@openwop/openwop-conformance 1.162.0 → 2.0.0-rc.0

package/src/scenarios/fixtures-valid.test.ts

@@ -11,6 +11,7 @@ import Ajv2020 from 'ajv/dist/2020.js';
 import addFormats from 'ajv-formats';
 import type { ErrorObject } from 'ajv';
 import { FIXTURES_DIR, SCHEMAS_DIR } from '../lib/paths.js';
+import { req } from '../lib/requirement-ids.js';
 
 // Layout-aware paths — `lib/paths.ts` resolves these for both repo
 // checkouts (schemas one level above the conformance package) and the
@@ -46,7 +47,7 @@ describe('fixtures: workflow-definition schema validity', () => {
     .sort();
 
   it('finds at least one fixture file', () => {
-    expect(files.length).toBeGreaterThan(0);
+    expect(files.length, req('openwop.it.fixtures-valid.finds-at-least-one-fixture-file', 'fixtures-valid.test.ts (no spec citation in file)', 'finds at least one fixture file')).toBeGreaterThan(0);
   });
 
   for (const file of files) {
@@ -56,7 +57,7 @@ describe('fixtures: workflow-definition schema validity', () => {
       const errors = (validate.errors ?? [])
         .map((e: ErrorObject) => `${e.instancePath || '/'}: ${e.message}`)
         .join('\n');
-      expect(ok, `Fixture ${file} fails workflow-definition schema:\n${errors}`).toBe(true);
+      expect(ok, req('openwop.it.fixtures-valid.validates-against-workflow-definition-schema-json', 'fixtures-valid.test.ts (no spec citation in file)', `Fixture ${file} fails workflow-definition schema:\n${errors}`)).toBe(true);
     });
   }
 
@@ -66,7 +67,7 @@ describe('fixtures: workflow-definition schema validity', () => {
       const expected = file.replace(/\.json$/, '');
       expect(
         data.id,
-        `Fixture file ${file} declares id "${data.id}" — MUST match filename`,
+        req('openwop.it.fixtures-valid.every-fixture-id-matches-its-filename', 'fixtures-valid.test.ts (no spec citation in file)', `Fixture file ${file} declares id "${data.id}" — MUST match filename`),
       ).toBe(expected);
     }
   });
@@ -80,7 +81,7 @@ describe('fixtures: workflow-definition schema validity', () => {
       const hasManual = data.triggers.some((t) => t.type === 'manual');
       expect(
         hasManual,
-        `Fixture ${data.id} MUST include a manual trigger per fixtures.md §Seeding contract`,
+        req('openwop.it.fixtures-valid.every-fixture-has-a-manual-trigger-so-the-conformance-driver-can-start-it', 'fixtures-valid.test.ts (no spec citation in file)', `Fixture ${data.id} MUST include a manual trigger per fixtures.md §Seeding contract`),
       ).toBe(true);
     }
   });
@@ -120,7 +121,7 @@ describe('fixtures: node-pack-manifest schema validity', () => {
     .sort();
 
   it('finds at least one pack-manifest fixture (private-scope coverage)', () => {
-    expect(files.length).toBeGreaterThan(0);
+    expect(files.length, req('openwop.it.fixtures-valid.finds-at-least-one-pack-manifest-fixture-private-scope-coverage', 'fixtures-valid.test.ts (no spec citation in file)', 'finds at least one pack-manifest fixture (private-scope coverage)')).toBeGreaterThan(0);
   });
 
   for (const file of files) {
@@ -139,7 +140,7 @@ describe('fixtures: node-pack-manifest schema validity', () => {
         .join('\n');
       expect(
         ok,
-        `Fixture pack-manifests/${file} fails ${schemaName}:\n${errors}`,
+        req('openwop.it.fixtures-valid.pack-manifests-validates-against-its-kind-s-manifest-schema', 'fixtures-valid.test.ts (no spec citation in file)', `Fixture pack-manifests/${file} fails ${schemaName}:\n${errors}`),
       ).toBe(true);
     });
   }
@@ -158,7 +159,7 @@ describe('fixtures: node-pack-manifest schema validity', () => {
     });
     expect(
       privateFixtures.length,
-      'Expected at least one pack-manifest fixture under the `private.<host>.*` scope to assert v1.0 private-scope pattern coverage',
+      req('openwop.it.fixtures-valid.the-private-scope-fixture-exercises-the-v1-0-private-pack-pattern', 'fixtures-valid.test.ts (no spec citation in file)', 'Expected at least one pack-manifest fixture under the `private.<host>.*` scope to assert v1.0 private-scope pattern coverage'),
     ).toBeGreaterThan(0);
   });
 });
@@ -179,7 +180,7 @@ describe('fixtures: connection-pack-manifest schema validity', () => {
     .sort();
 
   it('finds at least one connection-pack fixture (RFC 0095 coverage)', () => {
-    expect(files.length).toBeGreaterThan(0);
+    expect(files.length, req('openwop.it.fixtures-valid.finds-at-least-one-connection-pack-fixture-rfc-0095-coverage', 'RFC 0095', 'finds at least one connection-pack fixture (RFC 0095 coverage)')).toBeGreaterThan(0);
   });
 
   for (const file of files) {
@@ -191,7 +192,7 @@ describe('fixtures: connection-pack-manifest schema validity', () => {
         .join('\n');
       expect(
         ok,
-        `Fixture connection-packs/${file} fails connection-pack-manifest schema:\n${errors}`,
+        req('openwop.it.fixtures-valid.connection-packs-validates-against-connection-pack-manifest-schema-json', 'fixtures-valid.test.ts (no spec citation in file)', `Fixture connection-packs/${file} fails connection-pack-manifest schema:\n${errors}`),
       ).toBe(true);
     });
   }
@@ -219,7 +220,7 @@ describe('fixtures: trigger-event + registration schema validity', () => {
     .sort();
 
   it('finds at least one trigger-event fixture (RFC 0099 coverage)', () => {
-    expect(files.length).toBeGreaterThan(0);
+    expect(files.length, req('openwop.it.fixtures-valid.finds-at-least-one-trigger-event-fixture-rfc-0099-coverage', 'RFC 0099', 'finds at least one trigger-event fixture (RFC 0099 coverage)')).toBeGreaterThan(0);
   });
 
   for (const file of files) {
@@ -230,7 +231,7 @@ describe('fixtures: trigger-event + registration schema validity', () => {
       const errors = (validate.errors ?? [])
         .map((e: ErrorObject) => `${e.instancePath || '/'}: ${e.message}`)
         .join('\n');
-      expect(ok, `Fixture trigger-events/${file} fails its schema:\n${errors}`).toBe(true);
+      expect(ok, req('openwop.it.fixtures-valid.trigger-events-validates-against-its-schema', 'fixtures-valid.test.ts (no spec citation in file)', `Fixture trigger-events/${file} fails its schema:\n${errors}`)).toBe(true);
     });
   }
 });
@@ -264,7 +265,7 @@ describe('fixtures: prompt-template schema validity', () => {
   it('finds at least one prompt-template fixture', () => {
     expect(
       files.length,
-      'Expected at least one PromptTemplate fixture under fixtures/prompt-templates/',
+      req('openwop.it.fixtures-valid.finds-at-least-one-prompt-template-fixture', 'fixtures-valid.test.ts (no spec citation in file)', 'Expected at least one PromptTemplate fixture under fixtures/prompt-templates/'),
     ).toBeGreaterThan(0);
   });
 
@@ -279,7 +280,7 @@ describe('fixtures: prompt-template schema validity', () => {
         .join('\n');
       expect(
         ok,
-        `Fixture prompt-templates/${file} fails prompt-template schema:\n${errors}`,
+        req('openwop.it.fixtures-valid.prompt-templates-validates-against-prompt-template-schema-json', 'fixtures-valid.test.ts (no spec citation in file)', `Fixture prompt-templates/${file} fails prompt-template schema:\n${errors}`),
       ).toBe(true);
     });
   }
@@ -297,7 +298,7 @@ describe('fixtures: prompt-template schema validity', () => {
       ) as { templateId: string };
       expect(
         typeof data.templateId,
-        `Fixture prompt-templates/${file} MUST declare a templateId`,
+        req('openwop.it.fixtures-valid.every-fixture-templateid-matches-its-filename', 'fixtures-valid.test.ts (no spec citation in file)', `Fixture prompt-templates/${file} MUST declare a templateId`),
       ).toBe('string');
       expect(data.templateId.length).toBeGreaterThan(0);
     }
@@ -321,7 +322,7 @@ describe('fixtures: prompt-template schema validity', () => {
       if (hasSecretSource) {
         expect(
           (data.tags ?? []).includes('secret-redaction'),
-          `Fixture prompt-templates/${file} declares a secret-source variable but lacks the 'secret-redaction' tag`,
+          req('openwop.it.fixtures-valid.every-secret-source-variable-lives-in-a-fixture-tagged-for-the-secret-redaction', 'fixtures-valid.test.ts (no spec citation in file)', `Fixture prompt-templates/${file} declares a secret-source variable but lacks the 'secret-redaction' tag`),
         ).toBe(true);
       }
     }

package/src/scenarios/form-content-instantiation.test.ts

@@ -55,7 +55,6 @@
  */
 
 import { describe, it, expect } from 'vitest';
-import { driver } from '../lib/driver.js';
 import { behaviorGate } from '../lib/behavior-gate.js';
 import {
   readFormContentCap,
@@ -65,6 +64,8 @@ import {
   isEditable,
   PLAIN_TEXT_CONTROLS,
 } from '../lib/formContentPacks.js';
+import { req } from '../lib/requirement-ids.js';
+import { softSkip } from '../lib/soft-skip.js';
 
 /**
  * Conformance fixture templates a host wires the seam against.
@@ -82,17 +83,17 @@ describe('form-content-instantiation: a host instantiates a registered template
   it('#1 instantiation goes through the host NORMAL create path', async () => {
     if (!behaviorGate(PROFILE, formContentSupported(await readFormContentCap()))) return;
     const res = await instantiateTemplate(BASIC_TEMPLATE);
-    if (res === null) return; // seam absent — soft-skip
+    if (res === null) return softSkip('blocked', 'precondition not met — `res === null` returned early (seam absent — soft-skip) (seam, prior step, or fixture unavailable)'); // seam absent — soft-skip
 
     expect(
       res.status >= 200 && res.status < 300,
-      driver.describe('form-content-packs.md §Instantiation', 'a registered template MUST instantiate'),
+      req('openwop.it.form-content-instantiation.1-instantiation-goes-through-the-host-normal-create-path', 'form-content-packs.md §Instantiation', 'a registered template MUST instantiate'),
     ).toBe(true);
 
     if (res.json['viaCreatePath'] !== undefined) {
       expect(
         res.json['viaCreatePath'],
-        driver.describe(
+        req('openwop.it.form-content-instantiation.1-instantiation-goes-through-the-host-normal-create-path', 
           'form-content-packs.md §Instantiation #1',
           'the host MUST create the form through the SAME path that serves a hand-authored form',
         ),
@@ -101,14 +102,14 @@ describe('form-content-instantiation: a host instantiates a registered template
 
     expect(
       res.fields.length,
-      driver.describe('form-content-packs.md §Instantiation', 'the instantiated form MUST carry the template fields'),
+      req('openwop.it.form-content-instantiation.1-instantiation-goes-through-the-host-normal-create-path', 'form-content-packs.md §Instantiation', 'the instantiated form MUST carry the template fields'),
     ).toBeGreaterThan(0);
   });
 
   it('#1/F2 the instantiated form carries NO pack-bound submission destination', async () => {
     if (!behaviorGate(PROFILE, formContentSupported(await readFormContentCap()))) return;
     const res = await instantiateTemplate(BASIC_TEMPLATE);
-    if (res === null) return;
+    if (res === null) return softSkip('blocked', 'precondition not met — `res === null` returned early (seam, prior step, or fixture unavailable)');
 
     const routing = res.json['routing'];
     const bound =
@@ -118,7 +119,7 @@ describe('form-content-instantiation: a host instantiates a registered template
 
     expect(
       bound,
-      driver.describe(
+      req('openwop.it.form-content-instantiation.1-f2-the-instantiated-form-carries-no-pack-bound-submission-destination', 
         'form-content-packs.md §No submission routing (F2)',
         'a template MUST NOT bind a submission destination — the operator configures routing afterward, as for any hand-authored form',
       ),
@@ -128,21 +129,21 @@ describe('form-content-instantiation: a host instantiates a registered template
   it('#2 an unrecognized vendor.* field type DEGRADES to plain text, and does NOT fail the instantiation', async () => {
     if (!behaviorGate(PROFILE, formContentSupported(await readFormContentCap()))) return;
     const res = await instantiateTemplate(EXTENDED_TEMPLATE);
-    if (res === null) return;
+    if (res === null) return softSkip('blocked', 'precondition not met — `res === null` returned early (seam, prior step, or fixture unavailable)');
 
     expect(
       res.status >= 200 && res.status < 300 && res.json['refused'] !== true,
-      driver.describe(
+      req('openwop.it.form-content-instantiation.2-an-unrecognized-vendor-field-type-degrades-to-plain-text-and-does-not-fail-the', 
         'form-content-packs.md §Instantiation #2',
         'a well-formed but unrecognized vendor.*/x- type MUST degrade, NOT fail the instantiation — refusing a valid extension breaks forward compatibility',
       ),
     ).toBe(true);
 
     const field = fieldById(res.fields, VENDOR_FIELD_ID);
-    if (field === undefined) return; // host doesn't report per-field controls on the seam — soft-skip
+    if (field === undefined) return softSkip('blocked', 'precondition not met — `field === undefined` returned early (host doesn\'t report per-field controls on the seam — soft-skip) (seam, prior step, or fixture unavailable)'); // host doesn't report per-field controls on the seam — soft-skip
     expect(
       field.control !== undefined && PLAIN_TEXT_CONTROLS.has(field.control),
-      driver.describe(
+      req('openwop.it.form-content-instantiation.2-an-unrecognized-vendor-field-type-degrades-to-plain-text-and-does-not-fail-the', 
         'form-content-packs.md §Instantiation #2',
         `an unrecognized field type MUST render as a plain text input (got control ${JSON.stringify(field.control)})`,
       ),
@@ -152,14 +153,14 @@ describe('form-content-instantiation: a host instantiates a registered template
   it('#3 pack-authored fields are FULLY EDITABLE — no privilege over a hand-added field', async () => {
     if (!behaviorGate(PROFILE, formContentSupported(await readFormContentCap()))) return;
     const res = await instantiateTemplate(BASIC_TEMPLATE);
-    if (res === null) return;
+    if (res === null) return softSkip('blocked', 'precondition not met — `res === null` returned early (seam, prior step, or fixture unavailable)');
 
     const reporting = res.fields.filter((f) => f.editable !== undefined || f.locked !== undefined);
-    if (reporting.length === 0) return; // host doesn't report editability — soft-skip
+    if (reporting.length === 0) return softSkip('blocked', 'precondition not met — `reporting.length === 0` returned early (host doesn\'t report editability — soft-skip) (seam, prior step, or fixture unavailable)'); // host doesn't report editability — soft-skip
 
     expect(
       reporting.every((f) => isEditable(f)),
-      driver.describe(
+      req('openwop.it.form-content-instantiation.3-pack-authored-fields-are-fully-editable-no-privilege-over-a-hand-added-field', 
         'form-content-packs.md §Instantiation #3',
         'the host MUST NOT treat a pack-authored field as immutable or privileged relative to a hand-added one',
       ),

package/src/scenarios/frontend-plugin-packs.test.ts

@@ -39,6 +39,8 @@ import { SCHEMAS_DIR } from '../lib/paths.js';
 import { driver } from '../lib/driver.js';
 import { behaviorGate } from '../lib/behavior-gate.js';
 import { readCapabilityFamily } from '../lib/discovery-capabilities.js';
+import { req } from '../lib/requirement-ids.js';
+import { softSkip } from '../lib/soft-skip.js';
 
 const MANIFEST_SCHEMA = join(SCHEMAS_DIR, 'frontend-plugin-manifest.schema.json');
 const MESSAGE_SCHEMA = join(SCHEMAS_DIR, 'ui-plugin-message.schema.json');
@@ -68,7 +70,7 @@ describe('frontend-plugin manifest: schema layer (always-on, server-free)', () =
   it('a well-formed frontend-plugin manifest validates', () => {
     expect(
       validate(validManifest()),
-      `frontend-plugin-packs.md §The pack — a valid manifest MUST validate. Errors: ${JSON.stringify(validate.errors)}`,
+      req('openwop.it.frontend-plugin-packs.a-well-formed-frontend-plugin-manifest-validates', 'frontend-plugin-packs.md', `frontend-plugin-packs.md §The pack — a valid manifest MUST validate. Errors: ${JSON.stringify(validate.errors)}`),
     ).toBe(true);
   });
 
@@ -76,20 +78,20 @@ describe('frontend-plugin manifest: schema layer (always-on, server-free)', () =
     const m = { ...validManifest(), runtime: { language: 'javascript', entry: 'index.mjs' } };
     expect(
       validate(m),
-      'node-packs.md §Pack kinds — a kind:"frontend-plugin" manifest carrying `runtime` MUST be rejected (pack_kind_invalid)',
+      req('openwop.it.frontend-plugin-packs.a-backend-runtime-member-is-rejected-a-plugin-is-sandboxed-ui-not-a-node-entry', 'frontend-plugin-packs.md', 'node-packs.md §Pack kinds — a kind:"frontend-plugin" manifest carrying `runtime` MUST be rejected (pack_kind_invalid)'),
     ).toBe(false);
   });
 
   it('a uiPlugins[] entry missing `entry` is rejected', () => {
     const m = validManifest();
     delete (m.uiPlugins as Array<Record<string, unknown>>)[0].entry;
-    expect(validate(m), 'a uiPlugins[] entry missing `entry` MUST NOT validate').toBe(false);
+    expect(validate(m), req('openwop.it.frontend-plugin-packs.a-uiplugins-entry-missing-entry-is-rejected', 'frontend-plugin-packs.md', 'a uiPlugins[] entry missing `entry` MUST NOT validate')).toBe(false);
   });
 
   it('an `entry` path with `..` traversal is rejected', () => {
     const m = validManifest();
     (m.uiPlugins as Array<Record<string, unknown>>)[0].entry = '../escape.mjs';
-    expect(validate(m), 'an `entry` path MUST NOT contain `..` (path-traversal)').toBe(false);
+    expect(validate(m), req('openwop.it.frontend-plugin-packs.an-entry-path-with-traversal-is-rejected', 'frontend-plugin-packs.md', 'an `entry` path MUST NOT contain `..` (path-traversal)')).toBe(false);
   });
 
   it('a hostApi method outside the closed allowlist is rejected (frontend-plugin-rpc-allowlist)', () => {
@@ -97,13 +99,13 @@ describe('frontend-plugin manifest: schema layer (always-on, server-free)', () =
     (m.uiPlugins as Array<Record<string, unknown>>)[0].hostApi = ['artifact.read', 'host.exec'];
     expect(
       validate(m),
-      'frontend-plugin-packs.md §Host-RPC — only the closed allowlist methods are permitted; `host.exec` MUST NOT validate',
+      req('openwop.it.frontend-plugin-packs.a-hostapi-method-outside-the-closed-allowlist-is-rejected-frontend-plugin-rpc-al', 'frontend-plugin-packs.md', 'frontend-plugin-packs.md §Host-RPC — only the closed allowlist methods are permitted; `host.exec` MUST NOT validate'),
     ).toBe(false);
   });
 
   it('an empty uiPlugins[] is rejected (a pack MUST declare at least one plugin)', () => {
     const m = { ...validManifest(), uiPlugins: [] };
-    expect(validate(m), 'a frontend-plugin pack MUST declare at least one uiPlugins[] entry').toBe(false);
+    expect(validate(m), req('openwop.it.frontend-plugin-packs.an-empty-uiplugins-is-rejected-a-pack-must-declare-at-least-one-plugin', 'frontend-plugin-packs.md', 'a frontend-plugin pack MUST declare at least one uiPlugins[] entry')).toBe(false);
   });
 
   it('a canvas-preview entry with canvasTypes + host.announce validates (RFC 0130)', () => {
@@ -117,7 +119,7 @@ describe('frontend-plugin manifest: schema layer (always-on, server-free)', () =
     };
     expect(
       validate(m),
-      `frontend-plugin-packs.md §The pack (RFC 0130) — a canvas-preview entry MUST validate. Errors: ${JSON.stringify(validate.errors)}`,
+      req('openwop.it.frontend-plugin-packs.a-canvas-preview-entry-with-canvastypes-host-announce-validates-rfc-0130', 'RFC 0130', `frontend-plugin-packs.md §The pack (RFC 0130) — a canvas-preview entry MUST validate. Errors: ${JSON.stringify(validate.errors)}`),
     ).toBe(true);
   });
 
@@ -126,7 +128,7 @@ describe('frontend-plugin manifest: schema layer (always-on, server-free)', () =
     (m.uiPlugins as Array<Record<string, unknown>>)[0].surface = 'omni-panel';
     expect(
       validate(m),
-      'frontend-plugin-packs.md §The pack — the surface enum stays closed; an unknown surface MUST NOT validate',
+      req('openwop.it.frontend-plugin-packs.a-surface-outside-the-closed-set-is-still-rejected-rfc-0130-keeps-the-enum-close', 'RFC 0130', 'frontend-plugin-packs.md §The pack — the surface enum stays closed; an unknown surface MUST NOT validate'),
     ).toBe(false);
   });
 });
@@ -137,14 +139,14 @@ describe('ui-plugin/1 message: schema layer (always-on, server-free)', () => {
   const validate = ajv.compile(JSON.parse(readFileSync(MESSAGE_SCHEMA, 'utf8')));
 
   it('a valid artifact.write request carrying a version token validates', () => {
-    const req = {
+    const reqBody = {
       openwop: 'ui-plugin/1',
       type: 'request',
       id: 7,
       method: 'artifact.write',
       params: { artifactId: 'a-1', version: 'opaque-v1', payload: {} },
     };
-    expect(validate(req), `a valid artifact.write request MUST validate. Errors: ${JSON.stringify(validate.errors)}`).toBe(true);
+    expect(validate(reqBody), req('openwop.it.frontend-plugin-packs.a-valid-artifact-write-request-carrying-a-version-token-validates', 'frontend-plugin-packs.md', `a valid artifact.write request MUST validate. Errors: ${JSON.stringify(validate.errors)}`)).toBe(true);
   });
 
   it('an artifact_conflict response carries currentVersion (version-token concurrency)', () => {
@@ -157,28 +159,28 @@ describe('ui-plugin/1 message: schema layer (always-on, server-free)', () => {
     };
     expect(
       validate(res),
-      `frontend-plugin-packs.md §Concurrency — a stale write surfaces artifact_conflict + currentVersion. Errors: ${JSON.stringify(validate.errors)}`,
+      req('openwop.it.frontend-plugin-packs.an-artifact-conflict-response-carries-currentversion-version-token-concurrency', 'frontend-plugin-packs.md', `frontend-plugin-packs.md §Concurrency — a stale write surfaces artifact_conflict + currentVersion. Errors: ${JSON.stringify(validate.errors)}`),
     ).toBe(true);
   });
 
   it('a request with a method outside the allowlist is schema-rejected', () => {
-    const req = { openwop: 'ui-plugin/1', type: 'request', id: 1, method: 'host.exec' };
-    expect(validate(req), 'a method outside the ui-plugin/1 allowlist MUST NOT validate').toBe(false);
+    const reqBody = { openwop: 'ui-plugin/1', type: 'request', id: 1, method: 'host.exec' };
+    expect(validate(reqBody), req('openwop.it.frontend-plugin-packs.a-request-with-a-method-outside-the-allowlist-is-schema-rejected', 'frontend-plugin-packs.md', 'a method outside the ui-plugin/1 allowlist MUST NOT validate')).toBe(false);
   });
 
   it('a message without the ui-plugin/1 protocol tag is rejected', () => {
-    const req = { openwop: 'ui-plugin/2', type: 'request', id: 1, method: 'artifact.read' };
-    expect(validate(req), 'a host MUST ignore messages whose ui-plugin tag it does not recognize').toBe(false);
+    const reqBody = { openwop: 'ui-plugin/2', type: 'request', id: 1, method: 'artifact.read' };
+    expect(validate(reqBody), req('openwop.it.frontend-plugin-packs.a-message-without-the-ui-plugin-1-protocol-tag-is-rejected', 'frontend-plugin-packs.md', 'a host MUST ignore messages whose ui-plugin tag it does not recognize')).toBe(false);
   });
 
   it('no credential-bearing field is admitted on the envelope (frontend-plugin-no-byok)', () => {
     // additionalProperties:false on every envelope variant — a stray apiKey/token at the
     // envelope root cannot ride the boundary.
     for (const leak of ['apiKey', 'token', 'clientSecret', 'authorization']) {
-      const req = { openwop: 'ui-plugin/1', type: 'request', id: 1, method: 'artifact.read', [leak]: 'xxx' };
+      const reqBody = { openwop: 'ui-plugin/1', type: 'request', id: 1, method: 'artifact.read', [leak]: 'xxx' };
       expect(
-        validate(req),
-        `frontend-plugin-no-byok — a credential-named envelope field ("${leak}") MUST NOT validate (additionalProperties:false)`,
+        validate(reqBody),
+        req('openwop.it.frontend-plugin-packs.no-credential-bearing-field-is-admitted-on-the-envelope-frontend-plugin-no-byok', 'frontend-plugin-packs.md', `frontend-plugin-no-byok — a credential-named envelope field ("${leak}") MUST NOT validate (additionalProperties:false)`),
       ).toBe(false);
     }
   });
@@ -194,11 +196,11 @@ describe('frontend-plugin: isolation advertisement (always-on, capability shape)
   const X_HOST = /^x-host-[a-z0-9-]+-[a-z0-9-]+$/;
   it('a host advertising uiPlugins MUST advertise a conformant isolation model', async () => {
     const uiPlugins = await readCapabilityFamily<{ supported?: boolean; isolation?: string }>('uiPlugins');
-    if (!uiPlugins?.supported) return; // unadvertised → out of scope (graceful degradation)
+    if (!uiPlugins?.supported) return softSkip('inapplicable', 'capability or profile not advertised by this host — gate `!uiPlugins?.supported` returned early (unadvertised → out of scope (graceful degradation))'); // unadvertised → out of scope (graceful degradation)
     const iso = uiPlugins.isolation;
     expect(
       iso !== undefined && (CONFORMANT_ISOLATION.includes(iso) || X_HOST.test(iso)),
-      driver.describe(
+      req('openwop.it.frontend-plugin-packs.a-host-advertising-uiplugins-must-advertise-a-conformant-isolation-model', 
         'frontend-plugin-packs.md §Isolation (RFC 0119)',
         'frontend-plugin-isolation — isolation MUST be a conformant model (cross-origin-iframe default | wasm | process | container | vm | x-host-*); every value denotes the same property, in-process loading is a protocol-tier MUST NOT regardless of mechanism',
       ),
@@ -214,16 +216,16 @@ describe('frontend-plugin: host-RPC behavior (capability-gated)', () => {
     const res = await driver.post('/v1/host/sample/ui-plugin/rpc', {
       message: { openwop: 'ui-plugin/1', type: 'request', id: 1, method: 'host.exec' },
     });
-    if (res.status === 404 || res.status === 403) return; // seam unwired — soft-skip
+    if (res.status === 404 || res.status === 403) return softSkip('blocked', 'precondition not met — `res.status === 404 || res.status === 403` returned early (seam unwired — soft-skip) (seam, prior step, or fixture unavailable)'); // seam unwired — soft-skip
 
     const body = res.json as { ok?: boolean; error?: { code?: string } } | undefined;
     expect(
       body?.ok,
-      driver.describe('frontend-plugin-packs.md §Host-RPC', 'an undeclared method MUST NOT execute'),
+      req('openwop.it.frontend-plugin-packs.an-undeclared-host-rpc-method-is-refused-with-method-not-allowed', 'frontend-plugin-packs.md §Host-RPC', 'an undeclared method MUST NOT execute'),
     ).toBe(false);
     expect(
       body?.error?.code,
-      driver.describe(
+      req('openwop.it.frontend-plugin-packs.an-undeclared-host-rpc-method-is-refused-with-method-not-allowed', 
         'frontend-plugin-packs.md §Host-RPC',
         'frontend-plugin-rpc-allowlist — an undeclared method surfaces method_not_allowed',
       ),
@@ -233,7 +235,7 @@ describe('frontend-plugin: host-RPC behavior (capability-gated)', () => {
   it('a stale artifact.write is refused with artifact_conflict + currentVersion (no persist)', async () => {
     const uiPlugins = await readCapabilityFamily<{ supported?: boolean; hostApi?: string[] }>('uiPlugins');
     if (!behaviorGate('uiPlugins.supported', uiPlugins?.supported === true)) return;
-    if (!(uiPlugins?.hostApi ?? []).includes('artifact.write')) return; // write unsupported → out of scope
+    if (!(uiPlugins?.hostApi ?? []).includes('artifact.write')) return softSkip('inapplicable', 'capability or profile not advertised by this host — gate `!(uiPlugins?.hostApi ?? []).includes(\'artifact.write\')` returned early (write unsupported → out of scope)'); // write unsupported → out of scope
 
     const res = await driver.post('/v1/host/sample/ui-plugin/rpc', {
       message: {
@@ -244,19 +246,19 @@ describe('frontend-plugin: host-RPC behavior (capability-gated)', () => {
         params: { artifactId: 'conformance-canary', version: 'stale-token', payload: {} },
       },
     });
-    if (res.status === 404 || res.status === 403) return; // seam unwired — soft-skip
+    if (res.status === 404 || res.status === 403) return softSkip('blocked', 'precondition not met — `res.status === 404 || res.status === 403` returned early (seam unwired — soft-skip) (seam, prior step, or fixture unavailable)'); // seam unwired — soft-skip
 
     const body = res.json as { ok?: boolean; error?: { code?: string; currentVersion?: string } } | undefined;
     expect(
       body?.error?.code,
-      driver.describe(
+      req('openwop.it.frontend-plugin-packs.a-stale-artifact-write-is-refused-with-artifact-conflict-currentversion-no-persi', 
         'frontend-plugin-packs.md §Concurrency',
         'a stale artifact.write version surfaces artifact_conflict (host MUST NOT persist)',
       ),
     ).toBe('artifact_conflict');
     expect(
       typeof body?.error?.currentVersion,
-      driver.describe('frontend-plugin-packs.md §Concurrency', 'artifact_conflict carries the host currentVersion for re-read/merge'),
+      req('openwop.it.frontend-plugin-packs.a-stale-artifact-write-is-refused-with-artifact-conflict-currentversion-no-persi', 'frontend-plugin-packs.md §Concurrency', 'artifact_conflict carries the host currentVersion for re-read/merge'),
     ).toBe('string');
   });
 });

package/src/scenarios/fs-path-traversal.test.ts

@@ -29,6 +29,8 @@ import { describe, it, expect } from 'vitest';
 import { readErrorCode } from '../lib/error-envelope.js';
 import { driver } from '../lib/driver.js';
 import { capabilityFamily } from '../lib/discovery-capabilities.js';
+import { req } from '../lib/requirement-ids.js';
+import { softSkip } from '../lib/soft-skip.js';
 
 interface DiscoveryFs {
   supported?: boolean;
@@ -57,10 +59,10 @@ const PATH_REJECTION_CODES: ReadonlySet<string> = new Set([
 describe('fs-path-traversal: advertisement shape (RFC 0014 §A)', () => {
   it('capabilities.fs is either absent or well-formed', async () => {
     const fs = await readFs();
-    if (fs === null) return; // host doesn't advertise fs at all
+    if (fs === null) return softSkip('inapplicable', 'capability or profile not advertised by this host — gate `fs === null` returned early (host doesn\'t advertise fs at all)'); // host doesn't advertise fs at all
     expect(
       typeof fs.supported,
-      driver.describe(
+      req('openwop.it.fs-path-traversal.capabilities-fs-is-either-absent-or-well-formed', 
         'capabilities.schema.json §fs',
         'capabilities.fs.supported MUST be a boolean when fs is advertised',
       ),
@@ -69,17 +71,17 @@ describe('fs-path-traversal: advertisement shape (RFC 0014 §A)', () => {
 
   it('fs.sandboxRoot is set + non-empty when fs.supported=true', async () => {
     const fs = await readFs();
-    if (!fs?.supported) return;
+    if (!fs?.supported) return softSkip('inapplicable', 'capability or profile not advertised by this host — gate `!fs?.supported` returned early');
     expect(
       typeof fs.sandboxRoot,
-      driver.describe(
+      req('openwop.it.fs-path-traversal.fs-sandboxroot-is-set-non-empty-when-fs-supported-true', 
         'RFC 0014 §A',
         'capabilities.fs.sandboxRoot MUST be present when fs.supported=true',
       ),
     ).toBe('string');
     expect(
       (fs.sandboxRoot ?? '').length,
-      driver.describe('RFC 0014 §A', 'capabilities.fs.sandboxRoot MUST NOT be empty'),
+      req('openwop.it.fs-path-traversal.fs-sandboxroot-is-set-non-empty-when-fs-supported-true', 'RFC 0014 §A', 'capabilities.fs.sandboxRoot MUST NOT be empty'),
     ).toBeGreaterThan(0);
   });
 });
@@ -87,13 +89,13 @@ describe('fs-path-traversal: advertisement shape (RFC 0014 §A)', () => {
 describe('fs-path-traversal: MUST-NOT escape sandboxRoot (RFC 0014 §C)', () => {
   it('absolute path outside sandbox is rejected', async () => {
     const fs = await readFs();
-    if (!fs?.supported) return;
+    if (!fs?.supported) return softSkip('inapplicable', 'capability or profile not advertised by this host — gate `!fs?.supported` returned early');
     const res = await driver.post('/v1/host/sample/fs/read', { path: '/etc/passwd' });
     // 404 from a host that hasn't wired the test seam is a soft-skip.
-    if (res.status === 404) return;
+    if (res.status === 404) return softSkip('blocked', 'precondition not met — `res.status === 404` returned early (404 from a host that hasn\'t wired the test seam is a soft-skip.) (seam, prior step, or fixture unavailable)');
     expect(
       res.status,
-      driver.describe(
+      req('openwop.it.fs-path-traversal.absolute-path-outside-sandbox-is-rejected', 
         'SECURITY/invariants.yaml fs-path-traversal',
         'absolute paths outside sandboxRoot MUST be rejected with a 4xx envelope',
       ),
@@ -101,7 +103,7 @@ describe('fs-path-traversal: MUST-NOT escape sandboxRoot (RFC 0014 §C)', () =>
     const code = readErrorCode(res.json);
     expect(
       code !== undefined && PATH_REJECTION_CODES.has(code),
-      driver.describe(
+      req('openwop.it.fs-path-traversal.absolute-path-outside-sandbox-is-rejected', 
         'SECURITY/invariants.yaml fs-path-traversal',
         `error.code MUST be one of {${[...PATH_REJECTION_CODES].join(', ')}}, got: ${code ?? '(absent)'}`,
       ),
@@ -110,14 +112,14 @@ describe('fs-path-traversal: MUST-NOT escape sandboxRoot (RFC 0014 §C)', () =>
 
   it('relative ../ path escape is rejected', async () => {
     const fs = await readFs();
-    if (!fs?.supported) return;
+    if (!fs?.supported) return softSkip('inapplicable', 'capability or profile not advertised by this host — gate `!fs?.supported` returned early');
     const res = await driver.post('/v1/host/sample/fs/read', { path: '../../etc/passwd' });
-    if (res.status === 404) return;
+    if (res.status === 404) return softSkip('blocked', 'precondition not met — `res.status === 404` returned early (seam, prior step, or fixture unavailable)');
     expect(res.status).toBeGreaterThanOrEqual(400);
     const code = readErrorCode(res.json);
     expect(
       code !== undefined && PATH_REJECTION_CODES.has(code),
-      driver.describe(
+      req('openwop.it.fs-path-traversal.relative-path-escape-is-rejected', 
         'SECURITY/invariants.yaml fs-path-traversal',
         `error.code MUST be one of {${[...PATH_REJECTION_CODES].join(', ')}}, got: ${code ?? '(absent)'}`,
       ),