@openwop/openwop-conformance 2.42.5 → 2.42.7

package/requirements.json

@@ -2,11 +2,11 @@
   "$comment": "GENERATED by conformance/scripts/generate-requirement-registry.mjs — do not edit. One record per it()/test() in src/scenarios. Ids: openwop.it.<file-stem>.<title-slug>[~n] (src/lib/requirement-ids.ts). A record with id null has an interpolated title; its run-time row is keyed by the rendered title and maps here by file+line only. Renamed ids need a row in requirement-aliases.json.",
   "generatedFrom": "src/scenarios/*.test.ts",
   "counts": {
-    "files": 636,
-    "tests": 2439,
-    "withStableId": 2439,
+    "files": 640,
+    "tests": 2460,
+    "withStableId": 2460,
     "interpolatedTitles": 0,
-    "explicitIds": 2331
+    "explicitIds": 2350
   },
   "records": [
     {
@@ -331,11 +331,6 @@
           "section": "RFCS/0152 §E",
           "requirement": "the host MUST have created a task on the peer for this leg to mean anything"
         },
-        {
-          "section": "host-sample-test-seams.md §22",
-          "requirement": null,
-          "interpolated": true
-        },
         {
           "section": "RFCS/0152 §E",
           "requirement": "peer content MUST NOT advance an approval gate (a2a-peer-no-authority-escalation)"
@@ -366,7 +361,7 @@
     {
       "id": "openwop.it.a2a-task-roundtrip.host-consuming-an-a2a-peer-that-returns-auth-required-projects-to-waiting-input",
       "file": "a2a-task-roundtrip.test.ts",
-      "line": 223,
+      "line": 195,
       "title": "host consuming an A2A peer that returns AUTH_REQUIRED projects to waiting-input with metadata.subkind=auth",
       "explicitId": "openwop.it.a2a-task-roundtrip.host-consuming-an-a2a-peer-that-returns-auth-required-projects-to-waiting-input",
       "citations": [
@@ -379,7 +374,7 @@
     {
       "id": "openwop.it.a2a-task-roundtrip.host-consuming-an-a2a-peer-that-returns-rejected-projects-to-failed-with-rejecte",
       "file": "a2a-task-roundtrip.test.ts",
-      "line": 263,
+      "line": 235,
       "title": "host consuming an A2A peer that returns REJECTED projects to failed with rejected_by_remote",
       "explicitId": "openwop.it.a2a-task-roundtrip.host-consuming-an-a2a-peer-that-returns-rejected-projects-to-failed-with-rejecte",
       "citations": [
@@ -396,7 +391,7 @@
     {
       "id": "openwop.it.a2a-task-roundtrip.a-conforming-a2ataskstate-validates-with-the-lowercase-hyphen-state-enum-and-tas",
       "file": "a2a-task-roundtrip.test.ts",
-      "line": 315,
+      "line": 287,
       "title": "a conforming A2ATaskState validates with the lowercase-hyphen state enum and taskId == runId",
       "explicitId": "openwop.it.a2a-task-roundtrip.a-conforming-a2ataskstate-validates-with-the-lowercase-hyphen-state-enum-and-tas",
       "citations": [
@@ -410,7 +405,7 @@
     {
       "id": "openwop.it.a2a-task-roundtrip.an-uppercase-state-fails-the-persisted-wire-form-is-the-a2a-v0-3-lowercase-hyphe",
       "file": "a2a-task-roundtrip.test.ts",
-      "line": 330,
+      "line": 302,
       "title": "an UPPERCASE state fails (the persisted/wire form is the A2A v0.3 lowercase-hyphen variant)",
       "explicitId": "openwop.it.a2a-task-roundtrip.an-uppercase-state-fails-the-persisted-wire-form-is-the-a2a-v0-3-lowercase-hyphe",
       "citations": [
@@ -423,7 +418,7 @@
     {
       "id": "openwop.it.a2a-task-roundtrip.an-a2ataskstate-carrying-run-inputs-artifacts-inline-fails-additionalproperties",
       "file": "a2a-task-roundtrip.test.ts",
-      "line": 337,
+      "line": 309,
       "title": "an A2ATaskState carrying run inputs/artifacts inline fails (additionalProperties:false; SR-1)",
       "explicitId": "openwop.it.a2a-task-roundtrip.an-a2ataskstate-carrying-run-inputs-artifacts-inline-fails-additionalproperties",
       "citations": [
@@ -436,7 +431,7 @@
     {
       "id": "openwop.it.a2a-task-roundtrip.a-pushconfig-requires-url-and-structurally-rejects-a-raw-non-truncated-push-toke",
       "file": "a2a-task-roundtrip.test.ts",
-      "line": 350,
+      "line": 322,
       "title": "a PushConfig requires `url` and structurally rejects a raw (non-truncated) push token",
       "explicitId": "openwop.it.a2a-task-roundtrip.a-pushconfig-requires-url-and-structurally-rejects-a-raw-non-truncated-push-toke",
       "citations": [
@@ -457,7 +452,7 @@
     {
       "id": "openwop.it.a2a-task-roundtrip.the-capabilities-a2a-block-shape-is-declared-supported-agentcardurl-required-thr",
       "file": "a2a-task-roundtrip.test.ts",
-      "line": 366,
+      "line": 338,
       "title": "the capabilities.a2a block shape is declared (supported + agentCardUrl required; three optional booleans)",
       "explicitId": "openwop.it.a2a-task-roundtrip.the-capabilities-a2a-block-shape-is-declared-supported-agentcardurl-required-thr",
       "citations": [
@@ -479,7 +474,7 @@
     {
       "id": "openwop.it.a2a-task-roundtrip.a-paused-at-hitl-run-projects-a-live-input-required-task-on-a-later-tasks-get-re",
       "file": "a2a-task-roundtrip.test.ts",
-      "line": 380,
+      "line": 352,
       "title": "a paused-at-HITL run projects a live input-required task on a later tasks/get read",
       "explicitId": "openwop.it.a2a-task-roundtrip.a-paused-at-hitl-run-projects-a-live-input-required-task-on-a-later-tasks-get-re",
       "citations": [
@@ -496,7 +491,7 @@
     {
       "id": "openwop.it.a2a-task-roundtrip.address-arm-an-https-pushconfig-url-at-a-private-address-is-refused",
       "file": "a2a-task-roundtrip.test.ts",
-      "line": 451,
+      "line": 423,
       "title": "ADDRESS arm: an https pushConfig.url at a private address is refused",
       "explicitId": "openwop.it.a2a-task-roundtrip.address-arm-an-https-pushconfig-url-at-a-private-address-is-refused",
       "citations": [
@@ -509,7 +504,7 @@
     {
       "id": "openwop.it.a2a-task-roundtrip.scheme-arm-an-http-pushconfig-url-at-a-public-host-is-refused",
       "file": "a2a-task-roundtrip.test.ts",
-      "line": 465,
+      "line": 437,
       "title": "SCHEME arm: an http pushConfig.url at a public host is refused",
       "explicitId": "openwop.it.a2a-task-roundtrip.scheme-arm-an-http-pushconfig-url-at-a-public-host-is-refused",
       "citations": [
@@ -541,11 +536,6 @@
       "title": "outbound calls carry an explicit A2A-Version header",
       "explicitId": "openwop.it.a2a-version-negotiation.outbound-calls-carry-an-explicit-a2a-version-header",
       "citations": [
-        {
-          "section": "RFCS/0152 §B",
-          "requirement": null,
-          "interpolated": true
-        },
         {
           "section": "RFCS/0152 §B",
           "requirement": "the host MUST have called the peer"
@@ -560,7 +550,7 @@
     {
       "id": "openwop.it.a2a-version-negotiation.an-authenticated-request-is-not-silently-downgraded",
       "file": "a2a-version-negotiation.test.ts",
-      "line": 109,
+      "line": 103,
       "title": "an authenticated request is not silently downgraded",
       "explicitId": "openwop.it.a2a-version-negotiation.an-authenticated-request-is-not-silently-downgraded",
       "citations": [
@@ -578,7 +568,7 @@
     {
       "id": "openwop.it.a2a-version-negotiation.an-unsupported-version-fails-through-the-canonical-interop-error-envelope",
       "file": "a2a-version-negotiation.test.ts",
-      "line": 149,
+      "line": 143,
       "title": "an unsupported version fails through the canonical interop error envelope",
       "explicitId": "openwop.it.a2a-version-negotiation.an-unsupported-version-fails-through-the-canonical-interop-error-envelope",
       "citations": [
@@ -784,14 +774,6 @@
       "title": "drives the emit-surface seam: a ?a2uiDelta=1 subscriber reconstruction equals the non-negotiating full",
       "explicitId": "openwop.it.a2ui-surface-delta-transport.drives-the-emit-surface-seam-a-a2uidelta-1-subscriber-reconstruction-equals-the",
       "citations": [
-        {
-          "section": "RFC 0114 §15",
-          "requirement": "the emit-surface seam MUST record the baseline full surface"
-        },
-        {
-          "section": "RFC 0114 §15",
-          "requirement": "the second emit MUST succeed"
-        },
         {
           "section": "RFC 0114",
           "requirement": "a delta frame catalogVersion MUST equal the referenced full surface"
@@ -809,7 +791,7 @@
     {
       "id": "openwop.it.a2ui-surface-delta-transport.the-emit-surface-seam-rejects-an-out-of-catalog-surface-fail-closed-real-catalog",
       "file": "a2ui-surface-delta-transport.test.ts",
-      "line": 575,
+      "line": 584,
       "title": "the emit-surface seam rejects an out-of-catalog surface fail-closed (real catalog gate)",
       "explicitId": "openwop.it.a2ui-surface-delta-transport.the-emit-surface-seam-rejects-an-out-of-catalog-surface-fail-closed-real-catalog",
       "citations": [
@@ -5443,6 +5425,112 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.audit-checkpoint-signature.every-checkpoint-get-v1-audit-verify-returns-verifies-under-the-advertised-key",
+      "file": "audit-checkpoint-signature.test.ts",
+      "line": 30,
+      "title": "every checkpoint GET /v1/audit/verify returns verifies under the advertised key",
+      "explicitId": "openwop.requirement.0218.checkpoint-signature-over-root",
+      "citations": [
+        {
+          "section": "RFC 0218 · spec/v1/auth-profiles.md §\"Audit-log integrity\" 3",
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.audit-checkpoint-vectors.the-vector-set-is-present-and-non-trivial",
+      "file": "audit-checkpoint-vectors.test.ts",
+      "line": 50,
+      "title": "the vector set is present and non-trivial",
+      "explicitId": "openwop.requirement.0218.checkpoint-preimage-vectors",
+      "citations": [
+        {
+          "section": "RFC 0218 · spec/v1/auth-profiles.md §\"Audit-log integrity\" 3",
+          "requirement": "the vector file carries entries"
+        },
+        {
+          "section": "RFC 0218 · spec/v1/auth-profiles.md §\"Audit-log integrity\" 3",
+          "requirement": "the checkpoints cover 1, 2, 4 and 5 leaves (odd promotion at 5)"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.audit-checkpoint-vectors.every-entry-hash-is-the-sha-256-of-the-entry-s-jcs-bytes-and-chains-as-prevhash",
+      "file": "audit-checkpoint-vectors.test.ts",
+      "line": 56,
+      "title": "every entry hash is the SHA-256 of the entry's JCS bytes, and chains as prevHash",
+      "explicitId": "openwop.requirement.0218.checkpoint-preimage-vectors",
+      "citations": [
+        {
+          "section": "RFC 0218 · spec/v1/auth-profiles.md §\"Audit-log integrity\" 3",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "RFC 0218 · spec/v1/auth-profiles.md §\"Audit-log integrity\" 3",
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.audit-checkpoint-vectors.every-root-is-recomputed-over-p-atsequence-pairwise-odd-node-promoted",
+      "file": "audit-checkpoint-vectors.test.ts",
+      "line": 65,
+      "title": "every root is recomputed over (P, atSequence], pairwise, odd node promoted",
+      "explicitId": "openwop.requirement.0218.checkpoint-preimage-vectors",
+      "citations": [
+        {
+          "section": "RFC 0218 · spec/v1/auth-profiles.md §\"Audit-log integrity\" 3",
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.audit-checkpoint-vectors.every-signature-verifies-as-ed25519-over-the-32-root-bytes",
+      "file": "audit-checkpoint-vectors.test.ts",
+      "line": 72,
+      "title": "every signature verifies as Ed25519 over the 32 root bytes",
+      "explicitId": "openwop.requirement.0218.checkpoint-preimage-vectors",
+      "citations": [
+        {
+          "section": "RFC 0218 · spec/v1/auth-profiles.md §\"Audit-log integrity\" 3",
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.audit-checkpoint-vectors.refuses-a-leaf-list-whose-count-is-not-atsequence-p-an-uppercase-leaf-and-an-emp",
+      "file": "audit-checkpoint-vectors.test.ts",
+      "line": 79,
+      "title": "refuses a leaf list whose count is not atSequence − P, an uppercase leaf, and an empty range",
+      "explicitId": "openwop.requirement.0218.checkpoint-preimage-vectors",
+      "citations": [
+        {
+          "section": "RFC 0218 · spec/v1/auth-profiles.md §\"Audit-log integrity\" 3",
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.audit-checkpoint-vectors.a-signature-over-any-other-preimage-does-not-verify",
+      "file": "audit-checkpoint-vectors.test.ts",
+      "line": 87,
+      "title": "a signature over any other preimage does not verify",
+      "explicitId": "openwop.requirement.0218.checkpoint-preimage-vectors",
+      "citations": [
+        {
+          "section": "RFC 0218 · spec/v1/auth-profiles.md §\"Audit-log integrity\" 3",
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
     {
       "id": "openwop.it.audit-log-integrity.host-that-claims-the-profile-advertises-required-capability-fields",
       "file": "audit-log-integrity.test.ts",
@@ -6068,7 +6156,7 @@
     {
       "id": "openwop.it.auth-subject-link.a-scim-deactivation-does-not-deny-a-saml-login-whose-run-subject-is-legacy-issue",
       "file": "auth-subject-link.test.ts",
-      "line": 219,
+      "line": 220,
       "title": "a SCIM deactivation does not deny a SAML login whose run subject is legacy-issued",
       "explicitId": null,
       "citations": []
@@ -6668,7 +6756,7 @@
     {
       "id": "openwop.it.byok-roundtrip.byok-fixture-run-must-emit-a-node-completed-event-for-the-resolve-step",
       "file": "byok-roundtrip.test.ts",
-      "line": 101,
+      "line": 104,
       "title": "BYOK fixture run MUST emit a node.completed event for the resolve step",
       "explicitId": "openwop.it.byok-roundtrip.byok-fixture-run-must-emit-a-node-completed-event-for-the-resolve-step",
       "citations": [
@@ -6681,7 +6769,7 @@
     {
       "id": "openwop.it.byok-roundtrip.byok-fixture-run-event-log-must-not-echo-the-resolved-secret-value-redaction",
       "file": "byok-roundtrip.test.ts",
-      "line": 127,
+      "line": 130,
       "title": "BYOK fixture run event log MUST NOT echo the resolved secret value (redaction)",
       "explicitId": "openwop.it.byok-roundtrip.byok-fixture-run-event-log-must-not-echo-the-resolved-secret-value-redaction",
       "citations": [
@@ -8319,7 +8407,7 @@
     {
       "id": "openwop.it.compensation-behavior.compensation-events-carry-no-provider-bodies-or-credentials",
       "file": "compensation-behavior.test.ts",
-      "line": 208,
+      "line": 211,
       "title": "compensation events carry no provider bodies or credentials",
       "explicitId": "openwop.it.compensation-behavior.compensation-events-carry-no-provider-bodies-or-credentials",
       "citations": [
@@ -8333,7 +8421,7 @@
     {
       "id": "openwop.it.compensation-behavior.a-healthy-run-that-declares-a-compensator-reports-compensationstatus-none-sp-11a",
       "file": "compensation-behavior.test.ts",
-      "line": 230,
+      "line": 233,
       "title": "a healthy run that DECLARES a compensator reports compensationStatus `none` (SP-11a)",
       "explicitId": "openwop.it.compensation-behavior.a-healthy-run-that-declares-a-compensator-reports-compensationstatus-none-sp-11a",
       "citations": [
@@ -8564,7 +8652,7 @@
     {
       "id": "openwop.it.conformance-advertised-seam-required.the-sanctioned-escape-is-an-explicit-opt-out-which-records-skipped-with-the-reas",
       "file": "conformance-advertised-seam-required.test.ts",
-      "line": 110,
+      "line": 116,
       "title": "the sanctioned escape is an explicit opt-out, which records skipped with the reason — still never a pass",
       "explicitId": "openwop.it.conformance-advertised-seam-required.the-sanctioned-escape-is-an-explicit-opt-out-which-records-skipped-with-the-reas",
       "citations": [
@@ -9692,7 +9780,7 @@
     {
       "id": "openwop.it.cost-attribution.metrics-openwopcost-must-carry-the-canary-cost-shape-after-the-fixture-node-runs",
       "file": "cost-attribution.test.ts",
-      "line": 134,
+      "line": 136,
       "title": "metrics.openwopCost MUST carry the canary cost shape after the fixture node runs",
       "explicitId": "openwop.it.cost-attribution.metrics-openwopcost-must-carry-the-canary-cost-shape-after-the-fixture-node-runs",
       "citations": [
@@ -9733,7 +9821,7 @@
     {
       "id": "openwop.it.cost-attribution.cost-emit-fixture-run-must-emit-a-node-completed-event-for-the-cost-emitting-nod",
       "file": "cost-attribution.test.ts",
-      "line": 221,
+      "line": 223,
       "title": "cost-emit fixture run MUST emit a node.completed event for the cost-emitting node",
       "explicitId": "openwop.it.cost-attribution.cost-emit-fixture-run-must-emit-a-node-completed-event-for-the-cost-emitting-nod",
       "citations": [
@@ -9746,7 +9834,7 @@
     {
       "id": "openwop.it.cost-attribution.only-allowlisted-openwop-cost-attributes-reach-the-otel-span-g6-close-criteria-a",
       "file": "cost-attribution.test.ts",
-      "line": 260,
+      "line": 262,
       "title": "only allowlisted openwop.cost.* attributes reach the OTel span (G6 close criteria — allowlist enforcement)",
       "explicitId": "openwop.it.cost-attribution.only-allowlisted-openwop-cost-attributes-reach-the-otel-span-g6-close-criteria-a",
       "citations": [
@@ -9763,7 +9851,7 @@
     {
       "id": "openwop.it.cost-attribution.credential-shaped-canaries-do-not-leak-to-any-otel-attribute-g6-close-criteria-r",
       "file": "cost-attribution.test.ts",
-      "line": 299,
+      "line": 301,
       "title": "credential-shaped canaries do NOT leak to any OTel attribute (G6 close criteria — redaction)",
       "explicitId": "openwop.it.cost-attribution.credential-shaped-canaries-do-not-leak-to-any-otel-attribute-g6-close-criteria-r",
       "citations": [
@@ -10349,7 +10437,7 @@
     {
       "id": "openwop.it.debugBundle.canary-in-workflow-inputs-must-not-appear-verbatim-in-the-bundle-response",
       "file": "debugBundle.test.ts",
-      "line": 204,
+      "line": 206,
       "title": "canary in workflow inputs MUST NOT appear verbatim in the bundle response",
       "explicitId": "openwop.it.debugBundle.canary-in-workflow-inputs-must-not-appear-verbatim-in-the-bundle-response",
       "citations": [
@@ -10366,7 +10454,7 @@
     {
       "id": "openwop.it.debugBundle.span-traceid-kind-status-have-the-rfc-0207-shape-and-the-run-span-joins-the-call",
       "file": "debugBundle.test.ts",
-      "line": 238,
+      "line": 240,
       "title": "span traceId / kind / status have the RFC 0207 shape and the run span joins the caller trace",
       "explicitId": null,
       "citations": [
@@ -10519,7 +10607,7 @@
     {
       "id": "openwop.it.discovery.declares-non-zero-limits-per-capabilities-md-3-capabilitylimiter-shape",
       "file": "discovery.test.ts",
-      "line": 84,
+      "line": 86,
       "title": "declares non-zero limits per capabilities.md §3 (CapabilityLimiter shape)",
       "explicitId": "openwop.it.discovery.declares-non-zero-limits-per-capabilities-md-3-capabilitylimiter-shape",
       "citations": [
@@ -10542,7 +10630,7 @@
     {
       "id": "openwop.it.discovery.if-fixtures-is-present-it-must-be-a-string-of-unique-non-empty-entries",
       "file": "discovery.test.ts",
-      "line": 108,
+      "line": 110,
       "title": "IF fixtures is present, it MUST be a string[] of unique non-empty entries",
       "explicitId": "openwop.it.discovery.if-fixtures-is-present-it-must-be-a-string-of-unique-non-empty-entries",
       "citations": [
@@ -10567,7 +10655,7 @@
     {
       "id": "openwop.it.discovery.returns-200-with-a-parseable-openapi-3-1-document",
       "file": "discovery.test.ts",
-      "line": 148,
+      "line": 152,
       "title": "returns 200 with a parseable OpenAPI 3.1 document",
       "explicitId": "openwop.it.discovery.returns-200-with-a-parseable-openapi-3-1-document",
       "citations": [
@@ -10584,7 +10672,7 @@
     {
       "id": "openwop.it.discovery.host-claiming-auth-scoped-discovery-advertises-required-fields",
       "file": "discovery.test.ts",
-      "line": 207,
+      "line": 211,
       "title": "host claiming auth-scoped discovery advertises required fields",
       "explicitId": "openwop.it.discovery.host-claiming-auth-scoped-discovery-advertises-required-fields",
       "citations": [
@@ -10605,7 +10693,7 @@
     {
       "id": "openwop.it.discovery.authenticated-discovery-preserves-required-capabilities-fields",
       "file": "discovery.test.ts",
-      "line": 243,
+      "line": 247,
       "title": "authenticated discovery preserves required Capabilities fields",
       "explicitId": "openwop.it.discovery.authenticated-discovery-preserves-required-capabilities-fields",
       "citations": [
@@ -10627,7 +10715,7 @@
     {
       "id": "openwop.it.discovery.unauthorized-key-must-not-reveal-capabilities-outside-its-authorization",
       "file": "discovery.test.ts",
-      "line": 284,
+      "line": 288,
       "title": "unauthorized key MUST NOT reveal capabilities outside its authorization",
       "explicitId": "openwop.it.discovery.unauthorized-key-must-not-reveal-capabilities-outside-its-authorization",
       "citations": [
@@ -12581,7 +12669,7 @@
     {
       "id": "openwop.it.eventOrdering.events-from-a-single-poll-have-non-decreasing-sequence-numbers",
       "file": "eventOrdering.test.ts",
-      "line": 46,
+      "line": 53,
       "title": "events from a single poll have non-decreasing sequence numbers",
       "explicitId": "openwop.it.eventOrdering.events-from-a-single-poll-have-non-decreasing-sequence-numbers",
       "citations": [
@@ -12595,7 +12683,7 @@
     {
       "id": "openwop.it.eventOrdering.repeated-polls-of-a-terminal-run-yield-identical-event-sequences",
       "file": "eventOrdering.test.ts",
-      "line": 71,
+      "line": 78,
       "title": "repeated polls of a terminal run yield identical event sequences",
       "explicitId": "openwop.it.eventOrdering.repeated-polls-of-a-terminal-run-yield-identical-event-sequences",
       "citations": [
@@ -12613,7 +12701,7 @@
     {
       "id": "openwop.it.eventOrdering.event-stream-contains-exactly-one-of-run-completed-run-failed-run-cancelled",
       "file": "eventOrdering.test.ts",
-      "line": 103,
+      "line": 110,
       "title": "event stream contains exactly one of run.completed / run.failed / run.cancelled",
       "explicitId": "openwop.it.eventOrdering.event-stream-contains-exactly-one-of-run-completed-run-failed-run-cancelled",
       "citations": [
@@ -12626,7 +12714,7 @@
     {
       "id": "openwop.it.eventOrdering.the-terminal-event-is-the-last-event-in-the-stream",
       "file": "eventOrdering.test.ts",
-      "line": 124,
+      "line": 131,
       "title": "the terminal event is the LAST event in the stream",
       "explicitId": "openwop.it.eventOrdering.the-terminal-event-is-the-last-event-in-the-stream",
       "citations": [
@@ -14226,19 +14314,19 @@
       "explicitId": "openwop.it.highConcurrency.10-parallel-requests-with-same-key-yield-one-runid-and-9-replays",
       "citations": [
         {
-          "section": "idempotency.md §Concurrent duplicates",
+          "section": "spec/v1/idempotency.md §Concurrent duplicates",
           "requirement": "every concurrent request MUST resolve to either the cached response or a deterministic 409"
         },
         {
-          "section": "idempotency.md §Layer 1",
+          "section": "spec/v1/idempotency.md §Layer 1",
           "requirement": "same idempotency key MUST yield exactly ONE runId across all successful responses"
         },
         {
-          "section": "idempotency.md",
+          "section": "spec/v1/idempotency.md",
           "requirement": "409 on parallel idempotency-keyed retry MUST carry error=\"idempotency_in_flight\""
         },
         {
-          "section": "idempotency.md",
+          "section": "spec/v1/idempotency.md",
           "requirement": "409 idempotency_in_flight MUST include a numeric retryAfter"
         }
       ]
@@ -14255,7 +14343,7 @@
           "requirement": "concurrent POST /v1/runs requests MUST resolve to either success or rate-limited"
         },
         {
-          "section": "idempotency.md §Layer 1",
+          "section": "spec/v1/idempotency.md §Layer 1",
           "requirement": "distinct idempotency keys MUST yield distinct runIds (Layer 1 dedup is keyed)"
         },
         {
@@ -14276,15 +14364,15 @@
           "requirement": "host MUST handle ≥5 retries with same key 100ms apart without losing the cached response"
         },
         {
-          "section": "idempotency.md §Layer 1",
+          "section": "spec/v1/idempotency.md §Layer 1",
           "requirement": "all 5 retries with same key MUST resolve to the same runId"
         },
         {
-          "section": "idempotency.md §Server responsibilities",
+          "section": "spec/v1/idempotency.md §Server responsibilities",
           "requirement": "first request with new key MUST NOT be marked as replay"
         },
         {
-          "section": "idempotency.md §Server responsibilities #2",
+          "section": "spec/v1/idempotency.md §Server responsibilities #2",
           "requirement": "replay responses SHOULD set openwop-Idempotent-Replay: true"
         }
       ]
@@ -14301,7 +14389,7 @@
           "requirement": "limits MUST be advertised in discovery"
         },
         {
-          "section": "idempotency.md",
+          "section": "spec/v1/idempotency.md",
           "requirement": "limits.idempotencyAckTimeoutSec MUST be integer ≥5 when advertised"
         }
       ]
@@ -14491,7 +14579,7 @@
           "requirement": "fewer than two executors is not a race and cannot witness the rule"
         },
         {
-          "section": "idempotency.md §\"Idempotency key composition\" (Across a recovery boundary)",
+          "section": "spec/v1/idempotency.md §\"Idempotency key composition\" (Across a recovery boundary)",
           "requirement": "all executors MUST mint one identity — differing ids mean they never collided, so a single delivery is a vacuous pass rather than a working claim"
         }
       ]
@@ -14508,7 +14596,7 @@
           "requirement": "the seam MUST report how many executors attempted the effect"
         },
         {
-          "section": "idempotency.md §\"Concurrent duplicates (Layer 2)\"",
+          "section": "spec/v1/idempotency.md §\"Concurrent duplicates (Layer 2)\"",
           "requirement": "the engine MUST ensure at most one concurrent executor performs the external effect — the guarding persist MUST be an atomic claim, not a read-then-write"
         }
       ]
@@ -14529,7 +14617,7 @@
           "requirement": "the seam MUST report mintedIds, one per executor"
         },
         {
-          "section": "idempotency.md §\"Concurrent duplicates (Layer 2)\"",
+          "section": "spec/v1/idempotency.md §\"Concurrent duplicates (Layer 2)\"",
           "requirement": "exactly one effect regardless of how many executors race — at most one wins the compare-and-set, the rest observe the hit"
         },
         {
@@ -14537,7 +14625,7 @@
           "requirement": "mintedIds length MUST equal attempted"
         },
         {
-          "section": "idempotency.md §\"Idempotency key composition\"",
+          "section": "spec/v1/idempotency.md §\"Idempotency key composition\"",
           "requirement": "one identity across all executors at any concurrency"
         }
       ]
@@ -14558,8 +14646,8 @@
       "explicitId": "openwop.it.idempotency-key-determinism.default-mode-composite-identical-runid-nodeid-payload-produces-identical-keys",
       "citations": [
         {
-          "section": "idempotency.md §\"Idempotency-Key",
-          "requirement": "idempotency.md §Idempotency-Key: same logical request MUST produce same key"
+          "section": "spec/v1/idempotency.md §\"Idempotency-Key",
+          "requirement": "spec/v1/idempotency.md §Idempotency-Key: same logical request MUST produce same key"
         }
       ]
     },
@@ -14571,7 +14659,7 @@
       "explicitId": "openwop.it.idempotency-key-determinism.payload-sensitivity-different-payload-produces-different-key",
       "citations": [
         {
-          "section": "idempotency.md §\"Idempotency-Key",
+          "section": "spec/v1/idempotency.md §\"Idempotency-Key",
           "requirement": "payload sensitivity — different payload produces different key"
         }
       ]
@@ -14584,7 +14672,7 @@
       "explicitId": "openwop.it.idempotency-key-determinism.run-isolation-different-runid-produces-different-key",
       "citations": [
         {
-          "section": "idempotency.md §\"Idempotency-Key",
+          "section": "spec/v1/idempotency.md §\"Idempotency-Key",
           "requirement": "run isolation — different runId produces different key"
         }
       ]
@@ -14597,7 +14685,7 @@
       "explicitId": "openwop.it.idempotency-key-determinism.node-isolation-different-nodeid-produces-different-key",
       "citations": [
         {
-          "section": "idempotency.md §\"Idempotency-Key",
+          "section": "spec/v1/idempotency.md §\"Idempotency-Key",
           "requirement": "node isolation — different nodeId produces different key"
         }
       ]
@@ -14610,7 +14698,7 @@
       "explicitId": "openwop.it.idempotency-key-determinism.hash-mode-is-deterministic-in-the-payload-alone-run-node-ignored",
       "citations": [
         {
-          "section": "idempotency.md §\"Idempotency-Key",
+          "section": "spec/v1/idempotency.md §\"Idempotency-Key",
           "requirement": "hash mode MUST ignore run/node — useful for global remote-dedup caches"
         }
       ]
@@ -14623,7 +14711,7 @@
       "explicitId": "openwop.it.idempotency-key-determinism.output-shape-every-emitted-key-matches-openwop-sha256-prefix-16",
       "citations": [
         {
-          "section": "idempotency.md §\"Idempotency-Key",
+          "section": "spec/v1/idempotency.md §\"Idempotency-Key",
           "requirement": null,
           "interpolated": true
         }
@@ -14637,7 +14725,7 @@
       "explicitId": "openwop.it.idempotency-key-determinism.uuid-mode-rejects-with-config-invalid-safety-fix-per-1-1-2",
       "citations": [
         {
-          "section": "idempotency.md §\"Idempotency-Key",
+          "section": "spec/v1/idempotency.md §\"Idempotency-Key",
           "requirement": "mode: uuid MUST be rejected — the 1.1.0/1.1.1 non-deterministic default was removed"
         }
       ]
@@ -14650,7 +14738,7 @@
       "explicitId": "openwop.it.idempotency-key-determinism.cross-impl-invariant-pack-output-equals-canonical-sha-256-formula",
       "citations": [
         {
-          "section": "idempotency.md §\"Idempotency-Key",
+          "section": "spec/v1/idempotency.md §\"Idempotency-Key",
           "requirement": null,
           "interpolated": true
         }
@@ -14668,11 +14756,11 @@
           "requirement": "first POST /v1/runs MUST return 201"
         },
         {
-          "section": "idempotency.md §Layer 1",
+          "section": "spec/v1/idempotency.md §Layer 1",
           "requirement": "replay request with same key + same body MUST return success status (200/201)"
         },
         {
-          "section": "idempotency.md §Layer 1",
+          "section": "spec/v1/idempotency.md §Layer 1",
           "requirement": "replay MUST return the SAME runId (no new run created)"
         },
         {
@@ -14689,16 +14777,16 @@
       "explicitId": "openwop.it.idempotency.returns-409-when-the-body-changes-under-the-same-key",
       "citations": [
         {
-          "section": "idempotency.md §Layer 1",
+          "section": "spec/v1/idempotency.md §Layer 1",
           "requirement": "same Idempotency-Key with a different body MUST return 409"
         },
         {
-          "section": "idempotency.md §\"Record shape, digest, and lease\"",
+          "section": "spec/v1/idempotency.md §\"Record shape, digest, and lease\"",
           "requirement": null,
           "interpolated": true
         },
         {
-          "section": "idempotency.md §\"Record shape, digest, and lease\"",
+          "section": "spec/v1/idempotency.md §\"Record shape, digest, and lease\"",
           "requirement": "a digest mismatch MUST NOT return the cached body (no runId on the 409)"
         }
       ]
@@ -14715,19 +14803,19 @@
           "requirement": "first POST /v1/runs returns 201"
         },
         {
-          "section": "idempotency.md §Server responsibilities",
+          "section": "spec/v1/idempotency.md §Server responsibilities",
           "requirement": "openwop-Idempotent-Replay value MUST be \"true\" or \"false\""
         },
         {
-          "section": "idempotency.md §Layer 1",
+          "section": "spec/v1/idempotency.md §Layer 1",
           "requirement": "replay returns 200 or 201"
         },
         {
-          "section": "idempotency.md §Server responsibilities #2",
+          "section": "spec/v1/idempotency.md §Server responsibilities #2",
           "requirement": "openwop-Idempotent-Replay SHOULD be set on idempotent replay responses"
         },
         {
-          "section": "idempotency.md §Server responsibilities #2",
+          "section": "spec/v1/idempotency.md §Server responsibilities #2",
           "requirement": "openwop-Idempotent-Replay on replay MUST be \"true\""
         }
       ]
@@ -14744,7 +14832,7 @@
           "requirement": "host MUST handle ≥5 retries 100ms apart without losing the cached response"
         },
         {
-          "section": "idempotency.md §Layer 1",
+          "section": "spec/v1/idempotency.md §Layer 1",
           "requirement": "5 retries with same key MUST collapse to exactly one runId"
         }
       ]
@@ -14757,11 +14845,11 @@
       "explicitId": "openwop.it.idempotencyRetry.host-advertising-idempotencyacktimeoutsec-sets-integer-5",
       "citations": [
         {
-          "section": "idempotency.md",
+          "section": "spec/v1/idempotency.md",
           "requirement": "limits.idempotencyAckTimeoutSec MUST be an integer when advertised"
         },
         {
-          "section": "idempotency.md",
+          "section": "spec/v1/idempotency.md",
           "requirement": "limits.idempotencyAckTimeoutSec MUST be ≥ 5"
         }
       ]
@@ -15308,7 +15396,7 @@
     {
       "id": "openwop.it.interrupt-token-matrix.unknown-token-returns-404-on-post",
       "file": "interrupt-token-matrix.test.ts",
-      "line": 118,
+      "line": 131,
       "title": "unknown token returns 404 on POST",
       "explicitId": "openwop.it.interrupt-token-matrix.unknown-token-returns-404-on-post",
       "citations": [
@@ -16196,7 +16284,7 @@
     {
       "id": "openwop.it.mcp-current-auth-boundary.a-mount-that-requires-oauth-lane-authentication-offers-resource-metadata-or-a-pa",
       "file": "mcp-current-auth-boundary.test.ts",
-      "line": 97,
+      "line": 100,
       "title": "a mount that requires OAuth-lane authentication offers resource_metadata or a path-inserted PRM",
       "explicitId": "openwop.it.mcp-current-auth-boundary.a-mount-that-requires-oauth-lane-authentication-offers-resource-metadata-or-a-path-inserted-prm",
       "citations": [
@@ -16260,10 +16348,6 @@
           "section": "host-sample-test-seams.md §23",
           "requirement": "the host MUST have called the tool"
         },
-        {
-          "section": "host-sample-test-seams.md §23",
-          "requirement": "the seam SHOULD report `extensionAuthority: { scopesWidened, approvalAdvanced }` for scenario \"extension-asserts-authority\"; until it does the requirement is `blocked`, not passed"
-        },
         {
           "section": "mcp-integration.md §D",
           "requirement": "an extension MUST NOT gain tool authority or scope by appearing in _meta (mcp-extension-no-authority)"
@@ -16277,7 +16361,7 @@
     {
       "id": "openwop.it.mcp-extension-opacity.server-half-unknown-meta-extension-keys-on-a-request-are-ignored-not-refused-and",
       "file": "mcp-extension-opacity.test.ts",
-      "line": 67,
+      "line": 68,
       "title": "server half: unknown _meta extension keys on a request are ignored, not refused and not honoured",
       "explicitId": "openwop.it.mcp-extension-opacity.server-half-unknown-meta-extension-keys-on-a-request-are-ignored-not-refused-and",
       "citations": [
@@ -16298,10 +16382,6 @@
           "section": "RFCS/0153 §C",
           "requirement": "the host MUST have called the tool at least once for this leg to mean anything"
         },
-        {
-          "section": "host-sample-test-seams.md §23",
-          "requirement": "the invoke seam SHOULD report `mrtr: { inputRequiredSeen, retried, requestStateEchoed, result }` for tool \"needs_input\"; until it does this requirement is unobservable and resolves to `blocked`"
-        },
         {
           "section": "mcp-integration.md §C.1",
           "requirement": "the host MUST recognise resultType input_required"
@@ -16335,7 +16415,7 @@
     {
       "id": "openwop.it.mcp-mrtr-roundtrip.a-suspending-tool-answers-input-required-with-elicitation-requeststate-the-retry",
       "file": "mcp-mrtr-roundtrip.test.ts",
-      "line": 95,
+      "line": 96,
       "title": "a suspending tool answers input_required with elicitation + requestState; the retry resolves it; a forged requestState is refused",
       "explicitId": "openwop.it.mcp-mrtr-roundtrip.a-suspending-tool-answers-input-required-with-elicitation-requeststate-the-retry",
       "citations": [
@@ -16744,11 +16824,6 @@
       "title": "outbound calls carry MCP-Protocol-Version in date form",
       "explicitId": "openwop.it.mcp-version-negotiation.outbound-calls-carry-mcp-protocol-version-in-date-form",
       "citations": [
-        {
-          "section": "RFCS/0153 §B",
-          "requirement": null,
-          "interpolated": true
-        },
         {
           "section": "RFCS/0153 §B",
           "requirement": "the host MUST have called the server"
@@ -16767,7 +16842,7 @@
     {
       "id": "openwop.it.mcp-version-negotiation.the-negotiated-revision-is-one-the-host-advertises",
       "file": "mcp-version-negotiation.test.ts",
-      "line": 122,
+      "line": 117,
       "title": "the negotiated revision is one the host advertises",
       "explicitId": "openwop.it.mcp-version-negotiation.the-negotiated-revision-is-one-the-host-advertises",
       "citations": [
@@ -16781,7 +16856,7 @@
     {
       "id": "openwop.it.mcp-version-negotiation.an-unsupported-revision-fails-through-the-canonical-interop-envelope",
       "file": "mcp-version-negotiation.test.ts",
-      "line": 146,
+      "line": 141,
       "title": "an unsupported revision fails through the canonical interop envelope",
       "explicitId": "openwop.it.mcp-version-negotiation.an-unsupported-revision-fails-through-the-canonical-interop-envelope",
       "citations": [
@@ -18034,11 +18109,11 @@
       "explicitId": "openwop.it.multi-region-idempotency-behavior.two-region-conflict-resolves-to-the-lex-min-runid-per-annex-convergence-rule",
       "citations": [
         {
-          "section": "idempotency.md §\"Multi-region idempotency annex\"",
+          "section": "spec/v1/idempotency.md §\"Multi-region idempotency annex\"",
           "requirement": "simulate-partition seam MUST return 200 when ≥2 conflicting claims are submitted"
         },
         {
-          "section": "idempotency.md §\"Convergence rule\"",
+          "section": "spec/v1/idempotency.md §\"Convergence rule\"",
           "requirement": "winner MUST be the lex-min runId (run-a-west < run-b-east)"
         }
       ]
@@ -18051,11 +18126,11 @@
       "explicitId": "openwop.it.multi-region-idempotency-behavior.three-region-partition-resolves-to-a-single-winner",
       "citations": [
         {
-          "section": "idempotency.md §\"Convergence rule\"",
+          "section": "spec/v1/idempotency.md §\"Convergence rule\"",
           "requirement": "winner MUST be the lex-min runId across all conflicting claims"
         },
         {
-          "section": "idempotency.md §\"Convergence rule\"",
+          "section": "spec/v1/idempotency.md §\"Convergence rule\"",
           "requirement": "losers array MUST contain N-1 entries when N claims conflict"
         }
       ]
@@ -18068,11 +18143,11 @@
       "explicitId": "openwop.it.multi-region-idempotency-behavior.every-region-gets-a-cache-redirect-entry-pointing-at-the-winner",
       "citations": [
         {
-          "section": "idempotency.md §\"Convergence rule\"",
+          "section": "spec/v1/idempotency.md §\"Convergence rule\"",
           "requirement": "cacheRedirects MUST contain one entry per claim (including the winner)"
         },
         {
-          "section": "idempotency.md §\"Convergence rule\"",
+          "section": "spec/v1/idempotency.md §\"Convergence rule\"",
           "requirement": "every cache redirect MUST point at the winner runId"
         }
       ]
@@ -18085,7 +18160,7 @@
       "explicitId": "openwop.it.multi-region-idempotency-behavior.loser-cancel-reason-must-be-the-canonical-cross-region-dedup-loss-string",
       "citations": [
         {
-          "section": "idempotency.md §\"Convergence rule\"",
+          "section": "spec/v1/idempotency.md §\"Convergence rule\"",
           "requirement": "loserCancelReason MUST be the canonical `cross_region_dedup_loss` string"
         }
       ]
@@ -18098,7 +18173,7 @@
       "explicitId": "openwop.it.multi-region-idempotency-behavior.resolver-is-order-invariant-shuffled-inputs-produce-the-same-winner",
       "citations": [
         {
-          "section": "idempotency.md §\"Convergence rule\" — determinism",
+          "section": "spec/v1/idempotency.md §\"Convergence rule\" — determinism",
           "requirement": "resolver MUST be order-invariant; all permutations MUST produce the same lex-min winner"
         }
       ]
@@ -18111,7 +18186,7 @@
       "explicitId": "openwop.it.multi-region-idempotency-behavior.mismatched-tuple-rejects-with-400-validation-error",
       "citations": [
         {
-          "section": "idempotency.md §\"Convergence rule\"",
+          "section": "spec/v1/idempotency.md §\"Convergence rule\"",
           "requirement": "claims with non-matching (tenantId, endpoint, key) MUST be rejected — it would be a programming error in the caller"
         }
       ]
@@ -18124,7 +18199,7 @@
       "explicitId": "openwop.it.multi-region-idempotency.idempotency-crossregion-when-advertised-must-be-one-of-the-closed-enum",
       "citations": [
         {
-          "section": "idempotency.md §\"Multi-region idempotency\" §\"Capability advertisement\"",
+          "section": "spec/v1/idempotency.md §\"Multi-region idempotency\" §\"Capability advertisement\"",
           "requirement": "crossRegion MUST be one of {\"single-region\",\"reconciled-records\",\"fenced-effects\"}"
         }
       ]
@@ -18137,7 +18212,7 @@
       "explicitId": "openwop.it.multi-region-idempotency.multi-region-hosts-should-expose-the-cross-region-conflict-counter-per-operator",
       "citations": [
         {
-          "section": "idempotency.md §\"Operator surface\"",
+          "section": "spec/v1/idempotency.md §\"Operator surface\"",
           "requirement": null,
           "interpolated": true
         }
@@ -19345,7 +19420,7 @@
     {
       "id": "openwop.it.pause-resume.pause-transitions-to-paused-resume-returns-the-run-to-running",
       "file": "pause-resume.test.ts",
-      "line": 62,
+      "line": 81,
       "title": "pause transitions to paused; resume returns the run to running",
       "explicitId": "openwop.it.pause-resume.pause-transitions-to-paused-resume-returns-the-run-to-running",
       "citations": [
@@ -19362,7 +19437,7 @@
     {
       "id": "openwop.it.pause-resume.resuming-a-running-not-paused-run-returns-409-with-details-runstatus",
       "file": "pause-resume.test.ts",
-      "line": 110,
+      "line": 129,
       "title": "resuming a running (not paused) run returns 409 with details.runStatus",
       "explicitId": "openwop.it.pause-resume.resuming-a-running-not-paused-run-returns-409-with-details-runstatus",
       "citations": [
@@ -19379,7 +19454,7 @@
     {
       "id": "openwop.it.pause-resume.pause-on-an-already-paused-run-returns-409-with-details-runstatus-paused-unless",
       "file": "pause-resume.test.ts",
-      "line": 144,
+      "line": 163,
       "title": ":pause on an already-paused run returns 409 with details.runStatus paused, unless the request carries the original Idempotency-Key",
       "explicitId": "openwop.it.pause-resume.pause-on-an-already-paused-run-returns-409-with-details-runstatus-paused-unless",
       "citations": [
@@ -19408,7 +19483,7 @@
     {
       "id": "openwop.it.pause-resume.pause-on-a-completed-cancelled-failed-run-must-return-409",
       "file": "pause-resume.test.ts",
-      "line": 205,
+      "line": 224,
       "title": ":pause on a completed/cancelled/failed run MUST return 409",
       "explicitId": "openwop.it.pause-resume.pause-on-a-completed-cancelled-failed-run-must-return-409",
       "citations": [
@@ -19421,7 +19496,7 @@
     {
       "id": "openwop.it.pause-resume.under-drain-current-node-node-completed-precedes-run-paused-in-the-log",
       "file": "pause-resume.test.ts",
-      "line": 229,
+      "line": 248,
       "title": "under drain-current-node node.completed precedes run.paused in the log",
       "explicitId": "openwop.it.pause-resume.under-drain-current-node-node-completed-precedes-run-paused-in-the-log",
       "citations": [
@@ -19439,7 +19514,7 @@
     {
       "id": "openwop.it.pause-resume.pause-must-not-silently-override-an-active-interrupt-suspend",
       "file": "pause-resume.test.ts",
-      "line": 268,
+      "line": 287,
       "title": ":pause MUST NOT silently override an active interrupt suspend",
       "explicitId": "openwop.it.pause-resume.pause-must-not-silently-override-an-active-interrupt-suspend",
       "citations": [
@@ -19456,7 +19531,7 @@
     {
       "id": "openwop.it.pause-resume.every-drainpolicy-advertised-by-the-host-is-accepted-on-pause",
       "file": "pause-resume.test.ts",
-      "line": 324,
+      "line": 343,
       "title": "every drainPolicy advertised by the host is accepted on :pause",
       "explicitId": "openwop.it.pause-resume.every-drainpolicy-advertised-by-the-host-is-accepted-on-pause",
       "citations": [
@@ -20771,17 +20846,21 @@
     {
       "id": "openwop.it.prompt-read-workspace-membership-enforced.get-v1-prompts-workspaceid-non-member-must-refuse-or-return-empty-templates-neve",
       "file": "prompt-read-workspace-membership-enforced.test.ts",
-      "line": 101,
+      "line": 102,
       "title": "GET /v1/prompts?workspaceId=<non-member> MUST refuse OR return empty templates[] — never another workspace's content",
       "explicitId": "openwop.it.prompt-read-workspace-membership-enforced.get-v1-prompts-workspaceid-non-member-must-refuse-or-return-empty-templates-neve",
       "citations": [
         {
-          "section": "spec/v1/rest-endpoints.md §Common error codes — workspace_membership_required",
+          "section": "spec/v1/prompts.md §Workspace membership on workspace-scoped reads and writes",
           "requirement": null,
           "interpolated": true
         },
         {
           "section": "spec/v1/prompts.md §Workspace membership on workspace-scoped reads and writes",
+          "requirement": "a workspace-scoped read for a non-member workspace MUST be refused (4xx) or return no templates"
+        },
+        {
+          "section": "spec/v1/rest-endpoints.md §Common error codes — workspace_membership_required",
           "requirement": null,
           "interpolated": true
         }
@@ -21987,7 +22066,7 @@
     {
       "id": "openwop.it.redaction.aiproviders-is-well-formed-when-present-byok-supported",
       "file": "redaction.test.ts",
-      "line": 117,
+      "line": 119,
       "title": "aiProviders is well-formed when present (byok ⊆ supported)",
       "explicitId": "openwop.it.redaction.aiproviders-is-well-formed-when-present-byok-supported",
       "citations": [
@@ -22001,7 +22080,7 @@
     {
       "id": "openwop.it.redaction.canary-s-planted-in-authorization-header-is-not-echoed-in-401-body",
       "file": "redaction.test.ts",
-      "line": 148,
+      "line": 150,
       "title": "canary \"%s\" planted in Authorization header is not echoed in 401 body",
       "explicitId": null,
       "citations": []
@@ -22009,7 +22088,7 @@
     {
       "id": "openwop.it.redaction.the-marker-substring-alone-never-appears-in-a-401-body-universal",
       "file": "redaction.test.ts",
-      "line": 172,
+      "line": 174,
       "title": "the marker substring alone never appears in a 401 body (universal)",
       "explicitId": "openwop.it.redaction.the-marker-substring-alone-never-appears-in-a-401-body-universal",
       "citations": [
@@ -22022,7 +22101,7 @@
     {
       "id": "openwop.it.redaction.skips-when-host-does-not-advertise-secrets-supported",
       "file": "redaction.test.ts",
-      "line": 189,
+      "line": 191,
       "title": "skips when host does NOT advertise secrets.supported",
       "explicitId": "openwop.it.redaction.skips-when-host-does-not-advertise-secrets-supported",
       "citations": [
@@ -22056,7 +22135,7 @@
     {
       "id": "openwop.it.redactionAdversarial.jwt-shaped-canary-in-workflowid-of-a-404-failing-request-must-not-echo-verbatim",
       "file": "redactionAdversarial.test.ts",
-      "line": 97,
+      "line": 98,
       "title": "JWT-shaped canary in workflowId of a 404-failing request MUST NOT echo verbatim in error response",
       "explicitId": "openwop.it.redactionAdversarial.jwt-shaped-canary-in-workflowid-of-a-404-failing-request-must-not-echo-verbatim",
       "citations": [
@@ -22073,7 +22152,7 @@
     {
       "id": "openwop.it.redactionAdversarial.anthropic-shaped-canary-embedded-in-non-credential-input-must-not-appear-verbati",
       "file": "redactionAdversarial.test.ts",
-      "line": 123,
+      "line": 124,
       "title": "Anthropic-shaped canary embedded in non-credential input MUST NOT appear verbatim in events",
       "explicitId": "openwop.it.redactionAdversarial.anthropic-shaped-canary-embedded-in-non-credential-input-must-not-appear-verbati",
       "citations": [
@@ -22086,7 +22165,7 @@
     {
       "id": "openwop.it.redactionAdversarial.every-canary-in-canaries-has-the-marker-substring",
       "file": "redactionAdversarial.test.ts",
-      "line": 152,
+      "line": 153,
       "title": "every canary in CANARIES has the marker substring",
       "explicitId": "openwop.it.redactionAdversarial.every-canary-in-canaries-has-the-marker-substring",
       "citations": [
@@ -22239,7 +22318,7 @@
     {
       "id": "openwop.it.replay-divergence-at-refusal.phase-4-host-must-emit-replay-divergedatrefusal-fail-with-replay-diverged-at-ref~2",
       "file": "replay-divergence-at-refusal.test.ts",
-      "line": 320,
+      "line": 323,
       "title": "Phase 4 host MUST emit replay.divergedAtRefusal + fail with replay_diverged_at_refusal when original=refusal + replay=valid (symmetric case)",
       "explicitId": "openwop.it.replay-divergence-at-refusal.phase-4-host-must-emit-replay-divergedatrefusal-fail-with-replay-diverged-at-ref~2",
       "citations": [
@@ -22867,7 +22946,7 @@
     {
       "id": "openwop.it.replayDeterminism.branch-mode-does-not-need-to-produce-identical-event-sequences-negative-control",
       "file": "replayDeterminism.test.ts",
-      "line": 156,
+      "line": 161,
       "title": "branch mode does NOT need to produce identical event sequences (negative-control)",
       "explicitId": "openwop.it.replayDeterminism.branch-mode-does-not-need-to-produce-identical-event-sequences-negative-control",
       "citations": [
@@ -23521,7 +23600,7 @@
     {
       "id": "openwop.it.runner-ledger.files-that-finished-before-this-one-appear-in-the-ledger-file-with-an-assertion",
       "file": "runner-ledger.test.ts",
-      "line": 270,
+      "line": 274,
       "title": "files that finished before this one appear in the ledger file with an assertion count",
       "explicitId": "openwop.it.runner-ledger.files-that-finished-before-this-one-appear-in-the-ledger-file-with-an-assertion",
       "citations": [
@@ -23614,7 +23693,7 @@
     {
       "id": "openwop.it.runtime-capabilities.terminates-the-run-with-error-code-capability-not-provided",
       "file": "runtime-capabilities.test.ts",
-      "line": 92,
+      "line": 94,
       "title": "terminates the run with error.code = capability_not_provided",
       "explicitId": "openwop.it.runtime-capabilities.terminates-the-run-with-error-code-capability-not-provided",
       "citations": [
@@ -25729,7 +25808,7 @@
     {
       "id": "openwop.it.tool-catalog-projection.advisory-should-an-unchanged-catalog-reads-identically-sorted-by-toolid",
       "file": "tool-catalog-projection.test.ts",
-      "line": 164,
+      "line": 167,
       "title": "advisory (SHOULD): an unchanged catalog reads identically, sorted by toolId",
       "explicitId": "openwop.it.tool-catalog-projection.advisory-should-an-unchanged-catalog-reads-identically-sorted-by-toolid",
       "citations": [
@@ -27581,6 +27660,20 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.v2-a2ui-v09-surface.a-version-2-surface-is-admitted-and-a-version-1-body-under-schema-version-2-is-r",
+      "file": "v2-a2ui-v09-surface.test.ts",
+      "line": 311,
+      "title": "a version-2 surface is admitted and a version-1 body under schema version 2 is refused, in the same run",
+      "explicitId": "openwop.family.a2uiSurface",
+      "citations": [
+        {
+          "section": "spec/v2/ext/a2uiSurface/README.md §Conformance",
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
     {
       "id": "openwop.it.v2-advertised-fixtures-exist.a-sampled-advertised-fixture-is-actually-creatable-not-just-listed",
       "file": "v2-advertised-fixtures-exist.test.ts",
@@ -28908,7 +29001,7 @@
     {
       "id": "openwop.it.v2-effect-identity-business-key.get-runs-runid-effects-validates-and-every-row-is-keyed-on-business-identity-or",
       "file": "v2-effect-identity-business-key.test.ts",
-      "line": 50,
+      "line": 59,
       "title": "GET /runs/{runId}/effects validates and every row is keyed on business identity or the activity recipe",
       "explicitId": "openwop.requirement.0173.effect-identity-business-key",
       "citations": [
@@ -28948,7 +29041,7 @@
     {
       "id": "openwop.it.v2-effect-identity-business-key.the-same-provider-key-is-presented-across-two-transport-retries",
       "file": "v2-effect-identity-business-key.test.ts",
-      "line": 108,
+      "line": 120,
       "title": "the same provider key is presented across two transport retries",
       "explicitId": "openwop.requirement.0173.effect-identity-business-key.retry",
       "citations": [
@@ -29109,7 +29202,7 @@
     {
       "id": "openwop.it.v2-era-2-append-vocabulary.a-host-append-to-an-open-era-2-run-keeps-the-log-in-v1-vocabulary-so-the-whole-l",
       "file": "v2-era-2-append-vocabulary.test.ts",
-      "line": 48,
+      "line": 50,
       "title": "a host append to an open era-2 run keeps the log in v1 vocabulary, so the whole log still reads",
       "explicitId": "openwop.requirement.0176.era-2-append-vocabulary",
       "citations": [
@@ -29128,6 +29221,11 @@
           "requirement": null,
           "interpolated": true
         },
+        {
+          "section": "spec/v2/core/persistence.md §The writer rule",
+          "requirement": null,
+          "interpolated": true
+        },
         {
           "section": "spec/v2/core/persistence.md §The writer rule",
           "requirement": null,
@@ -29138,7 +29236,7 @@
     {
       "id": "openwop.it.v2-era-2-append-vocabulary.the-run-keeps-the-era-it-was-created-with-an-append-does-not-promote-it-to-era-3",
       "file": "v2-era-2-append-vocabulary.test.ts",
-      "line": 174,
+      "line": 189,
       "title": "the run keeps the era it was created with; an append does not promote it to era 3",
       "explicitId": "openwop.requirement.0176.era-2-append-vocabulary",
       "citations": [
@@ -29308,6 +29406,176 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.v2-ext-family-claims.brand",
+      "file": "v2-ext-family-claims.test.ts",
+      "line": 51,
+      "title": "brand",
+      "explicitId": "openwop.family.brand",
+      "citations": [
+        {
+          "section": null,
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-ext-family-claims.canvas",
+      "file": "v2-ext-family-claims.test.ts",
+      "line": 52,
+      "title": "canvas",
+      "explicitId": "openwop.family.canvas",
+      "citations": [
+        {
+          "section": null,
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-ext-family-claims.chat",
+      "file": "v2-ext-family-claims.test.ts",
+      "line": 53,
+      "title": "chat",
+      "explicitId": "openwop.family.chat",
+      "citations": [
+        {
+          "section": null,
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-ext-family-claims.coordination",
+      "file": "v2-ext-family-claims.test.ts",
+      "line": 54,
+      "title": "coordination",
+      "explicitId": "openwop.family.coordination",
+      "citations": [
+        {
+          "section": null,
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-ext-family-claims.dataintegration",
+      "file": "v2-ext-family-claims.test.ts",
+      "line": 55,
+      "title": "dataIntegration",
+      "explicitId": "openwop.family.dataIntegration",
+      "citations": [
+        {
+          "section": null,
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-ext-family-claims.entities",
+      "file": "v2-ext-family-claims.test.ts",
+      "line": 56,
+      "title": "entities",
+      "explicitId": "openwop.family.entities",
+      "citations": [
+        {
+          "section": null,
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-ext-family-claims.kanban",
+      "file": "v2-ext-family-claims.test.ts",
+      "line": 57,
+      "title": "kanban",
+      "explicitId": "openwop.family.kanban",
+      "citations": [
+        {
+          "section": null,
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-ext-family-claims.knowledge",
+      "file": "v2-ext-family-claims.test.ts",
+      "line": 58,
+      "title": "knowledge",
+      "explicitId": "openwop.family.knowledge",
+      "citations": [
+        {
+          "section": null,
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-ext-family-claims.launchstudio",
+      "file": "v2-ext-family-claims.test.ts",
+      "line": 59,
+      "title": "launchStudio",
+      "explicitId": "openwop.family.launchStudio",
+      "citations": [
+        {
+          "section": null,
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-ext-family-claims.messaging",
+      "file": "v2-ext-family-claims.test.ts",
+      "line": 60,
+      "title": "messaging",
+      "explicitId": "openwop.family.messaging",
+      "citations": [
+        {
+          "section": null,
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-ext-family-claims.webresearch",
+      "file": "v2-ext-family-claims.test.ts",
+      "line": 61,
+      "title": "webResearch",
+      "explicitId": "openwop.family.webResearch",
+      "citations": [
+        {
+          "section": null,
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-ext-rest-transport.a-strong-etag-on-the-200-304-on-a-match-while-the-run-is-parked-and-a-new-etag-o",
+      "file": "v2-ext-rest-transport.test.ts",
+      "line": 75,
+      "title": "a strong ETag on the 200, 304 on a match while the run is parked, and a new ETag once it completes",
+      "explicitId": null,
+      "citations": []
+    },
+    {
+      "id": "openwop.it.v2-ext-rest-transport.each-coding-in-contentencodings-is-produced-when-asked-for-alone-and-decodes-to",
+      "file": "v2-ext-rest-transport.test.ts",
+      "line": 112,
+      "title": "each coding in contentEncodings is produced when asked for alone and decodes to the identity body",
+      "explicitId": null,
+      "citations": []
+    },
     {
       "id": "openwop.it.v2-fork-a-v1-run.the-fork-of-an-era-2-run-is-accepted-and-its-prefix-is-byte-equivalent-to-the-tr",
       "file": "v2-fork-a-v1-run.test.ts",
@@ -29567,7 +29835,7 @@
     {
       "id": "openwop.it.v2-idempotency-in-flight.while-the-seam-holds-the-claim-a-same-key-create-is-refused-409-idempotency-in-f",
       "file": "v2-idempotency-in-flight.test.ts",
-      "line": 154,
+      "line": 157,
       "title": "while the seam holds the claim, a same-key create is refused 409 idempotency_in_flight by the host and the held create still wins",
       "explicitId": "openwop.requirement.0213.in-flight-refused-under-hold",
       "citations": [
@@ -30014,7 +30282,7 @@
     {
       "id": "openwop.it.v2-legacy-profiles-absent.no-root-profiles-exists-in-the-v2-representation",
       "file": "v2-legacy-profiles-absent.test.ts",
-      "line": 70,
+      "line": 68,
       "title": "no root profiles[] exists in the v2 representation",
       "explicitId": "openwop.requirement.0175.legacy-profiles-absent.no-root-profiles",
       "citations": [
@@ -33402,7 +33670,7 @@
     {
       "id": "openwop.it.v2-version-header-honored.a-host-advertising-two-majors-serves-two-different-representations",
       "file": "v2-version-header-honored.test.ts",
-      "line": 185,
+      "line": 188,
       "title": "a host advertising two majors serves two different representations",
       "explicitId": "openwop.requirement.0172.version-header-honored",
       "citations": [
@@ -33571,7 +33839,7 @@
     {
       "id": "openwop.it.v2-webhook-durable-delivery.an-exhausted-delivery-is-dead-lettered-never-dropped",
       "file": "v2-webhook-durable-delivery.test.ts",
-      "line": 376,
+      "line": 378,
       "title": "an exhausted delivery is dead-lettered, never dropped",
       "explicitId": "openwop.requirement.0173.webhook-durable-delivery.dead-letter",
       "citations": [
@@ -33605,7 +33873,7 @@
     {
       "id": "openwop.it.v2-webhook-durable-delivery.the-dead-letter-read-is-served-and-its-records-carry-no-payload",
       "file": "v2-webhook-durable-delivery.test.ts",
-      "line": 478,
+      "line": 480,
       "title": "the dead-letter read is served and its records carry no payload",
       "explicitId": "openwop.requirement.0188.dead-letter-read",
       "citations": [
@@ -33618,7 +33886,7 @@
     {
       "id": "openwop.it.v2-webhook-durable-delivery.after-unregister-the-dead-letter-read-answers-404-not-found-as-for-a-subscriptio",
       "file": "v2-webhook-durable-delivery.test.ts",
-      "line": 499,
+      "line": 501,
       "title": "after unregister, the dead-letter read answers 404 not_found, as for a subscription that never existed",
       "explicitId": "openwop.requirement.0217.dead-letter-read-after-unregister",
       "citations": [
@@ -33645,7 +33913,7 @@
     {
       "id": "openwop.it.v2-webhook-durable-delivery.a-dead-letter-record-carries-no-delivered-payload",
       "file": "v2-webhook-durable-delivery.test.ts",
-      "line": 532,
+      "line": 534,
       "title": "a dead-letter record carries no delivered payload",
       "explicitId": "openwop.requirement.0188.dead-letter-content-free",
       "citations": [
@@ -34870,7 +35138,7 @@
     {
       "id": "openwop.it.webhook-signed-delivery.control-with-a-tunnel-wired-the-host-still-refuses-the-loopback-receiver",
       "file": "webhook-signed-delivery.test.ts",
-      "line": 440,
+      "line": 442,
       "title": "control: with a tunnel wired, the host still refuses the loopback receiver",
       "explicitId": "openwop.it.webhook-signed-delivery.control-with-a-tunnel-wired-the-host-still-refuses-the-loopback-receiver",
       "citations": [
@@ -35443,7 +35711,7 @@
     {
       "id": "openwop.it.workflow-chain-host-expansion.positive-2-node-chain-matches-the-reference-library-edge-rewrite-capability-prop",
       "file": "workflow-chain-host-expansion.test.ts",
-      "line": 205,
+      "line": 208,
       "title": "positive — 2-node chain matches the reference library (edge rewrite + capability propagation)",
       "explicitId": "openwop.it.workflow-chain-host-expansion.positive-2-node-chain-matches-the-reference-library-edge-rewrite-capability-prop",
       "citations": [
@@ -35460,7 +35728,7 @@
     {
       "id": "openwop.it.workflow-chain-host-expansion.negative-unknown-pack-returns-404-pack-not-found",
       "file": "workflow-chain-host-expansion.test.ts",
-      "line": 237,
+      "line": 240,
       "title": "negative — unknown pack returns 404 pack_not_found",
       "explicitId": "openwop.it.workflow-chain-host-expansion.negative-unknown-pack-returns-404-pack-not-found",
       "citations": [
@@ -35473,7 +35741,7 @@
     {
       "id": "openwop.it.workflow-chain-host-expansion.negative-known-pack-but-unknown-chainid-returns-404-chain-not-found",
       "file": "workflow-chain-host-expansion.test.ts",
-      "line": 249,
+      "line": 252,
       "title": "negative — known pack but unknown chainId returns 404 chain_not_found",
       "explicitId": "openwop.it.workflow-chain-host-expansion.negative-known-pack-but-unknown-chainid-returns-404-chain-not-found",
       "citations": [
@@ -35486,7 +35754,7 @@
     {
       "id": "openwop.it.workflow-chain-host-expansion.negative-malformed-request-body-returns-422-invalid-request",
       "file": "workflow-chain-host-expansion.test.ts",
-      "line": 261,
+      "line": 264,
       "title": "negative — malformed request body returns 422 invalid_request",
       "explicitId": "openwop.it.workflow-chain-host-expansion.negative-malformed-request-body-returns-422-invalid-request",
       "citations": [
@@ -35499,7 +35767,7 @@
     {
       "id": "openwop.it.workflow-chain-host-expansion.rfc-0157-a-compensating-chain-expands-through-the-live-path-with-compensation-an",
       "file": "workflow-chain-host-expansion.test.ts",
-      "line": 269,
+      "line": 272,
       "title": "RFC 0157 — a compensating chain expands through the live path with `compensation` and `irreversibleEffect` carried verbatim onto the expanded nodes",
       "explicitId": "openwop.it.workflow-chain-host-expansion.rfc-0157-a-compensating-chain-expands-through-the-live-path-with-compensation-an",
       "citations": [
@@ -35527,7 +35795,7 @@
     {
       "id": "openwop.it.workflow-chain-host-expansion.rfc-0157-a-chain-carrying-an-unwind-policy-is-refused-with-capability-required-o",
       "file": "workflow-chain-host-expansion.test.ts",
-      "line": 308,
+      "line": 311,
       "title": "RFC 0157 — a chain carrying an unwind POLICY is refused with capability_required on a host that does not advertise compensation, and expands on one that does",
       "explicitId": "openwop.it.workflow-chain-host-expansion.rfc-0157-a-chain-carrying-an-unwind-policy-is-refused-with-capability-required-o",
       "citations": [
@@ -36127,7 +36395,7 @@
     {
       "id": "openwop.it.workload-identity-chain-bounds.a-later-hop-claiming-a-scope-the-previous-hop-did-not-hold-is-refused",
       "file": "workload-identity-chain-bounds.test.ts",
-      "line": 121,
+      "line": 124,
       "title": "a later hop claiming a scope the previous hop did not hold is refused",
       "explicitId": null,
       "citations": []
@@ -36135,7 +36403,7 @@
     {
       "id": "openwop.it.workload-identity-chain-bounds.a-well-formed-bounded-acyclic-non-amplifying-chain-still-resolves-the-negatives",
       "file": "workload-identity-chain-bounds.test.ts",
-      "line": 130,
+      "line": 133,
       "title": "a well-formed bounded, acyclic, non-amplifying chain still resolves (the negatives are not a blanket refusal)",
       "explicitId": "openwop.it.workload-identity-chain-bounds.a-well-formed-bounded-acyclic-non-amplifying-chain-still-resolves-the-negatives",
       "citations": [