@openwop/openwop-conformance 2.36.1 → 2.37.1

package/requirements.json

@@ -2,17 +2,17 @@
   "$comment": "GENERATED by conformance/scripts/generate-requirement-registry.mjs — do not edit. One record per it()/test() in src/scenarios. Ids: openwop.it.<file-stem>.<title-slug>[~n] (src/lib/requirement-ids.ts). A record with id null has an interpolated title; its run-time row is keyed by the rendered title and maps here by file+line only. Renamed ids need a row in requirement-aliases.json.",
   "generatedFrom": "src/scenarios/*.test.ts",
   "counts": {
-    "files": 623,
-    "tests": 2386,
-    "withStableId": 2386,
+    "files": 629,
+    "tests": 2404,
+    "withStableId": 2404,
     "interpolatedTitles": 0,
-    "explicitIds": 2281
+    "explicitIds": 2294
   },
   "records": [
     {
       "id": "openwop.it.a2a-1-0-agent-card.the-agent-card-is-1-0-shaped-supportedinterfaces-no-top-level-url-protocolversio",
       "file": "a2a-1-0-agent-card.test.ts",
-      "line": 56,
+      "line": 66,
       "title": "the Agent Card is 1.0-shaped: supportedInterfaces[], no top-level url/protocolVersion",
       "explicitId": "openwop.it.a2a-1-0-agent-card.the-agent-card-is-1-0-shaped-supportedinterfaces-no-top-level-url-protocolversio",
       "citations": [
@@ -42,7 +42,7 @@
     {
       "id": "openwop.it.a2a-1-0-agent-card.the-card-shape-follows-the-era-asked-for-a2a-version-0-3-on-the-get-returns-the",
       "file": "a2a-1-0-agent-card.test.ts",
-      "line": 75,
+      "line": 85,
       "title": "the card shape follows the era asked for: A2A-Version: 0.3 on the GET returns the 0.3 card from the same peer",
       "explicitId": "openwop.it.a2a-1-0-agent-card.the-card-shape-follows-the-era-asked-for-a2a-version-0-3-on-the-get-returns-the",
       "citations": [
@@ -55,7 +55,7 @@
     {
       "id": "openwop.it.a2a-1-0-agent-card.a-legacy-only-peer-serves-the-0-3-card-shape-follows-revision-not-calendar",
       "file": "a2a-1-0-agent-card.test.ts",
-      "line": 94,
+      "line": 104,
       "title": "a legacy-only peer serves the 0.3 card — shape follows revision, not calendar",
       "explicitId": "openwop.it.a2a-1-0-agent-card.a-legacy-only-peer-serves-the-0-3-card-shape-follows-revision-not-calendar",
       "citations": [
@@ -68,7 +68,7 @@
     {
       "id": "openwop.it.a2a-1-0-agent-card.a2a-version-absent-0-3-semantics-message-send-returns-a-0-3-task",
       "file": "a2a-1-0-agent-card.test.ts",
-      "line": 107,
+      "line": 117,
       "title": "A2A-Version absent ⇒ 0.3 semantics; message/send returns a 0.3 task",
       "explicitId": "openwop.it.a2a-1-0-agent-card.a2a-version-absent-0-3-semantics-message-send-returns-a-0-3-task",
       "citations": [
@@ -81,20 +81,24 @@
     {
       "id": "openwop.it.a2a-1-0-agent-card.an-unsupported-version-fails-32009-version-not-supported-with-supportedversions",
       "file": "a2a-1-0-agent-card.test.ts",
-      "line": 114,
+      "line": 124,
       "title": "an unsupported version fails -32009 VERSION_NOT_SUPPORTED with supportedVersions[] (HTTP 400)",
       "explicitId": "openwop.it.a2a-1-0-agent-card.an-unsupported-version-fails-32009-version-not-supported-with-supportedversions",
       "citations": [
         {
           "section": "RFC 0152 §A/§B/§C/§D",
           "requirement": "an unsupported version fails -32009 VERSION_NOT_SUPPORTED with supportedVersions[] (HTTP 400)"
+        },
+        {
+          "section": "RFC 0152 §A/§B/§C/§D; A2A 1.0.1 §9.5",
+          "requirement": "error.data is an array of Any carrying google.rpc.ErrorInfo"
         }
       ]
     },
     {
       "id": "openwop.it.a2a-1-0-agent-card.a-1-0-only-peer-rejects-a-header-less-request-which-is-0-3-by-rule",
       "file": "a2a-1-0-agent-card.test.ts",
-      "line": 122,
+      "line": 134,
       "title": "a 1.0-only peer rejects a header-less request (which is 0.3 by rule)",
       "explicitId": "openwop.it.a2a-1-0-agent-card.a-1-0-only-peer-rejects-a-header-less-request-which-is-0-3-by-rule",
       "citations": [
@@ -107,7 +111,7 @@
     {
       "id": "openwop.it.a2a-1-0-agent-card.sendmessage-1-0-returns-task-with-task-state-role-part-oneof-no-kind-status-time",
       "file": "a2a-1-0-agent-card.test.ts",
-      "line": 134,
+      "line": 146,
       "title": "SendMessage @1.0 returns { task } with TASK_STATE_*, ROLE_*, Part oneof, no kind, status.timestamp",
       "explicitId": "openwop.it.a2a-1-0-agent-card.sendmessage-1-0-returns-task-with-task-state-role-part-oneof-no-kind-status-time",
       "citations": [
@@ -128,7 +132,7 @@
     {
       "id": "openwop.it.a2a-1-0-agent-card.gettask-canceltask-listtasks-per-d-1-incl-task-not-cancelable-on-a-terminal-task",
       "file": "a2a-1-0-agent-card.test.ts",
-      "line": 152,
+      "line": 164,
       "title": "GetTask / CancelTask / ListTasks per §D.1, incl. TASK_NOT_CANCELABLE on a terminal task",
       "explicitId": "openwop.it.a2a-1-0-agent-card.gettask-canceltask-listtasks-per-d-1-incl-task-not-cancelable-on-a-terminal-task",
       "citations": [
@@ -141,7 +145,7 @@
     {
       "id": "openwop.it.a2a-1-0-agent-card.a-0-3-method-name-under-a-1-0-header-is-method-not-found-loudly",
       "file": "a2a-1-0-agent-card.test.ts",
-      "line": 170,
+      "line": 182,
       "title": "a 0.3 method name under a 1.0 header is method-not-found — loudly",
       "explicitId": "openwop.it.a2a-1-0-agent-card.a-0-3-method-name-under-a-1-0-header-is-method-not-found-loudly",
       "citations": [
@@ -154,7 +158,7 @@
     {
       "id": "openwop.it.a2a-1-0-agent-card.streaming-is-honestly-unsupported-subscribetotask-unsupported-operation-matching",
       "file": "a2a-1-0-agent-card.test.ts",
-      "line": 176,
+      "line": 188,
       "title": "streaming is honestly unsupported: SubscribeToTask ⇒ UNSUPPORTED_OPERATION, matching capabilities.streaming=false",
       "explicitId": "openwop.it.a2a-1-0-agent-card.streaming-is-honestly-unsupported-subscribetotask-unsupported-operation-matching",
       "citations": [
@@ -5952,7 +5956,7 @@
     {
       "id": "openwop.it.auth-subject-link.subjectlinking-true-is-only-claimed-alongside-both-saml-and-scim-profiles",
       "file": "auth-subject-link.test.ts",
-      "line": 61,
+      "line": 62,
       "title": "subjectLinking:true is only claimed alongside both SAML and SCIM profiles",
       "explicitId": "openwop.it.auth-subject-link.subjectlinking-true-is-only-claimed-alongside-both-saml-and-scim-profiles",
       "citations": [
@@ -5965,7 +5969,7 @@
     {
       "id": "openwop.it.auth-subject-link.advertising-both-profiles-requires-subjectlinking-true-a-subjectlinkkey-rfc-0164",
       "file": "auth-subject-link.test.ts",
-      "line": 76,
+      "line": 77,
       "title": "advertising BOTH profiles REQUIRES subjectLinking:true + a subjectLinkKey (RFC 0164 — the vulnerable shape fails, never inapplicable)",
       "explicitId": "openwop.it.auth-subject-link.advertising-both-profiles-requires-subjectlinking-true-a-subjectlinkkey-rfc-0164",
       "citations": [
@@ -5983,7 +5987,7 @@
     {
       "id": "openwop.it.auth-subject-link.a-scim-deactivation-fail-closes-the-linked-saml-identity",
       "file": "auth-subject-link.test.ts",
-      "line": 106,
+      "line": 107,
       "title": "a SCIM deactivation fail-closes the linked SAML identity",
       "explicitId": "openwop.it.auth-subject-link.a-scim-deactivation-fail-closes-the-linked-saml-identity",
       "citations": [
@@ -6008,7 +6012,7 @@
     {
       "id": "openwop.it.auth-subject-link.a-mutable-pii-link-key-email-never-produces-a-cross-lane-pass",
       "file": "auth-subject-link.test.ts",
-      "line": 152,
+      "line": 169,
       "title": "a mutable/PII link key (email) never produces a cross-lane pass",
       "explicitId": "openwop.it.auth-subject-link.a-mutable-pii-link-key-email-never-produces-a-cross-lane-pass",
       "citations": [
@@ -6025,7 +6029,7 @@
     {
       "id": "openwop.it.auth-subject-link.a-scim-deactivation-does-not-deny-a-saml-login-whose-run-subject-is-legacy-issue",
       "file": "auth-subject-link.test.ts",
-      "line": 202,
+      "line": 219,
       "title": "a SCIM deactivation does not deny a SAML login whose run subject is legacy-issued",
       "explicitId": null,
       "citations": []
@@ -25729,7 +25733,7 @@
     {
       "id": "openwop.it.trigger-bridge-delivery.de-dups-by-dedupkey-retries-to-dead-letter-and-links-delivery-run-causation",
       "file": "trigger-bridge-delivery.test.ts",
-      "line": 54,
+      "line": 55,
       "title": "de-dups by dedupKey, retries to dead-letter, and links delivery→run causation",
       "explicitId": "openwop.it.trigger-bridge-delivery.de-dups-by-dedupkey-retries-to-dead-letter-and-links-delivery-run-causation",
       "citations": [
@@ -26473,10 +26477,24 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.v2-a2a-client-error-details.a-peer-s-version-error-projects-to-interop-version-unsupported-whether-error-dat",
+      "file": "v2-a2a-client-error-details.test.ts",
+      "line": 45,
+      "title": "a peer's version error projects to interop_version_unsupported whether error.data is an array or a legacy object",
+      "explicitId": "openwop.requirement.0211.a2a-client-reads-either-shape",
+      "citations": [
+        {
+          "section": "spec/v2/core/interop.md §\"The operation mappings\", A2A error details (RFC 0211 §F)",
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
     {
       "id": "openwop.it.v2-a2a-operation-map.a-message-carrying-taskid-without-contextid-is-answered-with-the-task-s-contexti",
       "file": "v2-a2a-operation-map.test.ts",
-      "line": 130,
+      "line": 134,
       "title": "a message carrying taskId without contextId is answered with the task's contextId",
       "explicitId": null,
       "citations": [
@@ -26507,7 +26525,7 @@
     {
       "id": "openwop.it.v2-a2a-operation-map.a-message-whose-contextid-is-not-its-task-s-is-refused-invalid-parameters-and-ch",
       "file": "v2-a2a-operation-map.test.ts",
-      "line": 144,
+      "line": 148,
       "title": "a message whose contextId is not its task's is refused invalid-parameters and changes nothing",
       "explicitId": null,
       "citations": [
@@ -26534,7 +26552,7 @@
     {
       "id": "openwop.it.v2-a2a-operation-map.a-message-to-a-retained-terminal-task-is-refused-unsupportedoperationerror-and-a",
       "file": "v2-a2a-operation-map.test.ts",
-      "line": 159,
+      "line": 163,
       "title": "a message to a retained terminal task is refused UnsupportedOperationError, and appends no event",
       "explicitId": null,
       "citations": [
@@ -26561,7 +26579,7 @@
     {
       "id": "openwop.it.v2-a2a-operation-map.an-unknown-task-and-another-tenant-s-task-are-answered-by-the-same-tasknotfounde",
       "file": "v2-a2a-operation-map.test.ts",
-      "line": 174,
+      "line": 178,
       "title": "an unknown task and another tenant's task are answered by the same TaskNotFoundError",
       "explicitId": null,
       "citations": [
@@ -26581,15 +26599,20 @@
           "interpolated": true
         },
         {
-          "section": "interop.md §\"The operation mappings\" Isolation (A2A 1.0.1 §3.3.2)",
-          "requirement": "the foreign-tenant answer MUST be indistinguishable from the unknown-id answer: same HTTP status and the same error.data shape"
+          "section": "spec/v2/core/interop.md §\"The operation mappings\", A2A error details (RFC 0211)",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "interop.md §\"The operation mappings\" Isolation; RFC 0211 §D (A2A 1.0.1 §3.3.2)",
+          "requirement": "the foreign-tenant answer MUST be indistinguishable from the unknown-id answer: same HTTP status and the same normalised error details (@type, reason, domain, sorted metadata keys, minus an echo of the requested id)"
         }
       ]
     },
     {
       "id": "openwop.it.v2-a2a-operation-map.task-status-state-is-the-map-s-projection-of-the-run-status-at-every-observed-st",
       "file": "v2-a2a-operation-map.test.ts",
-      "line": 192,
+      "line": 200,
       "title": "Task.status.state is the map's projection of the run status at every observed state",
       "explicitId": null,
       "citations": [
@@ -26612,7 +26635,7 @@
     {
       "id": "openwop.it.v2-a2a-operation-map.the-json-rpc-error-codes-the-suite-can-cause-are-the-a2a-1-0-1-codes",
       "file": "v2-a2a-operation-map.test.ts",
-      "line": 217,
+      "line": 225,
       "title": "the JSON-RPC error codes the suite can cause are the A2A 1.0.1 codes",
       "explicitId": null,
       "citations": [
@@ -26635,7 +26658,7 @@
     {
       "id": "openwop.it.v2-a2a-operation-map.a-row-whose-requires-facet-is-not-advertised-is-refused-with-the-row-s-error",
       "file": "v2-a2a-operation-map.test.ts",
-      "line": 231,
+      "line": 239,
       "title": "a row whose requires facet is not advertised is refused with the row's error",
       "explicitId": null,
       "citations": [
@@ -26653,7 +26676,7 @@
     {
       "id": "openwop.it.v2-a2a-operation-map.listtasks-returns-only-what-listruns-returns-to-the-same-subject-tenant-and-cont",
       "file": "v2-a2a-operation-map.test.ts",
-      "line": 244,
+      "line": 252,
       "title": "ListTasks returns only what listRuns returns to the same Subject; tenant and contextId never select",
       "explicitId": null,
       "citations": [
@@ -26687,10 +26710,105 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.v2-a2a-operation-map.an-a2a-error-s-data-is-an-array-carrying-one-errorinfo-with-the-map-row-s-reason",
+      "file": "v2-a2a-operation-map.test.ts",
+      "line": 285,
+      "title": "an A2A error's data is an array carrying one ErrorInfo with the map row's reason and the A2A domain",
+      "explicitId": null,
+      "citations": [
+        {
+          "section": "spec/v2/core/interop.md §\"The operation mappings\" (RFC 0208)",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": null,
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": null,
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "spec/v2/core/interop.md §\"The operation mappings\", A2A error details (RFC 0211)",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": null,
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-a2a-operation-map.no-response-on-the-card-s-json-rpc-interface-url-is-the-openwop-error-envelope",
+      "file": "v2-a2a-operation-map.test.ts",
+      "line": 306,
+      "title": "no response on the card's JSON-RPC interface URL is the OpenWOP error envelope",
+      "explicitId": null,
+      "citations": [
+        {
+          "section": null,
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "spec/v2/core/interop.md §\"The operation mappings\", A2A error details (RFC 0211)",
+          "requirement": "every probe reached the interface"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-a2a-operation-map.versionnotsupportederror-carries-errorinfo-version-not-supported-and-supportedve",
+      "file": "v2-a2a-operation-map.test.ts",
+      "line": 326,
+      "title": "VersionNotSupportedError carries ErrorInfo VERSION_NOT_SUPPORTED, and supportedVersions is a comma-joined subset of the card",
+      "explicitId": null,
+      "citations": [
+        {
+          "section": "a2a.errors VersionNotSupportedError",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "spec/v2/core/interop.md §\"The operation mappings\", A2A error details (RFC 0211)",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": null,
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-a2a-operation-map.an-http-json-interface-answers-an-a2a-error-with-google-rpc-status-carrying-the",
+      "file": "v2-a2a-operation-map.test.ts",
+      "line": 344,
+      "title": "an HTTP+JSON interface answers an A2A error with google.rpc.Status carrying the ErrorInfo",
+      "explicitId": null,
+      "citations": [
+        {
+          "section": null,
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": null,
+          "requirement": "the Status details MUST carry the ErrorInfo TASK_NOT_FOUND",
+          "interpolated": true
+        }
+      ]
+    },
     {
       "id": "openwop.it.v2-a2a-operation-map.a-run-suspended-on-a-credential-interrupt-projects-to-task-state-auth-required-n",
       "file": "v2-a2a-operation-map.test.ts",
-      "line": 277,
+      "line": 359,
       "title": "a run suspended on a credential interrupt projects to TASK_STATE_AUTH_REQUIRED, naming the provider and carrying connectUrl",
       "explicitId": null,
       "citations": [
@@ -27147,7 +27265,7 @@
     {
       "id": "openwop.it.v2-bound-id-kinds.subscriptionid-the-webhookid-a-host-emits-on-a-delivery-is-the-one-it-minted",
       "file": "v2-bound-id-kinds.test.ts",
-      "line": 132,
+      "line": 140,
       "title": "subscriptionId: the webhookId a host EMITS on a delivery is the one it minted",
       "explicitId": "openwop.requirement.0187.bound-id-kinds.webhook-emitted",
       "citations": [
@@ -27166,7 +27284,7 @@
     {
       "id": "openwop.it.v2-bound-id-kinds.interruptid-the-id-a-suspension-puts-on-the-wire-is-bound",
       "file": "v2-bound-id-kinds.test.ts",
-      "line": 179,
+      "line": 192,
       "title": "interruptId: the id a suspension puts on the wire is bound",
       "explicitId": null,
       "citations": []
@@ -27174,7 +27292,7 @@
     {
       "id": "openwop.it.v2-bound-id-kinds.effectid-every-row-get-runs-runid-effects-serves-is-bound",
       "file": "v2-bound-id-kinds.test.ts",
-      "line": 200,
+      "line": 213,
       "title": "effectId: every row GET /runs/{runId}/effects serves is bound",
       "explicitId": "openwop.requirement.0187.bound-id-kinds.per-kind",
       "citations": [
@@ -27187,7 +27305,7 @@
     {
       "id": "openwop.it.v2-bound-id-kinds.deliveryid-every-record-in-the-dead-letter-read-carries-a-bound-id-in-the-caller",
       "file": "v2-bound-id-kinds.test.ts",
-      "line": 215,
+      "line": 228,
       "title": "deliveryId: every record in the dead-letter read carries a bound id in the caller's tenant",
       "explicitId": "openwop.requirement.0187.bound-id-kinds.per-kind",
       "citations": [
@@ -28096,7 +28214,7 @@
     {
       "id": "openwop.it.v2-durability-recovery.accepted-work-survives-a-kill-before-dispatch-and-dispatches-on-resume",
       "file": "v2-durability-recovery.test.ts",
-      "line": 292,
+      "line": 280,
       "title": "accepted work survives a kill before dispatch and dispatches on resume",
       "explicitId": "openwop.requirement.0158.kill-after-accept",
       "citations": [
@@ -28110,7 +28228,7 @@
     {
       "id": "openwop.it.v2-durability-recovery.work-executing-at-a-real-process-death-is-never-reported-complete-and-resumes",
       "file": "v2-durability-recovery.test.ts",
-      "line": 346,
+      "line": 334,
       "title": "work executing at a real process death is never reported complete, and resumes",
       "explicitId": "openwop.requirement.0158.kill-during-execution",
       "citations": [
@@ -28129,7 +28247,7 @@
     {
       "id": "openwop.it.v2-durability-recovery.the-same-accepted-work-delivered-twice-fires-each-effect-exactly-once",
       "file": "v2-durability-recovery.test.ts",
-      "line": 402,
+      "line": 390,
       "title": "the same accepted work delivered twice fires each effect exactly once",
       "explicitId": "openwop.requirement.0158.duplicate-delivery",
       "citations": [
@@ -28148,7 +28266,7 @@
     {
       "id": "openwop.it.v2-durability-recovery.the-declared-recovery-bound-is-derived-from-the-mechanism-that-enforces-it",
       "file": "v2-durability-recovery.test.ts",
-      "line": 476,
+      "line": 524,
       "title": "the declared recovery bound is derived from the mechanism that enforces it",
       "explicitId": "openwop.requirement.0158.bound-is-derived",
       "citations": [
@@ -28162,7 +28280,7 @@
     {
       "id": "openwop.it.v2-durability-recovery.deterministically-failing-work-reaches-a-terminal-state-and-stops-being-retried",
       "file": "v2-durability-recovery.test.ts",
-      "line": 507,
+      "line": 555,
       "title": "deterministically failing work reaches a terminal state and stops being retried",
       "explicitId": "openwop.requirement.0158.poison-exhaustion",
       "citations": [
@@ -28764,6 +28882,54 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.v2-idempotency-in-flight.concurrent-same-key-creates-yield-exactly-one-run",
+      "file": "v2-idempotency-in-flight.test.ts",
+      "line": 101,
+      "title": "concurrent same-key creates yield exactly one run",
+      "explicitId": "openwop.requirement.0213.in-flight-one-winner",
+      "citations": [
+        {
+          "section": "spec/v2/core/idempotency.md Concurrency",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "spec/v2/core/idempotency.md Concurrency",
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-idempotency-in-flight.each-loser-is-a-marked-replay-of-a-final-outcome-or-409-idempotency-in-flight-wi",
+      "file": "v2-idempotency-in-flight.test.ts",
+      "line": 109,
+      "title": "each loser is a marked replay of a final outcome, or 409 idempotency_in_flight with no retry timing in details",
+      "explicitId": "openwop.requirement.0213.in-flight-loser-outcome",
+      "citations": [
+        {
+          "section": "spec/v2/core/idempotency.md Concurrency",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "spec/v2/core/idempotency.md Concurrency",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "spec/v2/core/errors.md §Retry timing",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "spec/v2/core/idempotency.md Concurrency",
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
     {
       "id": "openwop.it.v2-idempotency-key-grammar.a-22-character-key-inside-the-grammar-is-accepted",
       "file": "v2-idempotency-key-grammar.test.ts",
@@ -28944,6 +29110,48 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.v2-interrupt-resolve-terminal.a-run-scoped-resolve-after-the-run-was-cancelled-is-409-interrupt-already-resolv",
+      "file": "v2-interrupt-resolve-terminal.test.ts",
+      "line": 70,
+      "title": "a run-scoped resolve after the run was cancelled is 409 interrupt_already_resolved",
+      "explicitId": "openwop.requirement.0213.resolve-after-cancel",
+      "citations": [
+        {
+          "section": "spec/v2/core/errors.md §One code per state",
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-interrupt-resolve-terminal.a-second-run-scoped-resolve-after-the-run-completed-is-409-interrupt-already-res",
+      "file": "v2-interrupt-resolve-terminal.test.ts",
+      "line": 83,
+      "title": "a second run-scoped resolve after the run completed is 409 interrupt_already_resolved",
+      "explicitId": "openwop.requirement.0213.resolve-after-complete",
+      "citations": [
+        {
+          "section": "spec/v2/core/errors.md §One code per state",
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-interrupt-resolve-terminal.a-run-scoped-resolve-on-an-unknown-run-is-404-not-found",
+      "file": "v2-interrupt-resolve-terminal.test.ts",
+      "line": 96,
+      "title": "a run-scoped resolve on an unknown run is 404 not_found",
+      "explicitId": "openwop.requirement.0213.resolve-unknown-run",
+      "citations": [
+        {
+          "section": "spec/v2/core/interrupt.md §Resolve",
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
     {
       "id": "openwop.it.v2-interrupt-token-scheme.a-token-without-the-ow2-prefix-is-refused",
       "file": "v2-interrupt-token-scheme.test.ts",
@@ -29413,7 +29621,7 @@
     {
       "id": "openwop.it.v2-mcp-mount-map.a-host-claiming-mcp-2026-07-28-lists-every-feature-the-map-requires-for-it",
       "file": "v2-mcp-mount-map.test.ts",
-      "line": 94,
+      "line": 97,
       "title": "a host claiming mcp-2026-07-28 lists every feature the map requires for it",
       "explicitId": null,
       "citations": [
@@ -29427,7 +29635,7 @@
     {
       "id": "openwop.it.v2-mcp-mount-map.server-discover-supportedversions-equals-mcp-revisions-with-resulttype-and-cache",
       "file": "v2-mcp-mount-map.test.ts",
-      "line": 101,
+      "line": 104,
       "title": "server/discover supportedVersions equals mcp.revisions, with resultType and cache hints",
       "explicitId": null,
       "citations": [
@@ -29457,7 +29665,7 @@
     {
       "id": "openwop.it.v2-mcp-mount-map.header-body-disagreement-fails-closed-32020-before-version-selection-an-unsuppor",
       "file": "v2-mcp-mount-map.test.ts",
-      "line": 113,
+      "line": 116,
       "title": "header/body disagreement fails closed -32020 before version selection; an unsupported revision is -32022",
       "explicitId": null,
       "citations": [
@@ -29490,7 +29698,7 @@
     {
       "id": "openwop.it.v2-mcp-mount-map.tools-list-needs-no-initialize-and-no-session-results-carry-cache-hints-and-agre",
       "file": "v2-mcp-mount-map.test.ts",
-      "line": 128,
+      "line": 131,
       "title": "tools/list needs no initialize and no session; results carry cache hints and agree across requests",
       "explicitId": null,
       "citations": [
@@ -29528,7 +29736,7 @@
     {
       "id": "openwop.it.v2-mcp-mount-map.tools-call-answers-a-completed-run-iserror-false-and-a-failed-run-iserror-true-n",
       "file": "v2-mcp-mount-map.test.ts",
-      "line": 144,
+      "line": 147,
       "title": "tools/call answers a completed run isError false and a failed run isError true, never a JSON-RPC error",
       "explicitId": null,
       "citations": [
@@ -29560,7 +29768,7 @@
     {
       "id": "openwop.it.v2-mcp-mount-map.a-run-started-by-tools-call-records-run-started-transport-mcp",
       "file": "v2-mcp-mount-map.test.ts",
-      "line": 159,
+      "line": 162,
       "title": "a run started by tools/call records run.started.transport mcp",
       "explicitId": null,
       "citations": [
@@ -29578,7 +29786,7 @@
     {
       "id": "openwop.it.v2-mcp-mount-map.a-suspending-tool-answers-inputrequiredresult-the-retry-resolves-it-requeststate",
       "file": "v2-mcp-mount-map.test.ts",
-      "line": 178,
+      "line": 181,
       "title": "a suspending tool answers InputRequiredResult; the retry resolves it; requestState is single use and forgery-proof",
       "explicitId": null,
       "citations": [
@@ -29617,10 +29825,49 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.v2-mcp-mount-map.the-mrtr-input-request-key-is-the-open-interrupt-s-interruptid-never-the-node-it",
+      "file": "v2-mcp-mount-map.test.ts",
+      "line": 206,
+      "title": "the MRTR input-request key is the open interrupt’s interruptId, never the node it suspended on",
+      "explicitId": null,
+      "citations": [
+        {
+          "section": "interop-map.json mcp.mrtr InputRequiredResult (host as server)",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "interop-map.json mcp.tasks.status waiting-approval",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "interop-map.json mcp.mrtr InputRequiredResult (host as server); schemas/v2/ids.schema.json interruptId",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "interop-map.json mcp.mrtr InputRequiredResult (host as server)",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "interop-map.json mcp.mrtr InputRequiredResult (host as server); runs.md node.suspended",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "interop-map.json mcp.mrtr inputResponses[key] (host as server)",
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
     {
       "id": "openwop.it.v2-mcp-mount-map.a-list-that-differs-per-caller-is-cachescope-private",
       "file": "v2-mcp-mount-map.test.ts",
-      "line": 203,
+      "line": 244,
       "title": "a list that differs per caller is cacheScope private",
       "explicitId": null,
       "citations": [
@@ -29638,7 +29885,7 @@
     {
       "id": "openwop.it.v2-mcp-mount-map.unknown-meta-extension-keys-and-capabilities-extensions-are-opaque-processed-nor",
       "file": "v2-mcp-mount-map.test.ts",
-      "line": 220,
+      "line": 261,
       "title": "unknown _meta extension keys and capabilities.extensions are opaque: processed normally, granting nothing",
       "explicitId": null,
       "citations": [
@@ -29656,7 +29903,7 @@
     {
       "id": "openwop.it.v2-mcp-mount-map.an-unauthenticated-request-is-refused-at-the-boundary-unless-anonymousactor-is-a",
       "file": "v2-mcp-mount-map.test.ts",
-      "line": 229,
+      "line": 270,
       "title": "an unauthenticated request is refused at the boundary unless anonymousActor is advertised",
       "explicitId": null,
       "citations": [
@@ -29679,7 +29926,7 @@
     {
       "id": "openwop.it.v2-mcp-mount-map.a-credential-interrupt-is-answered-in-url-mode-url-connecturl-iserror-without-ur",
       "file": "v2-mcp-mount-map.test.ts",
-      "line": 246,
+      "line": 287,
       "title": "a credential interrupt is answered in URL mode (url = connectUrl), isError without URL support, and input_required again on an accept retry with no credential",
       "explicitId": null,
       "citations": [
@@ -29717,7 +29964,7 @@
     {
       "id": "openwop.it.v2-mcp-mount-map.form-mode-is-never-emitted-for-a-nested-schema-or-a-sensitive-format-password-fi",
       "file": "v2-mcp-mount-map.test.ts",
-      "line": 287,
+      "line": 328,
       "title": "form mode is never emitted for a nested schema or a sensitive (format password) field",
       "explicitId": null,
       "citations": [
@@ -30188,7 +30435,7 @@
     {
       "id": "openwop.it.v2-negotiation-authenticated.an-unauthenticated-mcp-exchange-cannot-lower-the-revision-below-preferredversion",
       "file": "v2-negotiation-authenticated.test.ts",
-      "line": 111,
+      "line": 117,
       "title": "an unauthenticated MCP exchange cannot lower the revision below preferredVersion",
       "explicitId": null,
       "citations": []
@@ -31910,6 +32157,77 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.v2-sse-last-event-id-cursor.a-last-event-id-past-the-log-is-an-exclusive-cursor-a-terminal-run-answers-200-w",
+      "file": "v2-sse-last-event-id-cursor.test.ts",
+      "line": 84,
+      "title": "a Last-Event-ID past the log is an exclusive cursor: a terminal run answers 200 with no frame and closes",
+      "explicitId": "openwop.requirement.0213.last-event-id-exclusive-cursor",
+      "citations": [
+        {
+          "section": "spec/v2/core/events.md §SSE frames",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "spec/v2/core/events.md §SSE frames",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "spec/v2/core/events.md §SSE frames",
+          "requirement": "on a terminal run the host MUST close the empty stream itself"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-sse-last-event-id-cursor.a-last-event-id-that-is-not-a-non-negative-integer-when-refused-is-400-validatio",
+      "file": "v2-sse-last-event-id-cursor.test.ts",
+      "line": 99,
+      "title": "a Last-Event-ID that is not a non-negative integer, when refused, is 400 validation_error",
+      "explicitId": "openwop.requirement.0213.last-event-id-malformed",
+      "citations": [
+        {
+          "section": "spec/v2/core/events.md §SSE frames",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "spec/v2/core/errors.md",
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-sse-last-event-id-cursor.the-cursor-never-changes-the-answer-for-a-run-the-caller-cannot-read",
+      "file": "v2-sse-last-event-id-cursor.test.ts",
+      "line": 108,
+      "title": "the cursor never changes the answer for a run the caller cannot read",
+      "explicitId": "openwop.requirement.0213.last-event-id-after-authorization",
+      "citations": [
+        {
+          "section": "spec/v2/core/runs.md §Identity",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "spec/v2/core/events.md §SSE frames",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "spec/v2/core/runs.md §Identity",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "spec/v2/core/events.md §SSE frames",
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
     {
       "id": "openwop.it.v2-sse-last-event-id.last-event-id-resumes-at-the-next-sequence-never-re-emits-the-resumption-point-l",
       "file": "v2-sse-last-event-id.test.ts",
@@ -32152,7 +32470,7 @@
     {
       "id": "openwop.it.v2-terminal-event-once.every-run-observed-to-a-terminal-state-has-exactly-one-terminal-event-and-no-for",
       "file": "v2-terminal-event-once.test.ts",
-      "line": 71,
+      "line": 81,
       "title": "every run observed to a terminal state has exactly one terminal event and no forward execution after it",
       "explicitId": "openwop.requirement.0194.terminal-once",
       "citations": [
@@ -32170,7 +32488,7 @@
     {
       "id": "openwop.it.v2-terminal-event-once.work-delivered-twice-still-leaves-one-terminal-event-and-no-forward-execution-af",
       "file": "v2-terminal-event-once.test.ts",
-      "line": 99,
+      "line": 109,
       "title": "work delivered twice still leaves one terminal event and no forward execution after it",
       "explicitId": "openwop.requirement.0194.terminal-once.duplicate-delivery",
       "citations": [
@@ -32409,7 +32727,7 @@
     {
       "id": "openwop.it.v2-webhook-delivery-shape.a-major-2-subscriber-receives-the-v2-rendering-the-delivery-validates-and-run-st",
       "file": "v2-webhook-delivery-shape.test.ts",
-      "line": 220,
+      "line": 217,
       "title": "a major-2 subscriber receives the v2 rendering: the delivery validates, and run.started.owner carries subject, never principal",
       "explicitId": "openwop.requirement.0171.webhook-delivery-shape",
       "citations": [
@@ -32440,7 +32758,7 @@
     {
       "id": "openwop.it.v2-webhook-delivery-shape.a-major-1-subscriber-still-receives-the-v1-rendering-the-v1-wire-does-not-move-m",
       "file": "v2-webhook-delivery-shape.test.ts",
-      "line": 240,
+      "line": 237,
       "title": "a major-1 subscriber still receives the v1 rendering — the v1 wire does not move mid-overlap",
       "explicitId": "openwop.requirement.0171.webhook-delivery-shape",
       "citations": [
@@ -32458,7 +32776,7 @@
     {
       "id": "openwop.it.v2-webhook-delivery-shape.a-seeded-era-2-run-is-delivered-projected-too-the-fan-out-branch-a-fresh-run-can",
       "file": "v2-webhook-delivery-shape.test.ts",
-      "line": 264,
+      "line": 261,
       "title": "a seeded era-2 run is delivered projected too — the fan-out branch a fresh run cannot reach (seam-gated)",
       "explicitId": "openwop.requirement.0171.webhook-delivery-shape",
       "citations": [
@@ -32476,7 +32794,7 @@
     {
       "id": "openwop.it.v2-webhook-durable-delivery.a-failed-attempt-is-retried-and-the-event-is-delivered-at-least-once",
       "file": "v2-webhook-durable-delivery.test.ts",
-      "line": 235,
+      "line": 238,
       "title": "a failed attempt is retried and the event is delivered at least once",
       "explicitId": "openwop.requirement.0173.webhook-durable-delivery",
       "citations": [
@@ -32486,7 +32804,8 @@
         },
         {
           "section": "webhooks.md §Durability",
-          "requirement": "the host MUST attempt delivery of run.completed for THIS run to the registered subscriber"
+          "requirement": null,
+          "interpolated": true
         },
         {
           "section": "webhooks.md §Durability",
@@ -32507,7 +32826,7 @@
     {
       "id": "openwop.it.v2-webhook-durable-delivery.an-exhausted-delivery-is-dead-lettered-never-dropped",
       "file": "v2-webhook-durable-delivery.test.ts",
-      "line": 323,
+      "line": 339,
       "title": "an exhausted delivery is dead-lettered, never dropped",
       "explicitId": "openwop.requirement.0173.webhook-durable-delivery.dead-letter",
       "citations": [
@@ -32541,7 +32860,7 @@
     {
       "id": "openwop.it.v2-webhook-durable-delivery.the-dead-letter-read-is-served-and-its-records-carry-no-payload",
       "file": "v2-webhook-durable-delivery.test.ts",
-      "line": 417,
+      "line": 433,
       "title": "the dead-letter read is served and its records carry no payload",
       "explicitId": "openwop.requirement.0188.dead-letter-read",
       "citations": [
@@ -32554,7 +32873,7 @@
     {
       "id": "openwop.it.v2-webhook-durable-delivery.a-dead-letter-record-carries-no-delivered-payload",
       "file": "v2-webhook-durable-delivery.test.ts",
-      "line": 438,
+      "line": 454,
       "title": "a dead-letter record carries no delivered payload",
       "explicitId": "openwop.requirement.0188.dead-letter-content-free",
       "citations": [
@@ -33681,7 +34000,7 @@
     {
       "id": "openwop.it.webhook-signed-delivery.host-posts-run-events-to-subscriber-with-valid-x-openwop-signature",
       "file": "webhook-signed-delivery.test.ts",
-      "line": 169,
+      "line": 168,
       "title": "host POSTs run events to subscriber with valid X-openwop-Signature",
       "explicitId": "openwop.it.webhook-signed-delivery.host-posts-run-events-to-subscriber-with-valid-x-openwop-signature",
       "citations": [
@@ -33732,7 +34051,7 @@
     {
       "id": "openwop.it.webhook-signed-delivery.control-with-a-tunnel-wired-the-host-still-refuses-the-loopback-receiver",
       "file": "webhook-signed-delivery.test.ts",
-      "line": 410,
+      "line": 423,
       "title": "control: with a tunnel wired, the host still refuses the loopback receiver",
       "explicitId": "openwop.it.webhook-signed-delivery.control-with-a-tunnel-wired-the-host-still-refuses-the-loopback-receiver",
       "citations": [
@@ -37947,7 +38266,7 @@
     {
       "id": "openwop.it.openapi-asyncapi-sdk-parity.spec-v1-operation-path-manifest-json-exists-in-the-corpus-layout-and-re-derives",
       "file": "openapi-asyncapi-sdk-parity.test.ts",
-      "line": 189,
+      "line": 200,
       "title": "spec/v1/operation-path-manifest.json exists in the corpus layout and re-derives byte-for-byte from api/openapi.yaml",
       "explicitId": "openwop.it.openapi-asyncapi-sdk-parity.spec-v1-operation-path-manifest-json-exists-in-the-corpus-layout-and-re-derives",
       "citations": [
@@ -37960,7 +38279,7 @@
     {
       "id": "openwop.it.openapi-asyncapi-sdk-parity.every-operation-resolves-to-exactly-one-v1-segment-none-for-well-known-has-an-op",
       "file": "openapi-asyncapi-sdk-parity.test.ts",
-      "line": 201,
+      "line": 212,
       "title": "every operation resolves to exactly one /v1 segment (none for /.well-known/*), has an operationId, and ids are unique",
       "explicitId": "openwop.it.openapi-asyncapi-sdk-parity.every-operation-resolves-to-exactly-one-v1-segment-none-for-well-known-has-an-op",
       "citations": [
@@ -37989,7 +38308,7 @@
     {
       "id": "openwop.it.openapi-asyncapi-sdk-parity.the-asyncapi-server-pathname-carries-the-version-segment-exactly-once",
       "file": "openapi-asyncapi-sdk-parity.test.ts",
-      "line": 220,
+      "line": 231,
       "title": "the AsyncAPI server pathname carries the version segment exactly once",
       "explicitId": "openwop.it.openapi-asyncapi-sdk-parity.the-asyncapi-server-pathname-carries-the-version-segment-exactly-once",
       "citations": [
@@ -38003,7 +38322,7 @@
     {
       "id": "openwop.it.openapi-asyncapi-sdk-parity.every-addressed-channel-resolves-server-pathname-address-to-an-openapi-path-key",
       "file": "openapi-asyncapi-sdk-parity.test.ts",
-      "line": 226,
+      "line": 237,
       "title": "every addressed channel resolves (server pathname + address) to an OpenAPI path key that has a GET operation, with exactly one /v1",
       "explicitId": "openwop.it.openapi-asyncapi-sdk-parity.every-addressed-channel-resolves-server-pathname-address-to-an-openapi-path-key",
       "citations": [
@@ -38026,7 +38345,7 @@
     {
       "id": "openwop.it.openapi-asyncapi-sdk-parity.logical-address-null-channels-are-the-only-ones-without-a-wire-address-and-they",
       "file": "openapi-asyncapi-sdk-parity.test.ts",
-      "line": 242,
+      "line": 253,
       "title": "logical (address: null) channels are the only ones without a wire address, and they are documented as logical",
       "explicitId": "openwop.it.openapi-asyncapi-sdk-parity.logical-address-null-channels-are-the-only-ones-without-a-wire-address-and-they",
       "citations": [
@@ -38040,13 +38359,14 @@
     {
       "id": "openwop.it.openapi-asyncapi-sdk-parity.sdk-parity-expectations-json-covers-every-canonical-operation-with-the-same-meth",
       "file": "openapi-asyncapi-sdk-parity.test.ts",
-      "line": 251,
+      "line": 262,
       "title": "sdk/parity-expectations.json covers every canonical operation with the same method + path, declares nothing the contract lacks, and the TypeScript client issues every ts-typed path",
       "explicitId": "openwop.it.openapi-asyncapi-sdk-parity.sdk-parity-expectations-json-covers-every-canonical-operation-with-the-same-meth",
       "citations": [
         {
           "section": "RFC 0149 §A",
-          "requirement": "canonical operations with no SDK parity declaration"
+          "requirement": null,
+          "interpolated": true
         },
         {
           "section": "RFC 0149 §A",
@@ -40027,6 +40347,123 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.v1-webhook-rotation-contract.the-v1-rotation-route-the-prose-mandates-is-an-api-openapi-yaml-operation-with-t",
+      "file": "v1-webhook-rotation-contract.test.ts",
+      "line": 63,
+      "title": "the v1 rotation route the prose mandates is an api/openapi.yaml operation with the scopes and refusals the prose names",
+      "explicitId": "openwop.requirement.0201.v1-rotation-route-in-contract",
+      "citations": [
+        {
+          "section": "RFC 0201 §E.18 / spec/v1/webhooks.md §\"Standard Webhooks companion scheme\"",
+          "requirement": "spec/v1/webhooks.md §Rotation MUST still mandate `POST /v1/webhooks/{webhookId}/rotate-secret` — this leg is only meaningful while it does"
+        },
+        {
+          "section": "RFC 0201 §E.18 / spec/v1/webhooks.md §\"Standard Webhooks companion scheme\"",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "RFC 0201 §E.18 / spec/v1/webhooks.md §\"Standard Webhooks companion scheme\"",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "RFC 0201 §E.18 / spec/v1/webhooks.md §\"Standard Webhooks companion scheme\"",
+          "requirement": "the v1 operation MUST carry the same operationId as its v2 twin, so one SDK surface spans both majors"
+        },
+        {
+          "section": "RFC 0201 §E.18 / spec/v1/webhooks.md §\"Standard Webhooks companion scheme\"",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "RFC 0201 §E.18 / spec/v1/webhooks.md §\"Standard Webhooks companion scheme\"",
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v1-webhook-rotation-contract.the-v1-rotation-request-takes-the-new-secret-and-the-response-returns-none",
+      "file": "v1-webhook-rotation-contract.test.ts",
+      "line": 105,
+      "title": "the v1 rotation request takes the new secret and the response returns none",
+      "explicitId": "openwop.requirement.0201.v1-rotation-response-carries-no-secret",
+      "citations": [
+        {
+          "section": "RFC 0201 §E.18 / spec/v1/webhooks.md §\"Standard Webhooks companion scheme\"",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "RFC 0201 §E.18 / spec/v1/webhooks.md §\"Standard Webhooks companion scheme\"",
+          "requirement": "the rotation request MUST require `secret`"
+        },
+        {
+          "section": "RFC 0201 §E.18 / spec/v1/webhooks.md §\"Standard Webhooks companion scheme\"",
+          "requirement": "the new secret MUST be constrained to the RFC 0201 §B.6 `whsec_<base64>` form"
+        },
+        {
+          "section": "RFC 0201 §E.18 / spec/v1/webhooks.md §\"Standard Webhooks companion scheme\"",
+          "requirement": "the 200 MUST return `rotatedAt`"
+        },
+        {
+          "section": "RFC 0201 §E.18 / spec/v1/webhooks.md §\"Standard Webhooks companion scheme\"",
+          "requirement": "the 200 MUST return `previousSecretExpiresAt` — a rotation whose overlap end the caller cannot read is not zero-downtime"
+        },
+        {
+          "section": "RFC 0201 §E.18 / spec/v1/webhooks.md §\"Standard Webhooks companion scheme\"",
+          "requirement": "the rotation 200 MUST NOT carry a `secret` property — the caller already holds the new one, and echoing it re-leaks a value the host issues once"
+        },
+        {
+          "section": "RFC 0201 §E.18 / spec/v1/webhooks.md §\"Standard Webhooks companion scheme\"",
+          "requirement": "the 200 body MUST be closed (`additionalProperties: false`) so a secret cannot be smuggled back in a later edit"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v1-webhook-unregister-contract.the-tenantid-the-v1-prose-requires-on-unregister-is-a-required-query-parameter-o",
+      "file": "v1-webhook-unregister-contract.test.ts",
+      "line": 68,
+      "title": "the tenantId the v1 prose requires on unregister is a required query parameter of api/openapi.yaml unregisterWebhook",
+      "explicitId": "openwop.requirement.webhooks.v1-unregister-tenantid-in-contract",
+      "citations": [
+        {
+          "section": "spec/v1/webhooks.md §Unregister",
+          "requirement": "spec/v1/webhooks.md §Unregister MUST still require the tenantId query parameter — this leg is only meaningful while it does"
+        },
+        {
+          "section": "spec/v1/webhooks.md §Unregister",
+          "requirement": "api/openapi.yaml MUST define DELETE /v1/webhooks/{webhookId}"
+        },
+        {
+          "section": "spec/v1/webhooks.md §Unregister",
+          "requirement": "the v1 operation is unregisterWebhook"
+        },
+        {
+          "section": "spec/v1/webhooks.md §Unregister",
+          "requirement": "unregisterWebhook MUST declare `tenantId` as a REQUIRED query parameter — the prose requires it, and a client generated from a contract that omits it cannot issue a conforming request"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v1-webhook-unregister-contract.the-v2-twin-carries-the-tenant-in-its-id-and-does-not-grow-the-v1-query-paramete",
+      "file": "v1-webhook-unregister-contract.test.ts",
+      "line": 87,
+      "title": "the v2 twin carries the tenant in its id and does not grow the v1 query parameter",
+      "explicitId": "openwop.requirement.webhooks.v2-unregister-no-tenantid-query",
+      "citations": [
+        {
+          "section": "api/v2/openapi.yaml unregisterWebhook",
+          "requirement": "api/v2/openapi.yaml MUST define DELETE /webhooks/{webhookId}"
+        },
+        {
+          "section": "identity.md §5 (RFC 0187 §A.1)",
+          "requirement": "the v2 unregisterWebhook MUST NOT declare a tenantId parameter — v2 carries the tenant inside the tenant-bound webhookId, and a second tenant source could disagree with it"
+        }
+      ]
+    },
     {
       "id": "openwop.it.v2-alias-covers-reword.the-corpus-gate-script-exits-0",
       "file": "v2-alias-covers-reword.test.ts",
@@ -40453,7 +40890,7 @@
     {
       "id": "openwop.it.v2-interop-map-coherent.the-map-agrees-with-the-v2-wire-and-the-gate-refuses-each-defect-it-exists-to-ca",
       "file": "v2-interop-map-coherent.test.ts",
-      "line": 54,
+      "line": 62,
       "title": "the map agrees with the v2 wire, and the gate refuses each defect it exists to catch",
       "explicitId": "openwop.requirement.0208.map-coherent",
       "citations": [