@openwop/openwop-conformance 1.162.0 → 2.0.0-rc.0

package/src/scenarios/aiproviders-selfhosted-shape.test.ts

@@ -32,9 +32,7 @@ import { join } from 'node:path';
 import Ajv2020 from 'ajv/dist/2020.js';
 import addFormats from 'ajv-formats';
 import { SCHEMAS_DIR } from '../lib/paths.js';
-
-/** Server-free assertion-message helper. */
-const why = (specRef: string, requirement: string): string => `${specRef} — ${requirement}`;
+import { req } from '../lib/requirement-ids.js';
 
 function loadSchema(name: string): Record<string, unknown> {
   return JSON.parse(readFileSync(join(SCHEMAS_DIR, name), 'utf8')) as Record<string, unknown>;
@@ -87,19 +85,19 @@ describe('aiproviders-selfhosted-shape: self-hosted provider-class advertisement
       | undefined;
     expect(
       selfHosted,
-      why('capabilities.md §aiProviders.selfHosted', 'aiProviders.selfHosted MUST be declared'),
+      req('openwop.it.aiproviders-selfhosted-shape.aiproviders-selfhosted-is-declared-as-a-string-with-uniqueitems', 'capabilities.md §aiProviders.selfHosted', 'aiProviders.selfHosted MUST be declared'),
     ).toBeDefined();
-    expect(selfHosted?.type, why('RFC 0108 §A', 'selfHosted MUST be an array')).toBe('array');
+    expect(selfHosted?.type, req('openwop.it.aiproviders-selfhosted-shape.aiproviders-selfhosted-is-declared-as-a-string-with-uniqueitems', 'RFC 0108 §A', 'selfHosted MUST be an array')).toBe('array');
     expect(
       selfHosted?.uniqueItems,
-      why('RFC 0108 §A', 'selfHosted entries MUST be unique'),
+      req('openwop.it.aiproviders-selfhosted-shape.aiproviders-selfhosted-is-declared-as-a-string-with-uniqueitems', 'RFC 0108 §A', 'selfHosted entries MUST be unique'),
     ).toBe(true);
-    expect(selfHosted?.items?.type, why('RFC 0108 §A', 'selfHosted entries MUST be strings')).toBe(
+    expect(selfHosted?.items?.type, req('openwop.it.aiproviders-selfhosted-shape.aiproviders-selfhosted-is-declared-as-a-string-with-uniqueitems', 'RFC 0108 §A', 'selfHosted entries MUST be strings')).toBe(
       'string',
     );
     expect(
       selfHosted?.items?.minLength,
-      why('RFC 0108 §A', 'a selfHosted id MUST be non-empty'),
+      req('openwop.it.aiproviders-selfhosted-shape.aiproviders-selfhosted-is-declared-as-a-string-with-uniqueitems', 'RFC 0108 §A', 'a selfHosted id MUST be non-empty'),
     ).toBe(1);
   });
 
@@ -109,7 +107,7 @@ describe('aiproviders-selfhosted-shape: self-hosted provider-class advertisement
     const required = Array.isArray(aiProviders?.required) ? (aiProviders!.required as string[]) : [];
     expect(
       required.includes('selfHosted'),
-      why('RFC 0108 §A.1', 'aiProviders.selfHosted MUST be optional'),
+      req('openwop.it.aiproviders-selfhosted-shape.selfhosted-is-not-in-aiproviders-required-absence-no-self-hosted-endpoint-is-a-v', 'RFC 0108 §A.1', 'aiProviders.selfHosted MUST be optional'),
     ).toBe(false);
   });
 
@@ -125,19 +123,19 @@ describe('aiproviders-selfhosted-shape: self-hosted provider-class advertisement
 
     expect(
       validate(['ollama', 'compat']),
-      why('RFC 0108 §A', 'a conforming selfHosted array MUST validate'),
+      req('openwop.it.aiproviders-selfhosted-shape.ajv-accepts-a-conforming-selfhosted-array-and-rejects-non-array-duplicate-empty', 'RFC 0108 §A', 'a conforming selfHosted array MUST validate'),
     ).toBe(true);
     expect(
       validate('ollama'),
-      why('RFC 0108 §A', 'a non-array selfHosted MUST be rejected'),
+      req('openwop.it.aiproviders-selfhosted-shape.ajv-accepts-a-conforming-selfhosted-array-and-rejects-non-array-duplicate-empty', 'RFC 0108 §A', 'a non-array selfHosted MUST be rejected'),
     ).toBe(false);
     expect(
       validate(['ollama', 'ollama']),
-      why('RFC 0108 §A', 'duplicate selfHosted entries MUST be rejected (uniqueItems)'),
+      req('openwop.it.aiproviders-selfhosted-shape.ajv-accepts-a-conforming-selfhosted-array-and-rejects-non-array-duplicate-empty', 'RFC 0108 §A', 'duplicate selfHosted entries MUST be rejected (uniqueItems)'),
     ).toBe(false);
     expect(
       validate(['']),
-      why('RFC 0108 §A', 'an empty-string selfHosted id MUST be rejected (minLength 1)'),
+      req('openwop.it.aiproviders-selfhosted-shape.ajv-accepts-a-conforming-selfhosted-array-and-rejects-non-array-duplicate-empty', 'RFC 0108 §A', 'an empty-string selfHosted id MUST be rejected (minLength 1)'),
     ).toBe(false);
   });
 
@@ -149,13 +147,13 @@ describe('aiproviders-selfhosted-shape: self-hosted provider-class advertisement
         byok: ['anthropic', 'openai', 'compat'],
         selfHosted: ['ollama', 'compat'],
       }),
-      why('RFC 0108 §A.1/§A.3', 'a conforming advertisement MUST have no violations'),
+      req('openwop.it.aiproviders-selfhosted-shape.a-1-subset-a-3-non-disclosure-a-conforming-doc-has-no-violations-an-out-of-subse', 'RFC 0108 §A.1/§A.3', 'a conforming advertisement MUST have no violations'),
     ).toEqual([]);
 
     // §A.1 violation: `vllm` not in supported.
     expect(
       validateSelfHosted({ supported: ['anthropic', 'ollama'], selfHosted: ['ollama', 'vllm'] }),
-      why('RFC 0108 §A.1', 'a selfHosted id absent from supported MUST be flagged'),
+      req('openwop.it.aiproviders-selfhosted-shape.a-1-subset-a-3-non-disclosure-a-conforming-doc-has-no-violations-an-out-of-subse', 'RFC 0108 §A.1', 'a selfHosted id absent from supported MUST be flagged'),
     ).not.toEqual([]);
 
     // §A.3 violations: URL-shaped ids leak the endpoint location.
@@ -166,14 +164,14 @@ describe('aiproviders-selfhosted-shape: self-hosted provider-class advertisement
     ]) {
       expect(
         isUrlShaped(leaky),
-        why('RFC 0108 §A.3', `the URL-shaped id "${leaky}" MUST be detected as non-conformant`),
+        req('openwop.it.aiproviders-selfhosted-shape.a-1-subset-a-3-non-disclosure-a-conforming-doc-has-no-violations-an-out-of-subse', 'RFC 0108 §A.3', `the URL-shaped id "${leaky}" MUST be detected as non-conformant`),
       ).toBe(true);
     }
 
     // A label with a non-numeric suffix (`compat:label`) is NOT URL-shaped — it is a permitted opaque id.
     expect(
       isUrlShaped('compat:local-ollama'),
-      why('RFC 0108 §A.3', 'an opaque `compat:<label>` id (no host:port) MUST be permitted'),
+      req('openwop.it.aiproviders-selfhosted-shape.a-1-subset-a-3-non-disclosure-a-conforming-doc-has-no-violations-an-out-of-subse', 'RFC 0108 §A.3', 'an opaque `compat:<label>` id (no host:port) MUST be permitted'),
     ).toBe(false);
   });
 });

package/src/scenarios/aiproviders-speechsynth-shape.test.ts

@@ -31,9 +31,7 @@ import { join } from 'node:path';
 import Ajv2020 from 'ajv/dist/2020.js';
 import addFormats from 'ajv-formats';
 import { SCHEMAS_DIR } from '../lib/paths.js';
-
-/** Server-free assertion-message helper. */
-const why = (specRef: string, requirement: string): string => `${specRef} — ${requirement}`;
+import { req } from '../lib/requirement-ids.js';
 
 function loadSchema(name: string): Record<string, unknown> {
   return JSON.parse(readFileSync(join(SCHEMAS_DIR, name), 'utf8')) as Record<string, unknown>;
@@ -49,11 +47,11 @@ describe('aiproviders-speechsynth-shape: capability advertisement (RFC 0105 §B,
       | undefined;
     expect(
       speechSynthesis,
-      why('host-capabilities.md §host.aiProviders', 'aiProviders.speechSynthesis MUST be declared'),
+      req('openwop.it.aiproviders-speechsynth-shape.aiproviders-speechsynthesis-is-declared-as-the-string-const-supported', 'host-capabilities.md §host.aiProviders', 'aiProviders.speechSynthesis MUST be declared'),
     ).toBeDefined();
     expect(
       speechSynthesis?.const,
-      why('RFC 0105 §B', 'aiProviders.speechSynthesis MUST be the string const "supported" (not an object)'),
+      req('openwop.it.aiproviders-speechsynth-shape.aiproviders-speechsynthesis-is-declared-as-the-string-const-supported', 'RFC 0105 §B', 'aiProviders.speechSynthesis MUST be the string const "supported" (not an object)'),
     ).toBe('supported');
   });
 
@@ -63,7 +61,7 @@ describe('aiproviders-speechsynth-shape: capability advertisement (RFC 0105 §B,
     const required = Array.isArray(aiProviders?.required) ? (aiProviders!.required as string[]) : [];
     expect(
       required.includes('speechSynthesis'),
-      why('RFC 0105 §B', 'aiProviders.speechSynthesis MUST be optional (a host without TTS is valid)'),
+      req('openwop.it.aiproviders-speechsynth-shape.speechsynthesis-is-not-in-aiproviders-required-absence-no-tts-is-a-valid-default', 'RFC 0105 §B', 'aiProviders.speechSynthesis MUST be optional (a host without TTS is valid)'),
     ).toBe(false);
   });
 
@@ -81,12 +79,12 @@ describe('aiproviders-speechsynth-shape: capability advertisement (RFC 0105 §B,
 
     expect(
       validate('supported'),
-      why('RFC 0105 §B', 'aiProviders.speechSynthesis === "supported" MUST validate'),
+      req('openwop.it.aiproviders-speechsynth-shape.ajv-accepts-the-string-const-form-and-rejects-the-object-form', 'RFC 0105 §B', 'aiProviders.speechSynthesis === "supported" MUST validate'),
     ).toBe(true);
 
     expect(
       validate({ supported: true }),
-      why('RFC 0105 §B', 'the object form { supported: true } MUST be rejected by the const'),
+      req('openwop.it.aiproviders-speechsynth-shape.ajv-accepts-the-string-const-form-and-rejects-the-object-form', 'RFC 0105 §B', 'the object form { supported: true } MUST be rejected by the const'),
     ).toBe(false);
   });
 });

package/src/scenarios/aiproviders-subscription-scope.test.ts

@@ -38,9 +38,8 @@ import { driver } from '../lib/driver.js';
 import { behaviorGate } from '../lib/behavior-gate.js';
 import { readCapabilityFamily } from '../lib/discovery-capabilities.js';
 import { SCHEMAS_DIR } from '../lib/paths.js';
-
-/** Server-free assertion-message helper. */
-const why = (specRef: string, requirement: string): string => `${specRef} — ${requirement}`;
+import { req } from '../lib/requirement-ids.js';
+import { softSkip } from '../lib/soft-skip.js';
 
 /** Read the canonical error code from a response body (tolerant of
  *  `{error}` / `{code}` / `{error:{code}}` shapes). */
@@ -73,7 +72,7 @@ describe('aiproviders-subscription-scope: schema shape (RFC 0121, server-free)',
       | undefined;
     expect(
       authModes?.additionalProperties?.items?.enum,
-      why('capabilities.md §aiProviders.authModes', 'the authModes enum MUST include "subscription" (RFC 0121)'),
+      req('openwop.it.aiproviders-subscription-scope.the-aiproviders-authmodes-enum-includes-subscription', 'capabilities.md §aiProviders.authModes', 'the authModes enum MUST include "subscription" (RFC 0121)'),
     ).toContain('subscription');
   });
 });
@@ -94,7 +93,7 @@ describe('aiproviders-subscription-scope: §B.7 in-byok (advertisement-gated)',
     for (const provider of subProviders) {
       expect(
         byok.has(provider),
-        driver.describe('RFC 0121 §B.7', `subscription provider '${provider}' MUST appear in aiProviders.byok`),
+        req('openwop.it.aiproviders-subscription-scope.every-advertised-subscription-provider-appears-in-aiproviders-byok', 'RFC 0121 §B.7', `subscription provider '${provider}' MUST appear in aiProviders.byok`),
       ).toBe(true);
     }
   });
@@ -110,18 +109,18 @@ describe('aiproviders-subscription-scope: §B.8 user-scope-only (bind-seam-gated
     // multi-instance deploy with no durable per-user login) can still prove the
     // safety rail here. Soft-skips on 404 when the seam is unwired.
     const res = await driver.post(SEAM, { provider: 'anthropic', mode: 'subscription', scope: 'tenant' });
-    if (res.status === 404) return; // seam unwired — soft-skip
+    if (res.status === 404) return softSkip('blocked', 'precondition not met — `res.status === 404` returned early (seam unwired — soft-skip) (seam, prior step, or fixture unavailable)'); // seam unwired — soft-skip
 
     expect(
       res.status >= 400,
-      driver.describe(
+      req('openwop.it.aiproviders-subscription-scope.a-tenant-scope-subscription-binding-is-rejected-with-credential-scope-forbidden', 
         'RFC 0121 §B.8',
         `binding a subscription credential at tenant scope MUST be rejected (got HTTP ${res.status})`,
       ),
     ).toBe(true);
     expect(
       errCode(res.json),
-      driver.describe(
+      req('openwop.it.aiproviders-subscription-scope.a-tenant-scope-subscription-binding-is-rejected-with-credential-scope-forbidden', 
         'RFC 0121 §B.8',
         'a rejected tenant-scope subscription binding MUST carry the canonical `credential_scope_forbidden` error code',
       ),

package/src/scenarios/anonymous-actor-audit-opaque.test.ts

@@ -18,8 +18,9 @@
 
 import { describe, it, expect } from 'vitest';
 import { behaviorGate } from '../lib/behavior-gate.js';
-import { driver } from '../lib/driver.js';
 import { isAnonymousActorAdvertised, anonDispatch } from '../lib/anonymousActor.js';
+import { req } from '../lib/requirement-ids.js';
+import { softSkip } from '../lib/soft-skip.js';
 
 const PROFILE = 'openwop-anonymous-actor';
 
@@ -33,19 +34,19 @@ describe('anonymous-actor-audit-opaque (RFC 0132 §D)', () => {
   it('the authorization.decided principal is opaque, non-PII, and the record carries no credential', async () => {
     if (!behaviorGate(PROFILE, await isAnonymousActorAdvertised())) return;
     const res = await anonDispatch({ tool: 'catalog.read' });
-    if (res.status === 404 || res.status === 405) return; // seam unwired — soft-skip
+    if (res.status === 404 || res.status === 405) return softSkip('blocked', 'precondition not met — `res.status === 404 || res.status === 405` returned early (seam unwired — soft-skip) (seam, prior step, or fixture unavailable)'); // seam unwired — soft-skip
 
     const decided = res.json?.authorizationDecided?.payload;
     expect(
       decided?.principal,
-      driver.describe('RFC 0132 §D', 'an anon tool call MUST emit authorization.decided with a principal'),
+      req('openwop.it.anonymous-actor-audit-opaque.the-authorization-decided-principal-is-opaque-non-pii-and-the-record-carries-no', 'RFC 0132 §D', 'an anon tool call MUST emit authorization.decided with a principal'),
     ).toBeTruthy();
 
     const principal = decided?.principal ?? '';
     for (const [pattern, label] of PII_PATTERNS) {
       expect(
         pattern.test(principal),
-        driver.describe('SECURITY anon-actor-audit-opaque', `the anon principal MUST NOT embed ${label}`),
+        req('openwop.it.anonymous-actor-audit-opaque.the-authorization-decided-principal-is-opaque-non-pii-and-the-record-carries-no', 'SECURITY anon-actor-audit-opaque', `the anon principal MUST NOT embed ${label}`),
       ).toBe(false);
     }
     // The record MUST NOT carry credential material (reason is redaction-safe).
@@ -53,7 +54,7 @@ describe('anonymous-actor-audit-opaque (RFC 0132 §D)', () => {
     for (const [pattern, label] of PII_PATTERNS) {
       expect(
         pattern.test(serialized),
-        driver.describe('SECURITY anon-actor-audit-opaque', `the audit record MUST NOT carry ${label}`),
+        req('openwop.it.anonymous-actor-audit-opaque.the-authorization-decided-principal-is-opaque-non-pii-and-the-record-carries-no', 'SECURITY anon-actor-audit-opaque', `the audit record MUST NOT carry ${label}`),
       ).toBe(false);
     }
   });
@@ -61,11 +62,11 @@ describe('anonymous-actor-audit-opaque (RFC 0132 §D)', () => {
   it('the run snapshot echoes owner.principalKind "anonymous"', async () => {
     if (!behaviorGate(PROFILE, await isAnonymousActorAdvertised())) return;
     const res = await anonDispatch({ tool: 'catalog.read' });
-    if (res.status === 404 || res.status === 405) return; // seam unwired — soft-skip
-    if (!res.json?.owner) return; // seam does not echo an owner triple — nothing to assert
+    if (res.status === 404 || res.status === 405) return softSkip('blocked', 'precondition not met — `res.status === 404 || res.status === 405` returned early (seam unwired — soft-skip) (seam, prior step, or fixture unavailable)'); // seam unwired — soft-skip
+    if (!res.json?.owner) return softSkip('blocked', 'precondition not met — `!res.json?.owner` returned early (seam does not echo an owner triple — nothing to assert) (seam, prior step, or fixture unavailable)'); // seam does not echo an owner triple — nothing to assert
     expect(
       res.json.owner.principalKind,
-      driver.describe('RFC 0132 §A', 'an anon-authorized run MUST set owner.principalKind "anonymous"'),
+      req('openwop.it.anonymous-actor-audit-opaque.the-run-snapshot-echoes-owner-principalkind-anonymous', 'RFC 0132 §A', 'an anon-authorized run MUST set owner.principalKind "anonymous"'),
     ).toBe('anonymous');
   });
 });

package/src/scenarios/anonymous-actor-default-deny.test.ts

@@ -24,13 +24,14 @@
 
 import { describe, it, expect } from 'vitest';
 import { behaviorGate } from '../lib/behavior-gate.js';
-import { driver } from '../lib/driver.js';
 import {
   isAnonymousActorAdvertised,
   anonDispatch,
   anonToolCatalog,
   readAnonymousActorCap,
 } from '../lib/anonymousActor.js';
+import { req } from '../lib/requirement-ids.js';
+import { softSkip } from '../lib/soft-skip.js';
 
 const PROFILE = 'openwop-anonymous-actor';
 
@@ -41,36 +42,36 @@ describe('anonymous-actor-default-deny (RFC 0132 §C.1)', () => {
   it('the anon tool catalog returns only the explicit surface grant — never a default baseline', async () => {
     if (!behaviorGate(PROFILE, await isAnonymousActorAdvertised())) return;
     const cat = await anonToolCatalog();
-    if (cat.status === 404 || cat.status === 405) return; // seam unwired — soft-skip
+    if (cat.status === 404 || cat.status === 405) return softSkip('blocked', 'precondition not met — `cat.status === 404 || cat.status === 405` returned early (seam unwired — soft-skip) (seam, prior step, or fixture unavailable)'); // seam unwired — soft-skip
     expect(
       cat.status,
-      driver.describe('RFC 0132 §C.1', 'the anon tool-catalog read MUST resolve (scoped to the anon principal)'),
+      req('openwop.it.anonymous-actor-default-deny.the-anon-tool-catalog-returns-only-the-explicit-surface-grant-never-a-default-ba', 'RFC 0132 §C.1', 'the anon tool-catalog read MUST resolve (scoped to the anon principal)'),
     ).toBe(200);
     // Default-deny: the ungranted baseline tool MUST NOT appear in the anon catalog.
     const names = cat.tools.map((t) => t.name);
     expect(
       names,
-      driver.describe('RFC 0132 §C.1', 'a default-on baseline tool MUST NOT appear in the anon grant'),
+      req('openwop.it.anonymous-actor-default-deny.the-anon-tool-catalog-returns-only-the-explicit-surface-grant-never-a-default-ba', 'RFC 0132 §C.1', 'a default-on baseline tool MUST NOT appear in the anon grant'),
     ).not.toContain(UNGRANTED_TOOL);
   });
 
   it('calling a non-granted tool denies with reason "anon-not-granted" and does not dispatch', async () => {
     if (!behaviorGate(PROFILE, await isAnonymousActorAdvertised())) return;
     const res = await anonDispatch({ tool: UNGRANTED_TOOL });
-    if (res.status === 404 || res.status === 405) return; // seam unwired — soft-skip
+    if (res.status === 404 || res.status === 405) return softSkip('blocked', 'precondition not met — `res.status === 404 || res.status === 405` returned early (seam unwired — soft-skip) (seam, prior step, or fixture unavailable)'); // seam unwired — soft-skip
     const decided = res.json?.authorizationDecided?.payload;
     expect(
       decided?.allowed,
-      driver.describe('RFC 0132 §C.1', 'a non-granted anon tool MUST be denied (allowed:false), never default-allowed'),
+      req('openwop.it.anonymous-actor-default-deny.calling-a-non-granted-tool-denies-with-reason-anon-not-granted-and-does-not-disp', 'RFC 0132 §C.1', 'a non-granted anon tool MUST be denied (allowed:false), never default-allowed'),
     ).toBe(false);
     expect(
       decided?.reason,
-      driver.describe('RFC 0132 §C.1', 'a default-deny denial carries the machine reason "anon-not-granted"'),
+      req('openwop.it.anonymous-actor-default-deny.calling-a-non-granted-tool-denies-with-reason-anon-not-granted-and-does-not-disp', 'RFC 0132 §C.1', 'a default-deny denial carries the machine reason "anon-not-granted"'),
     ).toBe('anon-not-granted');
     // No dispatch — the seam MUST NOT return a tool result for a denied call.
     expect(
       res.json?.result,
-      driver.describe('RFC 0132 §C.1', 'a denied anon tool MUST NOT dispatch (no result)'),
+      req('openwop.it.anonymous-actor-default-deny.calling-a-non-granted-tool-denies-with-reason-anon-not-granted-and-does-not-disp', 'RFC 0132 §C.1', 'a denied anon tool MUST NOT dispatch (no result)'),
     ).toBeUndefined();
   });
 
@@ -80,7 +81,7 @@ describe('anonymous-actor-default-deny (RFC 0132 §C.1)', () => {
     if ((cap?.tiers ?? []).includes('bounded-write-egress')) {
       expect(
         (cap?.writeEgressControls ?? []).length,
-        driver.describe('RFC 0132 §B.2', 'bounded-write-egress MUST advertise ≥1 writeEgressControl'),
+        req('openwop.it.anonymous-actor-default-deny.a-host-that-advertises-bounded-write-egress-also-advertises-a-mandatory-control', 'RFC 0132 §B.2', 'bounded-write-egress MUST advertise ≥1 writeEgressControl'),
       ).toBeGreaterThan(0);
     }
   });

package/src/scenarios/anonymous-actor-egress-guarded.test.ts

@@ -21,8 +21,9 @@
 
 import { describe, it, expect } from 'vitest';
 import { behaviorGate } from '../lib/behavior-gate.js';
-import { driver } from '../lib/driver.js';
 import { readAnonymousActorCap, anonDispatch } from '../lib/anonymousActor.js';
+import { req } from '../lib/requirement-ids.js';
+import { softSkip } from '../lib/soft-skip.js';
 
 const PROFILE = 'openwop-anonymous-actor';
 
@@ -36,19 +37,19 @@ describe('anonymous-actor-egress-guarded (RFC 0132 §C.3)', () => {
       tool: 'http.fetch',
       destination: 'https://attacker.example/exfil',
     });
-    if (res.status === 404 || res.status === 405) return; // seam unwired — soft-skip
+    if (res.status === 404 || res.status === 405) return softSkip('blocked', 'precondition not met — `res.status === 404 || res.status === 405` returned early (seam unwired — soft-skip) (seam, prior step, or fixture unavailable)'); // seam unwired — soft-skip
     const egress = res.json?.egressDecided;
     expect(
       egress,
-      driver.describe('RFC 0132 §C.3', 'an anon egress MUST ride the RFC 0079 egress-decision path'),
+      req('openwop.it.anonymous-actor-egress-guarded.an-out-of-audience-anon-egress-is-denied-downgraded-and-attaches-no-credential', 'RFC 0132 §C.3', 'an anon egress MUST ride the RFC 0079 egress-decision path'),
     ).toBeDefined();
     expect(
       ['denied', 'downgraded'],
-      driver.describe('RFC 0132 §C.3', 'an out-of-audience anon egress MUST be denied or downgraded — never allowed-with-credential'),
+      req('openwop.it.anonymous-actor-egress-guarded.an-out-of-audience-anon-egress-is-denied-downgraded-and-attaches-no-credential', 'RFC 0132 §C.3', 'an out-of-audience anon egress MUST be denied or downgraded — never allowed-with-credential'),
     ).toContain(egress?.decision);
     expect(
       egress?.credentialAttached === true,
-      driver.describe('SECURITY anon-actor-egress-ssrf-guarded', 'no tenant/host credential MUST attach out-of-audience'),
+      req('openwop.it.anonymous-actor-egress-guarded.an-out-of-audience-anon-egress-is-denied-downgraded-and-attaches-no-credential', 'SECURITY anon-actor-egress-ssrf-guarded', 'no tenant/host credential MUST attach out-of-audience'),
     ).toBe(false);
   });
 });

package/src/scenarios/anonymous-actor-no-secret-reach.test.ts

@@ -19,8 +19,9 @@
 
 import { describe, it, expect } from 'vitest';
 import { behaviorGate } from '../lib/behavior-gate.js';
-import { driver } from '../lib/driver.js';
 import { isAnonymousActorAdvertised, anonDispatch } from '../lib/anonymousActor.js';
+import { req } from '../lib/requirement-ids.js';
+import { softSkip } from '../lib/soft-skip.js';
 
 const PROFILE = 'openwop-anonymous-actor';
 
@@ -32,11 +33,11 @@ describe('anonymous-actor-no-secret-reach (RFC 0132 §C.2/§C.3)', () => {
   it('a read-tier anon tool call never surfaces a planted BYOK canary', async () => {
     if (!behaviorGate(PROFILE, await isAnonymousActorAdvertised())) return;
     const res = await anonDispatch({ tool: 'catalog.read', args: { probeSecrets: true } });
-    if (res.status === 404 || res.status === 405) return; // seam unwired — soft-skip
+    if (res.status === 404 || res.status === 405) return softSkip('blocked', 'precondition not met — `res.status === 404 || res.status === 405` returned early (seam unwired — soft-skip) (seam, prior step, or fixture unavailable)'); // seam unwired — soft-skip
     const serialized = JSON.stringify(res.json ?? {});
     expect(
       serialized.includes(BYOK_CANARY),
-      driver.describe('SECURITY anon-actor-no-secret-reach', 'an anon tool call MUST NOT surface secret/BYOK material'),
+      req('openwop.it.anonymous-actor-no-secret-reach.a-read-tier-anon-tool-call-never-surfaces-a-planted-byok-canary', 'SECURITY anon-actor-no-secret-reach', 'an anon tool call MUST NOT surface secret/BYOK material'),
     ).toBe(false);
   });
 
@@ -50,7 +51,7 @@ describe('anonymous-actor-no-secret-reach (RFC 0132 §C.2/§C.3)', () => {
     // one non-conformant behavior is resolving/returning the caller's tenant.
     const CROSS = 'other-tenant';
     const res = await anonDispatch({ tool: 'catalog.read', args: { tenant: CROSS } });
-    if (res.status === 404 || res.status === 405) return; // seam unwired — soft-skip
+    if (res.status === 404 || res.status === 405) return softSkip('blocked', 'precondition not met — `res.status === 404 || res.status === 405` returned early (seam unwired — soft-skip) (seam, prior step, or fixture unavailable)'); // seam unwired — soft-skip
     const decided = res.json?.authorizationDecided?.payload;
     const deniedByDecision = decided?.allowed === false;
     const deniedByStatus = res.status === 403 || res.status === 404;
@@ -61,7 +62,7 @@ describe('anonymous-actor-no-secret-reach (RFC 0132 §C.2/§C.3)', () => {
       typeof resolvedTenant === 'string' && resolvedTenant.length > 0 && resolvedTenant !== CROSS;
     expect(
       deniedByDecision || deniedByStatus || neutralizedToSurface,
-      driver.describe(
+      req('openwop.it.anonymous-actor-no-secret-reach.a-cross-tenant-read-fails-closed-the-caller-supplied-tenant-is-never-resolved', 
         'SECURITY anon-actor-no-secret-reach (CTI-1 / RFC 0132 §A.2)',
         'a cross-tenant anon read MUST fail closed — denied, or the caller-supplied tenant ignored (never resolved to the caller’s tenant)',
       ),
@@ -71,7 +72,7 @@ describe('anonymous-actor-no-secret-reach (RFC 0132 §C.2/§C.3)', () => {
     if (deniedByDecision || deniedByStatus) {
       expect(
         res.json?.result,
-        driver.describe('SECURITY anon-actor-no-secret-reach (CTI-1)', 'a denied cross-tenant anon read MUST NOT return data'),
+        req('openwop.it.anonymous-actor-no-secret-reach.a-cross-tenant-read-fails-closed-the-caller-supplied-tenant-is-never-resolved', 'SECURITY anon-actor-no-secret-reach (CTI-1)', 'a denied cross-tenant anon read MUST NOT return data'),
       ).toBeUndefined();
     }
   });

package/src/scenarios/anonymous-actor-shape.test.ts

@@ -34,9 +34,7 @@ import { join } from 'node:path';
 import Ajv2020 from 'ajv/dist/2020.js';
 import addFormats from 'ajv-formats';
 import { SCHEMAS_DIR } from '../lib/paths.js';
-
-/** Server-free assertion-message helper (mirrors driver.describe without OPENWOP_BASE_URL). */
-const why = (specRef: string, requirement: string): string => `${specRef} — ${requirement}`;
+import { req } from '../lib/requirement-ids.js';
 
 function loadSchema(name: string): Record<string, unknown> {
   return JSON.parse(readFileSync(join(SCHEMAS_DIR, name), 'utf8')) as Record<string, unknown>;
@@ -50,12 +48,12 @@ describe('anonymous-actor-shape: capability advertisement (RFC 0132 §B, server-
   it('the capabilities schema declares anonymousActor with its sub-flags', () => {
     expect(
       anon,
-      why('capabilities.md §anonymousActor', 'capabilities.anonymousActor MUST be declared'),
+      req('openwop.it.anonymous-actor-shape.the-capabilities-schema-declares-anonymousactor-with-its-sub-flags', 'capabilities.md §anonymousActor', 'capabilities.anonymousActor MUST be declared'),
     ).toBeDefined();
     for (const flag of ['supported', 'tiers', 'writeEgressControls', 'failClosed']) {
       expect(
         anon?.properties?.[flag],
-        why('capabilities.md §anonymousActor', `anonymousActor.${flag} MUST be declared`),
+        req('openwop.it.anonymous-actor-shape.the-capabilities-schema-declares-anonymousactor-with-its-sub-flags', 'capabilities.md §anonymousActor', `anonymousActor.${flag} MUST be declared`),
       ).toBeDefined();
     }
   });
@@ -68,7 +66,7 @@ describe('anonymous-actor-shape: capability advertisement (RFC 0132 §B, server-
     // Positive — read-only tier.
     expect(
       validate({ supported: true, tiers: ['read'], failClosed: true }),
-      why('RFC 0132 §B', 'a conforming read-tier advert MUST validate'),
+      req('openwop.it.anonymous-actor-shape.validates-conforming-read-bounded-write-egress-adverts-and-rejects-the-negatives', 'RFC 0132 §B', 'a conforming read-tier advert MUST validate'),
     ).toBe(true);
     // Positive — bounded-write-egress tier with a mandatory control.
     expect(
@@ -78,33 +76,33 @@ describe('anonymous-actor-shape: capability advertisement (RFC 0132 §B, server-
         writeEgressControls: ['hitl'],
         failClosed: true,
       }),
-      why('RFC 0132 §B', 'a bounded-write-egress advert with a control MUST validate'),
+      req('openwop.it.anonymous-actor-shape.validates-conforming-read-bounded-write-egress-adverts-and-rejects-the-negatives', 'RFC 0132 §B', 'a bounded-write-egress advert with a control MUST validate'),
     ).toBe(true);
 
     // Negative — empty tiers (minItems: 1).
     expect(
       validate({ supported: true, tiers: [] }),
-      why('RFC 0132 §B', 'tiers: [] MUST be rejected (minItems)'),
+      req('openwop.it.anonymous-actor-shape.validates-conforming-read-bounded-write-egress-adverts-and-rejects-the-negatives', 'RFC 0132 §B', 'tiers: [] MUST be rejected (minItems)'),
     ).toBe(false);
     // Negative — write tier without a control (the §B.2 conditional-MUST).
     expect(
       validate({ supported: true, tiers: ['bounded-write-egress'] }),
-      why('RFC 0132 §B.2', 'bounded-write-egress without writeEgressControls MUST be rejected'),
+      req('openwop.it.anonymous-actor-shape.validates-conforming-read-bounded-write-egress-adverts-and-rejects-the-negatives', 'RFC 0132 §B.2', 'bounded-write-egress without writeEgressControls MUST be rejected'),
     ).toBe(false);
     // Negative — controls advertised without the write tier (§B.2 else branch).
     expect(
       validate({ supported: true, tiers: ['read'], writeEgressControls: ['hitl'] }),
-      why('RFC 0132 §B.2', 'writeEgressControls without the write tier MUST be rejected'),
+      req('openwop.it.anonymous-actor-shape.validates-conforming-read-bounded-write-egress-adverts-and-rejects-the-negatives', 'RFC 0132 §B.2', 'writeEgressControls without the write tier MUST be rejected'),
     ).toBe(false);
     // Negative — supported: false (the block is omitted when unsupported, const: true).
     expect(
       validate({ supported: false, tiers: ['read'] }),
-      why('RFC 0132 §B', 'supported: false MUST be rejected (const: true — omit the block instead)'),
+      req('openwop.it.anonymous-actor-shape.validates-conforming-read-bounded-write-egress-adverts-and-rejects-the-negatives', 'RFC 0132 §B', 'supported: false MUST be rejected (const: true — omit the block instead)'),
     ).toBe(false);
     // Negative — unknown property (additionalProperties: false).
     expect(
       validate({ supported: true, tiers: ['read'], surface: 'wgt_abc' }),
-      why('RFC 0132 §B', 'an unknown property MUST be rejected (additionalProperties: false)'),
+      req('openwop.it.anonymous-actor-shape.validates-conforming-read-bounded-write-egress-adverts-and-rejects-the-negatives', 'RFC 0132 §B', 'an unknown property MUST be rejected (additionalProperties: false)'),
     ).toBe(false);
   });
 });
@@ -122,16 +120,16 @@ describe('anonymous-actor-shape: owner.principalKind (RFC 0132 §A, server-free)
     const validate = ajv.compile(owner);
     expect(
       validate({ tenant: 'acme', principal: 'anon:sess-3f9c', principalKind: 'anonymous' }),
-      why('RFC 0132 §A', 'owner.principalKind "anonymous" MUST validate'),
+      req('openwop.it.anonymous-actor-shape.run-snapshot-owner-accepts-principalkind-anonymous-and-rejects-guest', 'RFC 0132 §A', 'owner.principalKind "anonymous" MUST validate'),
     ).toBe(true);
     // Absent principalKind is today's RFC 0048 behavior — still valid.
     expect(
       validate({ tenant: 'acme', principal: 'u_42' }),
-      why('RFC 0048', 'owner without principalKind MUST still validate'),
+      req('openwop.it.anonymous-actor-shape.run-snapshot-owner-accepts-principalkind-anonymous-and-rejects-guest', 'RFC 0048', 'owner without principalKind MUST still validate'),
     ).toBe(true);
     expect(
       validate({ tenant: 'acme', principalKind: 'guest' }),
-      why('RFC 0132 §A', 'owner.principalKind "guest" MUST be rejected (enum)'),
+      req('openwop.it.anonymous-actor-shape.run-snapshot-owner-accepts-principalkind-anonymous-and-rejects-guest', 'RFC 0132 §A', 'owner.principalKind "guest" MUST be rejected (enum)'),
     ).toBe(false);
   });
 });
@@ -145,7 +143,7 @@ describe('anonymous-actor-shape: audit reuses authorization.decided (RFC 0132 §
   const decided = ajv.getSchema('payloads#/$defs/authorizationDecided');
 
   it('a content-free anon grant + deny record validates against the existing $def', () => {
-    expect(decided, 'the authorizationDecided $def MUST exist (no new event minted)').toBeTruthy();
+    expect(decided, req('openwop.it.anonymous-actor-shape.a-content-free-anon-grant-deny-record-validates-against-the-existing-def', 'RFC 0132', 'the authorizationDecided $def MUST exist (no new event minted)')).toBeTruthy();
     // Grant — the §G positive example.
     expect(
       decided!({
@@ -155,7 +153,7 @@ describe('anonymous-actor-shape: audit reuses authorization.decided (RFC 0132 §
         allowed: true,
         reason: 'anon-granted',
       }),
-      why('RFC 0132 §D', 'a conforming anon grant record MUST validate'),
+      req('openwop.it.anonymous-actor-shape.a-content-free-anon-grant-deny-record-validates-against-the-existing-def', 'RFC 0132 §D', 'a conforming anon grant record MUST validate'),
     ).toBe(true);
     // Deny — a not-granted tool.
     expect(
@@ -166,13 +164,13 @@ describe('anonymous-actor-shape: audit reuses authorization.decided (RFC 0132 §
         allowed: false,
         reason: 'anon-not-granted',
       }),
-      why('RFC 0132 §D', 'a conforming anon deny record MUST validate'),
+      req('openwop.it.anonymous-actor-shape.a-content-free-anon-grant-deny-record-validates-against-the-existing-def', 'RFC 0132 §D', 'a conforming anon deny record MUST validate'),
     ).toBe(true);
   });
 
   it('authorization.decided is in the RunEventType enum (the reused audit event)', () => {
     const runEvent = loadSchema('run-event.schema.json');
     const enumVals = (runEvent.$defs as Record<string, { enum?: string[] }>).RunEventType?.enum ?? [];
-    expect(enumVals).toContain('authorization.decided');
+    expect(enumVals, req('openwop.it.anonymous-actor-shape.authorization-decided-is-in-the-runeventtype-enum-the-reused-audit-event', 'RFC 0132', 'authorization.decided is in the RunEventType enum (the reused audit event)')).toContain('authorization.decided');
   });
 });

package/src/scenarios/anonymous-actor-write-gated.test.ts

@@ -22,8 +22,9 @@
 
 import { describe, it, expect } from 'vitest';
 import { behaviorGate } from '../lib/behavior-gate.js';
-import { driver } from '../lib/driver.js';
 import { readAnonymousActorCap, anonDispatch } from '../lib/anonymousActor.js';
+import { req } from '../lib/requirement-ids.js';
+import { softSkip } from '../lib/soft-skip.js';
 
 const PROFILE = 'openwop-anonymous-actor';
 
@@ -34,7 +35,7 @@ describe('anonymous-actor-write-gated (RFC 0132 §C.3)', () => {
     if (!behaviorGate(PROFILE, cap?.supported === true && supportsWrite)) return;
 
     const res = await anonDispatch({ tool: 'lead.capture', args: { email: 'visitor@example.com' } });
-    if (res.status === 404 || res.status === 405) return; // seam unwired — soft-skip
+    if (res.status === 404 || res.status === 405) return softSkip('blocked', 'precondition not met — `res.status === 404 || res.status === 405` returned early (seam unwired — soft-skip) (seam, prior step, or fixture unavailable)'); // seam unwired — soft-skip
 
     const controls = cap?.writeEgressControls ?? [];
     const decided = res.json?.authorizationDecided?.payload;
@@ -44,11 +45,11 @@ describe('anonymous-actor-write-gated (RFC 0132 §C.3)', () => {
       // With a HITL control the write MUST suspend on an approval interrupt before durable write.
       expect(
         suspended,
-        driver.describe('RFC 0132 §C.3 (hitl)', 'an anon bounded-write MUST suspend on an approval interrupt before the write'),
+        req('openwop.it.anonymous-actor-write-gated.an-anon-bounded-write-tool-is-gated-denied-when-ungated-or-suspends-on-an-approv', 'RFC 0132 §C.3 (hitl)', 'an anon bounded-write MUST suspend on an approval interrupt before the write'),
       ).toBe(true);
       expect(
         res.json?.result,
-        driver.describe('RFC 0132 §C.3 (hitl)', 'no durable write result before the approval resolves'),
+        req('openwop.it.anonymous-actor-write-gated.an-anon-bounded-write-tool-is-gated-denied-when-ungated-or-suspends-on-an-approv', 'RFC 0132 §C.3 (hitl)', 'no durable write result before the approval resolves'),
       ).toBeUndefined();
     } else {
       // With only a rate-limit/session-cap control, the seam surfaces a gate; an
@@ -56,7 +57,7 @@ describe('anonymous-actor-write-gated (RFC 0132 §C.3)', () => {
       const gatedOrDenied = suspended || decided?.allowed === false || res.status === 429;
       expect(
         gatedOrDenied,
-        driver.describe('SECURITY anon-actor-write-egress-gated', 'an anon bounded-write MUST be gated — an ungated write MUST be denied'),
+        req('openwop.it.anonymous-actor-write-gated.an-anon-bounded-write-tool-is-gated-denied-when-ungated-or-suspends-on-an-approv', 'SECURITY anon-actor-write-egress-gated', 'an anon bounded-write MUST be gated — an ungated write MUST be denied'),
       ).toBe(true);
     }
   });
@@ -67,16 +68,16 @@ describe('anonymous-actor-write-gated (RFC 0132 §C.3)', () => {
     if (!behaviorGate(PROFILE, cap?.supported === true && supportsWrite)) return;
     // Probe a surface deliberately configured with a write grant but no control.
     const res = await anonDispatch({ tool: 'lead.capture', surface: 'sample-uncontrolled-surface' });
-    if (res.status === 404 || res.status === 405) return; // seam unwired / surface absent — soft-skip
+    if (res.status === 404 || res.status === 405) return softSkip('blocked', 'precondition not met — `res.status === 404 || res.status === 405` returned early (seam unwired / surface absent — soft-skip) (seam, prior step, or fixture unavailable)'); // seam unwired / surface absent — soft-skip
     const decided = res.json?.authorizationDecided?.payload;
     expect(
       decided?.allowed === false || res.status === 403 || res.status === 429,
-      driver.describe('SECURITY anon-actor-write-egress-gated', 'an anon write with no resolvable control MUST be denied'),
+      req('openwop.it.anonymous-actor-write-gated.an-anon-write-with-no-resolvable-control-is-denied-with-a-machine-reason', 'SECURITY anon-actor-write-egress-gated', 'an anon write with no resolvable control MUST be denied'),
     ).toBe(true);
     if (decided && decided.allowed === false) {
       expect(
         decided.reason,
-        driver.describe('RFC 0132 §C.3', 'an ungated anon write denial carries a machine reason'),
+        req('openwop.it.anonymous-actor-write-gated.an-anon-write-with-no-resolvable-control-is-denied-with-a-machine-reason', 'RFC 0132 §C.3', 'an ungated anon write denial carries a machine reason'),
       ).toBe('anon-write-ungated');
     }
   });