@openwop/openwop-conformance 2.0.6 → 2.0.7

package/CHANGELOG.md

@@ -1,5 +1,64 @@
 # `@openwop/openwop-conformance` Changelog
 
+## [2.0.7] — 2026-09-06 — three claims of coverage that were not coverage
+
+No host behaviour changes. One gate changes disposition, and the two prose
+corrections remove claims the corpus was making about its own evidence.
+
+**`vendorControlGate` answers `blocked`, not `inapplicable`, when
+`spec/v2/declaration.json` cannot be resolved.** 2.0.6 — the release that fixed
+this scenario — got the disposition wrong on the branch it had just repaired.
+`inapplicable` asserts *the requirement does not bind this host*, which is a
+statement about the host made on the strength of a fact about the suite, and a
+false one: the rule binds exactly as before and the suite merely failed to read
+its own corpus. It is also the quiet answer. `inapplicable` certifies;
+`blocked` is bundle-wide fatal (RFC 0168 §E.1). The disposition that was wrong
+was the one that made no sound.
+
+As of 2.0.6 that branch is unreachable — the registry resolves in every layout
+and the publish workflow asserts it. That is the argument *for* making it
+fatal. An unreachable branch answering `inapplicable` is a trapdoor back to the
+D1 resolution defect, which was invisible precisely because it degraded a live
+witness into a quiet skip.
+
+**The general rule is now written down** (`spec/v2/core/conformance.md`
+§"Whose fact is the reason?"): a soft-skip reason MUST name a fact about the
+host under test, and where the predicate is instead a fact about the suite —
+its layout, its corpus, a fixture it cannot resolve — the row MUST record
+`blocked`. Gate ordering follows (host facts before suite facts) but is not the
+guarantee; ordering only decides which *true* reason is reported. The guarantee
+is that a suite-side gate can never be silent, because it is never
+`inapplicable`.
+
+Credit where it is due: this came from a host operator who predicted a third
+failure mode I had not considered — a row already `inapplicable` for a true host
+reason, re-gated onto a suite-side precondition, stays `inapplicable`. `skip →
+skip`, no count moves, no gate reddens, and the row silently stops describing
+the host it names. Measured against the tree, their case does not bite this
+scenario (the seams gate returns first, at `:96`, above the precondition at
+`:97`), but the rule they proposed was right and the ordering only held by
+construction — nothing written down stopped the next scenario from getting it
+wrong.
+
+`era2-unmapped-gates.test.ts` gains a row asserting that **no** reachable
+verdict in either gate is `inapplicable`, so a future suite-side gate that
+soft-skips quietly reddens a test instead of a bundle. Sabotage-verified:
+restoring 2.0.6's disposition reddens exactly those two rows and no others.
+
+### Corpus prose
+
+- **`persistence.md` §"The seat"** claimed `v2-v1-events-translated` reading
+  through poll, SSE and a fork meant "a wrapper-only adapter is caught". It does
+  not. Three wrappers pass those three legs exactly as one correctly seated
+  adapter does, and the rule binds *every* reader, including ones the suite has
+  no name for. The seat is a **claims-check** discharged by ADR disclosure and
+  audit; the scenario catches a reader that was *missed*, not an adapter that
+  was *misplaced*. The clause also cited a scenario by the wrong name and
+  pointed at `conformance.md`, which said nothing about any of it. Both MUSTs
+  are unchanged — only the false coverage claim is gone.
+- **RFC 0180** supplies the vendor-org registration procedure the registry
+  never had, and `persistence.md` §"The codemap is data" now points at it.
+
 ## [2.0.6] — 2026-09-06 — the release that made a rule uncheckable
 
 **If you pinned 2.0.5, `v2-unmapped-type-refused` did not run against your

package/dist/spec-artifacts.lock.json

@@ -1,5 +1,5 @@
 {
   "package": "@openwop/spec-artifacts",
-  "version": "2.0.6",
-  "stampSha256": "4f7707b8acb297687e2cc9017f2fa34191033dd0b5db6c1cc64c2c04477ecee6"
+  "version": "2.0.7",
+  "stampSha256": "1d8f7916c3c32af8dfffdd419b773358b812ff5954829b87bff576eb3f0dc669"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openwop/openwop-conformance",
-  "version": "2.0.6",
+  "version": "2.0.7",
   "description": "Production-ready black-box conformance suite for OpenWOP v1.0 compliant servers.",
   "repository": {
     "type": "git",
@@ -56,6 +56,6 @@
     "@openwop/spec-artifacts": "file:../spec-artifacts"
   },
   "peerDependencies": {
-    "@openwop/spec-artifacts": "2.0.6"
+    "@openwop/spec-artifacts": "2.0.7"
   }
 }

package/schemas/CORPUS-STAMP.json

@@ -1,17 +1,17 @@
 {
   "_comment": "Provenance of @openwop/spec-artifacts (RFC 0168 §D.2). files: SHA-256 per file; the conformance suite compares the installed peer against dist/spec-artifacts.lock.json at start.",
   "package": "@openwop/spec-artifacts",
-  "version": "2.0.6",
-  "corpusTag": "v2.0.6",
+  "version": "2.0.7",
+  "corpusTag": "v2.0.7",
   "files": {
     "api/.redocly.lint-ignore.yaml": "bf5a8350b88a72fa43f59605ed8d903ed24b6cfccda5e45509c9f6ed9ee4e712",
     "api/asyncapi.yaml": "d5ecb9ee6114582be3b1f662c84bfac9ae96dae7bacb853e461168f70a8e1c7d",
     "api/grpc/openwop.proto": "c3e72bb17cba514ee98feb6434e6c9b6ea6795bfd086489ec69fd882dd1ad977",
     "api/openapi.yaml": "39081c59fb696159806b0f2f9a42e7e9ff830d622fcf2ad4159b21357580a955",
     "api/redocly.yaml": "b0604c89b2ca6d5076ec25725c539dad44a741a811fe524439ee6daef8baa09f",
-    "api/seams-v2.yaml": "594aad07baceb9c8e00dc9fe91dd8f6f99bc6624c64eaf5be91dbb5f22a35c48",
-    "api/v2/asyncapi.yaml": "5839f6cb16ed8997a335491a6700ddc2f4166c994ca2838863d4029c1ef6d58e",
-    "api/v2/openapi.yaml": "f1288076f774dbb46b885519b94719df84b31b4535fe2a5bccb9881d2e09b0ea",
+    "api/seams-v2.yaml": "0d18b9414567efb5662f0a8bc06725d0e038aab14f327db7a1b8ebe3b9f4cbb9",
+    "api/v2/asyncapi.yaml": "25196e36b92b0dab97904b1f3461826d2066e579963c26c7e6168d2e5688bdfe",
+    "api/v2/openapi.yaml": "e48e5669918ddda197a17508eca24ea42e834a62b309091c87d063cb52b1b2cb",
     "api/v2/redocly.yaml": "1e66b60e6118ad11a823bb620678be464d99dfe50a40e3e6f93ec9429b88b34c",
     "schemas/README.md": "0c0b737ffcf8f30e7d2809cec8a498232de710f41443212922ad8337cdde0b51",
     "schemas/a2a-task-state.schema.json": "c9365918f993f943b4b619d42551eb066a1ed33a08d895d51b395432a5b1f1bc",
@@ -199,7 +199,7 @@
     "schemas/workspace-file.schema.json": "464de85c2a068243084ee9c1d969bc7cd5d8f7948574e58450d6493c38a0e1e4",
     "spec/v1/alias-detectors.json": "fee4594ef49953953ffcd0b3813300067d16b3e65ebff2aac722034ac9b3f545",
     "spec/v1/capability-declaration-classes.json": "e7729aed5c4b4e1dd02abab0530f14cc95f5d4070fe51fb139e7f5cccefa00c6",
-    "spec/v1/core-standard-manifest.json": "0018230eb426fb0af82545b9f63920cc9504a9eed2a03c44ef61cf73f429e82b",
+    "spec/v1/core-standard-manifest.json": "0484560c0bb72e5da9fa393b0723961e1cb7837eaf90c035ff37b7e7fdad6476",
     "spec/v1/deprecations.json": "1d5acb69a9b8ccb57275a95605f74aef1d920685f8407c9d382a46b59dc803bb",
     "spec/v1/deprecations.schema.json": "18c87e78bedc210431f795ae44c5b5d202f2f3317850d5cf86867d4f1fa1cdfb",
     "spec/v1/event-codemap.json": "3da60d884157793a360da532a9fcbbfb5285636db325a74cec94b34622186d97",
@@ -213,7 +213,7 @@
     "spec/v1/spec-gaps.json": "6cc9962c6b969f632e07a78b52a4f61447ff579e2990cbae989866f584a86042",
     "spec/v2/README.md": "f56bd8d58be4ac04543c9f7b2fe92b294738d6121a4f21cbd1ce751e72b94c83",
     "spec/v2/core/capabilities.md": "0f222434bbe58c881362a626ab9db6bce0ae2e54cb858e3d71b662dd1fc13150",
-    "spec/v2/core/conformance.md": "91418b882190e116ab9dac14527f52b8582b0462f41e96beeceb07e3fcc5f99a",
+    "spec/v2/core/conformance.md": "6dda58339117819b77710cd53d25f34cc9e602a35a7958d1afc4e3d4b6b7de23",
     "spec/v2/core/connection-packs.md": "34e519dbe5b091c9758729787d398b35b1dc41f1e01ebd028e7e6b838ce2f6ee",
     "spec/v2/core/errors.md": "671895de1b7c987a1dfd53fe0a814159efadae0ffd4c8c06bf1749d345270580",
     "spec/v2/core/events.md": "7b9207079cede7ec335126b98bcb95d655ae3b7322b18febd1b4df51750b0a33",
@@ -225,14 +225,14 @@
     "spec/v2/core/interrupt.md": "4bd345bccdb8e2762ca95833cc67086158640c27ffa5ef84915a4ab3de348440",
     "spec/v2/core/overview.md": "8ece6667535d24ed4013a046cb11e1a649f70e39625fc55e09ceb2c02505ed9c",
     "spec/v2/core/packs.md": "90f32947816b4ec2b045b063ad2914126c73353883514a270ad200205dc8e51b",
-    "spec/v2/core/persistence.md": "e18195e078d7b0b799055005567e8d86a2ea7518c87809cfaf43dfe9f5d5c8ee",
+    "spec/v2/core/persistence.md": "e9830ae228bcbc33f03d81a5f2b51e031466feb84387971dd3459bf5e1687701",
     "spec/v2/core/replay.md": "19b2fcbda4693895d39b99593f498b76376d77472a813bba6c22fca02e106332",
     "spec/v2/core/runs.md": "f5f24df6da76b1d6e2cf655af3bbe3340195c36ec8d9ce0ca6e357385b1a8771",
     "spec/v2/core/security-defaults.md": "53a1bc549aaa356a4fcb56cdb1c4f5880d3fb65d5d49dd570a413bb29aff82e5",
     "spec/v2/core/versioning.md": "2eb4e8e5a1208a026a3d497d1e0fb76a4f7cb97e514d6f41f45dd66b89405abb",
     "spec/v2/core/webhooks.md": "1d2719335f8fb46cd31dbb836b44ea7d78ed54f98ea181927502814603c5b935",
     "spec/v2/core/workflow-chain-packs.md": "99ad4aeeeeb05521720dc2ae18ae63e6d604361780ed1b76778ca6d44da70eed",
-    "spec/v2/declaration.json": "9e191dffae9f95e622b3fc7087b8c17a2f42177bb4db3c7ee5fdf650443e036d",
+    "spec/v2/declaration.json": "bd8a1dcee899a4478ac96b52da6ee07e1cb5fce4465939ac32e19e52f4d5c6b2",
     "spec/v2/declaration.schema.json": "eac5f8080bd572f147bd57d0c4ac8ad73b14536d9236222490ae29a33b21e184",
     "spec/v2/errors.json": "f179414a92f30b5dadf26e9e57699649a67324bd7186d5287647d17605d137d3",
     "spec/v2/event-codemap.json": "37869a03cdfd8758b57e6f350641a6ebbd383231cebda51f5473ad85f94ab74c",
@@ -268,8 +268,8 @@
     "spec/v2/path-manifest.json": "034152e09b1458c66810d4050e20a273b2b9b8fe2d92b66e8b819477de58a1be",
     "spec/v2/peer-dependency-aliases.json": "d10299280abee08258502925bc327293ee413e0108cd6e6ec75ff6110653308d",
     "spec/v2/profiles.json": "0636f19fceae625390003a347e70ef4797d84766b5c24ce8a02cea52aadebca4",
-    "spec/v2/release.json": "7735a176082e42a30d7884654d79ac7affd7fc50f4b7346085f7d841769c6819",
+    "spec/v2/release.json": "2937de1d170c218e4d336088035c2a4fe6b7e951b6c6bd8bd375f0580ae07a53",
     "spec/v2/retention-floors.json": "eaf3722d95c79947af1d4269ef85117e126518c588cfcf1a2b21b97269f51624"
   },
-  "corpusCommit": "0ebdbc9ad741d49c44731e2bd255499a7da6c4a7"
+  "corpusCommit": "8f8818dd663240bdd1ea074a25fd9354d0fde2c3"
 }

package/src/lib/era2-seed.ts

@@ -253,11 +253,24 @@ export function unmappedRefusalGate(registered: ReadonlySet<string> | undefined,
  * not name MUST be read under its own name unchanged.
  *
  * This leg genuinely needs the registry to resolve — it asserts that an org IS
- * registered, and an absent registry cannot establish that. `inapplicable` here
- * is honest rather than over-gating.
+ * registered, and an absent registry cannot establish that.
+ *
+ * AN UNRESOLVABLE REGISTRY IS `blocked`, NOT `inapplicable` (conformance.md
+ * §Whose fact is the reason?). Suite 2.0.6 said `inapplicable`, which asserts
+ * the requirement does not bind this host — a statement about the HOST made on
+ * the strength of a fact about the SUITE, and a false one: the rule binds
+ * exactly as before and the suite merely failed to read its own corpus.
+ * `inapplicable` also certifies, while `blocked` is bundle-wide fatal
+ * (RFC 0168 §E.1), so the wrong disposition is the silent one.
+ *
+ * As of 2.0.6 this branch is unreachable — the registry resolves in every
+ * layout and the publish workflow asserts it. That is the argument FOR making
+ * it fatal, not against: an unreachable branch answering `inapplicable` is a
+ * trapdoor back to the D1 resolution defect, which was invisible precisely
+ * because it degraded a live witness into a quiet skip.
  */
 export function vendorControlGate(registered: ReadonlySet<string> | undefined, map: ReadonlyMap<string, string>, type: string): Gate {
-  if (registered === undefined) return { ok: false, kind: 'inapplicable', reason: 'spec/v2/declaration.json is not resolvable in this layout — the control leg asserts that a REGISTERED org passes through, and guessing which orgs are registered would make the suite the registry' };
+  if (registered === undefined) return { ok: false, kind: 'blocked', reason: 'spec/v2/declaration.json is not resolvable in this layout — the control leg asserts that a REGISTERED org passes through, and guessing which orgs are registered would make the suite the registry. This is a fact about the SUITE, so it is blocked and not inapplicable (conformance.md §Whose fact is the reason?)' };
   if (!registered.has(orgOf(type))) return { ok: false, kind: 'blocked', reason: `the control leg needs org '${orgOf(type)}' registered in spec/v2/declaration.json extensions (registered: ${[...registered].join(', ') || 'none'}) — without a registered org the positive half of the vendor rule cannot be driven at all` };
   if (map.has(type)) return { ok: false, kind: 'blocked', reason: `${type} now has a codemap row (→ ${String(map.get(type))}) — the control leg requires a type the codemap does not name` };
   return { ok: true };