@openwop/openwop-conformance 2.1.5 → 2.1.7

package/CHANGELOG.md

@@ -1,5 +1,45 @@
 # `@openwop/openwop-conformance` Changelog
 
+## [2.1.7] — 2026-09-13 — nine fixtures shared one programmable node id
+
+The mock-AI program seam is keyed by `nodeId` alone — no run, no workflow, no
+tenant. `host-sample-test-seams.md` §5 stated the isolation that relies on:
+*"each conformance scenario uses a unique fixture (and therefore unique
+`nodeId`)"*. The corpus did not honour it. Nine fixtures declared a node called
+`structured-call`, and vitest runs scenario files in parallel, so any two of
+them could overwrite each other's program mid-run.
+
+That is the long-standing `replay-observable-sequence-determinism` flake.
+That scenario never programs the mock: it runs `conformance-phase4-nondet-tool`
+and inherits whatever the last writer left. When an envelope scenario had just
+staged `{ stopReason: 'safety' }`, the replay fixture's own node refused, the
+source run reached `failed`, and the scenario reported
+
+    expected 'failed' to be 'completed'
+
+— an assertion about replay determinism failing for a reason that has nothing
+to do with replay. It was green in isolation, red under the full gate, and did
+not track load, because contention was never the variable; overlap was.
+
+Each of the nine nodes is now named for its fixture
+(`refusal-structured-call`, `nondet-structured-call`, and so on), which is what
+§5 always claimed. `conformance/scripts/check-mock-ai-node-ids-unique.mjs`
+holds the line: every fixture node dispatching to the mock provider must be
+owned by exactly one fixture.
+
+**Hosts: re-register the conformance fixtures when you pin 2.1.7.** The node
+ids inside those nine workflow definitions changed. A host still serving the
+old definitions will program a node its fixture no longer has, and the envelope
+scenarios will fail loudly rather than silently — but they will fail.
+
+## [2.1.6] — 2026-09-13 — the unknown-run probe is tenant-bound
+
+`v2-compensation-read-projection` asserted `404 not_found` for an unknown run
+while probing with a BARE id, which `identity.md` §5 requires a v1-retired host
+to refuse `400 validation_error`. The probe now forms a tenant-bound id from a
+run it creates, so it tests existence rather than spelling and passes on
+overlap and retired hosts alike. No other scenario changed.
+
 ## [2.1.5] — 2026-09-12 — v1 errata only
 
 No scenario changed. The contract peer ships `spec/v1/deprecations.json`, whose

package/dist/spec-artifacts.lock.json

@@ -1,5 +1,5 @@
 {
   "package": "@openwop/spec-artifacts",
-  "version": "2.1.5",
-  "stampSha256": "88b9aea840128edb93799af8942d5fe7f8711ed36746f44c971602a4b47b5aea"
+  "version": "2.1.7",
+  "stampSha256": "5594e445dafa6f889a005c00556c2ae241f7a591f45e08eee0b126736bfb04d3"
 }

package/fixtures/conformance-envelope-nl-to-format-engaged.json

@@ -5,7 +5,7 @@
   "description": "Drives `core.ai.structuredOutput` against the conformance-only `mock` provider. The conformance scenario POSTs a 3-entry program: all three attempts return natural-language prose (no JSON sigil at the start). The host's `dispatchStructured` retry loop exhausts on parse-error, detects the NL shape, and fires ONE additional dispatch with a corrective coercion fragment — emitting `envelope.nlToFormat.engaged { originalEnvelopeType, fallbackCalls: 1 }` BEFORE the secondary call. The pre-seeded 4th program entry returns valid JSON, the schema validates, and the run terminates `completed`.",
   "nodes": [
     {
-      "id": "structured-call",
+      "id": "nl-to-format-structured-call",
       "typeId": "core.ai.structuredOutput",
       "name": "Structured output via mock provider (NL responses)",
       "position": { "x": 0, "y": 0 },

package/fixtures/conformance-envelope-recovery-applied.json

@@ -2,10 +2,10 @@
   "id": "conformance-envelope-recovery-applied",
   "name": "Conformance: envelope.recovery.applied (RFC 0032 §B.6)",
   "version": "1.0",
-  "description": "Drives `core.ai.structuredOutput` against the conformance-only `mock` provider. The conformance scenario POSTs a 1-entry program to `/v1/host/sample/test/mock-ai/program` (keyed by `nodeId: 'structured-call'`) BEFORE starting the run: the mock returns a markdown-fenced JSON envelope (e.g., ```json\\n{\"result\":\"ok\"}\\n```). The host's `dispatchStructured` lenient-parse fallback strips the fence via `tryLenientParse(text)`, emits exactly one `envelope.recovery.applied` with `path: 'markdown-fence'`, and accepts the parsed value WITHOUT counting against the retry budget per RFC 0033 §D. Run terminates `completed`.",
+  "description": "Drives `core.ai.structuredOutput` against the conformance-only `mock` provider. The conformance scenario POSTs a 1-entry program to `/v1/host/sample/test/mock-ai/program` (keyed by `nodeId: 'recovery-applied-structured-call'`) BEFORE starting the run: the mock returns a markdown-fenced JSON envelope (e.g., ```json\\n{\"result\":\"ok\"}\\n```). The host's `dispatchStructured` lenient-parse fallback strips the fence via `tryLenientParse(text)`, emits exactly one `envelope.recovery.applied` with `path: 'markdown-fence'`, and accepts the parsed value WITHOUT counting against the retry budget per RFC 0033 §D. Run terminates `completed`.",
   "nodes": [
     {
-      "id": "structured-call",
+      "id": "recovery-applied-structured-call",
       "typeId": "core.ai.structuredOutput",
       "name": "Structured output via mock provider (markdown-fenced)",
       "position": { "x": 0, "y": 0 },

package/fixtures/conformance-envelope-refusal.json

@@ -5,7 +5,7 @@
   "description": "Single `core.ai.structuredOutput` node against the conformance `mock` provider with a pre-seeded program returning `stopReason: 'safety'` + `refusalText: '...'` on attempt 1. Host's `dispatchStructured()` MUST: (a) emit exactly one `envelope.refusal` event with the canonical payload shape; (b) NOT retry (RFC 0032 §B.3 + RFC 0033 §D — refusal is terminal); (c) fail the node with `error.code: 'envelope_refused_by_provider'` per RFC 0033 §F; (d) NOT echo the refusal text in `RunSnapshot.error.message` (SECURITY invariant `envelope-refusal-no-prompt-leak` — refusal text lives only on the event-log entry, scrubbed via the existing SR-1 redaction harness).",
   "nodes": [
     {
-      "id": "structured-call",
+      "id": "refusal-structured-call",
       "typeId": "core.ai.structuredOutput",
       "name": "Structured output via mock provider (refusal)",
       "position": { "x": 0, "y": 0 },

package/fixtures/conformance-envelope-retry-attempted.json

@@ -2,10 +2,10 @@
   "id": "conformance-envelope-retry-attempted",
   "name": "Conformance: envelope.retry.attempted (RFC 0032 §B.1)",
   "version": "1.0",
-  "description": "Drives `core.ai.structuredOutput` against the conformance-only `mock` provider. The conformance scenario POSTs a 2-entry program to `/v1/host/sample/test/mock-ai/program` (keyed by `nodeId: 'structured-call'`) BEFORE starting the run: attempt 1 returns invalid JSON, attempt 2 returns a valid envelope. The host's `dispatchStructured` retry loop MUST emit exactly one `envelope.retry.attempted` event with `attempt: 2` between the two provider calls (RFC 0032 §B.1). The run terminates `completed` after the second attempt succeeds.",
+  "description": "Drives `core.ai.structuredOutput` against the conformance-only `mock` provider. The conformance scenario POSTs a 2-entry program to `/v1/host/sample/test/mock-ai/program` (keyed by `nodeId: 'retry-attempted-structured-call'`) BEFORE starting the run: attempt 1 returns invalid JSON, attempt 2 returns a valid envelope. The host's `dispatchStructured` retry loop MUST emit exactly one `envelope.retry.attempted` event with `attempt: 2` between the two provider calls (RFC 0032 §B.1). The run terminates `completed` after the second attempt succeeds.",
   "nodes": [
     {
-      "id": "structured-call",
+      "id": "retry-attempted-structured-call",
       "typeId": "core.ai.structuredOutput",
       "name": "Structured output via mock provider",
       "position": { "x": 0, "y": 0 },

package/fixtures/conformance-envelope-retry-exhausted.json

@@ -5,7 +5,7 @@
   "description": "Drives `core.ai.structuredOutput` against the conformance `mock` provider with a program that returns invalid JSON on EVERY attempt. The host's `dispatchStructured` retry loop MUST exhaust its budget and emit exactly one `envelope.retry.exhausted` event with `finalReason: 'schema-violation'` (or `'parse-error'` per RFC 0032 §B.1 reason enum). The node MUST fail with `error.code: 'envelope_payload_invalid'` (existing RFC 0021 code per RFC 0033 §C). Pairs with `envelope-retry-exhausted.test.ts`.",
   "nodes": [
     {
-      "id": "structured-call",
+      "id": "retry-exhausted-structured-call",
       "typeId": "core.ai.structuredOutput",
       "name": "Structured output via mock provider (always invalid)",
       "position": { "x": 0, "y": 0 },

package/fixtures/conformance-envelope-truncated.json

@@ -5,7 +5,7 @@
   "description": "Drives `core.ai.structuredOutput` against the conformance `mock` provider with a program: attempt 1 returns `stopReason: 'max_tokens'` (truncation); attempt 2 returns a valid envelope. The host's `dispatchStructured` retry loop MUST: (a) emit exactly one `envelope.truncated` event with `stopReason: 'max_tokens'`; (b) retry with an INCREASED output budget per RFC 0033 §B (the host's `truncationBudgetMultiplier` — default 2×); (c) NOT inject the corrective schema fragment on the truncation retry (truncation is an output-size problem, not a schema problem). Eventually completes after attempt 2 succeeds. Pairs with `envelope-truncated.test.ts`.",
   "nodes": [
     {
-      "id": "structured-call",
+      "id": "truncated-structured-call",
       "typeId": "core.ai.structuredOutput",
       "name": "Structured output (truncation then success)",
       "position": { "x": 0, "y": 0 },

package/fixtures/conformance-envelope-truncation-cap-exhaustion.json

@@ -5,7 +5,7 @@
   "description": "Drives `core.ai.structuredOutput` against the conformance `mock` provider with a program that returns `stopReason: 'max_tokens'` on EVERY attempt. The host's `dispatchStructured` retry loop MUST: (a) emit `envelope.truncated` on each attempt (or at least the first one — RFC 0032 §B.4 is per-attempt); (b) double the budget each retry (RFC 0033 §B); (c) exhaust retries after `maxRetryAttempts` (default 3); (d) emit exactly one `envelope.retry.exhausted` with `finalReason: 'truncation'`; (e) emit `cap.breached` with `kind: 'schema'`; (f) fail the node with `error.code: 'envelope_truncation_unrecoverable'` per RFC 0033 §F. The run does NOT exceed `maxRetryAttempts` total LLM calls — DoS-bound assertion. Pairs with `envelope-truncation-cap-exhaustion.test.ts`.",
   "nodes": [
     {
-      "id": "structured-call",
+      "id": "truncation-cap-structured-call",
       "typeId": "core.ai.structuredOutput",
       "name": "Structured output (perpetual truncation → cap exhaustion)",
       "position": { "x": 0, "y": 0 },

package/fixtures/conformance-phase4-nondet-tool.json

@@ -16,7 +16,7 @@
       "inputs": {}
     },
     {
-      "id": "structured-call",
+      "id": "nondet-structured-call",
       "typeId": "core.ai.structuredOutput",
       "name": "Structured output via mock provider (consumes nondet-tool result)",
       "position": { "x": 200, "y": 0 },
@@ -40,7 +40,7 @@
     }
   ],
   "edges": [
-    { "id": "e1", "sourceNodeId": "nondet-tool", "targetNodeId": "structured-call" }
+    { "id": "e1", "sourceNodeId": "nondet-tool", "targetNodeId": "nondet-structured-call" }
   ],
   "triggers": [
     { "id": "manual", "type": "manual", "enabled": true }

package/fixtures/conformance-phase4-replay-divergence.json

@@ -2,10 +2,10 @@
   "id": "conformance-phase4-replay-divergence",
   "name": "Conformance: RFC 0041 §B replay-divergence-at-refusal (Phase 4)",
   "version": "1.0",
-  "description": "Single `core.ai.structuredOutput` node against the conformance `mock` provider. Conformance scenario `replay-divergence-at-refusal.test.ts` pre-seeds the mock with a two-entry program via `POST /v1/host/sample/test/mock-ai/program` keyed on the structured-call nodeId: entry [0] returns a valid envelope (consumed by the original run); entry [1] returns `stopReason: 'safety'` + `refusalText` (consumed by the `:fork mode: replay`). Phase 4 hosts advertising `multiAgent.executionModel.replayDeterminism.refusalDivergenceEmission: true` MUST detect the divergence at replay time, emit a `replay.divergedAtRefusal` event with `originalEnvelopeKind: 'valid'` + `replayEnvelopeKind: 'refusal'`, and fail the replay with HTTP `422` + `error.code: 'replay_diverged_at_refusal'` per `spec/v1/rest-endpoints.md §\"Common error codes\"`. Silent substitution of the refusal for the original envelope is non-conformant.",
+  "description": "Single `core.ai.structuredOutput` node against the conformance `mock` provider. Conformance scenario `replay-divergence-at-refusal.test.ts` pre-seeds the mock with a two-entry program via `POST /v1/host/sample/test/mock-ai/program` keyed on the divergence-structured-call nodeId: entry [0] returns a valid envelope (consumed by the original run); entry [1] returns `stopReason: 'safety'` + `refusalText` (consumed by the `:fork mode: replay`). Phase 4 hosts advertising `multiAgent.executionModel.replayDeterminism.refusalDivergenceEmission: true` MUST detect the divergence at replay time, emit a `replay.divergedAtRefusal` event with `originalEnvelopeKind: 'valid'` + `replayEnvelopeKind: 'refusal'`, and fail the replay with HTTP `422` + `error.code: 'replay_diverged_at_refusal'` per `spec/v1/rest-endpoints.md §\"Common error codes\"`. Silent substitution of the refusal for the original envelope is non-conformant.",
   "nodes": [
     {
-      "id": "structured-call",
+      "id": "divergence-structured-call",
       "typeId": "core.ai.structuredOutput",
       "name": "Structured output via mock provider (Phase 4 replay-divergence probe)",
       "position": { "x": 0, "y": 0 },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openwop/openwop-conformance",
-  "version": "2.1.5",
+  "version": "2.1.7",
   "description": "Production-ready black-box conformance suite for OpenWOP v1.0 compliant servers.",
   "repository": {
     "type": "git",
@@ -56,6 +56,6 @@
     "@openwop/spec-artifacts": "file:../spec-artifacts"
   },
   "peerDependencies": {
-    "@openwop/spec-artifacts": "2.1.5"
+    "@openwop/spec-artifacts": "2.1.7"
   }
 }

package/requirements.json

@@ -11218,7 +11218,7 @@
     {
       "id": "openwop.it.envelope-completion-distinguishes-truncation.capabilities-envelopes-reliability-completion-when-present-conforms-to-rfc-0033",
       "file": "envelope-completion-distinguishes-truncation.test.ts",
-      "line": 94,
+      "line": 103,
       "title": "capabilities.envelopes.reliability.completion (when present) conforms to RFC 0033 §E",
       "explicitId": "openwop.it.envelope-completion-distinguishes-truncation.capabilities-envelopes-reliability-completion-when-present-conforms-to-rfc-0033",
       "citations": [
@@ -11235,7 +11235,7 @@
     {
       "id": "openwop.it.envelope-completion-distinguishes-truncation.truncation-emits-envelope-truncated-envelope-retry-attempted-with-reason-truncat",
       "file": "envelope-completion-distinguishes-truncation.test.ts",
-      "line": 117,
+      "line": 126,
       "title": "truncation: emits envelope.truncated + envelope.retry.attempted with reason: \"truncation\"",
       "explicitId": "openwop.it.envelope-completion-distinguishes-truncation.truncation-emits-envelope-truncated-envelope-retry-attempted-with-reason-truncat",
       "citations": [
@@ -11256,7 +11256,7 @@
     {
       "id": "openwop.it.envelope-completion-distinguishes-truncation.truncation-retry-budget-strictly-greater-than-initial-rfc-0033-b-truncationbudge",
       "file": "envelope-completion-distinguishes-truncation.test.ts",
-      "line": 142,
+      "line": 151,
       "title": "truncation: retry budget strictly greater than initial (RFC 0033 §B truncationBudgetMultiplier)",
       "explicitId": "openwop.it.envelope-completion-distinguishes-truncation.truncation-retry-budget-strictly-greater-than-initial-rfc-0033-b-truncationbudge",
       "citations": [
@@ -11269,7 +11269,7 @@
     {
       "id": "openwop.it.envelope-completion-distinguishes-truncation.schema-violation-no-envelope-truncated-envelope-retry-attempted-reason-schema-vi",
       "file": "envelope-completion-distinguishes-truncation.test.ts",
-      "line": 166,
+      "line": 175,
       "title": "schema-violation: NO envelope.truncated; envelope.retry.attempted reason ∈ {schema-violation, parse-error}",
       "explicitId": "openwop.it.envelope-completion-distinguishes-truncation.schema-violation-no-envelope-truncated-envelope-retry-attempted-reason-schema-vi",
       "citations": [
@@ -11286,7 +11286,7 @@
     {
       "id": "openwop.it.envelope-completion-distinguishes-truncation.schema-violation-retry-budget-unchanged-from-initial-no-budget-multiplication-on",
       "file": "envelope-completion-distinguishes-truncation.test.ts",
-      "line": 196,
+      "line": 205,
       "title": "schema-violation: retry budget UNCHANGED from initial (no budget multiplication on this path)",
       "explicitId": "openwop.it.envelope-completion-distinguishes-truncation.schema-violation-retry-budget-unchanged-from-initial-no-budget-multiplication-on",
       "citations": [

package/schemas/CORPUS-STAMP.json

@@ -1,17 +1,17 @@
 {
   "_comment": "Provenance of @openwop/spec-artifacts (RFC 0168 §D.2). files: SHA-256 per file; the conformance suite compares the installed peer against dist/spec-artifacts.lock.json at start.",
   "package": "@openwop/spec-artifacts",
-  "version": "2.1.5",
-  "corpusTag": "v2.1.5",
+  "version": "2.1.7",
+  "corpusTag": "v2.1.7",
   "files": {
     "api/.redocly.lint-ignore.yaml": "bf5a8350b88a72fa43f59605ed8d903ed24b6cfccda5e45509c9f6ed9ee4e712",
     "api/asyncapi.yaml": "d5ecb9ee6114582be3b1f662c84bfac9ae96dae7bacb853e461168f70a8e1c7d",
     "api/grpc/openwop.proto": "c3e72bb17cba514ee98feb6434e6c9b6ea6795bfd086489ec69fd882dd1ad977",
     "api/openapi.yaml": "39081c59fb696159806b0f2f9a42e7e9ff830d622fcf2ad4159b21357580a955",
     "api/redocly.yaml": "b0604c89b2ca6d5076ec25725c539dad44a741a811fe524439ee6daef8baa09f",
-    "api/seams-v2.yaml": "190ca6cf1b7a62af8c32eac1fdaa469c26132f0e8770b4ce4755f32b615907d6",
-    "api/v2/asyncapi.yaml": "be1ef37248284355d61aa7c81ef91632bd74ff4af26707014c9bd9a171ea1644",
-    "api/v2/openapi.yaml": "350a1737db4b157fc0e3a9c1e429598ef66531c2f5c2bf06f293e81101ad932c",
+    "api/seams-v2.yaml": "a848487c183fff6a6f9117932245c2c7765b5b7da8cad1d0a6d02e669ef1b40c",
+    "api/v2/asyncapi.yaml": "66440a6d3f136c5d12c9ebe4dad80e993f7d8fcf5c6203a5694f06ce45f977df",
+    "api/v2/openapi.yaml": "0ca4bdcc6572f427369e1d55b7d3e981668cc424f4bc84f314d6d25170964d51",
     "api/v2/redocly.yaml": "1e66b60e6118ad11a823bb620678be464d99dfe50a40e3e6f93ec9429b88b34c",
     "schemas/README.md": "0c0b737ffcf8f30e7d2809cec8a498232de710f41443212922ad8337cdde0b51",
     "schemas/a2a-task-state.schema.json": "c9365918f993f943b4b619d42551eb066a1ed33a08d895d51b395432a5b1f1bc",
@@ -200,7 +200,7 @@
     "schemas/workspace-file.schema.json": "464de85c2a068243084ee9c1d969bc7cd5d8f7948574e58450d6493c38a0e1e4",
     "spec/v1/alias-detectors.json": "fee4594ef49953953ffcd0b3813300067d16b3e65ebff2aac722034ac9b3f545",
     "spec/v1/capability-declaration-classes.json": "e7729aed5c4b4e1dd02abab0530f14cc95f5d4070fe51fb139e7f5cccefa00c6",
-    "spec/v1/core-standard-manifest.json": "6be5bd4339d5b8dfc1a5286d7e00ee51be23d69695f55d550584cf222cc753aa",
+    "spec/v1/core-standard-manifest.json": "de593dd613393b6d93d90c8e76032466aaa68379a53eaf274fcd921264e51ead",
     "spec/v1/deprecations.json": "a2022c2d6eb501bf406b5d75fe2d431a3fe0158e8509125d2453985eb1bf511a",
     "spec/v1/deprecations.schema.json": "18c87e78bedc210431f795ae44c5b5d202f2f3317850d5cf86867d4f1fa1cdfb",
     "spec/v1/event-codemap.json": "3da60d884157793a360da532a9fcbbfb5285636db325a74cec94b34622186d97",
@@ -212,14 +212,14 @@
     "spec/v1/migrations.schema.json": "886779aa6c22e646db097f5df210adb018a4dd14a7b815465a18c8a7056c8f72",
     "spec/v1/operation-path-manifest.json": "5f5f4e3842669371730ebbd1aace3fb794192615f0018dc144f484ba5db82ac3",
     "spec/v1/spec-gaps.json": "6cc9962c6b969f632e07a78b52a4f61447ff579e2990cbae989866f584a86042",
-    "spec/v2/README.md": "d5a6276ce53dee080f23e40dba3ee3980b249d417c0220390a08bb31b79e7759",
+    "spec/v2/README.md": "e3d8f6a13338014c349e57bf2b50a398aa1e0aa162c5adda0273e26dd6f48acd",
     "spec/v2/core/capabilities.md": "c5107a4964e487c20bbb5254cfe1f706e0d9ba7e34da9070bc43b50b385e7948",
     "spec/v2/core/conformance.md": "622084e3c74c4549087f4d861b1bb98cec201a0c5aec23788d27f53a355fde3b",
     "spec/v2/core/connection-packs.md": "1d759681e2962f5103228c52c45f24607ed4bb9ae73e30605f690c1d5a59e9ee",
     "spec/v2/core/errors.md": "74fdb5862f432a831cf0c2eadbe0c8cca6b2660ec578180ae33db54773a1df28",
     "spec/v2/core/events.md": "defe0969d6ec7c980f415cc0d78b9d065782ac7e5638b12a44aa4895a35d6126",
     "spec/v2/core/form-content-packs.md": "6ffaae85d4550be48dd53fb6e2959af8aceb35bd87c5343b722885084f197713",
-    "spec/v2/core/headers.md": "37b7b51639a19de6f913ff6105009235a0d31385f931968aeb5b4a28e1536ca3",
+    "spec/v2/core/headers.md": "a795c8cd3e5f004b05dad9603d14b92b639a24ccd23b183716cb01097a106119",
     "spec/v2/core/idempotency.md": "b86c352d964aebad532727f314e26ed2177d49de382076fa64d3162e2f56118d",
     "spec/v2/core/identity.md": "dd5299f9cdf54640870e1fffae11edb820cf6396ea298c4ebd14c649c4bd4a87",
     "spec/v2/core/interop.md": "d4c404e469e1d9d9be88bc2c939d777e7d7c1d0419b1251c18770f039838a401",
@@ -270,8 +270,8 @@
     "spec/v2/path-manifest.json": "a6f4e652e866889e8bde815874062f62929aee95dc8e58e7152c56adee262163",
     "spec/v2/peer-dependency-aliases.json": "d10299280abee08258502925bc327293ee413e0108cd6e6ec75ff6110653308d",
     "spec/v2/profiles.json": "0636f19fceae625390003a347e70ef4797d84766b5c24ce8a02cea52aadebca4",
-    "spec/v2/release.json": "1e7a0e98832b3a6a9a0646823efa56e1317769ebee65b18e3f17e5f1295362c8",
+    "spec/v2/release.json": "2bacef4931ec682b7bf003746eb1f69e3b945bbb93b98d76ddf86128e9922be5",
     "spec/v2/retention-floors.json": "eaf3722d95c79947af1d4269ef85117e126518c588cfcf1a2b21b97269f51624"
   },
-  "corpusCommit": "673fbee887211dfcf736eb2a5a57e050881f92fd"
+  "corpusCommit": "4c50dd0dc8b411090dfeeb3a5bbf9466474807c9"
 }

package/src/scenarios/envelope-completion-distinguishes-truncation.test.ts

@@ -36,7 +36,16 @@ import { req } from '../lib/requirement-ids.js';
 import { softSkip } from '../lib/soft-skip.js';
 
 const HTTP_SKIP = !process.env.OPENWOP_BASE_URL;
-const NODE_ID = 'structured-call';
+/**
+ * The mock-AI program seam is keyed by `nodeId` alone, so a node id is the
+ * unit of isolation between scenarios — see `host-sample-test-seams.md` §5.
+ * This file drives two fixtures, so it resolves the node per fixture rather
+ * than holding one shared id.
+ */
+const NODE_OF: Record<string, string> = {
+  'conformance-envelope-truncated': 'truncated-structured-call',
+  'conformance-envelope-retry-attempted': 'retry-attempted-structured-call',
+};
 
 interface DiscoveryDoc {
   capabilities?: {
@@ -68,8 +77,8 @@ async function readDiscovery(): Promise<DiscoveryDoc | null> {
   }
 }
 
-async function programMock(program: Array<Record<string, unknown>>): Promise<{ status: number }> {
-  const res = await driver.post('/v1/host/sample/test/mock-ai/program', { nodeId: NODE_ID, program });
+async function programMock(fixture: string, program: Array<Record<string, unknown>>): Promise<{ status: number }> {
+  const res = await driver.post('/v1/host/sample/test/mock-ai/program', { nodeId: NODE_OF[fixture], program });
   return { status: res.status };
 }
 
@@ -84,8 +93,8 @@ async function startRunAndRead(workflowId: string): Promise<{ events: RunEvent[]
   return { events, terminal };
 }
 
-async function lastBudget(): Promise<number | null> {
-  const res = await driver.get(`/v1/host/sample/test/mock-ai/last-dispatch-budget?nodeId=${encodeURIComponent(NODE_ID)}`);
+async function lastBudget(fixture: string): Promise<number | null> {
+  const res = await driver.get(`/v1/host/sample/test/mock-ai/last-dispatch-budget?nodeId=${encodeURIComponent(NODE_OF[fixture] as string)}`);
   if (res.status !== 200) return null;
   return (res.json as { maxTokens?: number | null }).maxTokens ?? null;
 }
@@ -118,7 +127,7 @@ describe.skipIf(HTTP_SKIP)('envelope-completion-distinguishes-truncation: trunca
     if (!isFixtureAdvertised(TRUNCATED_FIXTURE)) return softSkip('inapplicable', 'capability or profile not advertised by this host — gate `!isFixtureAdvertised(TRUNCATED_FIXTURE)` returned early');
     const d = await readDiscovery();
     if (capabilityFamily<{ reasoning?: Record<string, unknown>; tierOneSubsetCompliance?: unknown; reliability?: { completion?: Record<string, unknown> } & Record<string, unknown> }>(d, 'envelopes')?.reliability?.completion?.distinguishesTruncation !== true) return softSkip('inapplicable', 'capability or profile not advertised by this host — gate `capabilityFamily<{ reasoning?: Record<string, unknown>; tierOneSubsetCompliance?: unknown; reliability?: { completion?: Record<string, unknown> } & Record<stri…');
-    const seed = await programMock([
+    const seed = await programMock(TRUNCATED_FIXTURE, [
       { stopReason: 'max_tokens', content: '{"partial' },
       { stopReason: 'end_turn', content: '{"valid":true}' },
     ]);
@@ -143,14 +152,14 @@ describe.skipIf(HTTP_SKIP)('envelope-completion-distinguishes-truncation: trunca
     if (!isFixtureAdvertised(TRUNCATED_FIXTURE)) return softSkip('inapplicable', 'capability or profile not advertised by this host — gate `!isFixtureAdvertised(TRUNCATED_FIXTURE)` returned early');
     const d = await readDiscovery();
     if (capabilityFamily<{ reasoning?: Record<string, unknown>; tierOneSubsetCompliance?: unknown; reliability?: { completion?: Record<string, unknown> } & Record<string, unknown> }>(d, 'envelopes')?.reliability?.completion?.distinguishesTruncation !== true) return softSkip('inapplicable', 'capability or profile not advertised by this host — gate `capabilityFamily<{ reasoning?: Record<string, unknown>; tierOneSubsetCompliance?: unknown; reliability?: { completion?: Record<string, unknown> } & Record<stri…');
-    const seed = await programMock([
+    const seed = await programMock(TRUNCATED_FIXTURE, [
       { stopReason: 'max_tokens', content: '{"partial' },
       { stopReason: 'end_turn', content: '{"valid":true}' },
     ]);
     if (seed.status === 404) return softSkip('blocked', 'precondition not met — `seed.status === 404` returned early (seam, prior step, or fixture unavailable)');
 
     await startRunAndRead(TRUNCATED_FIXTURE);
-    const budget = await lastBudget();
+    const budget = await lastBudget(TRUNCATED_FIXTURE);
     if (budget === null) return softSkip('blocked', 'precondition not met — `budget === null` returned early (seam, prior step, or fixture unavailable)');
     expect(
       budget,
@@ -165,7 +174,7 @@ describe.skipIf(HTTP_SKIP)('envelope-completion-distinguishes-truncation: trunca
 describe.skipIf(HTTP_SKIP)('envelope-completion-distinguishes-truncation: schema-violation path (RFC 0033 §C)', () => {
   it('schema-violation: NO envelope.truncated; envelope.retry.attempted reason ∈ {schema-violation, parse-error}', async () => {
     if (!isFixtureAdvertised(SCHEMA_VIOLATION_FIXTURE)) return softSkip('inapplicable', 'capability or profile not advertised by this host — gate `!isFixtureAdvertised(SCHEMA_VIOLATION_FIXTURE)` returned early');
-    const seed = await programMock([
+    const seed = await programMock(SCHEMA_VIOLATION_FIXTURE, [
       { content: 'not valid json' },
       { content: '{"valid":true}' },
     ]);
@@ -195,14 +204,14 @@ describe.skipIf(HTTP_SKIP)('envelope-completion-distinguishes-truncation: schema
 
   it('schema-violation: retry budget UNCHANGED from initial (no budget multiplication on this path)', async () => {
     if (!isFixtureAdvertised(SCHEMA_VIOLATION_FIXTURE)) return softSkip('inapplicable', 'capability or profile not advertised by this host — gate `!isFixtureAdvertised(SCHEMA_VIOLATION_FIXTURE)` returned early');
-    const seed = await programMock([
+    const seed = await programMock(SCHEMA_VIOLATION_FIXTURE, [
       { content: 'not valid json' },
       { content: '{"valid":true}' },
     ]);
     if (seed.status === 404) return softSkip('blocked', 'precondition not met — `seed.status === 404` returned early (seam, prior step, or fixture unavailable)');
 
     await startRunAndRead(SCHEMA_VIOLATION_FIXTURE);
-    const budget = await lastBudget();
+    const budget = await lastBudget(SCHEMA_VIOLATION_FIXTURE);
     if (budget === null) return softSkip('blocked', 'precondition not met — `budget === null` returned early (seam, prior step, or fixture unavailable)');
     // The schema-violation fixture doesn't set maxTokens explicitly →
     // budget snapshots whatever the host's default is on each call.

package/src/scenarios/envelope-nl-to-format-engaged.test.ts

@@ -33,7 +33,7 @@ import { softSkip } from '../lib/soft-skip.js';
 
 const HTTP_SKIP = !process.env.OPENWOP_BASE_URL;
 const FIXTURE = 'conformance-envelope-nl-to-format-engaged';
-const NODE_ID = 'structured-call';
+const NODE_ID = 'nl-to-format-structured-call';
 
 interface RunEvent {
   type: string;

package/src/scenarios/envelope-recovery-applied.test.ts

@@ -126,7 +126,7 @@ import { req } from '../lib/requirement-ids.js';
 import { softSkip } from '../lib/soft-skip.js';
 
 const RECOVERY_FIXTURE = 'conformance-envelope-recovery-applied';
-const RECOVERY_NODE_ID = 'structured-call';
+const RECOVERY_NODE_ID = 'recovery-applied-structured-call';
 
 interface ProgrammedRunEvent {
   type: string;

package/src/scenarios/envelope-refusal-shape.test.ts

@@ -196,7 +196,7 @@ import { req } from '../lib/requirement-ids.js';
 import { softSkip } from '../lib/soft-skip.js';
 
 const E2E_FIXTURE = 'conformance-envelope-refusal';
-const E2E_NODE_ID = 'structured-call';
+const E2E_NODE_ID = 'refusal-structured-call';
 
 interface E2eEvent {
   type: string;

package/src/scenarios/envelope-retry-attempted.test.ts

@@ -119,7 +119,7 @@ import { req } from '../lib/requirement-ids.js';
 import { softSkip } from '../lib/soft-skip.js';
 
 const FIXTURE = 'conformance-envelope-retry-attempted';
-const NODE_ID = 'structured-call';
+const NODE_ID = 'retry-attempted-structured-call';
 
 const RFC_0032_REASONS = new Set([
   'schema-violation',

package/src/scenarios/envelope-retry-exhausted.test.ts

@@ -33,7 +33,7 @@ import { softSkip } from '../lib/soft-skip.js';
 
 const HTTP_SKIP = !process.env.OPENWOP_BASE_URL;
 const FIXTURE = 'conformance-envelope-retry-exhausted';
-const NODE_ID = 'structured-call';
+const NODE_ID = 'retry-exhausted-structured-call';
 
 const RFC_0032_REASONS = new Set([
   'schema-violation',

package/src/scenarios/envelope-truncated.test.ts

@@ -25,7 +25,7 @@ import { softSkip } from '../lib/soft-skip.js';
 
 const HTTP_SKIP = !process.env.OPENWOP_BASE_URL;
 const FIXTURE = 'conformance-envelope-truncated';
-const NODE_ID = 'structured-call';
+const NODE_ID = 'truncated-structured-call';
 
 interface RunEvent {
   type: string;

package/src/scenarios/envelope-truncation-cap-exhaustion.test.ts

@@ -24,7 +24,7 @@ import { softSkip } from '../lib/soft-skip.js';
 
 const HTTP_SKIP = !process.env.OPENWOP_BASE_URL;
 const FIXTURE = 'conformance-envelope-truncation-cap-exhaustion';
-const NODE_ID = 'structured-call';
+const NODE_ID = 'truncation-cap-structured-call';
 
 interface RunEvent {
   type: string;

package/src/scenarios/replay-divergence-at-refusal.test.ts

@@ -227,7 +227,7 @@ describe.skipIf(HTTP_SKIP)('replay-divergence-at-refusal: behavioral (RFC 0041
   it('Phase 4 host MUST emit replay.divergedAtRefusal + fail with replay_diverged_at_refusal when original=valid + replay=refusal', async (ctx) => {
     if (!(await gateOnPhase4(ctx))) return softSkip('inapplicable', 'capability or profile not advertised by this host — gate `!(await gateOnPhase4(ctx))` returned early');
 
-    const NODE_ID = 'structured-call';
+    const NODE_ID = 'divergence-structured-call';
     // Original program: valid envelope. Replay program (set after the
     // original completes): refusal. Programming twice is the spec-canonical
     // pattern — see spec/v1/host-sample-test-seams.md §5.
@@ -320,7 +320,7 @@ describe.skipIf(HTTP_SKIP)('replay-divergence-at-refusal: behavioral (RFC 0041
   it('Phase 4 host MUST emit replay.divergedAtRefusal + fail with replay_diverged_at_refusal when original=refusal + replay=valid (symmetric case)', async (ctx) => {
     if (!(await gateOnPhase4(ctx))) return softSkip('inapplicable', 'capability or profile not advertised by this host — gate `!(await gateOnPhase4(ctx))` returned early');
 
-    const NODE_ID = 'structured-call';
+    const NODE_ID = 'divergence-structured-call';
     // Symmetric: original=refusal, replay=valid.
     const programStatus = await programMock(NODE_ID, [
       { content: 'safety-refused-for-conformance', stopReason: 'safety' as const, refusalText: 'safety-refused-for-conformance' },

package/src/scenarios/v2-compensation-read-projection.test.ts

@@ -75,7 +75,20 @@ describe('RFC 0173 §B — compensation-read-projection (gated on compensation)'
     const doc = await discovery();
     if (!doc) return softSkip('blocked', 'discovery unreachable');
     if (!(await gateFamily('compensation'))) return softSkip('inapplicable', 'compensation family not advertised — no obligation (gate recorded under openwop.family.compensation)');
-    const res = await driver.get('/runs/conformance-no-such-run-0173/compensation');
+    // The unknown id MUST be TENANT-BOUND, not bare. A bare id is the v1
+    // spelling: `identity.md` §5 admits it through the overlap and requires a
+    // host that advertises no `1.x` member to refuse it `400 validation_error`
+    // — so on a retired host this probe asked about SHAPE and never reached the
+    // existence check it asserts. Found 2026-09-13 by the reference host's
+    // retirement lane on its first run; the host was right and the probe was
+    // written for the overlap. A bound id answers 404 on both, so this needs no
+    // branch on the advertisement — it just needs to stop using the one
+    // spelling that is conditional.
+    const probe = await driver.post('/runs', { workflowId: FIXTURE });
+    const tenant = String((probe.json as { runId?: string }).runId ?? '').split('/')[0];
+    if (!tenant) return softSkip('blocked', 'could not learn the caller tenant from a created run, so no tenant-bound unknown id can be formed');
+    const unknown = `${tenant}/conformance-no-such-run-0173`;
+    const res = await driver.get(`/runs/${encodeURIComponent(unknown)}/compensation`);
     expect(res.status, req('openwop.requirement.0173.compensation-read-projection.not-found', 'openapi.yaml getRunCompensation 404', 'an unknown runId MUST answer 404')).toBe(404);
     expect(
       readErrorCode(res.json),