@openwop/openwop-conformance 2.0.5 → 2.0.6

package/CHANGELOG.md

@@ -1,5 +1,44 @@
 # `@openwop/openwop-conformance` Changelog
 
+## [2.0.6] — 2026-09-06 — the release that made a rule uncheckable
+
+**If you pinned 2.0.5, `v2-unmapped-type-refused` did not run against your
+host.** It soft-skipped `inapplicable` and the lane went green. Pin 2.0.6 and
+re-measure before trusting any result that scenario gave you.
+
+2.0.5 shipped four fixes for rules whose instruments could not answer, and one
+of those fixes did the same thing to a fifth. Reported by a host operator who
+kept a local witness for a defect they knew was unfixed and re-measured before
+accepting a green they wanted. Two defects, one symptom:
+
+- **The corpus resolver was anchored on a repo-only directory.**
+  `registeredOrgs()` and `codemapV1toV2()` located `spec/v2/` via
+  `V1_DIR/../v2` — a **v1**-anchored path to a **v2** file. No published package
+  ships `spec/v1/`, so `V1_DIR` is `null` in every install and both lookups
+  returned nothing. The data was never missing; it is in the exact-pinned
+  `@openwop/spec-artifacts` peer. Both now resolve through `SPEC_V2_DIR`
+  (`lib/paths`), anchored on the contract root, which holds in a repo checkout
+  and an install alike. The codemap failed more quietly — 7 fallback rows
+  instead of 118, so era-2 readers asserted against names it never had.
+
+- **A precondition written for one leg gated the other.**
+  `v2-unmapped-type-refused` drives two opposite halves of the reader rule.
+  Both were gated on a single check that demanded a resolvable registry, which
+  only the *control* leg needs. With the registry unreachable, the *refusal*
+  leg skipped on exactly the hosts it exists to catch: one answering `200` and
+  one answering `500` were both green. Gates are now separate and pure
+  (`unmappedRefusalGate` / `vendorControlGate`), with the fail-closed reading
+  explicit — an unreadable registry registers nothing, so the refusal is still
+  required and the leg stays drivable.
+
+Added `src/lib/era2-unmapped-gates.test.ts` (the gates' truth table, including
+the rows a live-host scenario cannot check about itself; sabotage-verified) and
+a post-install corpus-resolution assertion in `verify-installable` — a clean
+`npm install` was never evidence the suite works.
+
+**A ratchet's STALE signal means the scenario stopped failing. It is not
+evidence the defect is fixed.**
+
 ## [2.0.5] — 2026-09-06 — four rules with no way to be checked
 
 Four instruments that could not, even in principle, return the answer they

package/dist/lib/paths.js

@@ -103,6 +103,8 @@ function resolveFromRoot(root, layout, contractRoot = root) {
             : null;
     const v1Probe = join(root, 'spec', 'v1');
     const v1Dir = existsSync(v1Probe) ? v1Probe : null;
+    const specV2Probe = join(contractRoot, 'spec', 'v2');
+    const specV2Dir = existsSync(specV2Probe) ? specV2Probe : null;
     const readmeProbe = join(root, 'README.md');
     const readmePath = existsSync(readmeProbe) ? readmeProbe : null;
     const typescriptRunHelpersProbe = join(root, 'sdk', 'typescript', 'src', 'run-helpers.ts');
@@ -121,6 +123,7 @@ function resolveFromRoot(root, layout, contractRoot = root) {
         fixturesDocPath,
         coverageDocPath,
         v1Dir,
+        specV2Dir,
         readmePath,
         typescriptRunHelpersPath,
         pythonTypesPath,
@@ -171,6 +174,7 @@ export const CONFORMANCE_README_PATH = _layout.conformanceReadmePath;
 export const FIXTURES_DOC_PATH = _layout.fixturesDocPath;
 export const COVERAGE_DOC_PATH = _layout.coverageDocPath;
 export const V1_DIR = _layout.v1Dir;
+export const SPEC_V2_DIR = _layout.specV2Dir;
 export const README_PATH = _layout.readmePath;
 export const TYPESCRIPT_RUN_HELPERS_PATH = _layout.typescriptRunHelpersPath;
 export const PYTHON_TYPES_PATH = _layout.pythonTypesPath;

package/dist/spec-artifacts.lock.json

@@ -1,5 +1,5 @@
 {
   "package": "@openwop/spec-artifacts",
-  "version": "2.0.5",
-  "stampSha256": "0046fddf0cc553f5da0fa9ee108a4c45af6b35fe3c1456e62436127c591dc405"
+  "version": "2.0.6",
+  "stampSha256": "4f7707b8acb297687e2cc9017f2fa34191033dd0b5db6c1cc64c2c04477ecee6"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openwop/openwop-conformance",
-  "version": "2.0.5",
+  "version": "2.0.6",
   "description": "Production-ready black-box conformance suite for OpenWOP v1.0 compliant servers.",
   "repository": {
     "type": "git",
@@ -56,6 +56,6 @@
     "@openwop/spec-artifacts": "file:../spec-artifacts"
   },
   "peerDependencies": {
-    "@openwop/spec-artifacts": "2.0.5"
+    "@openwop/spec-artifacts": "2.0.6"
   }
 }

package/requirements.json

@@ -28687,7 +28687,7 @@
     {
       "id": "openwop.it.v2-unmapped-type-refused.poll-over-a-log-with-an-unmapped-unprefixed-type-fails-with-500-event-type-unmap",
       "file": "v2-unmapped-type-refused.test.ts",
-      "line": 95,
+      "line": 92,
       "title": "poll over a log with an unmapped, unprefixed type fails with 500 event_type_unmapped",
       "explicitId": "openwop.requirement.0176.unmapped-type-refused",
       "citations": [
@@ -28711,7 +28711,7 @@
     {
       "id": "openwop.it.v2-unmapped-type-refused.a-registered-vendor-type-the-codemap-does-not-name-is-read-under-its-own-name-un",
       "file": "v2-unmapped-type-refused.test.ts",
-      "line": 120,
+      "line": 117,
       "title": "a REGISTERED vendor type the codemap does not name is read under its own name, unchanged",
       "explicitId": "openwop.requirement.0176.vendor-type-passthrough",
       "citations": [
@@ -28730,7 +28730,7 @@
     {
       "id": "openwop.it.v2-unmapped-type-refused.a-fork-of-the-same-log-is-refused-for-the-same-reason-the-rule-binds-every-reade",
       "file": "v2-unmapped-type-refused.test.ts",
-      "line": 146,
+      "line": 143,
       "title": "a fork of the same log is refused for the same reason — the rule binds every reader",
       "explicitId": "openwop.requirement.0176.unmapped-type-refused.fork",
       "citations": [

package/schemas/CORPUS-STAMP.json

@@ -1,17 +1,17 @@
 {
   "_comment": "Provenance of @openwop/spec-artifacts (RFC 0168 §D.2). files: SHA-256 per file; the conformance suite compares the installed peer against dist/spec-artifacts.lock.json at start.",
   "package": "@openwop/spec-artifacts",
-  "version": "2.0.5",
-  "corpusTag": "v2.0.5",
+  "version": "2.0.6",
+  "corpusTag": "v2.0.6",
   "files": {
     "api/.redocly.lint-ignore.yaml": "bf5a8350b88a72fa43f59605ed8d903ed24b6cfccda5e45509c9f6ed9ee4e712",
     "api/asyncapi.yaml": "d5ecb9ee6114582be3b1f662c84bfac9ae96dae7bacb853e461168f70a8e1c7d",
     "api/grpc/openwop.proto": "c3e72bb17cba514ee98feb6434e6c9b6ea6795bfd086489ec69fd882dd1ad977",
     "api/openapi.yaml": "39081c59fb696159806b0f2f9a42e7e9ff830d622fcf2ad4159b21357580a955",
     "api/redocly.yaml": "b0604c89b2ca6d5076ec25725c539dad44a741a811fe524439ee6daef8baa09f",
-    "api/seams-v2.yaml": "99eae8d4204c4c23c4af05ed5e4982171ca6cf4fe9be03ebcedd9d977c5006dc",
-    "api/v2/asyncapi.yaml": "42040149c2a2056b1f69533fe4fb96e4f0299c8a06e952a88b8b7fd6d21748d2",
-    "api/v2/openapi.yaml": "4dcb20f14d28b4a7bfbbd2f6c1740723937169b7d1581670fe82c968e5d587a8",
+    "api/seams-v2.yaml": "594aad07baceb9c8e00dc9fe91dd8f6f99bc6624c64eaf5be91dbb5f22a35c48",
+    "api/v2/asyncapi.yaml": "5839f6cb16ed8997a335491a6700ddc2f4166c994ca2838863d4029c1ef6d58e",
+    "api/v2/openapi.yaml": "f1288076f774dbb46b885519b94719df84b31b4535fe2a5bccb9881d2e09b0ea",
     "api/v2/redocly.yaml": "1e66b60e6118ad11a823bb620678be464d99dfe50a40e3e6f93ec9429b88b34c",
     "schemas/README.md": "0c0b737ffcf8f30e7d2809cec8a498232de710f41443212922ad8337cdde0b51",
     "schemas/a2a-task-state.schema.json": "c9365918f993f943b4b619d42551eb066a1ed33a08d895d51b395432a5b1f1bc",
@@ -199,7 +199,7 @@
     "schemas/workspace-file.schema.json": "464de85c2a068243084ee9c1d969bc7cd5d8f7948574e58450d6493c38a0e1e4",
     "spec/v1/alias-detectors.json": "fee4594ef49953953ffcd0b3813300067d16b3e65ebff2aac722034ac9b3f545",
     "spec/v1/capability-declaration-classes.json": "e7729aed5c4b4e1dd02abab0530f14cc95f5d4070fe51fb139e7f5cccefa00c6",
-    "spec/v1/core-standard-manifest.json": "6e6059b6bcb2196ebbdf4015a28d4a077f93e7bec710326c492b49935988fd15",
+    "spec/v1/core-standard-manifest.json": "0018230eb426fb0af82545b9f63920cc9504a9eed2a03c44ef61cf73f429e82b",
     "spec/v1/deprecations.json": "1d5acb69a9b8ccb57275a95605f74aef1d920685f8407c9d382a46b59dc803bb",
     "spec/v1/deprecations.schema.json": "18c87e78bedc210431f795ae44c5b5d202f2f3317850d5cf86867d4f1fa1cdfb",
     "spec/v1/event-codemap.json": "3da60d884157793a360da532a9fcbbfb5285636db325a74cec94b34622186d97",
@@ -268,8 +268,8 @@
     "spec/v2/path-manifest.json": "034152e09b1458c66810d4050e20a273b2b9b8fe2d92b66e8b819477de58a1be",
     "spec/v2/peer-dependency-aliases.json": "d10299280abee08258502925bc327293ee413e0108cd6e6ec75ff6110653308d",
     "spec/v2/profiles.json": "0636f19fceae625390003a347e70ef4797d84766b5c24ce8a02cea52aadebca4",
-    "spec/v2/release.json": "b5017d420b712ef558a93e0a6576df225583294157bb5c8cb198ee490c118780",
+    "spec/v2/release.json": "7735a176082e42a30d7884654d79ac7affd7fc50f4b7346085f7d841769c6819",
     "spec/v2/retention-floors.json": "eaf3722d95c79947af1d4269ef85117e126518c588cfcf1a2b21b97269f51624"
   },
-  "corpusCommit": "3d3eca2a5b8e856c1f6cf448ee9e19fbb4fe5dd1"
+  "corpusCommit": "0ebdbc9ad741d49c44731e2bd255499a7da6c4a7"
 }

package/src/lib/era2-seed.ts

@@ -35,7 +35,7 @@ import { driver, type OpenWOPResponse } from './driver.js';
 import { loadEnv } from './env.js';
 import { seamPath, seamsProfileAdvertised } from './seams.js';
 import { readErrorCode } from './error-envelope.js';
-import { V1_DIR } from './paths.js';
+import { SPEC_V2_DIR } from './paths.js';
 
 export const SEED_PATH_V1 = '/v1/host/sample/event-log/seed';
 export const SEED_PATH = seamPath(SEED_PATH_V1);
@@ -171,7 +171,12 @@ let codemap: Map<string, string> | undefined;
 export function codemapV1toV2(): Map<string, string> {
   if (codemap) return codemap;
   const m = new Map<string, string>(FALLBACK);
-  const candidate = V1_DIR ? join(V1_DIR, '..', 'v2', 'event-codemap.json') : null;
+  // Same wrong anchor as `registeredOrgs` carried, found while fixing that one:
+  // v1-anchored, so null on every published layout. It fails less loudly here
+  // because FALLBACK stands — but 7 rows are not 117, and a scenario asserting
+  // `got.type === map.get(s.type)` for a type outside the fallback was checking
+  // against a name the truncated map never had.
+  const candidate = SPEC_V2_DIR ? join(SPEC_V2_DIR, 'event-codemap.json') : null;
   if (candidate && existsSync(candidate)) {
     try {
       const doc = JSON.parse(readFileSync(candidate, 'utf8')) as { rows?: Array<{ v1?: unknown; v2?: unknown }> };
@@ -198,7 +203,12 @@ export function codemapV1toV2(): Map<string, string> {
 let orgs: ReadonlySet<string> | null | undefined;
 export function registeredOrgs(): ReadonlySet<string> | undefined {
   if (orgs !== undefined) return orgs ?? undefined;
-  const candidate = V1_DIR ? join(V1_DIR, '..', 'v2', 'declaration.json') : null;
+  // SPEC_V2_DIR, not `V1_DIR/../v2`. The v1-anchored form shipped in 2.0.5 and
+  // resolved to null for every consumer of the published package — `spec/v1/`
+  // exists only in a repo checkout, so a v2 lookup routed through a v1 probe
+  // lost the registry the moment anyone installed the suite. The declaration is
+  // reachable in both layouts; only the anchor was wrong.
+  const candidate = SPEC_V2_DIR ? join(SPEC_V2_DIR, 'declaration.json') : null;
   orgs = null;
   if (candidate && existsSync(candidate)) {
     try {
@@ -209,6 +219,50 @@ export function registeredOrgs(): ReadonlySet<string> | undefined {
   return orgs ?? undefined;
 }
 
+export type Gate = { ok: true } | { ok: false; kind: 'blocked' | 'inapplicable'; reason: string };
+
+const orgOf = (type: string): string => type.split('.')[0] ?? '';
+
+/**
+ * Preconditions for the REFUSAL half of the reader rule (`v2-unmapped-type-
+ * refused`): a type the codemap does not name, whose org is not registered,
+ * MUST fail the read.
+ *
+ * `registered === undefined` (no resolvable registry) is NOT a blocker here.
+ * An unreadable registry registers nothing, so the driven org is unregistered
+ * either way and the refusal is still the required outcome — the fail-CLOSED
+ * reading. Only a registry that resolves AND names the org invalidates the leg.
+ *
+ * Suite 2.0.5 got this wrong by sharing one precondition with the control leg,
+ * which does need the registry. On published layouts the registry did not
+ * resolve, so the refusal leg soft-skipped `inapplicable` on exactly the hosts
+ * it exists to catch: one still answering `200` to an unmapped type and one
+ * correctly answering `500` were both green. A precondition belongs to the leg
+ * that needs it, never to the file.
+ */
+export function unmappedRefusalGate(registered: ReadonlySet<string> | undefined, map: ReadonlyMap<string, string>, type: string): Gate {
+  if (registered?.has(orgOf(type)) === true) {
+    return { ok: false, kind: 'blocked', reason: `the refusal leg drives ${type}, whose org '${orgOf(type)}' is NOW REGISTERED in spec/v2/declaration.json extensions — it is a vendor type that must pass through, not an unmapped one that must be refused; pick an unregistered org for this leg` };
+  }
+  if (map.has(type)) return { ok: false, kind: 'blocked', reason: `${type} now has a codemap row (→ ${String(map.get(type))}) — the refusal leg requires a type the codemap does not name` };
+  return { ok: true };
+}
+
+/**
+ * Preconditions for the CONTROL half: a registered vendor org the codemap does
+ * not name MUST be read under its own name unchanged.
+ *
+ * This leg genuinely needs the registry to resolve — it asserts that an org IS
+ * registered, and an absent registry cannot establish that. `inapplicable` here
+ * is honest rather than over-gating.
+ */
+export function vendorControlGate(registered: ReadonlySet<string> | undefined, map: ReadonlyMap<string, string>, type: string): Gate {
+  if (registered === undefined) return { ok: false, kind: 'inapplicable', reason: 'spec/v2/declaration.json is not resolvable in this layout — the control leg asserts that a REGISTERED org passes through, and guessing which orgs are registered would make the suite the registry' };
+  if (!registered.has(orgOf(type))) return { ok: false, kind: 'blocked', reason: `the control leg needs org '${orgOf(type)}' registered in spec/v2/declaration.json extensions (registered: ${[...registered].join(', ') || 'none'}) — without a registered org the positive half of the vendor rule cannot be driven at all` };
+  if (map.has(type)) return { ok: false, kind: 'blocked', reason: `${type} now has a codemap row (→ ${String(map.get(type))}) — the control leg requires a type the codemap does not name` };
+  return { ok: true };
+}
+
 /** A minimal era-2 log in v1 vocabulary: two renamed rows between run.started and run.completed. */
 export function v1FixtureLog(workflowId = 'conformance-noop'): SeedEvent[] {
   const t0 = Date.parse('2026-01-15T10:00:00.000Z');

package/src/lib/paths.ts

@@ -66,6 +66,21 @@ interface ResolvedLayout {
   readonly coverageDocPath: string | null;
   /** Directory containing v1 prose docs (`*.md`), if present in this layout. */
   readonly v1Dir: string | null;
+  /**
+   * Directory containing the v2 corpus data (`declaration.json`, the codemap,
+   * `spec/v2/core/*.md`), if present in this layout.
+   *
+   * Anchored on the CONTRACT root, not the layout root, because that is the
+   * only anchor that holds in both shapes: in a repo checkout the contract
+   * root is the repo and `spec/v2/` sits inside it; in a published install it
+   * is the `@openwop/spec-artifacts` peer, which ships `spec/` while the
+   * conformance package ships none. A resolver anchored on `v1Dir` instead
+   * (the shape before 2.0.6) returned null for every consumer of the published
+   * package, because `spec/v1/` is a repo-only directory — so a v2 lookup was
+   * routed through a v1 probe and every published layout silently lost the
+   * data. See `era2-seed.registeredOrgs`.
+   */
+  readonly specV2Dir: string | null;
   /** Path to repository README.md, if present in this layout. */
   readonly readmePath: string | null;
   /** Path to the TypeScript SDK run-helper source, if present in this layout. */
@@ -137,6 +152,8 @@ function resolveFromRoot(root: string, layout: ResolvedLayout['layout'], contrac
       : null;
   const v1Probe = join(root, 'spec', 'v1');
   const v1Dir = existsSync(v1Probe) ? v1Probe : null;
+  const specV2Probe = join(contractRoot, 'spec', 'v2');
+  const specV2Dir = existsSync(specV2Probe) ? specV2Probe : null;
   const readmeProbe = join(root, 'README.md');
   const readmePath = existsSync(readmeProbe) ? readmeProbe : null;
   const typescriptRunHelpersProbe = join(root, 'sdk', 'typescript', 'src', 'run-helpers.ts');
@@ -155,6 +172,7 @@ function resolveFromRoot(root: string, layout: ResolvedLayout['layout'], contrac
     fixturesDocPath,
     coverageDocPath,
     v1Dir,
+    specV2Dir,
     readmePath,
     typescriptRunHelpersPath,
     pythonTypesPath,
@@ -208,6 +226,7 @@ export const CONFORMANCE_README_PATH: string | null = _layout.conformanceReadmeP
 export const FIXTURES_DOC_PATH: string | null = _layout.fixturesDocPath;
 export const COVERAGE_DOC_PATH: string | null = _layout.coverageDocPath;
 export const V1_DIR: string | null = _layout.v1Dir;
+export const SPEC_V2_DIR: string | null = _layout.specV2Dir;
 export const README_PATH: string | null = _layout.readmePath;
 export const TYPESCRIPT_RUN_HELPERS_PATH: string | null = _layout.typescriptRunHelpersPath;
 export const PYTHON_TYPES_PATH: string | null = _layout.pythonTypesPath;

package/src/scenarios/v2-unmapped-type-refused.test.ts

@@ -27,6 +27,12 @@
  * lacked. The two legs are each other's non-vacuity check: refusing both is a
  * defect, accepting both is a defect, and only the pair can tell them apart.
  *
+ * BECAUSE THEY CHECK OPPOSITE HALVES, THEY GATE SEPARATELY (`refusalGate` /
+ * `controlGate`). Suite 2.0.5 gated both on the control leg's precondition and
+ * so disabled the refusal witness wherever the registry did not resolve — on
+ * exactly the hosts it exists to catch. A precondition belongs to the leg that
+ * needs it, never to the file.
+ *
  * @see spec/v2/core/persistence.md §The reader rule
  * @see spec/v2/core/events.md §Reading an era-2 log
  */
@@ -36,7 +42,7 @@ import { v2Discovery, gateFamily } from '../lib/v2.js';
 import { readErrorCode, readRetriable } from '../lib/error-envelope.js';
 import { softSkip } from '../lib/soft-skip.js';
 import { req } from '../lib/requirement-ids.js';
-import { codemapV1toV2, era2Gate, eventsOf, forkRun, pollEvents, registeredOrgs, seedEra2Log, type SeedEvent } from '../lib/era2-seed.js';
+import { codemapV1toV2, era2Gate, eventsOf, forkRun, pollEvents, registeredOrgs, seedEra2Log, unmappedRefusalGate, vendorControlGate, type Gate, type SeedEvent } from '../lib/era2-seed.js';
 
 const DOC = 'spec/v2/core/persistence.md §The reader rule';
 const MAP = 'spec/v2/core/persistence.md §The codemap is data';
@@ -45,26 +51,17 @@ const ID_VENDOR = 'openwop.requirement.0176.vendor-type-passthrough';
 const UNMAPPED = 'foo.bar';
 /** Registered (`extensions` in the declaration), unmapped, owned by no host. */
 const VENDOR = 'example.thing-happened';
-const orgOf = (type: string): string => type.split('.')[0] ?? '';
 
 /**
- * The two types this file drives are only meaningful under preconditions the
- * corpus can move: `foo` must stay unregistered, `example` must stay
- * registered, and neither type may acquire a codemap row. Until this revision
- * those were a note inside a seeded payload — prose in a place no runner reads,
- * asserting a fact nothing checked. If `foo` is ever registered, the refusal
- * leg would quietly begin testing the opposite rule and still pass. Checked
- * here so the file fails loudly instead.
+ * The gate logic is PURE and lives in lib/era2-seed (`unmappedRefusalGate` /
+ * `vendorControlGate`) so its truth table can be measured directly — see
+ * `src/lib/era2-unmapped-gates.test.ts`. The rows that matter cannot be
+ * exercised from here: they are the layouts where the registry does NOT
+ * resolve, which is where the 2.0.5 defect lived and where a scenario running
+ * against a live host can never put itself.
  */
-function preconditions(): { ok: true } | { ok: false; kind: 'blocked' | 'inapplicable'; reason: string } {
-  const registered = registeredOrgs();
-  if (registered === undefined) return { ok: false, kind: 'inapplicable', reason: 'spec/v2/declaration.json is not resolvable in this layout — the vendor-org registry decides which half of the reader rule each type exercises, and guessing it would make the suite the registry' };
-  if (registered.has(orgOf(UNMAPPED))) return { ok: false, kind: 'blocked', reason: `the refusal leg drives ${UNMAPPED}, whose org '${orgOf(UNMAPPED)}' is NOW REGISTERED in spec/v2/declaration.json extensions — it is a vendor type that must pass through, not an unmapped one that must be refused; pick an unregistered org for this leg` };
-  if (!registered.has(orgOf(VENDOR))) return { ok: false, kind: 'blocked', reason: `the control leg needs org '${orgOf(VENDOR)}' registered in spec/v2/declaration.json extensions (registered: ${[...registered].join(', ') || 'none'}) — without a registered org the positive half of the vendor rule cannot be driven at all` };
-  const map = codemapV1toV2();
-  for (const t of [UNMAPPED, VENDOR]) if (map.has(t)) return { ok: false, kind: 'blocked', reason: `${t} now has a codemap row (→ ${String(map.get(t))}) — both legs require a type the codemap does not name` };
-  return { ok: true };
-}
+const refusalGate = (): Gate => unmappedRefusalGate(registeredOrgs(), codemapV1toV2(), UNMAPPED);
+const controlGate = (): Gate => vendorControlGate(registeredOrgs(), codemapV1toV2(), VENDOR);
 
 async function discovery(): Promise<Record<string, unknown> | null> {
   try { return await v2Discovery(); } catch { return null; }
@@ -97,7 +94,7 @@ describe('RFC 0176 §A.3 — unmapped-type-refused (seam-gated)', () => {
     if (!doc) return softSkip('blocked', 'discovery unreachable');
     const gate = era2Gate(doc);
     if (gate !== null && !gate.ok) return softSkip(gate.kind, gate.reason);
-    const pre = preconditions();
+    const pre = refusalGate();
     if (!pre.ok) return softSkip(pre.kind, pre.reason);
     const seeded = await seedEra2Log(unmappedLog(), 'completed');
     if (!seeded.ok) return softSkip(seeded.kind, seeded.reason);
@@ -122,7 +119,7 @@ describe('RFC 0176 §A.3 — unmapped-type-refused (seam-gated)', () => {
     if (!doc) return softSkip('blocked', 'discovery unreachable');
     const gate = era2Gate(doc);
     if (gate !== null && !gate.ok) return softSkip(gate.kind, gate.reason);
-    const pre = preconditions();
+    const pre = controlGate();
     if (!pre.ok) return softSkip(pre.kind, pre.reason);
     const seeded = await seedEra2Log(vendorLog(), 'completed');
     if (!seeded.ok) return softSkip(seeded.kind, seeded.reason);
@@ -149,7 +146,8 @@ describe('RFC 0176 §A.3 — unmapped-type-refused (seam-gated)', () => {
     const gate = era2Gate(doc);
     if (gate !== null && !gate.ok) return softSkip(gate.kind, gate.reason);
     if (!(await gateFamily('replay'))) return softSkip('inapplicable', 'replay family not advertised (gate recorded under openwop.family.replay) — the fork reader has no surface');
-    const pre = preconditions();
+    // The fork leg drives the UNMAPPED type, so it takes the refusal gate.
+    const pre = refusalGate();
     if (!pre.ok) return softSkip(pre.kind, pre.reason);
     const log = unmappedLog();
     const seeded = await seedEra2Log(log, 'completed');