@openwop/openwop-conformance 2.0.0-rc.0 → 2.0.0-rc.2

package/scenario-majors.json

@@ -1,9 +1,9 @@
 {
   "$comment": "GENERATED by conformance/scripts/generate-scenario-majors.mjs (RFC 0168 §D.3). Do not edit; add a file to BOTH_MAJORS in the generator to target both majors.",
   "counts": {
-    "files": 444,
+    "files": 495,
     "v1": 444,
-    "v2": 1
+    "v2": 52
   },
   "majors": {
     "a2a-1-0-agent-card.test.ts": [
@@ -1228,6 +1228,159 @@
     "trigger-stream-cdc-sources.test.ts": [
       1
     ],
+    "v2-approver-enforced.test.ts": [
+      2
+    ],
+    "v2-assurance-downgrade-audited.test.ts": [
+      2
+    ],
+    "v2-bundle-v3-signed.test.ts": [
+      2
+    ],
+    "v2-capabilities-root-closed.test.ts": [
+      2
+    ],
+    "v2-capability-record-shape.test.ts": [
+      2
+    ],
+    "v2-chain-pin-exact.test.ts": [
+      2
+    ],
+    "v2-coherence-not-in-bundle.test.ts": [
+      2
+    ],
+    "v2-compensation-read-projection.test.ts": [
+      2
+    ],
+    "v2-configurable-closed.test.ts": [
+      2
+    ],
+    "v2-dual-stack-negotiation.test.ts": [
+      2
+    ],
+    "v2-effect-identity-business-key.test.ts": [
+      2
+    ],
+    "v2-effect-seam-manifest.test.ts": [
+      2
+    ],
+    "v2-enum-growth-rule.test.ts": [
+      2
+    ],
+    "v2-era-2-append-vocabulary.test.ts": [
+      2
+    ],
+    "v2-era-key.test.ts": [
+      2
+    ],
+    "v2-error-registry.test.ts": [
+      2
+    ],
+    "v2-event-type-closed.test.ts": [
+      2
+    ],
+    "v2-fork-a-v1-run.test.ts": [
+      2
+    ],
+    "v2-form-when-reuses-edge-conditions.test.ts": [
+      2
+    ],
+    "v2-header-scheme.test.ts": [
+      2
+    ],
+    "v2-id-grammar.test.ts": [
+      2
+    ],
+    "v2-idempotency-key-grammar.test.ts": [
+      2
+    ],
+    "v2-interrupt-token-scheme.test.ts": [
+      2
+    ],
+    "v2-lane-issuer-advertised.test.ts": [
+      2
+    ],
+    "v2-legacy-profiles-absent.test.ts": [
+      2
+    ],
+    "v2-manifest-ceiling-refused.test.ts": [
+      2
+    ],
+    "v2-manifest-hatch-carried.test.ts": [
+      2
+    ],
+    "v2-min-client-version.test.ts": [
+      2
+    ],
+    "v2-minimum-version-refused.test.ts": [
+      2
+    ],
+    "v2-mrtr-rounds-ceiling.test.ts": [
+      2
+    ],
+    "v2-negotiation-authenticated.test.ts": [
+      2
+    ],
+    "v2-negotiation-decided-emitted.test.ts": [
+      2
+    ],
+    "v2-no-transport-advertisement.test.ts": [
+      2
+    ],
+    "v2-owner-subject-required.test.ts": [
+      2
+    ],
+    "v2-pack-isolation.test.ts": [
+      2
+    ],
+    "v2-payload-registry-closed.test.ts": [
+      2
+    ],
+    "v2-peer-dependency-declared.test.ts": [
+      2
+    ],
+    "v2-pinned-run-disposition.test.ts": [
+      2
+    ],
+    "v2-poll-cursor-v2.test.ts": [
+      2
+    ],
+    "v2-preferred-version-default.test.ts": [
+      2
+    ],
+    "v2-profiles-derived-only.test.ts": [
+      2
+    ],
+    "v2-provider-conflict.test.ts": [
+      2
+    ],
+    "v2-refresh-sla.test.ts": [
+      2
+    ],
+    "v2-relaxation-recorded.test.ts": [
+      2
+    ],
+    "v2-revocation-honored.test.ts": [
+      2
+    ],
+    "v2-subject-link-record.test.ts": [
+      2
+    ],
+    "v2-unmapped-type-refused.test.ts": [
+      2
+    ],
+    "v2-v1-events-translated.test.ts": [
+      2
+    ],
+    "v2-v1-signed-webhook-accepted.test.ts": [
+      2
+    ],
+    "v2-webhook-durable-delivery.test.ts": [
+      2
+    ],
+    "v2-well-known-one-resource.test.ts": [
+      2
+    ],
     "vector-knn-roundtrip.test.ts": [
       1
     ],

package/schemas/CORPUS-STAMP.json

@@ -1,7 +1,7 @@
 {
   "_comment": "Provenance of @openwop/spec-artifacts (RFC 0168 §D.2). files: SHA-256 per file; the conformance suite compares the installed peer against dist/spec-artifacts.lock.json at start.",
   "package": "@openwop/spec-artifacts",
-  "version": "2.0.0-rc.0",
+  "version": "2.0.0-rc.2",
   "corpusTag": null,
   "files": {
     "api/.redocly.lint-ignore.yaml": "bf5a8350b88a72fa43f59605ed8d903ed24b6cfccda5e45509c9f6ed9ee4e712",
@@ -9,9 +9,9 @@
     "api/grpc/openwop.proto": "c3e72bb17cba514ee98feb6434e6c9b6ea6795bfd086489ec69fd882dd1ad977",
     "api/openapi.yaml": "39081c59fb696159806b0f2f9a42e7e9ff830d622fcf2ad4159b21357580a955",
     "api/redocly.yaml": "b0604c89b2ca6d5076ec25725c539dad44a741a811fe524439ee6daef8baa09f",
-    "api/seams-v2.yaml": "b54c5a6ebd08577854d8f3f55e20ebf5aae0e57e457779e1de0937648aef4ef8",
-    "api/v2/asyncapi.yaml": "bb5468d6a2c00fbeab030ec365df2ba47c362b464b6d91162ded81064074d926",
-    "api/v2/openapi.yaml": "78b3f5a41ef1839f7628696465d3180ad2681616046918f6880575836bd20b57",
+    "api/seams-v2.yaml": "7997be82785d963789a452f76455dd91f51a03c227e83706325a8b67d3d16aeb",
+    "api/v2/asyncapi.yaml": "aeed4cbeb832cfcd4de46639a2b5a8981406d307b73e3a9d11a645eb0726caff",
+    "api/v2/openapi.yaml": "cbbf5df16473902c3c36b5b048ba80b5b35336c06fd48c8ba32f4b1858dd1807",
     "api/v2/redocly.yaml": "1e66b60e6118ad11a823bb620678be464d99dfe50a40e3e6f93ec9429b88b34c",
     "schemas/README.md": "0c0b737ffcf8f30e7d2809cec8a498232de710f41443212922ad8337cdde0b51",
     "schemas/a2a-task-state.schema.json": "c9365918f993f943b4b619d42551eb066a1ed33a08d895d51b395432a5b1f1bc",
@@ -115,8 +115,8 @@
     "schemas/v2/artifact-type-pack-manifest.schema.json": "c911757562e521cb4f31a47c097f562573b64087efe60c8acb81fd352367d300",
     "schemas/v2/audit-verify-result.schema.json": "cb54c4d89ba5dfb73f49aa8959a980be65c2dc2a87a12f71ba36d3e836fe85da",
     "schemas/v2/budget-policy.schema.json": "c7449daeb6e1d95e7a047b8c2814d3d54748697c27046972834874867d9b5f4c",
-    "schemas/v2/capabilities.schema.json": "87048be5c04cd88df0bc21938f371a31f9f28a1df8560f6f811d99276fca83a4",
-    "schemas/v2/certification-bundle.schema.json": "06d450510b87fcfe22e4f3ba9dceef5f3ca9031ef65832d7b9d2f22b89028964",
+    "schemas/v2/capabilities.schema.json": "b6191deddf6bee19470eee9a45bb520de0d17385c195de6e3b8c5cb6d9520238",
+    "schemas/v2/certification-bundle.schema.json": "02aa15f17644d902a9df06a99cfdaf51273b0a9cca0d0ef515d5da03be01fb09",
     "schemas/v2/channel-presence-payload.schema.json": "9475d46f358d21c19126e78204987a5633979917a2293653354ef5c5e044d54e",
     "schemas/v2/channel-written-payload.schema.json": "ccecff3c71a3275ad8db035ac0e04db25e6f8d23cf091ddbcd5a60d1be1cbb6b",
     "schemas/v2/chat-card-pack-manifest.schema.json": "566982ce509a96d1619d58a72e383eff0773fe43fc65e4bfc85a4fe158f4eaff",
@@ -141,7 +141,7 @@
     "schemas/v2/envelopes/schema.request.schema.json": "be2c5f7aa881cdd252ccff47ac02193659e1393633a1541f4297383205d384a2",
     "schemas/v2/envelopes/schema.response.schema.json": "d049a081267c06c28879c331b147f3ed821b14ccfd93005c67aff64db0a8c68e",
     "schemas/v2/envelopes/ui.a2ui-surface.schema.json": "0a06fbbdc8ba797a6818c79336a98e211ac5ba5747945b4e4098072cd3974d79",
-    "schemas/v2/error-envelope.schema.json": "6fd825be2dc71559487ea7f68c42b1503f0606dddce764ea2d14f66533b9319c",
+    "schemas/v2/error-envelope.schema.json": "d550beeab958b528c8734fd32e74c438006b99172c5c586f9e0af20ef4b2bee7",
     "schemas/v2/eval-summary.schema.json": "dfc995c8481ed212e6f3d83de982547898a7938be8c891ddb0d3efe84352908d",
     "schemas/v2/export-bundle.schema.json": "bd28905a7729437ab7f2ad8bb33e13a371b2bf5605a7eb2962a0d246de312d69",
     "schemas/v2/form-content-pack-manifest.schema.json": "307884e57946703b6f86ec283034bf56beb68bea4a000743ebbc9eebeed31b07",
@@ -156,7 +156,7 @@
     "schemas/v2/localized-content-section.schema.json": "29c7bad0ad9ebc6c45211282e8afb3fdb35a4ca075ce0404b6e2c29f35fa5313",
     "schemas/v2/memory-entry.schema.json": "290576ae84f4fef4cdf975932b87963283b11c50ea3d2654b32cd96aa6537c3d",
     "schemas/v2/memory-list-options.schema.json": "f66703bccb68efb28391c273abb66aa117ee5b5ce475c477846ed700c336afcd",
-    "schemas/v2/node-pack-manifest.schema.json": "3b7343dffbbaa4a539760e14714968ab9855d55a226f62bcb110f78a2ee47b56",
+    "schemas/v2/node-pack-manifest.schema.json": "771328fa73691e7f08fca3c628c4e8ba68fa4e43529faaf1a6358aecf26b13f2",
     "schemas/v2/orchestrator-decision.schema.json": "2da17538e84cfbe70151eb118f1ccf670cff58b8697148e394074d32ac4af6b4",
     "schemas/v2/org-chart-responsibility-view.schema.json": "ebac7d2889bfd659bcf30311efb0d6eb0c7e940b972b6b62da69c7351b5bb586",
     "schemas/v2/pack-lockfile.schema.json": "2685417702c105146b780cd99154296a46578fbb10d81c8c713348ee26fea898",
@@ -165,12 +165,12 @@
     "schemas/v2/prompt-ref.schema.json": "11538fa36a7a652c93100cac4f1857eb4130137b546e3d94890618636d44b729",
     "schemas/v2/prompt-template.schema.json": "494fc83028cb3af5dbb8a943d0e83b2348f7775e9fa02369162bcb58a6f81559",
     "schemas/v2/proposal.schema.json": "72623553611f00e87b4c7972d69ebeba73c2222b01ead75a44a0c2114b679fea",
-    "schemas/v2/registry-version-manifest.schema.json": "e704e08b11be9a5c7dc7237c8cb8b99b079d7c29615909320c2bb9bad285b8c1",
+    "schemas/v2/registry-version-manifest.schema.json": "270704ebc6bae63be949efbf9503578938b103733db9da3cb8fcbee1cd7684dd",
     "schemas/v2/residency.schema.json": "af2658a7104cbcacd0e20a91226271c4a77f91ef46ae97612768fe743e6091d8",
     "schemas/v2/run-ancestry-response.schema.json": "907e36341ba83a2147a5d76963950b6dcd47506b663ecbccae9dfa553f3724d3",
     "schemas/v2/run-diff-response.schema.json": "6ab6cd265dc7e0a2086c6659c46aa0e7b43e6302949f0adac5d7deb1c7c0ecd3",
     "schemas/v2/run-event-payloads.schema.json": "8eb0e05e1bd3399b0e2654a1ec5a13198ac4ec8459a1fcbfd800ab2d0a0ae8c6",
-    "schemas/v2/run-event.schema.json": "6be6c366af34eea1606b92a17ebae40d3d3390f4d54c38d9fce293ab820ea118",
+    "schemas/v2/run-event.schema.json": "4ec8eb048a79ca1343e00aa018acbf86814b5eda6768add6b17e8d7b83638fdf",
     "schemas/v2/run-options.schema.json": "6d6052596ab0f17acfb00fdfc89907da7724f952e5ffbe1f81d94ba23d4c77cd",
     "schemas/v2/run-orchestrator-decided-event.schema.json": "bb76e15ff72e669f12938684033b55dc567470e1a378e19ffc3fa0e4034ab5a7",
     "schemas/v2/run-snapshot.schema.json": "e77bf491d11c1414e62ed84cbf0c1d7149279b133a2101dc8f5eec89d3e45204",
@@ -198,21 +198,21 @@
     "schemas/workspace-file.schema.json": "464de85c2a068243084ee9c1d969bc7cd5d8f7948574e58450d6493c38a0e1e4",
     "spec/v1/alias-detectors.json": "fee4594ef49953953ffcd0b3813300067d16b3e65ebff2aac722034ac9b3f545",
     "spec/v1/capability-declaration-classes.json": "e7729aed5c4b4e1dd02abab0530f14cc95f5d4070fe51fb139e7f5cccefa00c6",
-    "spec/v1/core-standard-manifest.json": "1d20ac568c5fc3e1e4d30bc0e4cd7e450118a447150912338f0fc3d3cf205a47",
+    "spec/v1/core-standard-manifest.json": "6d0dd7cec8085554565060d2b5ed3abdcd3d13d9940404de33cac17633f3c23a",
     "spec/v1/deprecations.json": "520d79927a8ed43ccf62c207a7cf6cf7b19b16e00bbbbdf0410667e939c19d85",
     "spec/v1/deprecations.schema.json": "4cdbbb8eb9c0092913a5704c943880f0c8581bcf0f640a7df5a84105d53c8aee",
     "spec/v1/event-codemap.json": "3da60d884157793a360da532a9fcbbfb5285636db325a74cec94b34622186d97",
     "spec/v1/event-codemap.schema.json": "d52caf29071e3784d4c20259cdbd5a7b533986548a440bb632a80b82cadd7ea5",
     "spec/v1/extensions.json": "4d7ba68bae7c7f50cc655b94646ad25945a5dd63b703d43c1d015470141cd668",
-    "spec/v1/gaps.json": "1986d648cd1ade06823f33edd20bd00d3ccf09781aa0a9992bb5f4117687b484",
+    "spec/v1/gaps.json": "96ca051cb20f1a669b355d67a89421c56fef28aa5e6710c9519f592f26af33a3",
     "spec/v1/gaps.schema.json": "8fd83259f556553c9df0f53e7a82ca8c2a4771d471197f69b4e2ae0ceeacfd66",
     "spec/v1/migrations.json": "8839497d6a4830b53fa7867014a8336f0d725ef2346352e54fb580b7947897af",
     "spec/v1/migrations.schema.json": "886779aa6c22e646db097f5df210adb018a4dd14a7b815465a18c8a7056c8f72",
     "spec/v1/operation-path-manifest.json": "5f5f4e3842669371730ebbd1aace3fb794192615f0018dc144f484ba5db82ac3",
     "spec/v1/spec-gaps.json": "6cc9962c6b969f632e07a78b52a4f61447ff579e2990cbae989866f584a86042",
-    "spec/v2/declaration.json": "91409933c089d2415254b32ade698549ed9b4caf16877fbfa7c9b578df6aaf12",
+    "spec/v2/declaration.json": "892b6fae1e87f279ff75451f67ffab2a63ef883203f8066886bd60f165469348",
     "spec/v2/declaration.schema.json": "b0881a76228dfbd1b85a2ec7b7259a60197f768344535cdb475db6ff719b0e54",
-    "spec/v2/errors.json": "204b2ae8029cd37becd9bf65e70a78b27fa7637818adfdd0d97677167c7d3405",
+    "spec/v2/errors.json": "ad1725dc7c11002450e8abc682858eb5c11952a0718ea8ef6bdb2fb5ae6e7e21",
     "spec/v2/event-codemap.json": "37869a03cdfd8758b57e6f350641a6ebbd383231cebda51f5473ad85f94ab74c",
     "spec/v2/event-codemap.schema.json": "ce2d0ca085d7668d7ef745d2560b385ec6881d24a6d4b47c49931986b2ba642d",
     "spec/v2/ext/provider-idempotency/registry.json": "5b5fecad604fb4ab38da39f5abe697a4e57b05406c398f8afeb377331b2bd965",
@@ -224,11 +224,11 @@
     "spec/v2/facets/mcp.schema.json": "f56609fe24ba6160ad29ae31aa16043354ff005e5cb6a0f3871c4d226087cc08",
     "spec/v2/facets/replay.schema.json": "0a5aefb0108c708c6794fadd533cf256709704c4f16dbf44cd63fa8980c78018",
     "spec/v2/facets/sandbox.schema.json": "e75f54486d387b2d089791aa93b5093cd1450f1920753a0f97fc23acdfe978ed",
-    "spec/v2/facets/webhooks.schema.json": "9b40d658af3ac7d8c26edcef275b01080607e10124a871b6adde05df686a69f1",
+    "spec/v2/facets/webhooks.schema.json": "0b766033ef4b4c6c2ac6f9979a19843ba024d3a1d1576972dcb55aaba52f1b9a",
     "spec/v2/path-manifest.json": "034152e09b1458c66810d4050e20a273b2b9b8fe2d92b66e8b819477de58a1be",
     "spec/v2/peer-dependency-aliases.json": "d10299280abee08258502925bc327293ee413e0108cd6e6ec75ff6110653308d",
     "spec/v2/profiles.json": "1f0ee40491131cf561ef19a0394c47ba476b4567514fe16befb6cada4a10a5a4",
-    "spec/v2/release.json": "324675b23d36fd84e5ae0daecfc1aeacea53d12377cd40283ba2442bf57836c3"
+    "spec/v2/release.json": "ef05b0ec4ef4296dfbbacf37e97612b3c1f8d11b701890caa7b9c8462eab8359"
   },
-  "corpusCommit": "7c81ace8312cd2e6a059a8d383534d67dccfaca7"
+  "corpusCommit": "18c32663eb8acfe76d9b5906f69c82ed214987e0"
 }

package/src/cli.ts

@@ -35,8 +35,9 @@
 import { spawnSync } from 'node:child_process';
 import { fileURLToPath } from 'node:url';
 import { dirname, resolve as resolvePath, join } from 'node:path';
+import { createRequire } from 'node:module';
 import { createHash } from 'node:crypto';
-import { readFileSync, writeFileSync, mkdtempSync, rmSync } from 'node:fs';
+import { existsSync, readFileSync, writeFileSync, mkdtempSync, rmSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import Ajv2020 from 'ajv/dist/2020.js';
 import addFormats from 'ajv-formats';
@@ -44,12 +45,14 @@ import { SCHEMAS_DIR } from './lib/paths.js';
 import { readLedgerFile } from './lib/requirement-ledger.js';
 import { deriveRequirementDispositions } from './lib/scenario-disposition.js';
 import { scrubEvidence, evidenceSecretsFromEnv, verifyBundleV2 } from './lib/certification-bundle-verify.js';
+import { publicKeyFromPrivate, signBundleV3, verifierSign, verifyBundleV3, witnessDigest, type BundleV3, type BundleV3Requirement } from './lib/certification-bundle-v3.js';
 import {
   deriveProfiles,
   isCoreStandard,
   agentPlatformStatus,
   DEPRECATED_PROFILE_ALIASES,
   type DiscoveryPayload,
+  PROFILE_FLOOR_SCENARIOS,
 } from './lib/profiles.js';
 
 interface ParsedArgs {
@@ -64,7 +67,14 @@ interface ParsedArgs {
   readonly implVersion: string | undefined;
   /** RFC 0089 — emit a conformance certification bundle to this path. */
   readonly certify: string | undefined;
-  readonly bundleVersion: '1' | '2';
+  readonly bundleVersion: '2' | '3';
+  /** Suite 2.0.0 (RFC 0168 §E): v3 needs the build identity, the signing key, and the tier. */
+  readonly hostBuild: { kind: 'image-digest' | 'commit' | 'artifact-sha256'; id: string } | undefined;
+  readonly evidenceTier: 'self' | 'steward' | 'independent';
+  readonly signingKeyPath: string | undefined;
+  readonly signingKeyId: string | undefined;
+  readonly verifierKeyPath: string | undefined;
+  readonly verifierKeyId: string | undefined;
   /**
    * S43 (2026-08-18) — cap on concurrently running scenario FILES, forwarded to
    * vitest `--maxWorkers`. Unset = vitest's default (one worker per CPU), which
@@ -86,7 +96,10 @@ function parseArgs(argv: readonly string[]): ParsedArgs {
   // Suite 1.152.0: bundle v2 (RFC 0148) is the default. v1 stays reachable via
   // `--bundle-version 1` through the RFC 0148 migration window (ends
   // 2026-11-10) and is removed at v2.0 (spec/v1/deprecations.json).
-  let bundleVersion: '1' | '2' = '2';
+  let bundleVersion: '2' | '3' = '3';
+  let hostBuild: ParsedArgs['hostBuild'];
+  let evidenceTier: ParsedArgs['evidenceTier'] = 'self';
+  let signingKeyPath: string | undefined, signingKeyId: string | undefined, verifierKeyPath: string | undefined, verifierKeyId: string | undefined;
   let targetMajor: 1 | 2 | undefined;
   let maxWorkers: number | undefined = parseMaxWorkers(process.env.OPENWOP_MAX_WORKERS, 'OPENWOP_MAX_WORKERS');
 
@@ -138,19 +151,29 @@ function parseArgs(argv: readonly string[]): ParsedArgs {
         implVersion = nextValue();
         break;
       case '--bundle-version': {
-        const v = nextValue();
-        if (v !== '1' && v !== '2') {
-          process.stderr.write(`--bundle-version must be 1 or 2 (got '${v}')\n`);
-          process.exit(2);
-        }
+        const v = argv[++i];
+        if (v !== '2' && v !== '3') { process.stderr.write(`openwop-conformance: --bundle-version must be 2 or 3 (got ${String(v)}); v1 is gone in suite 2.0.0 (RFC 0168 §E.3)\n`); process.exit(2); }
+        if (v === '2') process.stderr.write('openwop-conformance: --bundle-version 2 is DEPRECATED — v2 bundles stop substantiating a certification at v1 end-of-support (RFC 0168 §E.3); the default is 3.\n');
         bundleVersion = v;
-        if (v === '1') {
-          process.stderr.write(
-            'openwop-conformance: --bundle-version 1 is DEPRECATED (RFC 0148). A v1 bundle ceases to substantiate a new certification after 2026-11-10 and the format is removed at v2.0; omit the flag to emit bundle v2.\n',
-          );
-        }
         break;
       }
+      case '--host-build': {
+        const v = argv[++i] ?? '';
+        const mm = /^(image-digest|commit|artifact-sha256):(.+)$/.exec(v);
+        if (!mm) { process.stderr.write(`openwop-conformance: --host-build must be <image-digest|commit|artifact-sha256>:<id> (got ${JSON.stringify(v)})\n`); process.exit(2); }
+        hostBuild = { kind: mm[1] as 'image-digest' | 'commit' | 'artifact-sha256', id: mm[2] };
+        break;
+      }
+      case '--evidence-tier': {
+        const v = argv[++i];
+        if (v !== 'self' && v !== 'steward' && v !== 'independent') { process.stderr.write('openwop-conformance: --evidence-tier must be self, steward or independent\n'); process.exit(2); }
+        evidenceTier = v;
+        break;
+      }
+      case '--signing-key': signingKeyPath = argv[++i]; break;
+      case '--signing-key-id': signingKeyId = argv[++i]; break;
+      case '--verifier-key': verifierKeyPath = argv[++i]; break;
+      case '--verifier-key-id': verifierKeyId = argv[++i]; break;
       case '--certify':
         certify = nextValue();
         break;
@@ -175,6 +198,12 @@ function parseArgs(argv: readonly string[]): ParsedArgs {
     certify,
     bundleVersion,
     targetMajor,
+    hostBuild,
+    evidenceTier,
+    signingKeyPath,
+    signingKeyId,
+    verifierKeyPath,
+    verifierKeyId,
     maxWorkers,
   };
 }
@@ -216,7 +245,11 @@ Certification (RFC 0089):
   --target-major <1|2>    Suite 2.0.0 (RFC 0168 §D.3): run the scenarios for this protocol
                           major. Default: the host's preferredVersion (RFC 0179), else
                           max(protocolVersions[]), else 1. Selection is scenario-majors.json.
-  --bundle-version <1|2>  Certification bundle format. Default 2 (corrected 2026-09-03, RFC 0168 §E.4; the text said 1 while the code set 2). Version 2 (RFC 0148
+  --host-build <k>:<id>   v3: the build identity (image-digest|commit|artifact-sha256), or OPENWOP_HOST_BUILD.
+  --signing-key <pem>     v3: Ed25519 private key (PKCS8 PEM) that signs the bundle, or OPENWOP_BUNDLE_SIGNING_KEY.
+  --signing-key-id <id>   v3: the keyId the host publishes for that key, or OPENWOP_BUNDLE_SIGNING_KEY_ID.
+  --evidence-tier <t>     v3: self | steward | independent (independent needs --verifier-key/--verifier-key-id).
+  --bundle-version <2|3>  Certification bundle format. Default 2 (corrected 2026-09-03, RFC 0168 §E.4; the text said 1 while the code set 2). Version 2 (RFC 0148
                         §C) records per-requirement DISPOSITIONS instead of pass/fail/skip
                         file lists, so "we could not check" stops being indistinguishable
                         from "checked and it holds". See the note it prints.
@@ -278,6 +311,59 @@ function claimedProfilesFor(doc: DiscoveryPayload): string[] {
   return profiles;
 }
 
+/**
+ * The v2 profile registry is a set of predicates over the DECLARATION
+ * (RFC 0169 §C.1): every listed family present as a record, every listed
+ * metadata key present. The v1 derivation cannot stand in — `isCore` wants a
+ * root `protocolVersion` plus `supportedEnvelopes`/`schemaVersions`/`limits`,
+ * shapes a closed v2 root does not have — so a major-2 run claimed NOTHING and
+ * no v2 host could ever certify. Falls back to the empty set only when the
+ * registry is genuinely absent from the layout, and says so.
+ */
+function claimedProfilesForV2(doc: DiscoveryPayload, conformanceRoot: string): string[] {
+  // Resolve the peer the way `lib/paths.ts` does — through Node's resolver from
+  // this package — instead of guessing directory shapes. Hand-rolled candidates
+  // found the registry in a repo checkout and missed it in every published
+  // install, where npm hoists the peer to a SIBLING package dir: the probe that
+  // walked one level up landed on the `@openwop/` scope directory, not a
+  // package, so a real host run silently claimed nothing.
+  const candidates = [];
+  try {
+    const req = createRequire(resolvePath(conformanceRoot, 'package.json'));
+    candidates.push(resolvePath(dirname(req.resolve('@openwop/spec-artifacts/package.json')), 'spec', 'v2', 'profiles.json'));
+  } catch { /* not installed as a package; the repo-layout candidates below */ }
+  candidates.push(
+    resolvePath(conformanceRoot, 'spec', 'v2', 'profiles.json'),
+    resolvePath(conformanceRoot, '..', 'spec', 'v2', 'profiles.json'),
+    resolvePath(conformanceRoot, '..', 'spec-artifacts', 'spec', 'v2', 'profiles.json'),
+  );
+  const found = candidates.find((c) => existsSync(c));
+  if (found === undefined) {
+    process.stderr.write('openwop-conformance --certify: spec/v2/profiles.json not found in this layout; claimedProfiles is empty (RFC 0169 §C.1).\n');
+    return [];
+  }
+  let registry: { profiles?: Array<{ id?: unknown; predicate?: { families?: unknown; metadata?: unknown } }> };
+  try {
+    registry = JSON.parse(readFileSync(found, 'utf8'));
+  } catch {
+    process.stderr.write(`openwop-conformance --certify: ${found} is unreadable; claimedProfiles is empty.\n`);
+    return [];
+  }
+  const root = doc as unknown as Record<string, unknown>;
+  const isRecord = (k: string): boolean => {
+    const v = root[k];
+    return typeof v === 'object' && v !== null && !Array.isArray(v);
+  };
+  const out: string[] = [];
+  for (const p of registry.profiles ?? []) {
+    if (typeof p.id !== 'string') continue;
+    const families = Array.isArray(p.predicate?.families) ? (p.predicate.families as unknown[]).map(String) : [];
+    const metadata = Array.isArray(p.predicate?.metadata) ? (p.predicate.metadata as unknown[]).map(String) : [];
+    if (families.every(isRecord) && metadata.every((k) => root[k] !== undefined)) out.push(p.id);
+  }
+  return out;
+}
+
 /** A single scenario test file's terminal state, derived from the vitest JSON report. */
 type ScenarioState = 'passed' | 'failed' | 'skipped';
 
@@ -334,15 +420,21 @@ function scenarioStatesFromReport(report: VitestJsonReport): Map<string, Scenari
 async function resolveTargetMajor(args: ParsedArgs, baseUrl: string | undefined, apiKey: string | undefined, conformanceRoot: string): Promise<{ major: 1 | 2; files: string[]; source: string }> {
   let major: 1 | 2 | undefined = args.targetMajor;
   let source = 'flag';
+  let dualStack = false;
   if (major === undefined && baseUrl) {
     try {
       const res = await fetch(`${baseUrl.replace(/\/$/, '')}/.well-known/openwop`, { headers: apiKey ? { authorization: `Bearer ${apiKey}` } : {} });
       const doc = (await res.json()) as { preferredVersion?: string; protocolVersions?: string[] };
       const pv = doc.preferredVersion ?? (doc.protocolVersions ?? []).map((v) => v).sort((a, b) => Number(b.split('.')[0]) - Number(a.split('.')[0]))[0];
+      if ((doc.protocolVersions ?? []).some((v) => v.startsWith('2.'))) dualStack = true;
       if (pv) { major = Number(pv.split('.')[0]) >= 2 ? 2 : 1; source = doc.preferredVersion ? 'preferredVersion' : 'max(protocolVersions[])'; }
     } catch { /* unreachable host: the default below; the run itself will report the failure */ }
   }
   if (major === undefined) { major = 1; source = 'default'; }
+  // Through the overlap `preferredVersion` names the 1.x member (versioning.md
+  // §1.1), so auto-detection on a dual-stack host resolves to major 1 by design.
+  // Say so, or an operator reads a v1 run as the host's only option.
+  if (major === 1 && dualStack) source += ' (the host also serves 2.x — pass --target-major 2 to measure it)';
   const manifest = JSON.parse(readFileSync(resolvePath(conformanceRoot, 'scenario-majors.json'), 'utf8')) as { majors: Record<string, number[]> };
   const files = Object.entries(manifest.majors).filter(([, m]) => m.includes(major as number)).map(([f]) => `src/scenarios/${f}`);
   return { major, files, source };
@@ -353,10 +445,19 @@ async function runCertify(args: ParsedArgs, baseUrl: string, apiKey: string): Pr
   if (outPath === undefined) process.exit(2);
 
   // (a) Fetch /.well-known/openwop verbatim + its canonical-JSON SHA-256.
+  // The target is resolved FIRST: `/.well-known/openwop` is one resource whose
+  // representation the `OpenWOP-Version` header selects, and through the overlap
+  // the header-less representation is the v1 document (spec/v2/core/versioning.md
+  // §1.1). Fetching it header-less on a major-2 run captured the v1 rendering, so
+  // `claimedProfiles` came out as the v1 set and the bundle described a contract
+  // the run never measured.
+  const here = dirname(fileURLToPath(import.meta.url));
+  const conformanceRoot = resolvePath(here, '..');
+  const target = await resolveTargetMajor(args, baseUrl, apiKey, conformanceRoot);
   const discoveryUrl = `${baseUrl.replace(/\/$/, '')}/.well-known/openwop`;
   let document: DiscoveryPayload;
   try {
-    const resp = await fetch(discoveryUrl, { headers: { Accept: 'application/json' } });
+    const resp = await fetch(discoveryUrl, { headers: { Accept: 'application/json', ...(target.major === 2 ? { 'OpenWOP-Version': '2.0' } : {}) } });
     if (!resp.ok) {
       process.stderr.write(
         `openwop-conformance --certify: GET ${discoveryUrl} returned HTTP ${resp.status}.\n`,
@@ -373,12 +474,10 @@ async function runCertify(args: ParsedArgs, baseUrl: string, apiKey: string): Pr
   const sha256 = createHash('sha256').update(canonicalJSON(document)).digest('hex');
 
   // (b) Derive claimedProfiles from the captured document.
-  const claimedProfiles = claimedProfilesFor(document);
+  const claimedProfiles = target.major === 2 ? claimedProfilesForV2(document, conformanceRoot) : claimedProfilesFor(document);
 
   // (c) Run the suite, capturing per-scenario terminal state via the vitest
   // JSON reporter. server-targeted scenarios live under src/scenarios/.
-  const here = dirname(fileURLToPath(import.meta.url));
-  const conformanceRoot = resolvePath(here, '..');
   const reportDir = mkdtempSync(join(tmpdir(), 'owp-certify-'));
   const reportFile = join(reportDir, 'vitest-report.json');
   // RFC 0148 §A ledger sink (S6): every scenario file records its disposition
@@ -392,7 +491,6 @@ async function runCertify(args: ParsedArgs, baseUrl: string, apiKey: string): Pr
   if (args.impl) env.OPENWOP_IMPLEMENTATION_NAME = args.impl;
   if (args.implVersion) env.OPENWOP_IMPLEMENTATION_VERSION = args.implVersion;
 
-  const target = await resolveTargetMajor(args, baseUrl, apiKey, conformanceRoot);
   env.OPENWOP_TARGET_MAJOR = String(target.major);
   process.stderr.write(`openwop-conformance --certify: target major ${target.major} (${target.source}); ${target.files.length} scenario file(s)\n`);
   const vitestArgs: string[] = [
@@ -506,6 +604,79 @@ async function runCertify(args: ParsedArgs, baseUrl: string, apiKey: string): Pr
     );
   }
 
+  if (args.bundleVersion === '3') {
+    // ── Bundle v3 (RFC 0168 §E) ─────────────────────────────────────────────
+    const build = args.hostBuild ?? (() => {
+      const mm = /^(image-digest|commit|artifact-sha256):(.+)$/.exec(process.env['OPENWOP_HOST_BUILD'] ?? '');
+      return mm ? { kind: mm[1] as BundleV3['host']['build']['kind'], id: mm[2] } : undefined;
+    })();
+    const signingKeyPem = args.signingKeyPath ? readFileSync(args.signingKeyPath, 'utf8') : process.env['OPENWOP_BUNDLE_SIGNING_KEY'];
+    const keyId = args.signingKeyId ?? process.env['OPENWOP_BUNDLE_SIGNING_KEY_ID'];
+    if (!build || !signingKeyPem || !keyId) {
+      process.stderr.write('openwop-conformance --certify: a v3 bundle needs --host-build <kind>:<id> (or OPENWOP_HOST_BUILD), --signing-key <pem> (or OPENWOP_BUNDLE_SIGNING_KEY) and --signing-key-id (or OPENWOP_BUNDLE_SIGNING_KEY_ID) — an unsigned bundle does not exist in v3 (RFC 0168 §E.2).\n');
+      process.exit(2);
+    }
+    const rows3: BundleV3Requirement[] = derived.requirements.map((r) => ({ id: r.requirementId, scenario: r.scenarioId, result: r.disposition as BundleV3Requirement['result'], ...(r.assertionCount === undefined ? {} : { assertions: r.assertionCount }), ...(r.detail === undefined ? {} : { detail: r.detail }) }));
+    const totals3 = derived.totals;
+    const doc3 = document as Record<string, unknown>;
+    const protocolVersions = Array.isArray(doc3['protocolVersions']) ? (doc3['protocolVersions'] as string[]) : [String(doc3['protocolVersion'] ?? '')];
+    const preferredVersion = typeof doc3['preferredVersion'] === 'string' ? (doc3['preferredVersion'] as string) : (protocolVersions[0] ?? '');
+    // witnessCount: executed-pass rows on the profile's floor (PROFILE_FLOOR_SCENARIOS required + requiredAnyPrefix).
+    const witnessCountFor = (profile: string): number => {
+      const floor = PROFILE_FLOOR_SCENARIOS[profile];
+      if (!floor) return 0;
+      const onFloor = (scenario: string): boolean => floor.required.includes(scenario) || (floor.requiredAnyPrefix ?? []).some((pre) => scenario.startsWith(pre));
+      return derived.requirements.filter((r) => r.disposition === 'executed-pass' && onFloor(r.scenarioId)).length;
+    };
+    const claimed3 = claimedProfiles.filter((p) => !(p in DEPRECATED_PROFILE_ALIASES)).map((p) => ({ id: p, evidenceTier: args.evidenceTier, witnessCount: witnessCountFor(p), certified: !notHeld.has(p) && !rejectedProfiles.some((v) => v.profile === p) && totals3.blocked === 0 }));
+    let relaxations: BundleV3['host']['relaxations'];
+    if (process.env['OPENWOP_HOST_RELAXATIONS']) { try { relaxations = JSON.parse(process.env['OPENWOP_HOST_RELAXATIONS']) as BundleV3['host']['relaxations']; } catch { process.stderr.write('openwop-conformance --certify: OPENWOP_HOST_RELAXATIONS is not JSON\n'); process.exit(2); } }
+    const lockPath = resolvePath(conformanceRoot, 'dist', 'spec-artifacts.lock.json');
+    const lock = existsSync(lockPath) ? (JSON.parse(readFileSync(lockPath, 'utf8')) as { version: string; stampSha256: string }) : undefined;
+    const nonPass = rows3.filter((r) => r.result !== 'executed-pass');
+    const unsigned: Omit<BundleV3, 'signature'> = {
+      bundleVersion: '3',
+      generatedAt: new Date().toISOString(),
+      suite: { name: '@openwop/openwop-conformance', version, targetMajor: target.major, specArtifactsVersion: lock?.version ?? 'repo-layout', ...(lock ? { stampSha256: lock.stampSha256 } : {}) },
+      host: { name: host.name, version: host.version, ...(host.vendor ? { vendor: host.vendor } : {}), build, signingKeyId: keyId, ...(relaxations && relaxations.length ? { relaxations } : {}) },
+      discovery: { url: discoveryUrl, sha256, protocolVersions, preferredVersion },
+      claimedProfiles: claimed3,
+      results: { totals: totals3, requirements: rows3 },
+      witnessSha256: witnessDigest(rows3),
+      assertionCount: rows3.reduce((n, r) => n + (r.assertions ?? 0), 0),
+      ...(nonPass.length ? { detail: { nonPass: nonPass.map((r) => ({ id: r.id, result: r.result, reason: r.detail ?? '' })) } } : {}),
+    };
+    const signature = signBundleV3(unsigned, signingKeyPem, keyId);
+    const v3: BundleV3 = { ...unsigned, signature };
+    if (args.evidenceTier === 'independent') {
+      const vk = args.verifierKeyPath ? readFileSync(args.verifierKeyPath, 'utf8') : process.env['OPENWOP_BUNDLE_VERIFIER_KEY'];
+      const vkId = args.verifierKeyId ?? process.env['OPENWOP_BUNDLE_VERIFIER_KEY_ID'];
+      if (!vk || !vkId) { process.stderr.write('openwop-conformance --certify: --evidence-tier independent needs --verifier-key and --verifier-key-id (RFC 0168 §E.2)\n'); process.exit(2); }
+      v3.verifierSignature = verifierSign(unsigned, vk, vkId);
+    }
+    const secrets3 = evidenceSecretsFromEnv(process.env, [apiKey, signingKeyPem]);
+    const scrubbed3 = scrubEvidence(v3, secrets3);
+    const v3Out = scrubbed3.value as BundleV3;
+    const audit3 = verifyBundleV3(v3Out, { hostPublicKeyPem: publicKeyFromPrivate(signingKeyPem) });
+    const emitterDefects = audit3.rejections.filter((r) => !['blocked-certified', 'relaxed-profile-certified', 'independent-unverifiable'].includes(r.kind));
+    if (emitterDefects.length > 0) {
+      process.stderr.write('openwop-conformance --certify: assembled v3 bundle FAILED self-verification (emitter defect):\n' + emitterDefects.map((r) => `  - [${r.kind}] ${r.detail}`).join('\n') + '\n');
+      process.exit(2);
+    }
+    const v3Schema = JSON.parse(readFileSync(join(SCHEMAS_DIR, 'v2', 'certification-bundle.schema.json'), 'utf8')) as Record<string, unknown>;
+    const v3Ajv = new Ajv2020({ allErrors: true, strict: false });
+    addFormats(v3Ajv);
+    v3Ajv.addSchema(JSON.parse(readFileSync(join(SCHEMAS_DIR, 'v2', 'ids.schema.json'), 'utf8')) as Record<string, unknown>);
+    const v3Validate = v3Ajv.compile(v3Schema);
+    if (!v3Validate(v3Out)) {
+      process.stderr.write('openwop-conformance --certify: assembled v3 bundle FAILED schema validation:\n' + `${JSON.stringify(v3Validate.errors, null, 2)}\n`);
+      process.exit(2);
+    }
+    writeFileSync(outPath, `${JSON.stringify(v3Out, null, 2)}\n`);
+    process.stdout.write(`openwop-conformance --certify: wrote bundle v3 → ${outPath} (${rows3.length} requirement rows, ${v3Out.assertionCount} assertions, witness ${v3Out.witnessSha256.slice(0, 12)}, signed by ${keyId}; certified: ${audit3.certifiedProfiles.join(', ') || 'none'})\n`);
+    process.exit(rejectedProfiles.length > 0 ? 3 : failed.length > 0 ? 1 : 0);
+  }
+
   if (args.bundleVersion === '2') {
     const scenarioIds = [...passed, ...failed, ...skipped].sort();
     const manifestSha = createHash('sha256').update(scenarioIds.join('\n'), 'utf8').digest('hex');