop.it.owner-subject-shape.accepts-the-legacy-issuer-form-rfc-0165-b-3-and-a-workload-subject",
+      "file": "owner-subject-shape.test.ts",
+      "line": 47,
+      "title": "accepts the legacy issuer form (RFC 0165 §B.3) and a workload subject",
+      "explicitId": null,
+      "citations": []
+    },
+    {
+      "id": "openwop.it.owner-subject-shape.rejects-an-email-shaped-or-whitespace-subjectid-invariant-subject-record-opaque",
+      "file": "owner-subject-shape.test.ts",
+      "line": 52,
+      "title": "rejects an email-shaped or whitespace subjectId (invariant subject-record-opaque)",
+      "explicitId": null,
+      "citations": []
+    },
+    {
+      "id": "openwop.it.owner-subject-shape.requires-keyclass-on-the-saml-scim-lanes-and-forbids-it-elsewhere",
+      "file": "owner-subject-shape.test.ts",
+      "line": 57,
+      "title": "requires keyClass on the saml/scim lanes and forbids it elsewhere",
+      "explicitId": null,
+      "citations": []
+    },
+    {
+      "id": "openwop.it.owner-subject-shape.rejects-an-unknown-member-and-a-missing-required-member",
+      "file": "owner-subject-shape.test.ts",
+      "line": 64,
+      "title": "rejects an unknown member and a missing required member",
+      "explicitId": null,
+      "citations": []
+    },
+    {
+      "id": "openwop.it.owner-subject-shape.accepts-a-nested-actor-chain-depth-is-a-host-obligation-rfc-0165-b-5",
+      "file": "owner-subject-shape.test.ts",
+      "line": 70,
+      "title": "accepts a nested actor chain (depth is a host obligation, RFC 0165 §B.5)",
+      "explicitId": null,
+      "citations": []
+    },
+    {
+      "id": "openwop.it.owner-subject-shape.runsnapshot-owner-accepts-a-subject-and-still-rejects-an-undeclared-member",
+      "file": "owner-subject-shape.test.ts",
+      "line": 82,
+      "title": "RunSnapshot.owner accepts a subject and still rejects an undeclared member",
+      "explicitId": null,
+      "citations": []
+    },
+    {
+      "id": "openwop.it.owner-subject-shape.run-started-owner-echo-accepts-the-same-subject-and-principalkind-the-echo-match",
+      "file": "owner-subject-shape.test.ts",
+      "line": 88,
+      "title": "run.started owner echo accepts the same subject AND principalKind (the echo matches the snapshot)",
+      "explicitId": null,
+      "citations": []
+    },
     {
       "id": "openwop.it.pack-manifest-extension-opacity.leg-1-an-extension-bearing-manifest-installs",
       "file": "pack-manifest-extension-opacity.test.ts",
@@ -16816,6 +16976,73 @@
       "explicitId": null,
       "citations": []
     },
+    {
+      "id": "openwop.it.protocol-versions-array.declares-root-protocolversions-as-a-unique-non-empty-string-array",
+      "file": "protocol-versions-array.test.ts",
+      "line": 44,
+      "title": "declares root `protocolVersions` as a unique, non-empty string array",
+      "explicitId": null,
+      "citations": []
+    },
+    {
+      "id": "openwop.it.protocol-versions-array.item-grammar-equals-the-scalar-grammar-one-axis-one-grammar",
+      "file": "protocol-versions-array.test.ts",
+      "line": 52,
+      "title": "item grammar equals the scalar grammar (one axis, one grammar)",
+      "explicitId": null,
+      "citations": []
+    },
+    {
+      "id": "openwop.it.protocol-versions-array.accepts-1-11-2-0-rejects-01-0-1-0-0-duplicates-and-empty",
+      "file": "protocol-versions-array.test.ts",
+      "line": 59,
+      "title": "accepts [\"1.11\", \"2.0\"], rejects \"01.0\", \"1.0.0\", duplicates, and empty",
+      "explicitId": null,
+      "citations": []
+    },
+    {
+      "id": "openwop.it.protocol-versions-array.when-advertised-every-item-matches-the-grammar-items-are-unique-and-the-array-co",
+      "file": "protocol-versions-array.test.ts",
+      "line": 73,
+      "title": "when advertised, every item matches the grammar, items are unique, and the array contains protocolVersion",
+      "explicitId": null,
+      "citations": [
+        {
+          "section": "RFC 0165 §A.1",
+          "requirement": "protocolVersions MUST be an array"
+        },
+        {
+          "section": "RFC 0165 §A.1",
+          "requirement": "protocolVersions MUST be non-empty"
+        },
+        {
+          "section": "RFC 0165 §A.1",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "RFC 0165 §A.1",
+          "requirement": "protocolVersions items MUST be unique"
+        },
+        {
+          "section": "RFC 0165 §A.2",
+          "requirement": "protocolVersions MUST contain the value of protocolVersion"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.protocol-versions-array.profile-derivation-is-unchanged-by-the-array-iscore-reads-the-scalar-only",
+      "file": "protocol-versions-array.test.ts",
+      "line": 90,
+      "title": "profile derivation is unchanged by the array (isCore reads the scalar only)",
+      "explicitId": null,
+      "citations": [
+        {
+          "section": "RFC 0165 §A.2",
+          "requirement": "openwop-discovery-core derivation MUST NOT depend on protocolVersions in v1.x"
+        }
+      ]
+    },
     {
       "id": "openwop.it.provider-usage.capabilities-providerusage-is-either-absent-or-a-well-formed-object",
       "file": "provider-usage.test.ts",
@@ -22365,13 +22592,22 @@
         {
           "section": "webhooks.md §\"Delivery headers\"",
           "requirement": "X-openwop-Signature MUST be sha256=HMAC-SHA256(secret, `${X-openwop-Timestamp}.${rawBody}`)"
+        },
+        {
+          "section": "RFC 0165 §C.1",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "RFC 0165 §C.1",
+          "requirement": "OpenWOP-Signature MUST verify over the same bytes as X-openwop-Signature"
         }
       ]
     },
     {
       "id": "openwop.it.webhook-signed-delivery.control-with-a-tunnel-wired-the-host-still-refuses-the-loopback-receiver",
       "file": "webhook-signed-delivery.test.ts",
-      "line": 356,
+      "line": 378,
       "title": "control: with a tunnel wired, the host still refuses the loopback receiver",
       "explicitId": null,
       "citations": [