@openwop/openwop-conformance 2.40.0 → 2.40.1

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # `@openwop/openwop-conformance` Changelog
 
+## [2.40.1] — 2026-09-26 — three declared-unwitnessable rows are reached and say why
+
+- **Three Falsifiability rows declared non-executable now have a leg that records the reason** (RFC 0174 §B.1 rule 4, second branch: "the suite must reach the leg and record a reason"). Each RFC's table declares one of these rows unwitnessable, but no suite leg referenced it, so no bundle could account for it. Each of RFCs 0197, 0205 and 0209 was held from `Accepted` by that one row. No leg can record `executed-pass` without observing the requirement.
+  - `openwop.requirement.0197.retired-not-emitted` (`v2-capability-maturity-bounded`, new describe) is **conditional, not constant**. It reads `spec/v1/deprecations.json`, `spec/v2/migrations.json` and `spec/v2/release.json` from the shipped corpus. While no `v2-minor` row with `retirement.persistence: "persisted"` is due, it records `inapplicable` with RFC 0197 §A.3's reason; that is today's state, with 0 rows. Once one is due, it locates the member by the schema's `x-openwop-retired-in` annotation (a property name, or a `const` / single-`enum` value). It then drives a `conformance-noop` run and fails on any event that carries the member. A due row whose member it cannot locate records `blocked`. The branches no host can reach yet are self-tested in `src/lib/v2-retired-members.test.ts` (due / not-due / advertised-class / unannotated / caught emission / clean event).
+  - `openwop.requirement.0205.export-alias-equivalence` (`v2-artifact-a2a-shape`, new describe) records `inapplicable` on every host, before any request, with RFC 0205 §C.11's verdict: consumer matching logic and a pack-author call, neither on the wire.
+  - `openwop.requirement.0209.render-needs-root` (`v2-a2ui-v09-surface`, new describe) records `inapplicable` on every host, before any request or seam gate, with RFC 0209 §C.9's verdict. It names the reference-impl witness: openwop-app `frontend/react/src/chat/a2ui/__tests__/a2ui-v09-render-needs-root.test.tsx` (openwop-app#4121).
+- **Version moved ahead of publication.** `@openwop/openwop-conformance` and its exact-pinned peer `@openwop/spec-artifacts` move to `2.40.1` because `2.40.0` is tagged. Not tagged, not published. 561 scenario files, unchanged, so this is a patch.
+
 ## [2.40.0] — 2026-09-26 — RFC 0215: one subscription's dead receiver cannot hold another's delivery, and unregistering stops the retries
 
 - **Two new scenarios, gated on `webhooks` (RFC 0215, `Active` 2026-09-25).** `v2-webhook-delivery-isolation` (`openwop.requirement.0215.no-head-of-line`) holds 8 subscriptions' attempts unanswered, then checks that a ninth subscription's attempt still starts. The 8 filter `run.started` and the ninth `run.completed` of a 2 s `conformance-delay` run, so contention exists before the healthy delivery falls due and the host's dispatch order cannot decide the row. It fails when the held attempts were still open at the due time and the healthy one waited for the host to release one. It records `partial-witness` when the host's own delivery timeout closed them first. `v2-webhook-unregister-stops-delivery` (`openwop.requirement.0215.unregister-stops-delivery`) answers `500` to two subscriptions on one run, unregisters one after its first attempt, and fails if that one is attempted more than 5 s after the `204`. It passes only when the other, the control, was retried after that point: a silence counts only when a retry demonstrably would have come. Sabotage on the v2 reference host: a sequential worker and a 5-slot pool each fail the first scenario, and an attempt that falls back to a cached subscription after the delete fails the second.

package/README.md

@@ -11,7 +11,7 @@
 # --legacy-peer-deps is REQUIRED, not optional: the exact peer pin is what npm's
 # default resolver refuses. npm 10.9 fails outright with
 # "Cannot read properties of null (reading 'edgesOut')" — use npm >= 11.
-npm install --legacy-peer-deps @openwop/openwop-conformance@2.40.0 @openwop/spec-artifacts@2.40.0
+npm install --legacy-peer-deps @openwop/openwop-conformance@2.40.1 @openwop/spec-artifacts@2.40.1
 # or run without install:
 npx @openwop/openwop-conformance --base-url https://api.example.com --api-key hk_test_...
 ```

package/dist/spec-artifacts.lock.json

@@ -1,5 +1,5 @@
 {
   "package": "@openwop/spec-artifacts",
-  "version": "2.40.0",
-  "stampSha256": "f65c56d3a36eb7301c4baceef9ce0899091151fb12bc72c1508eb7a7d7b4ca4c"
+  "version": "2.40.1",
+  "stampSha256": "1fb5733bb565913ac21afc3e5179ea3cb4d1b98ab39f543fb3c70f9a936453bd"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openwop/openwop-conformance",
-  "version": "2.40.0",
+  "version": "2.40.1",
   "description": "Production-ready black-box conformance suite for OpenWOP v1.0 compliant servers.",
   "repository": {
     "type": "git",
@@ -56,6 +56,6 @@
     "@openwop/spec-artifacts": "file:../spec-artifacts"
   },
   "peerDependencies": {
-    "@openwop/spec-artifacts": "2.40.0"
+    "@openwop/spec-artifacts": "2.40.1"
   }
 }

package/requirement-aliases.json

@@ -167,6 +167,8 @@
     "openwop.it.v2-security-defaults-table.the-obligation-table-has-a-witness-column-and-no-row-is-unwitnessable": "openwop.requirement.0173.security-defaults-table",
     "openwop.it.v2-spec-artifacts-digest.the-corpus-gate-script-exits-0": "openwop.requirement.0168.spec-artifacts-digest",
     "openwop.it.v2-threat-model-template.the-corpus-gate-script-exits-0": "openwop.requirement.0173.threat-model-template",
-    "openwop.it.v2-witness-required.the-corpus-gate-script-exits-0": "openwop.requirement.0168.witness-required"
+    "openwop.it.v2-witness-required.the-corpus-gate-script-exits-0": "openwop.requirement.0168.witness-required",
+    "openwop.it.bundle-maturity-gate.the-committed-corpus-is-green-and-the-report-names-the-overstated-families-and-t": "openwop.it.bundle-maturity-gate.the-committed-corpus-is-green-and-the-gate-states-when-c-7-binds",
+    "openwop.it.bundle-maturity-gate.the-same-committed-bundle-re-labelled-onto-the-rfc-s-suite-fails-naming-every-ov": "openwop.it.bundle-maturity-gate.the-superseded-myndhyve-bundle-re-labelled-onto-the-rfc-s-suite-fails-naming-eve"
   }
 }

package/requirements.json

@@ -3,10 +3,10 @@
   "generatedFrom": "src/scenarios/*.test.ts",
   "counts": {
     "files": 635,
-    "tests": 2427,
-    "withStableId": 2427,
+    "tests": 2430,
+    "withStableId": 2430,
     "interpolatedTitles": 0,
-    "explicitIds": 2307
+    "explicitIds": 2310
   },
   "records": [
     {
@@ -27218,7 +27218,7 @@
     {
       "id": "openwop.it.v2-a2ui-v09-surface.a-version-2-envelope-carrying-a-version-1-body-is-refused-the-positive-is-admitt",
       "file": "v2-a2ui-v09-surface.test.ts",
-      "line": 129,
+      "line": 137,
       "title": "a version-2 envelope carrying a version-1 body is refused; the positive is admitted; above the floor is refused; below it follows envelopeStrictness",
       "explicitId": "openwop.requirement.0209.version-selects-branch",
       "citations": [
@@ -27262,7 +27262,7 @@
     {
       "id": "openwop.it.v2-a2ui-v09-surface.no-first-createsurface-a-message-after-deletesurface-and-a-second-createsurface",
       "file": "v2-a2ui-v09-surface.test.ts",
-      "line": 155,
+      "line": 163,
       "title": "no first createSurface, a message after deleteSurface, and a second createSurface are each refused; the valid steps are admitted",
       "explicitId": "openwop.requirement.0209.fold-guarded",
       "citations": [
@@ -27276,7 +27276,7 @@
     {
       "id": "openwop.it.v2-a2ui-v09-surface.a-createsurface-catalogid-differing-from-the-payload-catalogid-is-refused",
       "file": "v2-a2ui-v09-surface.test.ts",
-      "line": 180,
+      "line": 188,
       "title": "a createSurface.catalogId differing from the payload catalogId is refused",
       "explicitId": "openwop.requirement.0209.catalog-equality",
       "citations": [
@@ -27294,7 +27294,7 @@
     {
       "id": "openwop.it.v2-a2ui-v09-surface.a-message-whose-surfaceid-differs-from-the-payload-surfaceid-is-refused",
       "file": "v2-a2ui-v09-surface.test.ts",
-      "line": 194,
+      "line": 202,
       "title": "a message whose surfaceId differs from the payload surfaceId is refused",
       "explicitId": "openwop.it.v2-a2ui-v09-surface.surface-id-equality",
       "citations": [
@@ -27312,7 +27312,7 @@
     {
       "id": "openwop.it.v2-a2ui-v09-surface.a-recorded-version-2-surface-is-returned-byte-equal-on-poll-and-carried-by-a-for",
       "file": "v2-a2ui-v09-surface.test.ts",
-      "line": 210,
+      "line": 218,
       "title": "a recorded version-2 surface is returned byte-equal on poll and carried by a fork at a later fromSeq",
       "explicitId": "openwop.it.v2-a2ui-v09-surface.recorded-as-recorded",
       "citations": [
@@ -27349,7 +27349,7 @@
     {
       "id": "openwop.it.v2-a2ui-v09-surface.a-version-1-surface-recorded-at-floor-1-is-returned-byte-equal-on-poll-and-carri",
       "file": "v2-a2ui-v09-surface.test.ts",
-      "line": 237,
+      "line": 245,
       "title": "a version-1 surface recorded at floor 1 is returned byte-equal on poll and carried by a fork",
       "explicitId": "openwop.requirement.0209.legacy-readable",
       "citations": [
@@ -27386,7 +27386,7 @@
     {
       "id": "openwop.it.v2-a2ui-v09-surface.one-untrusted-update-taints-a-trusted-surface-a-later-trusted-update-does-not-la",
       "file": "v2-a2ui-v09-surface.test.ts",
-      "line": 261,
+      "line": 269,
       "title": "one untrusted update taints a trusted surface, a later trusted update does not launder it, and the approval does not advance; an all-trusted surface does",
       "explicitId": "openwop.requirement.0209.taint-sticky",
       "citations": [
@@ -27397,6 +27397,19 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.v2-a2ui-v09-surface.records-why-render-needs-root-has-no-server-side-witness-and-where-its-witness-l",
+      "file": "v2-a2ui-v09-surface.test.ts",
+      "line": 308,
+      "title": "records why render-needs-root has no server-side witness, and where its witness lives",
+      "explicitId": "openwop.requirement.0209.render-needs-root",
+      "citations": [
+        {
+          "section": "RFC 0209 §C.9",
+          "requirement": "a renderer does not render a surface before its root component exists"
+        }
+      ]
+    },
     {
       "id": "openwop.it.v2-advertised-fixtures-exist.a-sampled-advertised-fixture-is-actually-creatable-not-just-listed",
       "file": "v2-advertised-fixtures-exist.test.ts",
@@ -27467,7 +27480,7 @@
     {
       "id": "openwop.it.v2-artifact-a2a-shape.a-getartifact-answered-as-application-a2a-json-validates-against-artifact-schema",
       "file": "v2-artifact-a2a-shape.test.ts",
-      "line": 80,
+      "line": 87,
       "title": "a getArtifact answered as application/a2a+json validates against artifact.schema.json",
       "explicitId": "openwop.requirement.0205.artifact-a2a-shape",
       "citations": [
@@ -27491,7 +27504,7 @@
     {
       "id": "openwop.it.v2-artifact-a2a-shape.the-artifactid-of-an-application-a2a-json-body-equals-the-artifactid-path-segmen",
       "file": "v2-artifact-a2a-shape.test.ts",
-      "line": 92,
+      "line": 99,
       "title": "the artifactId of an application/a2a+json body equals the {artifactId} path segment",
       "explicitId": "openwop.requirement.0205.artifact-id-matches-path",
       "citations": [
@@ -27508,7 +27521,7 @@
     {
       "id": "openwop.it.v2-artifact-a2a-shape.the-url-of-a-url-part-answers-no-2xx-to-a-second-tenant-or-to-no-credential",
       "file": "v2-artifact-a2a-shape.test.ts",
-      "line": 103,
+      "line": 110,
       "title": "the url of a url Part answers no 2xx to a second tenant or to no credential",
       "explicitId": "openwop.requirement.0205.artifact-url-part-scoped",
       "citations": [
@@ -27524,6 +27537,19 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.v2-artifact-a2a-shape.records-why-export-alias-equivalence-has-no-wire-witness",
+      "file": "v2-artifact-a2a-shape.test.ts",
+      "line": 132,
+      "title": "records why export-alias-equivalence has no wire witness",
+      "explicitId": "openwop.requirement.0205.export-alias-equivalence",
+      "citations": [
+        {
+          "section": "RFC 0205 §C.11",
+          "requirement": "an export alias and its media type name one format"
+        }
+      ]
+    },
     {
       "id": "openwop.it.v2-assurance-downgrade-audited.an-identity-below-the-lane-floor-is-refused-with-sender-constraint-missing",
       "file": "v2-assurance-downgrade-audited.test.ts",
@@ -27912,7 +27938,7 @@
     {
       "id": "openwop.it.v2-capability-maturity-bounded.no-family-record-advertises-stable-above-its-corpus-declaration-row",
       "file": "v2-capability-maturity-bounded.test.ts",
-      "line": 69,
+      "line": 92,
       "title": "no family record advertises `stable` above its corpus declaration row",
       "explicitId": "openwop.requirement.0197.maturity-not-overstated",
       "citations": [
@@ -27933,6 +27959,20 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.v2-capability-maturity-bounded.no-run-emits-a-persisted-member-the-release-has-retired",
+      "file": "v2-capability-maturity-bounded.test.ts",
+      "line": 134,
+      "title": "no run emits a persisted member the release has retired",
+      "explicitId": "openwop.requirement.0197.retired-not-emitted",
+      "citations": [
+        {
+          "section": "RFC 0197 §A.3",
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
     {
       "id": "openwop.it.v2-capability-record-shape.every-family-record-carries-status-since-and-witness-from-the-wire-legal-sets",
       "file": "v2-capability-record-shape.test.ts",
@@ -36661,10 +36701,10 @@
       ]
     },
     {
-      "id": "openwop.it.bundle-maturity-gate.the-committed-corpus-is-green-and-the-report-names-the-overstated-families-and-t",
+      "id": "openwop.it.bundle-maturity-gate.the-committed-corpus-is-green-and-the-gate-states-when-c-7-binds",
       "file": "bundle-maturity-gate.test.ts",
-      "line": 76,
-      "title": "the committed corpus is green, and the report NAMES the overstated families and the gap row",
+      "line": 85,
+      "title": "the committed corpus is green, and the gate states when §C.7 binds",
       "explicitId": "openwop.requirement.0197.bundle-maturity-bound",
       "citations": [
         {
@@ -36672,14 +36712,6 @@
           "requirement": null,
           "interpolated": true
         },
-        {
-          "section": "spec/v2/core/capabilities.md §8 (RFC 0197 §C.7)",
-          "requirement": "a \"reported\" disposition that printed nothing would be indistinguishable from a clean tree; the report MUST name the gap row that owes the re-cut"
-        },
-        {
-          "section": "spec/v2/core/capabilities.md §8 (RFC 0197 §C.7)",
-          "requirement": "the report MUST name the families by key, not just count them — a number nobody can act on is not a report"
-        },
         {
           "section": "spec/v2/core/capabilities.md §8 (RFC 0197 §C.7)",
           "requirement": "the gate MUST state which suite version makes §C.7 binding, so \"reported\" has a visible end date"
@@ -36687,10 +36719,10 @@
       ]
     },
     {
-      "id": "openwop.it.bundle-maturity-gate.the-same-committed-bundle-re-labelled-onto-the-rfc-s-suite-fails-naming-every-ov",
+      "id": "openwop.it.bundle-maturity-gate.the-superseded-myndhyve-bundle-re-labelled-onto-the-rfc-s-suite-fails-naming-eve",
       "file": "bundle-maturity-gate.test.ts",
-      "line": 86,
-      "title": "the same committed bundle re-labelled onto the RFC’s suite FAILS, naming every overstated family",
+      "line": 93,
+      "title": "the superseded MyndHyve bundle re-labelled onto the RFC’s suite FAILS, naming every overstated family",
       "explicitId": "openwop.requirement.0197.bundle-maturity-bound",
       "citations": [
         {
@@ -36712,7 +36744,7 @@
     {
       "id": "openwop.it.bundle-maturity-gate.the-count-is-derived-promoting-one-family-in-the-declaration-drops-38-to-37",
       "file": "bundle-maturity-gate.test.ts",
-      "line": 95,
+      "line": 102,
       "title": "the count is DERIVED — promoting one family in the declaration drops 38 to 37",
       "explicitId": "openwop.requirement.0197.bundle-maturity-bound",
       "citations": [
@@ -36730,7 +36762,7 @@
     {
       "id": "openwop.it.bundle-maturity-gate.a-bundle-whose-suite-is-below-the-rfc-s-is-reported-not-failed-even-with-the-sam",
       "file": "bundle-maturity-gate.test.ts",
-      "line": 103,
+      "line": 110,
       "title": "a bundle whose suite is BELOW the RFC’s is reported, not failed, even with the same 38",
       "explicitId": "openwop.requirement.0197.bundle-maturity-bound",
       "citations": [
@@ -36746,6 +36778,14 @@
         {
           "section": "spec/v2/core/capabilities.md §8 (RFC 0197 §C.7)",
           "requirement": "the reported row must cite COMPATIBILITY.md §2.3 — an old pass stays a measurement at the suite that measured it"
+        },
+        {
+          "section": "spec/v2/core/capabilities.md §8 (RFC 0197 §C.7)",
+          "requirement": "a \"reported\" disposition that printed nothing would be indistinguishable from a clean tree; the report MUST name the gap row that owes the re-cut"
+        },
+        {
+          "section": "spec/v2/core/capabilities.md §8 (RFC 0197 §C.7)",
+          "requirement": "the report MUST name the families by key, not just count them — a number nobody can act on is not a report"
         }
       ]
     },

package/schemas/CORPUS-STAMP.json

@@ -1,17 +1,17 @@
 {
   "_comment": "Provenance of @openwop/spec-artifacts (RFC 0168 §D.2). files: SHA-256 per file; the conformance suite compares the installed peer against dist/spec-artifacts.lock.json at start.",
   "package": "@openwop/spec-artifacts",
-  "version": "2.40.0",
-  "corpusTag": "v2.40.0",
+  "version": "2.40.1",
+  "corpusTag": "v2.40.1",
   "files": {
     "api/.redocly.lint-ignore.yaml": "bf5a8350b88a72fa43f59605ed8d903ed24b6cfccda5e45509c9f6ed9ee4e712",
     "api/asyncapi.yaml": "d5ecb9ee6114582be3b1f662c84bfac9ae96dae7bacb853e461168f70a8e1c7d",
     "api/grpc/openwop.proto": "c3e72bb17cba514ee98feb6434e6c9b6ea6795bfd086489ec69fd882dd1ad977",
     "api/openapi.yaml": "6366b5514be71098e9ea41fc81ff52bc39db1a547b353c0b344cc2a2bf5370aa",
     "api/redocly.yaml": "b0604c89b2ca6d5076ec25725c539dad44a741a811fe524439ee6daef8baa09f",
-    "api/seams-v2.yaml": "acd23b627e68bee6c886f21f4b8252f0dcb49d9deb5d4abc4c19d390f56b426a",
-    "api/v2/asyncapi.yaml": "de935d89b72a1196c0f8f9731f1c3d32cee118e81b4271365e76ffdc5c9fced6",
-    "api/v2/openapi.yaml": "0d12490c1739defdb302ec384d9dd81306d1d865c7023fda040baa846ff35c8b",
+    "api/seams-v2.yaml": "23c87c259cbe4b6d087faa9f358684921d400a11330bde6b27c8cacbf0b16d78",
+    "api/v2/asyncapi.yaml": "3629ae4718168e424aee3e93b3c785df904a12229a2c58c0eec0ecaf9f8f5b2e",
+    "api/v2/openapi.yaml": "74d9beac93b861a3d191ee5e87ce047a907171df6ecdb3fcb0854d28e8df119c",
     "api/v2/redocly.yaml": "1e66b60e6118ad11a823bb620678be464d99dfe50a40e3e6f93ec9429b88b34c",
     "schemas/README.md": "0c0b737ffcf8f30e7d2809cec8a498232de710f41443212922ad8337cdde0b51",
     "schemas/a2a-task-state.schema.json": "75d5049dea8bd873ff0e7546f1c60c8d36c219bec7084264360be54a8be30ae1",
@@ -204,13 +204,13 @@
     "schemas/workspace-file.schema.json": "464de85c2a068243084ee9c1d969bc7cd5d8f7948574e58450d6493c38a0e1e4",
     "spec/v1/alias-detectors.json": "2401fcb1c18cdd688c018b3d716ae6bca85c5e356220ee2b793bd9d81872412d",
     "spec/v1/capability-declaration-classes.json": "e7729aed5c4b4e1dd02abab0530f14cc95f5d4070fe51fb139e7f5cccefa00c6",
-    "spec/v1/core-standard-manifest.json": "ca5a83168c0e6a4d73d22d32acdd4ca37bfc62297ad730df6698134caa99ebbb",
+    "spec/v1/core-standard-manifest.json": "77d77c3ee245f8f7855a530a3aa610a0a7c00a26df6c97962f1600c93e8b13c1",
     "spec/v1/deprecations.json": "2d03f4729810280147ea08c630ea65434f2dc5370567d0aac41c3595f8337d40",
     "spec/v1/deprecations.schema.json": "3e393c405d2a41b467d8c5e3c468549078df1ce6a6d2588fc488097b95d9b55b",
     "spec/v1/event-codemap.json": "3da60d884157793a360da532a9fcbbfb5285636db325a74cec94b34622186d97",
     "spec/v1/event-codemap.schema.json": "d05933b2e88103aff51a2f774df97b9bda065e0fc88dbd9b114cc47a32189174",
     "spec/v1/extensions.json": "79a60754aa16cbdbdb604f8e5c00038af535a1690a4d07bd5ff7c38f0256a7bc",
-    "spec/v1/gaps.json": "468d5b60f5e8b276f895833ac072c3984ab104d0ad97c4d31b757290c6077172",
+    "spec/v1/gaps.json": "45483b0932d4b2a80b0781419abc697f7d363be46bddfd8163a48364b8f76a36",
     "spec/v1/gaps.schema.json": "8fd83259f556553c9df0f53e7a82ca8c2a4771d471197f69b4e2ae0ceeacfd66",
     "spec/v1/migrations.json": "8839497d6a4830b53fa7867014a8336f0d725ef2346352e54fb580b7947897af",
     "spec/v1/migrations.schema.json": "886779aa6c22e646db097f5df210adb018a4dd14a7b815465a18c8a7056c8f72",
@@ -292,9 +292,9 @@
     "spec/v2/path-manifest.json": "ae9b56d03a701061fd48ad0b73cb0373493f6a4547da92763b422295b5e19535",
     "spec/v2/peer-dependency-aliases.json": "d10299280abee08258502925bc327293ee413e0108cd6e6ec75ff6110653308d",
     "spec/v2/profiles.json": "0636f19fceae625390003a347e70ef4797d84766b5c24ce8a02cea52aadebca4",
-    "spec/v2/release.json": "f17a7e0066d7851adfb246c586f12199d14fee60bf7a0eda203a124116dcff9e",
+    "spec/v2/release.json": "c24fde3d12b1732d9f0162ef0a0596ebd24501935cd28801eb892fbb6ec57949",
     "spec/v2/retention-floors.json": "eaf3722d95c79947af1d4269ef85117e126518c588cfcf1a2b21b97269f51624",
-    "spec/v2/surface-baseline.json": "2ba53481583261c59008da86d1db82ed9f657675dfe2f8b019ec7d82f5bdb4b4"
+    "spec/v2/surface-baseline.json": "72d51a1bd81cbe3cee07f9ad0ab7b481b60d4e74e651704e9b3242c49c93ec11"
   },
-  "corpusCommit": "44b89e1e50f56dd2a0834771225b8e04d2bd9e6f"
+  "corpusCommit": "470ee4d7a2cb94ddb893d82d57ade4d95644d74b"
 }

package/src/lib/v2-retired-members.ts

@@ -0,0 +1,119 @@
+/**
+ * RFC 0197 §A.3 — which persisted-class v2 members are retired at the release
+ * the suite ships, and whether an emitted event carries one.
+ *
+ * A persisted-class retirement keeps the member in the READER schema,
+ * annotated `x-openwop-retired-in: "2.N"`, and forbids only its EMISSION after
+ * `2.N`. The deprecations register says WHICH rows are persisted-class and
+ * when they fall due; the annotation in the v2 schema says WHAT the member is
+ * (a property name, or a `const` / single-member `enum` value). This module
+ * joins the two so `v2-capability-maturity-bounded`'s `retired-not-emitted`
+ * leg can scan real events for it.
+ *
+ * Pure (the caller passes the parsed register and a schema loader) so the
+ * self-test drives the due / not-due / unlocatable branches with fixtures —
+ * the register is empty today, so the host leg cannot reach them yet.
+ *
+ * @see RFCS/0197-v2-surfaces-retired-never-reshaped.md §A.3
+ * @see scripts/check-removal-dates.mjs (the corpus gate that requires the annotation on a due persisted row)
+ */
+
+type Json = Record<string, unknown>;
+
+export interface PersistedRetirement {
+  readonly id: string;
+  readonly removeIn: string;
+  readonly due: boolean;
+  /** `schemas/v2/…` source files the row cites, relative to the contract root. */
+  readonly schemaFiles: readonly string[];
+}
+
+export interface RetiredMember {
+  readonly rowId: string;
+  readonly removeIn: string;
+  readonly schemaFile: string;
+  /** `property`: an object key; `value`: a string value. */
+  readonly kind: 'property' | 'value';
+  readonly name: string;
+}
+
+export interface RetiredEmission {
+  readonly rowId: string;
+  readonly member: string;
+  readonly eventType: string;
+  readonly path: string;
+}
+
+const minorOf = (v: string): number | null => {
+  const m = /^2\.(\d+)(?:\.\d+)?$/.exec(v.trim());
+  return m ? Number(m[1]) : null;
+};
+
+const triggersOf = (e: Json): string[] => {
+  const t = e['removalTrigger'];
+  return Array.isArray(t) ? t.filter((x): x is string => typeof x === 'string') : typeof t === 'string' ? [t] : [];
+};
+
+/** Every `v2-minor` row whose `retirement.persistence` is `persisted`, and whether `release` has reached its `removeIn`. */
+export function persistedRetirements(deprecations: unknown, release: string): PersistedRetirement[] {
+  const entries = ((deprecations as { entries?: unknown } | null)?.entries ?? []) as Json[];
+  const rel = minorOf(release);
+  const out: PersistedRetirement[] = [];
+  for (const e of Array.isArray(entries) ? entries : []) {
+    if (!triggersOf(e).includes('v2-minor')) continue;
+    const r = e['retirement'] as Json | undefined;
+    if ((r?.['persistence'] ?? 'advertised') !== 'persisted') continue;
+    const removeIn = String(e['removeIn'] ?? '');
+    const at = minorOf(removeIn);
+    const sources = (Array.isArray(e['sources']) ? e['sources'] : []) as Json[];
+    out.push({
+      id: String(e['id'] ?? '(no id)'),
+      removeIn,
+      due: rel !== null && at !== null && rel >= at,
+      schemaFiles: sources.map((s) => String(s['file'] ?? '')).filter((f) => /^schemas\/v2\//.test(f)),
+    });
+  }
+  return out;
+}
+
+/** The members a due row's schema annotates `x-openwop-retired-in: <removeIn>`. */
+export function retiredMembers(row: PersistedRetirement, loadSchema: (file: string) => unknown): RetiredMember[] {
+  const out: RetiredMember[] = [];
+  for (const file of row.schemaFiles) {
+    const walk = (node: unknown, parentKey: string | null, grandKey: string | null): void => {
+      if (Array.isArray(node)) { for (const n of node) walk(n, null, parentKey); return; }
+      if (node === null || typeof node !== 'object') return;
+      const o = node as Json;
+      if (o['x-openwop-retired-in'] === row.removeIn) {
+        if (typeof o['const'] === 'string') out.push({ rowId: row.id, removeIn: row.removeIn, schemaFile: file, kind: 'value', name: o['const'] });
+        else if (Array.isArray(o['enum']) && o['enum'].length === 1 && typeof o['enum'][0] === 'string') out.push({ rowId: row.id, removeIn: row.removeIn, schemaFile: file, kind: 'value', name: o['enum'][0] });
+        else if (grandKey === 'properties' && parentKey !== null) out.push({ rowId: row.id, removeIn: row.removeIn, schemaFile: file, kind: 'property', name: parentKey });
+      }
+      for (const [k, v] of Object.entries(o)) walk(v, k, parentKey);
+    };
+    walk(loadSchema(file), null, null);
+  }
+  return out;
+}
+
+/** Every place an event carries a retired member: a key named for a `property` member, or a string equal to a `value` member. */
+export function findRetiredEmissions(events: readonly unknown[], members: readonly RetiredMember[]): RetiredEmission[] {
+  const hits: RetiredEmission[] = [];
+  for (const ev of events) {
+    const eventType = String((ev as Json | null)?.['type'] ?? '(untyped)');
+    const walk = (node: unknown, path: string): void => {
+      if (typeof node === 'string') {
+        for (const m of members) if (m.kind === 'value' && node === m.name) hits.push({ rowId: m.rowId, member: m.name, eventType, path });
+        return;
+      }
+      if (Array.isArray(node)) { node.forEach((n, i) => walk(n, `${path}[${i}]`)); return; }
+      if (node === null || typeof node !== 'object') return;
+      for (const [k, v] of Object.entries(node as Json)) {
+        for (const m of members) if (m.kind === 'property' && k === m.name) hits.push({ rowId: m.rowId, member: m.name, eventType, path: `${path}.${k}` });
+        walk(v, `${path}.${k}`);
+      }
+    };
+    walk(ev, '$');
+  }
+  return hits;
+}

package/src/scenarios/v2-a2ui-v09-surface.test.ts

@@ -19,6 +19,14 @@
  * Every refusal leg carries an admitted control in the same run, so a host that
  * refuses everything fails as surely as one that refuses nothing.
  *
+ * The last describe accounts for §C.9's `render-needs-root`, whose
+ * Falsifiability verdict is `unwitnessable`: the guarantee is render-side, and
+ * a server-oriented suite cannot observe a renderer. It records `inapplicable`
+ * on EVERY host, before any request and before the seam gate, and names where
+ * the real witness lives: a reference-app client probe, `tier: reference-impl`,
+ * following the `a2ui-surface-no-code-exec` precedent. It never asserts and
+ * cannot become a pass.
+ *
  * @see RFCS/0209-v2-a2ui-surfaces-are-a2ui-v0-9.md
  * @see spec/v2/ext/a2uiSurface/README.md
  * @see spec/v2/core/events.md §"The envelope-kind catalog"
@@ -295,3 +303,10 @@ describe('RFC 0209 §C.12 — trust is sticky across the fold (seam-gated)', ()
     }
   });
 });
+
+describe('RFC 0209 §C.9 — no render before root (declared unwitnessable here; reference-impl witness)', () => {
+  it('records why render-needs-root has no server-side witness, and where its witness lives', () => {
+    req('openwop.requirement.0209.render-needs-root', 'RFC 0209 §C.9', 'a renderer does not render a surface before its root component exists');
+    return softSkip('inapplicable', 'unwitnessable by this suite (RFC 0209 §C.9 Falsifiability verdict): a render-side guarantee, and a server-oriented suite cannot observe a renderer. The fold guard the server CAN observe is openwop.requirement.0209.fold-guarded, above. The render half is witnessed as a reference-app client probe (tier: reference-impl, the a2ui-surface-no-code-exec precedent): openwop/openwop-app frontend/react/src/chat/a2ui/__tests__/a2ui-v09-render-needs-root.test.tsx (openwop-app#4121, ADR 0749). Removing the `if (!state.renderable)` guard in frontend/react/src/chat/a2ui/v09/A2uiV09Surface.tsx turns 2 of its 4 cases red. This row records that the suite reached the requirement, and it is not a pass.');
+  });
+});

package/src/scenarios/v2-artifact-a2a-shape.test.ts

@@ -21,6 +21,13 @@
  * The server-free legs (the schemas against A2A v1.0.1) are corpus rows in
  * `src/coherence/a2a-parts-schemas.test.ts`.
  *
+ * The last describe accounts for §C.11's `export-alias-equivalence`, whose
+ * Falsifiability verdict is `unwitnessable`. It records `inapplicable` with that
+ * verdict's reason on EVERY host, before any request, and never asserts. The
+ * row exists so a bundle says the suite reached the requirement and why it
+ * cannot observe it (`check-accepted-predicate` rule 4, second branch). It is
+ * not a witness and cannot become one.
+ *
  * @see RFCS/0205-run-artifacts-and-turns-speak-a2a-parts.md
  * @see spec/v2/core/runs.md §"Annotations, artifacts, eval summary"
  */
@@ -120,3 +127,10 @@ describe('RFC 0205 §A.3 — a url Part does not resolve beyond the caller\'s au
     }
   });
 });
+
+describe('RFC 0205 §C.11 — an export alias and its media type name one format (declared unwitnessable)', () => {
+  it('records why export-alias-equivalence has no wire witness', () => {
+    req('openwop.requirement.0205.export-alias-equivalence', 'RFC 0205 §C.11', 'an export alias and its media type name one format');
+    return softSkip('inapplicable', 'unwitnessable on the wire (RFC 0205 §C.11 Falsifiability verdict): the equivalence binds a consumer\'s format-matching logic and the pack author\'s host.artifactTypes.export call, and neither is on the wire. The advertised spellings are readable, but a mismatch between them is legal, so no host response can falsify the row. No wire witness exists; this row records that the suite reached the requirement, and it is not a pass.');
+  });
+});

package/src/scenarios/v2-capability-maturity-bounded.test.ts

@@ -27,21 +27,44 @@
  * document and 38 families fail. That run is the sabotage proof, recorded in
  * the RFC 0197 gates PR.
  *
+ * The second describe is RFC 0197 §A.3's emission leg,
+ * `openwop.requirement.0197.retired-not-emitted`. Its Falsifiability verdict
+ * is "unwitnessable until the first persisted-class retirement row exists", so
+ * the leg is CONDITIONAL, never vacuous. It reads the deprecations register
+ * the suite ships, and while that has no due `v2-minor` row with
+ * `retirement.persistence: "persisted"`, it records `inapplicable` with the
+ * RFC's own reason. It must record a reason: rule 4 of
+ * `check-accepted-predicate` accepts a declared non-executable row only when a
+ * bundle row gives one. Once such a row is due, the leg drives a run and fails
+ * on any event that carries a member the v2 schema annotates
+ * `x-openwop-retired-in`. It never records `executed-pass` without scanning
+ * events. The branches the host leg cannot reach today are self-tested in
+ * `lib/v2-retired-members.test.ts`.
+ *
  * @see spec/v2/core/capabilities.md §8
  * @see spec/v2/declaration.json
- * @see RFCS/0197-v2-surfaces-retired-never-reshaped.md §C
+ * @see RFCS/0197-v2-surfaces-retired-never-reshaped.md §A.3, §C
  */
 
 import { describe, it, expect } from 'vitest';
 import { existsSync, readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { v2Discovery } from '../lib/v2.js';
+import { driver } from '../lib/driver.js';
+import { persistedRetirements, retiredMembers, findRetiredEmissions } from '../lib/v2-retired-members.js';
 import { SCHEMAS_DIR, SPEC_V2_DIR } from '../lib/paths.js';
 import { softSkip } from '../lib/soft-skip.js';
 import { req } from '../lib/requirement-ids.js';
 
 const DOC = 'spec/v2/core/capabilities.md §8';
 const ID = 'openwop.requirement.0197.maturity-not-overstated';
+const RETIRED_ID = 'openwop.requirement.0197.retired-not-emitted';
+const RETIRED_DOC = 'RFC 0197 §A.3';
+const TERMINAL = new Set(['completed', 'failed', 'cancelled']);
+
+function readJson(path: string): unknown {
+  return existsSync(path) ? JSON.parse(readFileSync(path, 'utf8')) : null;
+}
 
 interface DeclarationFamily { key: string; maturity?: { technical?: string } }
 
@@ -106,3 +129,41 @@ describe('v2 capability-maturity-bounded (RFC 0197 §C.7)', () => {
     expect(records.length, req(ID, DOC, `the scenario asserted over ${records.length} family record(s)${undeclared.length > 0 ? `; ${undeclared.length} carry no declaration row and are left to v2-capabilities-root-closed: ${undeclared.join(', ')}` : ''}`)).toBeGreaterThan(0);
   });
 });
+
+describe('v2 retired-not-emitted (RFC 0197 §A.3) — conditional on a due persisted-class retirement', () => {
+  it('no run emits a persisted member the release has retired', async () => {
+    if (SPEC_V2_DIR === null) return softSkip('blocked', 'spec/v2/ is not present in this layout — the retirement register cannot be read, and a register that cannot be read is not an absence');
+    const deprecations = readJson(join(SPEC_V2_DIR, '..', 'v1', 'deprecations.json'));
+    const migrations = readJson(join(SPEC_V2_DIR, 'migrations.json')) as { rows?: unknown[] } | null;
+    const release = (readJson(join(SPEC_V2_DIR, 'release.json')) as { version?: unknown } | null)?.version;
+    if (deprecations === null || typeof release !== 'string') return softSkip('blocked', 'spec/v1/deprecations.json or spec/v2/release.json is missing from the shipped corpus — the retirement register cannot be read');
+    const rows = persistedRetirements(deprecations, release);
+    const due = rows.filter((r) => r.due);
+    const census = `corpus ${release}: ${rows.length} persisted-class v2-minor retirement row(s), ${(migrations?.rows ?? []).length} v2→v2 migration row(s)`;
+    if (due.length === 0) {
+      return softSkip('inapplicable', `unwitnessable until the first persisted-class retirement row is due (RFC 0197 §A.3 Falsifiability): ${census}${rows.length > 0 ? `, none due yet (${rows.map((r) => `${r.id} removeIn ${r.removeIn}`).join(', ')})` : ''} — no retired member exists for a post-2.N event to carry. Before one does, a scenario would be vacuous, and a row that cannot fail is not a witness. This leg asserts the moment such a row falls due.`);
+    }
+    const contractRoot = join(SPEC_V2_DIR, '..', '..');
+    const members = due.flatMap((r) => retiredMembers(r, (file) => readJson(join(contractRoot, file))));
+    const unlocated = due.filter((r) => !members.some((m) => m.rowId === r.id));
+    if (unlocated.length > 0) return softSkip('blocked', `due persisted-class retirement row(s) whose member carries no x-openwop-retired-in annotation the suite can read: ${unlocated.map((r) => `${r.id} (${r.schemaFiles.join(', ') || 'no schemas/v2 source'})`).join('; ')}. Without the member there is nothing to scan for, and scanning for nothing is not a pass (check-removal-dates owns the missing annotation)`);
+    const create = await driver.post('/runs', { workflowId: 'conformance-noop' });
+    const runId = String((create.json as { runId?: unknown } | null)?.runId ?? '');
+    if (create.status !== 201 || runId === '') return softSkip('blocked', `POST /runs {workflowId: conformance-noop} answered ${create.status} — no post-${due[0]!.removeIn} run to read events from`);
+    const deadline = Date.now() + 20_000;
+    for (;;) {
+      const res = await driver.get(`/runs/${encodeURIComponent(runId)}`);
+      if (res.status === 200 && TERMINAL.has(String((res.json as { status?: unknown } | null)?.status ?? ''))) break;
+      if (Date.now() > deadline) return softSkip('blocked', `conformance-noop run ${runId} did not reach a terminal status within 20 s`);
+      await new Promise((r) => setTimeout(r, 200));
+    }
+    const poll = await driver.get(`/runs/${encodeURIComponent(runId)}/events/poll?timeout=1`);
+    const events = (poll.json as { events?: unknown } | null)?.events;
+    if (poll.status !== 200 || !Array.isArray(events) || events.length === 0) return softSkip('blocked', `the event poll for run ${runId} answered ${poll.status} with no events — there is nothing emitted to scan`);
+    const hits = findRetiredEmissions(events, members);
+    expect(
+      hits.map((h) => `${h.member} (${h.rowId}, retired in ${members.find((m) => m.rowId === h.rowId)?.removeIn}) in ${h.eventType} at ${h.path}`),
+      req(RETIRED_ID, RETIRED_DOC, `a host MUST NOT emit a persisted member after the minor that retired it; scanned ${events.length} event(s) for ${members.length} retired member(s): ${members.map((m) => `${m.kind} ${m.name}`).join(', ')}`),
+    ).toEqual([]);
+  });
+});