@openwop/openwop-conformance 2.42.6 → 2.42.8

package/scenario-majors.json

@@ -1,9 +1,9 @@
 {
   "$comment": "GENERATED by conformance/scripts/generate-scenario-majors.mjs (RFC 0168 §D.3). Do not edit; add a file to BOTH_MAJORS in the generator to target both majors.",
   "counts": {
-    "files": 561,
-    "v1": 449,
-    "v2": 123
+    "files": 567,
+    "v1": 451,
+    "v2": 128
   },
   "majors": {
     "a2a-1-0-agent-card.test.ts": [
@@ -249,6 +249,13 @@
     "artifact-type-store-without-render.test.ts": [
       1
     ],
+    "audit-checkpoint-signature.test.ts": [
+      1
+    ],
+    "audit-checkpoint-vectors.test.ts": [
+      1,
+      2
+    ],
     "audit-log-integrity.test.ts": [
       1
     ],
@@ -1310,6 +1317,9 @@
     "v2-chain-pin-exact.test.ts": [
       2
     ],
+    "v2-client-version-header.test.ts": [
+      2
+    ],
     "v2-coherence-not-in-bundle.test.ts": [
       2
     ],
@@ -1364,6 +1374,12 @@
     "v2-event-type-closed.test.ts": [
       2
     ],
+    "v2-ext-family-claims.test.ts": [
+      2
+    ],
+    "v2-ext-rest-transport.test.ts": [
+      2
+    ],
     "v2-fork-a-v1-run.test.ts": [
       2
     ],
@@ -1574,6 +1590,9 @@
     "v2-webhook-endpoint-verification.test.ts": [
       2
     ],
+    "v2-webhook-generated-secret.test.ts": [
+      2
+    ],
     "v2-webhook-message-id-stable.test.ts": [
       2
     ],

package/schemas/CORPUS-STAMP.json

@@ -1,17 +1,17 @@
 {
   "_comment": "Provenance of @openwop/spec-artifacts (RFC 0168 §D.2). files: SHA-256 per file; the conformance suite compares the installed peer against dist/spec-artifacts.lock.json at start.",
   "package": "@openwop/spec-artifacts",
-  "version": "2.42.6",
-  "corpusTag": "v2.42.6",
+  "version": "2.42.8",
+  "corpusTag": "v2.42.8",
   "files": {
     "api/.redocly.lint-ignore.yaml": "bf5a8350b88a72fa43f59605ed8d903ed24b6cfccda5e45509c9f6ed9ee4e712",
     "api/asyncapi.yaml": "d5ecb9ee6114582be3b1f662c84bfac9ae96dae7bacb853e461168f70a8e1c7d",
     "api/grpc/openwop.proto": "c3e72bb17cba514ee98feb6434e6c9b6ea6795bfd086489ec69fd882dd1ad977",
     "api/openapi.yaml": "69464bc0e1e71ef3b543a73d4fa4f67202343d2603c80af8033f6c3619ef1b30",
     "api/redocly.yaml": "b0604c89b2ca6d5076ec25725c539dad44a741a811fe524439ee6daef8baa09f",
-    "api/seams-v2.yaml": "c188943dbb662ddb1d8ed26759c1daa560f63617fedd2a116b8abcc41c2f42de",
-    "api/v2/asyncapi.yaml": "94b9174faeccabea8f2d29fe3e80da7d16037b497ea02f91e61e512ff8ea8d62",
-    "api/v2/openapi.yaml": "5f2bcb438b77c250e0732f1808690bb710941a7c7ee5150a27e66537dee9fcb8",
+    "api/seams-v2.yaml": "deda53b9f8917a1dc4b283e50cb47985c0fd06525c96fdf853c2fdb1a2de5cb8",
+    "api/v2/asyncapi.yaml": "a35292b35d003361a9a0a7997557e022641cd869a6aefcd31ab266d0c3fea215",
+    "api/v2/openapi.yaml": "8381ff1d3cca7c0610a5f5a885763a625630c8b36bb5c5f6cd1d3f3cceb176a7",
     "api/v2/redocly.yaml": "1e66b60e6118ad11a823bb620678be464d99dfe50a40e3e6f93ec9429b88b34c",
     "schemas/README.md": "0c0b737ffcf8f30e7d2809cec8a498232de710f41443212922ad8337cdde0b51",
     "schemas/a2a-task-state.schema.json": "75d5049dea8bd873ff0e7546f1c60c8d36c219bec7084264360be54a8be30ae1",
@@ -29,7 +29,7 @@
     "schemas/annotation-create.schema.json": "567e8327777968e0ddab8e1547b4acd7beda734cf9d1fc6cde17037d8d9540d4",
     "schemas/annotation.schema.json": "b26d22f9a97e1ae7c195e8799964aca804e78452a079ca3a0d61ea013907ce91",
     "schemas/artifact-type-pack-manifest.schema.json": "60342fcb15eb7f3ab46271f0641409a30d3a4a8f318b1020c53070886b191252",
-    "schemas/audit-verify-result.schema.json": "e8fd013fb610ba5db27ab0113ec2eb18e7da5f9310dd3de2dd3dc87a259c21fe",
+    "schemas/audit-verify-result.schema.json": "de9cc3b9d7b97995b906dc96438244ea6b93c26b5faaf4926320676b48ba4fcc",
     "schemas/budget-policy.schema.json": "3d4fe30ae129fe136ab9ece395f2a2a42a76360786b1b9a1d5f1cbc753eb5b39",
     "schemas/capabilities.schema.json": "56b367074bce0f02ff87e0b84ccdf91856793d3d285e28f261656edba6352cc0",
     "schemas/certification-bundle-v2.schema.json": "2f85530dd04824a15810c94e96869362dee1e78396eca21fdd18e5501416bb7d",
@@ -114,9 +114,9 @@
     "schemas/v2/annotation.schema.json": "eb4813cdaa8e325412cfcaeeee5c8a28f3751c946dec64e546c7ba0ad3aad8d4",
     "schemas/v2/artifact-type-pack-manifest.schema.json": "c8820351a2ab93855bd654ad3d8a9788f97975d09b3a7a0418e374ed6114595d",
     "schemas/v2/artifact.schema.json": "85b9dc284d39b99d2a66fa8cbf47f2dd3d8526d3bd6cc411ad315b372de38975",
-    "schemas/v2/audit-verify-result.schema.json": "a748dfadb5155adfde8a91045e76b0db6695005fe559035d71670fdd55edb3ba",
+    "schemas/v2/audit-verify-result.schema.json": "2a4bfc42976717f78c10468fdba756ca6b19e49762699e6dffd418ffff08e55d",
     "schemas/v2/budget-policy.schema.json": "c7449daeb6e1d95e7a047b8c2814d3d54748697c27046972834874867d9b5f4c",
-    "schemas/v2/capabilities.schema.json": "740944d7f0a00c91308449f3a3f52fa7b91b16b8fd36a0171b917afe9f4b0f09",
+    "schemas/v2/capabilities.schema.json": "959b7a1b8e40aeafb8b9702bd0e4b220c0beb02a6afa3ca64fe9b04b95ae3df5",
     "schemas/v2/certification-bundle.schema.json": "82ce31a1ed6c7e21b0ba88ff62a7b8b768fc3b176b1d06fce023203830b94725",
     "schemas/v2/channel-presence-payload.schema.json": "4eeb224910e6f7eee3ab5e7c3899559c25c83a26d0022e0ad195c4672611977a",
     "schemas/v2/channel-written-payload.schema.json": "ccecff3c71a3275ad8db035ac0e04db25e6f8d23cf091ddbcd5a60d1be1cbb6b",
@@ -142,7 +142,7 @@
     "schemas/v2/envelopes/schema.request.schema.json": "be2c5f7aa881cdd252ccff47ac02193659e1393633a1541f4297383205d384a2",
     "schemas/v2/envelopes/schema.response.schema.json": "d049a081267c06c28879c331b147f3ed821b14ccfd93005c67aff64db0a8c68e",
     "schemas/v2/envelopes/ui.a2ui-surface.schema.json": "e92a2548ba65454c9e0a34f72ea6768d18f59e61fa5da7668d0b2d5baddaddc8",
-    "schemas/v2/error-envelope.schema.json": "b812a33626efd68d492269ff4a713e5a91a59d7071eb2470db99757f260e5d47",
+    "schemas/v2/error-envelope.schema.json": "467d7109c54bff71a6cfd457d3bd65a23ca34b8e5577e742d080692771a78ebf",
     "schemas/v2/eval-summary.schema.json": "2f384daf05b8f3b4f604688cae504d6d9971ba41b8c771e55fe9a17e09e86b7a",
     "schemas/v2/export-bundle.schema.json": "bd28905a7729437ab7f2ad8bb33e13a371b2bf5605a7eb2962a0d246de312d69",
     "schemas/v2/form-content-pack-manifest.schema.json": "a1942a124e250a6e9fbdb6b811c5a125e78fbcbcaa46dfc71d0636f24710a339",
@@ -202,72 +202,75 @@
     "schemas/workload-identity.schema.json": "64ed93e12cc9f0657e56ff9b8f045e5d68d397df5276d103c07f42c7f34f0579",
     "schemas/workspace-file-create.schema.json": "70a23b92c2958c0165d7d29aea9020a045dc7816af82c80c5f50d0aac19c4856",
     "schemas/workspace-file.schema.json": "464de85c2a068243084ee9c1d969bc7cd5d8f7948574e58450d6493c38a0e1e4",
-    "spec/v1/alias-detectors.json": "2401fcb1c18cdd688c018b3d716ae6bca85c5e356220ee2b793bd9d81872412d",
+    "spec/v1/alias-detectors.json": "29f21e0fb2c7a232a92a5c19b4cba3a86bc3b5e16f06780452f0421c66c6ec38",
     "spec/v1/capability-declaration-classes.json": "e7729aed5c4b4e1dd02abab0530f14cc95f5d4070fe51fb139e7f5cccefa00c6",
-    "spec/v1/core-standard-manifest.json": "844a89d3bba9b850d8ae949dc7f0b0ecade689c748263d6c7360e2fe7fb7cf8f",
-    "spec/v1/deprecations.json": "2d03f4729810280147ea08c630ea65434f2dc5370567d0aac41c3595f8337d40",
+    "spec/v1/core-standard-manifest.json": "1359a69ad091b8bd3fb8fb7b641b32496d0d7a70d40cb0d1b93c6f171566276e",
+    "spec/v1/deprecations.json": "46df807fb4adf0aae24671c20f69975cf3496e3bc3a521cb7e6ea556bdce563c",
     "spec/v1/deprecations.schema.json": "3e393c405d2a41b467d8c5e3c468549078df1ce6a6d2588fc488097b95d9b55b",
     "spec/v1/event-codemap.json": "3da60d884157793a360da532a9fcbbfb5285636db325a74cec94b34622186d97",
     "spec/v1/event-codemap.schema.json": "d05933b2e88103aff51a2f774df97b9bda065e0fc88dbd9b114cc47a32189174",
     "spec/v1/extensions.json": "79a60754aa16cbdbdb604f8e5c00038af535a1690a4d07bd5ff7c38f0256a7bc",
-    "spec/v1/gaps.json": "361fb29a27dc933c2462a64f32a5a6a6ecf8e6d9fb46039550cb5cfa2eb0ab13",
+    "spec/v1/gaps.json": "2b032d91d614a758db347be4f5e617b8ac3c4622b6f95ffcfa928276c0fb7377",
     "spec/v1/gaps.schema.json": "8fd83259f556553c9df0f53e7a82ca8c2a4771d471197f69b4e2ae0ceeacfd66",
-    "spec/v1/migrations.json": "8839497d6a4830b53fa7867014a8336f0d725ef2346352e54fb580b7947897af",
+    "spec/v1/migrations.json": "2efcd9064b2bc65a84a3b3d281aa86a91efd002690c1f4f14e8335c4a18194d1",
     "spec/v1/migrations.schema.json": "886779aa6c22e646db097f5df210adb018a4dd14a7b815465a18c8a7056c8f72",
     "spec/v1/operation-path-manifest.json": "fada0342815fb129c1ae61f1829bd6e34417717408ce86fcc54280f373c19e74",
     "spec/v1/spec-gaps.json": "ea9612af55bea9dae3e82223d4f714243f8f590b0193f1188257b13491a38afc",
-    "spec/v2/README.md": "ccfed7d978ce7293a6d8f3c0f6045835dfb7e488f2b67a68f6b04d67c4b0cfc9",
-    "spec/v2/core/capabilities.md": "e22381fed3a93376ad478fa7f07571fdad9653aefd7c05f189a2ef45a49f6c63",
-    "spec/v2/core/conformance.md": "e4d3b34ef5b7c6a34675ed59a086143e8bfd0e00d0d04ce0f2a2ec6245275084",
-    "spec/v2/core/connection-packs.md": "7257339a4fc125011bf89961588c949cb058a0c0f7d9808ad08a5288deb3f8fc",
-    "spec/v2/core/conversation.md": "c9a937e410fdb4e092cec2f05a7cab8b5232745090cfb20041c03c70ccbb5cdc",
-    "spec/v2/core/errors.md": "870f1a9c9481fb49c8bd39170f0656c2ae46124afd4472fb7a3c18c67be0e561",
-    "spec/v2/core/events.md": "3df1866a89fb765c78adf79b8d51f96c59584dee9aa88d59179b88a681d827da",
-    "spec/v2/core/form-content-packs.md": "55ea021b5f676f5851f420b3597262fbf6642108bddeb726922f8c5dd96c968b",
-    "spec/v2/core/headers.md": "10ec6a6c3e0437b1501cb224273e86c2f6aede92fd469605f3353904d3ebd230",
-    "spec/v2/core/host-services.md": "c3ff93201d642edf835e9ae84f06a17edd207f9d351f8bfd70572be05bbfd894",
-    "spec/v2/core/idempotency.md": "b61d4a200526485937897dd7ebca092e68424a80624e0be7a0b7db8cdbd54403",
-    "spec/v2/core/identity.md": "d15667552019f64316be9b65c6e5696c10766581405f05da3907fb47f36e6459",
-    "spec/v2/core/interop.md": "9a6b37e07c0235856199ace6b3a84f592fa5903fcf6c442f8a18f4d6b6aa5525",
-    "spec/v2/core/interrupt.md": "1dc94f7c791dd5a547b1abafde6a8a76acd3d2993d288057f302f57911dc83bf",
-    "spec/v2/core/node-pack-runtimes.md": "b6de99daf90a72f08ce0e311e63988198964f99346591e466529d9e95dc4b6d9",
-    "spec/v2/core/oauth.md": "38ec0e70d46f328430138559095f261ae4fcd3d32c2d994a2d3e630a062c0e6c",
-    "spec/v2/core/overview.md": "8f9d4a68b6185664e40d226cb82d9a9270a6c6630e3db59bddff300be781947d",
-    "spec/v2/core/packs.md": "91cd577b4a636c1587ef78742e583a203244b8508b289b01a18a8ef2ef0a9b3e",
-    "spec/v2/core/persistence.md": "d32736bd74e51df7c552565b4105a8ec801ece6d2292c8676421368ee9bffec1",
-    "spec/v2/core/replay.md": "7c11e0dad22d367b94630e00b435ed8f33d0ab76d36adc65e150212d770ad685",
-    "spec/v2/core/runs.md": "c7dcc5116648f42cadecdcd4c949b194272908cbc4b1fbc7321956d5b3a713af",
-    "spec/v2/core/security-defaults.md": "500471a8db7af9b776ac40b4a9a278c9f3d45e1c1dead880114e7fadc7bee37d",
-    "spec/v2/core/tool-catalog.md": "35f1a3fd509db0fc0490ddf400686fe94dc4b20c98064d5ebe776da516153e60",
-    "spec/v2/core/versioning.md": "0aded71d090c8358c3ce17763c120cfc1cc42531a5eaa1b8a2a7016ed9594069",
-    "spec/v2/core/webhooks.md": "78d7e237866bf1ee95bbfa9d5b62b619ca2f8ec677d1b752ba96ed5efcfc77ef",
-    "spec/v2/core/workflow-chain-packs.md": "ee45d3fede3bb6f0cc6abcf0d6c929c7cd213a0fbe862b738a998f929c4d1102",
-    "spec/v2/corrections.json": "cc74ffde74384b0f261a4f625871d922e8661d654d647a8534e21036595cb280",
-    "spec/v2/corrections.schema.json": "4ac595b9a6d7f66d53de03fe0edbe0dc58de46426932387bfdc0ceb3cf949a3e",
-    "spec/v2/declaration.json": "84bd247804e625b0a5d66f2011726626e8a9b21e55c479cc9ba239e6b5c358a6",
-    "spec/v2/declaration.schema.json": "881c08b455aa12c41a0a0ec43a960ab78b75ff1302188f7eaaa43074ed4cff7a",
-    "spec/v2/errors.json": "1064999c8a00f44ab99ce24995fe9a93e6d2d5778e5eacb6621de0d0af1eb37f",
+    "spec/v2/README.md": "4fa067d377580495e60baf08a4eafc3214b8ca48d8fb270bf91fc5066fad7186",
+    "spec/v2/core/capabilities.md": "225269a257421ebe677070dd13b05f6f297a2a343916e440b7428b839e2da9a4",
+    "spec/v2/core/conformance.md": "e7bd7d54062f28801071165a1b92edbeee3774bb3710f31eed75817139b66d95",
+    "spec/v2/core/connection-packs.md": "3168d2c8f1a59417a7256a678f4203570be434f64dead6b11fdec86b352686df",
+    "spec/v2/core/conversation.md": "6db43d8160bc45d3944aa1151816a6f0fd1669d59d7f822267a2d6cc9db22990",
+    "spec/v2/core/errors.md": "d14649ee60f8260ec163464163409ad7f50cb86fee7b846e0190f66070b3774b",
+    "spec/v2/core/events.md": "234338deb97be648731e8ab2126a90b7b8ad0a7070d98ffc85ee4689ff059791",
+    "spec/v2/core/form-content-packs.md": "41d40afe0a3760bcd792a4c406e16f28b0ab0aa7b0925323110d3fa2730d5400",
+    "spec/v2/core/headers.md": "5cb1624fa63acc81992b6a6d842ec392cf7271aaf2f65d1f83c8c4fa286e6730",
+    "spec/v2/core/host-services.md": "15923cceb95cba148a32e0944f6a2d1d25e9cc36b0c169b67ee42d483bcac800",
+    "spec/v2/core/i18n.md": "846c6d2878fc8454c2ae0a1576f6b6e6c8958d47187a6c96cc5826ca3c3e2e91",
+    "spec/v2/core/idempotency.md": "21830b7d23dd03e9e8ba4b0de253dd001fc960f166310d6b6b60b1c33cf60b30",
+    "spec/v2/core/identity.md": "acb7f739729c69a1f40dcaa5b1d873ba9f32993c17bfd297f5fa56351cf47c69",
+    "spec/v2/core/interop.md": "3cfa2af70ae6ba1f4b4268447d46d1d2f5fb65f7917f15bad159d9779d25b1a6",
+    "spec/v2/core/interrupt.md": "b31b3f3be7888043ef38c82367a8d743a775c2b6bd499f7da44355ff00452435",
+    "spec/v2/core/node-pack-runtimes.md": "d52966319c53aaa03575025915b73b470a42832c039c41d73aff6931758630cb",
+    "spec/v2/core/oauth.md": "57f167d899993b6959c243e4102819f4014b365299b9b2b253decd2781e6b8b7",
+    "spec/v2/core/overview.md": "3dbc8c0cf7474b31816b1a12412c1edf5597066c38edcdbca4dd2e465880f65b",
+    "spec/v2/core/packs.md": "26b0fc3b81f98adbdf70796482db89fa81a6ce3da6f830cd5e8b3d71541c497f",
+    "spec/v2/core/persistence.md": "bba672ed3bf6d83af6e4e65c0f4f480fc21fe12207811e321306af2108d9010d",
+    "spec/v2/core/portability.md": "a35fbe66b8b5ccf63cf0216157d4b61d4c47f6dc8e757c830569ddf244e21e8a",
+    "spec/v2/core/replay.md": "a5be4e05242f25f8b5a8a4fb31bd359d5abb4bf34fa8e536403a8ee5779ab876",
+    "spec/v2/core/runs.md": "72a94c27d884036d84290e9b108702e98b0c6b2fb598213bbda44fba9c9f860d",
+    "spec/v2/core/security-defaults.md": "179fdd2efcc1454453243f8ab6473335dfd4389e70cbbc2669f5b83714092973",
+    "spec/v2/core/tool-catalog.md": "6b54b8ce221107de19c718f374a720123c6a5f55db4054e6625f73d06e0a442f",
+    "spec/v2/core/versioning.md": "2bfe16a72a909c46b4585fab39dc9e94c97506ed95df6b1b527f97b4cd3684ef",
+    "spec/v2/core/webhooks.md": "78fe97ab5bdee20218183efe32abf5ba1996705d757cb37c8d6a4d808c44199f",
+    "spec/v2/core/workflow-chain-packs.md": "35a957f1dd22016febd76bf2c4dfb79cda58b95d8efd8893b5e5babda9f79cf3",
+    "spec/v2/corrections.json": "b19f8a80fce7e6473012a20a216e358dd38ae7411e6a348f8031e325ed1a0a01",
+    "spec/v2/corrections.schema.json": "46bbffb954d13bd9995aebc912ceeb2544f7064331abf25fd6ab85c81a5cec94",
+    "spec/v2/declaration.json": "1253a5590ec2d9ba511d15e8a9d9da5e6926c4daa981a26b73b29bc915477013",
+    "spec/v2/declaration.schema.json": "ef951633e4070899f64828f5cf1b5f4870270a0360f81dbb49b5b4d6cd407550",
+    "spec/v2/errors.json": "b89664e9e0e7603253712263ce0843ce607e276c67d0acaf4a680c39bb2bd682",
+    "spec/v2/errors.schema.json": "47404ad53e6147cf9017b813483712466573e419fb33e6c4b6c12d3e7deba1bc",
     "spec/v2/event-codemap.json": "37869a03cdfd8758b57e6f350641a6ebbd383231cebda51f5473ad85f94ab74c",
     "spec/v2/event-codemap.schema.json": "b173f2a9bcc0bf9b62a474ce3b91e1431d597e64fd1560fc58662cd8606eaf9c",
-    "spec/v2/ext/README.md": "ff91a503e0795e1b898e37d9e445add2d5975529723f7b32b2599b60a24c1ae3",
-    "spec/v2/ext/a2uiSurface/README.md": "a3a8d49a3a33017657833712fce3e260f56307afde3aae2e97477a754560b021",
-    "spec/v2/ext/brand/README.md": "4eca8c070971f249d2191a31370d8e4f383d6a5399dafd7ba1831ae834c4e693",
-    "spec/v2/ext/canvas/README.md": "cdc1941d1425b53a5b10aa9fc01aacc4e55d0418f4690b2178e1682389d0a985",
-    "spec/v2/ext/chat/README.md": "4b64ddd875ef44794c8c4e2adfec9e409818b35ee7d16841f575a6022c97c11c",
-    "spec/v2/ext/coordination/README.md": "76c280ca561da9d827a56701868ee7a3064946c1931179d62160e196bd215526",
-    "spec/v2/ext/dataIntegration/README.md": "4566585d86d67ed2be30c21bb48e34b1a159588dceec831188eacea50896e677",
-    "spec/v2/ext/entities/README.md": "fcdd4929461d394755d5dcbe6de3af74599abcf68ca29700debbf86f0d76b83c",
-    "spec/v2/ext/grpc-transport/README.md": "727a097a8e17f647e566d96c3e178b676acdba0c7a8d592b5c074799bc3782e1",
-    "spec/v2/ext/kanban/README.md": "6920ef8c302ee30c09cdc5fe6a705ccc0cc10724227f7e2617c13734bee3595b",
-    "spec/v2/ext/knowledge/README.md": "50d5d50a72f5cdd90692fba69c3b2e5674f931dcbf5efabb56b78ed66da00892",
-    "spec/v2/ext/launchStudio/README.md": "8085ffff8bee039b04f215752e04a5730f7fc0324528721f097cfeaf4dd1b52a",
-    "spec/v2/ext/messaging/README.md": "4db10394153e9639ff639f2a39951e69737ed02084a45b99d7ee9883052303b9",
-    "spec/v2/ext/portability/README.md": "c1a36eaf4016cc526bde6536fcb280eca34916504834610a3fb5ac87cafed3fa",
-    "spec/v2/ext/provider-idempotency/README.md": "590fa380be4719b949570306d5395fc5ac131e8e4c118f7866fe6ad2a5d88129",
+    "spec/v2/ext/README.md": "e2731ebb5156ece1840ed3b96e7a347f6345e73071ff4e54df0f21c1585c5027",
+    "spec/v2/ext/a2uiSurface/README.md": "5518c7f355262eb7cc584422f4ff8e548f066b211878f969274a3a578127622d",
+    "spec/v2/ext/brand/README.md": "52b31ddb8e86820afc8fb1afd29fddf7940dc00454f60ba0dbada718a9b63157",
+    "spec/v2/ext/canvas/README.md": "0e91b68566d2be90319feedfaebe2cd2db0bd8f72fb59c958fa723c05e38023f",
+    "spec/v2/ext/chat/README.md": "a934ad42134a58968a1ccc03d7fe317fc8b8b14bf847d97bfe7773086c3d22b7",
+    "spec/v2/ext/coordination/README.md": "9c3513aab388afbe3ab95db60ef15e9c9d4a7a0cd7d3e92b567136235a7183d2",
+    "spec/v2/ext/dataIntegration/README.md": "88be31dcabacdd4e012b8c0795d9a3d82bc2cc62b67de4c05ccdd5d9afed9166",
+    "spec/v2/ext/entities/README.md": "78096383811fefa264f3ed0d97c8174a61870fda5a78cc97a5c1bb761ac8cfd7",
+    "spec/v2/ext/grpc-transport/README.md": "6ba378e3c6d1f2e3269b392cfdf0c40565ee9bfa259d1baaa9ee1d350e38e792",
+    "spec/v2/ext/kanban/README.md": "1d5bc89133ae02984065cb79d38e7627c36ffd6e0d2a58eb6207aaa020e7b0ad",
+    "spec/v2/ext/knowledge/README.md": "67be1dc97e5cdc9527d56f4836dc96841548a9c2f8f964777825d56fdf9f0e53",
+    "spec/v2/ext/launchStudio/README.md": "c732bb855252c31ee1e971cbc2936f2ca29b234c111d548c648095634507babb",
+    "spec/v2/ext/messaging/README.md": "32c222c0bce515e75b62a5a44b9f09d0e23c1b40f424e1ab8309deefd296c4b6",
+    "spec/v2/ext/portability/README.md": "c59423ee446638b748a911b9e97e803c4786157be6120f656f0a060586bc7b82",
+    "spec/v2/ext/provider-idempotency/README.md": "9d1bccef0ec16a19a3370ae79c2f5a1726ce0d1d25a51352907f288a2ccb15d7",
     "spec/v2/ext/provider-idempotency/registry.json": "5b5fecad604fb4ab38da39f5abe697a4e57b05406c398f8afeb377331b2bd965",
-    "spec/v2/ext/restTransport/README.md": "ad1466dac8b04796f60ca3b5419d66b31405215dfb54327cccfa7af1a3e1159d",
-    "spec/v2/ext/sandbox-runtime-notes/README.md": "f7d591670415138e3889b7841e33e6964b166929f5aa1b09a95a7f8df44c40f9",
-    "spec/v2/ext/webResearch/README.md": "e74fbe55a8c00040f1f87b5448259ee4eb3a26769d607f7d2dd9a671a2e2832b",
+    "spec/v2/ext/restTransport/README.md": "d485417310616b2f1da97106d970293f3f5712f6cadb6b840f5ac84ee28bdda6",
+    "spec/v2/ext/sandbox-runtime-notes/README.md": "0d1290fb1e20b2e35c0b15051541ab6546e4e2a6f693b4f912cb3f7d6a65e92c",
+    "spec/v2/ext/webResearch/README.md": "3ddca9180c4ef9971722a2e6a0c1ffb5cc783411ba554fb9fbdf15b4da624942",
     "spec/v2/facets/a2a.schema.json": "b68bf5e29e455e46c2ad7cfcccf5963730ec2310ff9db81884550d8df30fd6ef",
     "spec/v2/facets/aiProviders.schema.json": "81fb39b6698564d9d07a0d10525ecb6360c152fe3f3a5ea0439112509ca130e2",
     "spec/v2/facets/auth.schema.json": "7d98bc81a0f7d307460d039eebfebd21388091bfe1d538762583940f94c0bd2a",
@@ -293,10 +296,10 @@
     "spec/v2/migrations.schema.json": "b91ade6320ad1b1185c9495b9424f3aa63438ed8e412c45171c227d82c0afd86",
     "spec/v2/path-manifest.json": "17298a245c5da9a70aa7ab0b7f2db4277e06209d6fcdd7187a8b4cea179c08f3",
     "spec/v2/peer-dependency-aliases.json": "d10299280abee08258502925bc327293ee413e0108cd6e6ec75ff6110653308d",
-    "spec/v2/profiles.json": "0636f19fceae625390003a347e70ef4797d84766b5c24ce8a02cea52aadebca4",
-    "spec/v2/release.json": "f599686983f47f146a03edec608d63f31525b3e3268036684434afcb972e1cef",
+    "spec/v2/profiles.json": "180beb9ef2d161766fa23b2987e7e829851e3d316273147cf6a4a3f324befd6b",
+    "spec/v2/release.json": "f2f87ba5a5476f2213b3486a2618ef3c7381b47c96dd3f082bee0e07ac4a35bc",
     "spec/v2/retention-floors.json": "eaf3722d95c79947af1d4269ef85117e126518c588cfcf1a2b21b97269f51624",
-    "spec/v2/surface-baseline.json": "34404cc65fb70b8a54bbee40d8e0f5047a29e7df4f1abd55741a697549ccaccf"
+    "spec/v2/surface-baseline.json": "fce9d8eeea653476e09b19e525a0b104caab6c51a0b7b427d7d941e2b7118573"
   },
-  "corpusCommit": "d578116b9665df11f8d1eaad11fc45f71e826d37"
+  "corpusCommit": "0ed567fece2f9c5c5ad337fed92f6926ad7547af"
 }

package/src/lib/audit-checkpoint.ts

@@ -0,0 +1,72 @@
+/**
+ * RFC 0218 — the audit checkpoint preimage (`spec/v1/auth-profiles.md`
+ * §"Audit-log integrity" 3).
+ *
+ * A checkpoint anchors the entries with sequence in `(P, atSequence]`, where `P`
+ * is the previous checkpoint's `atSequence` (0 for the first). Its leaves are
+ * those entries' hashes in sequence order: the lowercase-hex SHA-256 of each
+ * entry's RFC 8785 JCS bytes, the same value the next entry carries as
+ * `prevHash`. The root is built pairwise, one level at a time. A parent is the
+ * SHA-256 of the ASCII bytes of `left ‖ right`, both lowercase hex. A last odd
+ * node is promoted unchanged, never duplicated. The signature is Ed25519 over
+ * the 32 bytes the root hex-decodes to.
+ *
+ * There is no leaf/interior domain separation, so a verifier that recomputes a
+ * root MUST also hold the leaf count to `atSequence − P`
+ * (`checkpointMerkleRoot`'s `expectedLeaves`). With the count fixed the tree
+ * shape is fixed, and presenting interior nodes as leaves is refused.
+ */
+
+import { createHash, createPublicKey, verify as cryptoVerify, type KeyObject } from 'node:crypto';
+import { canonicalJSON } from './jcs.js';
+
+const HEX64 = /^[0-9a-f]{64}$/;
+
+const sha256Hex = (s: string): string => createHash('sha256').update(s, 'utf8').digest('hex');
+
+/** The entry hash: lowercase-hex SHA-256 of the entry's RFC 8785 JCS bytes. */
+export function auditEntryHash(entry: unknown): string {
+  return sha256Hex(canonicalJSON(entry));
+}
+
+export class CheckpointPreimageError extends Error {}
+
+/**
+ * The checkpoint root over `leaves` (entry hashes in sequence order). Refuses an
+ * empty range, a leaf that is not 64 lowercase hex characters, and, when
+ * `expectedLeaves` is given, any other count.
+ */
+export function checkpointMerkleRoot(leaves: readonly string[], expectedLeaves?: number): string {
+  if (leaves.length === 0) throw new CheckpointPreimageError('a checkpoint anchors at least one entry');
+  if (expectedLeaves !== undefined && leaves.length !== expectedLeaves) {
+    throw new CheckpointPreimageError(`expected ${expectedLeaves} leaves (atSequence − P), got ${leaves.length}`);
+  }
+  for (const l of leaves) if (!HEX64.test(l)) throw new CheckpointPreimageError(`leaf is not 64 lowercase hex: ${JSON.stringify(l)}`);
+  let level = leaves.slice();
+  while (level.length > 1) {
+    const next: string[] = [];
+    for (let i = 0; i < level.length; i += 2) {
+      const right = level[i + 1];
+      next.push(right === undefined ? level[i]! : sha256Hex(level[i]! + right));
+    }
+    level = next;
+  }
+  return level[0]!;
+}
+
+/**
+ * The advertised `checkpointPublicKey` is base64 SPKI DER (`MCowBQYDK2VwAyEA…`).
+ * A PEM string is accepted too.
+ */
+export function checkpointPublicKey(advertised: string): KeyObject {
+  if (advertised.startsWith('-----BEGIN')) return createPublicKey(advertised);
+  return createPublicKey({ key: Buffer.from(advertised, 'base64'), format: 'der', type: 'spki' });
+}
+
+/** Ed25519 over the 32 bytes `merkleRoot` hex-decodes to; `signature` is base64. */
+export function verifyCheckpointSignature(merkleRoot: string, signature: string, key: KeyObject): boolean {
+  if (!HEX64.test(merkleRoot)) return false;
+  const sig = Buffer.from(signature, 'base64');
+  if (sig.length !== 64) return false;
+  return cryptoVerify(null, Buffer.from(merkleRoot, 'hex'), key, sig);
+}

package/src/lib/ext-claims.ts

@@ -0,0 +1,96 @@
+/**
+ * ext-claims — the `claims-check` witness for an extension family (RFC 0220 §B).
+ *
+ * An extension family (`anchor: ext` in `spec/v2/declaration.json`) is
+ * advertised as `extensions["<org>.<extensionName>"]` (capabilities.md §3.2),
+ * where `extensionName` is the kebab-case name the declaration row carries —
+ * the family key itself is camelCase and could never match the key pattern.
+ *
+ * `claims-check` checks the claim, not behavior (conformance.md §Witness
+ * classes). For an org-shaped record that means exactly:
+ *
+ *   1. the key matches `extensionsKeyPattern`;
+ *   2. its org is registered in the declaration and is not reserved;
+ *   3. the record is a JSON object (not an array, not a scalar, not null);
+ *   4. the family key is NOT also a member of the discovery root — an ext
+ *      family is never a root family, and a root copy is a second claim the
+ *      client would have to reconcile.
+ *
+ * `classifyExtClaim` is pure so the self-test can run each negative control
+ * without a host; the scenario only reads discovery and calls it.
+ */
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { SPEC_V2_DIR } from './paths.js';
+
+type Json = Record<string, unknown>;
+
+export interface ExtFamily {
+  readonly key: string;
+  readonly extensionName: string;
+  readonly witness: string;
+}
+
+export interface ExtDeclaration {
+  readonly families: readonly ExtFamily[];
+  readonly registeredOrgs: ReadonlySet<string>;
+  readonly reservedOrgs: ReadonlySet<string>;
+  readonly keyPattern: RegExp;
+}
+
+let cached: ExtDeclaration | null | undefined;
+/** The ext rows of the declaration, or `undefined` when it is not on disk in this layout. */
+export function extDeclaration(): ExtDeclaration | undefined {
+  if (cached !== undefined) return cached ?? undefined;
+  cached = null;
+  const file = SPEC_V2_DIR ? join(SPEC_V2_DIR, 'declaration.json') : null;
+  if (file && existsSync(file)) {
+    try {
+      const d = JSON.parse(readFileSync(file, 'utf8')) as Json;
+      const fams = (Array.isArray(d['families']) ? d['families'] : []) as Json[];
+      cached = {
+        families: fams
+          .filter((f) => f['anchor'] === 'ext' && typeof f['extensionName'] === 'string')
+          .map((f) => ({ key: String(f['key']), extensionName: String(f['extensionName']), witness: String(f['witness']) })),
+        registeredOrgs: new Set(Object.keys((d['extensions'] ?? {}) as Json)),
+        reservedOrgs: new Set((Array.isArray(d['reservedOrgs']) ? d['reservedOrgs'] : []) as string[]),
+        keyPattern: new RegExp(String(d['extensionsKeyPattern'])),
+      };
+    } catch { /* left null: unreadable and absent are the same soft-skip */ }
+  }
+  return cached ?? undefined;
+}
+
+export type ExtClaim =
+  | { readonly state: 'absent' }
+  | { readonly state: 'well-formed'; readonly key: string; readonly org: string }
+  | { readonly state: 'malformed'; readonly key: string; readonly why: string };
+
+/**
+ * Every claim `discovery` makes for `family`, classified. A host that
+ * advertises the family under more than one registered org yields one entry
+ * per key; a host that advertises it nowhere yields `[{ state: 'absent' }]`.
+ */
+export function classifyExtClaim(discovery: Json, family: ExtFamily, decl: ExtDeclaration): ExtClaim[] {
+  const ext = discovery['extensions'];
+  const members = ext && typeof ext === 'object' && !Array.isArray(ext) ? Object.entries(ext as Json) : [];
+  const suffix = `.${family.extensionName}`;
+  const claims: ExtClaim[] = [];
+  for (const [key, rec] of members) {
+    if (!key.endsWith(suffix)) continue;
+    const org = key.slice(0, -suffix.length);
+    if (!decl.keyPattern.test(key)) { claims.push({ state: 'malformed', key, why: `the key does not match extensionsKeyPattern ${decl.keyPattern.source}` }); continue; }
+    if (decl.reservedOrgs.has(org)) { claims.push({ state: 'malformed', key, why: `org '${org}' is reserved (declaration reservedOrgs); a host MUST NOT use it` }); continue; }
+    if (!decl.registeredOrgs.has(org)) continue; // an unregistered org is someone else's name, not a claim on this family
+    if (rec === null || typeof rec !== 'object' || Array.isArray(rec)) {
+      claims.push({ state: 'malformed', key, why: `the record is ${rec === null ? 'null' : Array.isArray(rec) ? 'an array' : typeof rec}, not an object` });
+      continue;
+    }
+    if (Object.prototype.hasOwnProperty.call(discovery, family.key)) {
+      claims.push({ state: 'malformed', key, why: `the family key '${family.key}' is also a member of the discovery root; an ext family is advertised only under extensions` });
+      continue;
+    }
+    claims.push({ state: 'well-formed', key, org });
+  }
+  return claims.length > 0 ? claims : [{ state: 'absent' }];
+}

package/src/lib/mock-ai-budgets.ts

@@ -0,0 +1,40 @@
+/**
+ * Per-attempt dispatch budgets — `GET /v1/host/sample/test/mock-ai/dispatch-budgets`
+ * (host-sample-test-seams.md §28; v2 `api/seams-v2.yaml` `getMockDispatchBudgets`).
+ *
+ * The companion `last-dispatch-budget` seam reports only the most recent call's
+ * `maxTokens`, so a retry's budget cannot be compared with the attempt before
+ * it. This seam returns every call's budget in call order. OPTIONAL: an
+ * unserved seam (404/405/501) is `unserved`, so the caller falls back to its
+ * pre-seam partial witness; a served seam that answers anything else is
+ * `broken`, which the caller records as `blocked`.
+ */
+
+import { driver } from './driver.js';
+
+export type DispatchBudgets =
+  | { ok: true; attempts: Array<number | null> }
+  | { ok: false; unserved: true; reason: string }
+  | { ok: false; unserved: false; reason: string };
+
+const UNSERVED = new Set([404, 405, 501]);
+
+export async function readDispatchBudgets(nodeId: string): Promise<DispatchBudgets> {
+  const res = await driver.get(`/v1/host/sample/test/mock-ai/dispatch-budgets?nodeId=${encodeURIComponent(nodeId)}`);
+  if (UNSERVED.has(res.status)) {
+    return { ok: false, unserved: true, reason: `the dispatch-budgets seam is not served (${res.status})` };
+  }
+  const attempts = (res.json as { attempts?: unknown } | undefined)?.attempts;
+  if (res.status !== 200 || !Array.isArray(attempts)) {
+    return { ok: false, unserved: false, reason: `the dispatch-budgets seam answered ${res.status} without an attempts[] array (host-sample-test-seams.md §28)` };
+  }
+  const out: Array<number | null> = [];
+  for (const a of attempts) {
+    const m = (a as { maxTokens?: unknown } | null)?.maxTokens;
+    if (m !== null && !(typeof m === 'number' && Number.isInteger(m))) {
+      return { ok: false, unserved: false, reason: `the dispatch-budgets seam returned an entry whose maxTokens is ${JSON.stringify(m)}, not an integer or null (host-sample-test-seams.md §28)` };
+    }
+    out.push(m);
+  }
+  return { ok: true, attempts: out };
+}

package/src/lib/soft-skip.ts

@@ -109,6 +109,20 @@ export function blockedDespiteAssertions(reason: string): undefined {
   return undefined;
 }
 
+/**
+ * `seamAbsent` for a seam that goes missing AFTER the leg has asserted setup
+ * facts: strict mode fails exactly as `seamAbsent` does, and default mode
+ * records a `blocked` that stands at both majors (`blockedDespiteAssertions`).
+ * A plain `seamAbsent` there notes `blocked`, which major 1 records as a
+ * partial-witness pass.
+ */
+export function seamAbsentDespiteAssertions(reason: string): undefined {
+  if (process.env['OPENWOP_REQUIRE_BEHAVIOR'] === 'true') {
+    throw new Error(`RFC 0148 §B: advertised behaviour is not observable — ${reason} (OPENWOP_REQUIRE_BEHAVIOR=true fails an advertised-missing seam)`);
+  }
+  return blockedDespiteAssertions(reason);
+}
+
 const RANK: Record<SoftSkipKind, number> = { blocked: 0, skipped: 1, inapplicable: 2 };
 
 function fold(arr: readonly Note[]): { kind: SoftSkipKind; reason: string; conclusive?: true } | null {

package/src/scenarios/a2a-peer-authority.test.ts

@@ -73,23 +73,16 @@ describe('RFC 0152 §E — a2a-peer-no-authority-escalation (host as A2A client,
       // an advertised-missing seam (RFC 0148 §B). A 403 is NOT a pass.
       return seamAbsent(`host advertises A2A but the invoke seam /v1/host/sample/a2a/invoke answered ${drive.status}`);
     }
+    // `peerAuthority` is an OPTIONAL seam field (host-sample-test-seams.md §22). A host
+    // that omits it is not violating anything, and certification must not be denied for
+    // it, so its absence is `inapplicable`, decided before any assertion (the 2.42.6
+    // appendEra2Event precedent). A report that IS present is held to the contract below.
+    const report = (drive.json as { peerAuthority?: PeerAuthorityReport }).peerAuthority;
+    if (report === undefined) return softSkip('inapplicable', 'the invoke seam reports no peerAuthority (an optional seam field, host-sample-test-seams.md §22), so peer-authority non-escalation is not observable on this host');
     // The peer must actually have answered with the authority-asserting message,
     // or this leg is vacuous.
     const created = peer.taskCount();
     expect(created, req('openwop.it.a2a-peer-authority.a-peer-reply-that-asserts-approval-scopes-and-a-foreign-task-reference-changes-n', 'RFCS/0152 §E', 'the host MUST have created a task on the peer for this leg to mean anything')).toBeGreaterThan(0);
-    const report = (drive.json as { peerAuthority?: PeerAuthorityReport }).peerAuthority;
-    if (report === undefined) {
-      // Additive seam field not yet implemented: blocked, not passed.
-      expect(
-        report,
-        req('openwop.it.a2a-peer-authority.a-peer-reply-that-asserts-approval-scopes-and-a-foreign-task-reference-changes-n', 
-          'host-sample-test-seams.md §22',
-          'the invoke seam SHOULD report `peerAuthority: { approvalAdvanced, scopesWidened, referencedTaskDereferenced }` for ' +
-            'scenario "peer-asserts-authority"; until it does this requirement is unobservable and resolves to `blocked`, not passed',
-        ),
-      ).toBeDefined();
-      return softSkip('blocked', 'precondition not met — `report === undefined` returned early (seam, prior step, or fixture unavailable)');
-    }
     expect(report.approvalAdvanced, req('openwop.it.a2a-peer-authority.a-peer-reply-that-asserts-approval-scopes-and-a-foreign-task-reference-changes-n', 'RFCS/0152 §E', 'peer content MUST NOT advance an approval gate (a2a-peer-no-authority-escalation)')).toBe(false);
     expect(report.scopesWidened, req('openwop.it.a2a-peer-authority.a-peer-reply-that-asserts-approval-scopes-and-a-foreign-task-reference-changes-n', 'RFCS/0152 §E', 'peer content MUST NOT widen the run’s scopes or tool allowlist')).toBe(false);
     expect(

package/src/scenarios/a2a-task-roundtrip.test.ts

@@ -116,7 +116,12 @@ describe('a2a-task-roundtrip: AgentCard + task lifecycle', () => {
       );
       return softSkip('blocked', 'precondition not met — `!probe` returned early (seam, prior step, or fixture unavailable)');
     }
-    if (!probe.isReal) getA2AFakePeer()!.reset();
+    // softskip ratchet, 2026-09-27: with only the in-process fake configured, this
+    // leg probed the SUITE'S OWN fake A2A peer and recorded `executed-pass`. The
+    // host under test was never contacted, so every host passed it. The fake-path
+    // self-check is now `inapplicable` before any assertion, as mcp-tool-roundtrip's
+    // is; the drift-point legs below are the ones that drive the host against the fake.
+    if (!probe.isReal) return softSkip('inapplicable', 'suite fixture self-test — host not exercised (only the in-process A2A fake is configured; set OPENWOP_A2A_REAL_PEER_URL for real-peer interop evidence)');
 
     // AgentCard at the A2A v0.3 well-known path
     // (`AGENT_CARD_PATH` from @a2a-js/sdk: `.well-known/agent-card.json`).
@@ -182,40 +187,7 @@ describe('a2a-task-roundtrip: AgentCard + task lifecycle', () => {
         `[a2a-task-roundtrip] real-peer interop OK against ${probe.url} ` +
           `(skill=${firstSkill?.id ?? firstSkill?.name}, kind=${kind})`,
       );
-      return softSkip('blocked', 'precondition not met — `probe.isReal` returned early (seam, prior step, or fixture unavailable)');
     }
-
-    // Fake-peer path: deterministic state forcing, assert verbatim.
-    const fake = getA2AFakePeer()!;
-    const sendRes = await rpc(
-      rpcUrl,
-      'message/send',
-      {
-        message: {
-          kind: 'message',
-          messageId: 'probe-fake-1',
-          role: 'user',
-          parts: [{ kind: 'text', text: 'hello' }],
-        },
-      },
-      1,
-    );
-    expect(sendRes.status).toBe(200);
-    expect(sendRes.error).toBeUndefined();
-    const task = sendRes.result as { id?: string; kind?: string; status?: { state?: string } };
-    expect(task.kind).toBe('task');
-    expect(typeof task.id).toBe('string');
-
-    // Advance through WORKING → COMPLETED via the fake's internal API.
-    fake.advanceTask(task.id!, 'WORKING');
-    fake.advanceTask(task.id!, 'COMPLETED');
-
-    const getRes = await rpc(rpcUrl, 'tasks/get', { id: task.id }, 2);
-    expect(getRes.status).toBe(200);
-    expect(getRes.error).toBeUndefined();
-    const finalTask = getRes.result as { status?: { state?: string } };
-    // A2A v0.3 wire form uses lowercase-hyphen state names.
-    expect(finalTask.status?.state).toBe('completed');
   });
 });
 

package/src/scenarios/a2a-version-negotiation.test.ts

@@ -30,7 +30,7 @@ import { capabilityFamily } from '../lib/discovery-capabilities.js';
 import { getA2AFakePeer } from '../lib/a2a-fake-peer.js';
 import { readErrorCode } from '../lib/error-envelope.js';
 import { req } from '../lib/requirement-ids.js';
-import { softSkip } from '../lib/soft-skip.js';
+import { softSkip, seamAbsent } from '../lib/soft-skip.js';
 
 /**
  * Callback-shaped: the host issues A2A calls to the suite's fake peer, which records the negotiated version header.
@@ -80,17 +80,11 @@ describe('RFC 0152 §B — A2A version negotiation', () => {
     peer.reset();
     const drive = await driver.post('/v1/host/sample/a2a/invoke', { peerUrl: peer.hostFacingEndpoint() });
     if (drive.status === 404 || drive.status === 403) {
-      // Seam absent. RFC 0148 §A: unobservable resolves to `blocked`, not a pass.
-      expect(
-        drive.status,
-        req('openwop.it.a2a-version-negotiation.outbound-calls-carry-an-explicit-a2a-version-header', 
-          'RFCS/0152 §B',
-          'a host advertising A2A version negotiation MUST expose an invoke seam so the negotiated ' +
-            'version is observable. Without it the requirement cannot be witnessed and resolves to ' +
-            '`blocked` per RFC 0148 §A.',
-        ),
-      ).not.toBe(404);
-      return softSkip('blocked', 'precondition not met — `drive.status === 404 || drive.status === 403` returned early (seam, prior step, or fixture unavailable)');
+      // A host advertising A2A version negotiation MUST expose the invoke seam so the negotiated
+      // version is observable. Default mode records `blocked` (RFC 0148 §A); strict mode
+      // fails (RFC 0148 §B). This was a not-404 assert followed by a blocked note, so a 403
+      // recorded a partial-witness pass at major 1.
+      return seamAbsent(`host advertises A2A version negotiation but the invoke seam /v1/host/sample/a2a/invoke answered ${drive.status}`);
     }
     const calls = peer.invocations().filter((i: { method: string }) => i.method !== 'GET');
     expect(calls.length, req('openwop.it.a2a-version-negotiation.outbound-calls-carry-an-explicit-a2a-version-header', 'RFCS/0152 §B', 'the host MUST have called the peer')).toBeGreaterThan(0);