@openwop/openwop-conformance 2.44.7 → 2.44.9

package/CHANGELOG.md

@@ -1,5 +1,14 @@
 # `@openwop/openwop-conformance` Changelog
 
+## [2.44.9] — 2026-09-29 — a floor gated on a withheld fixture records `blocked`, not nothing
+
+- **Nine v1 floor files no longer skip at describe level** (#1686). Each of the following gated every test with `describe.skipIf(!isFixtureAdvertised(…))`: `eventOrdering`, `failure-path`, `idempotency`, `interrupt-clarification`, `replay-fork`, `runs-lifecycle`, `stream-modes`, `stream-modes-buffer` and `stream-modes-mixed`. When every test in a file is describe-skipped, vitest runs none of `setup.ts`'s hooks for it, so the file's floor requirement got no ledger row. `--certify` then counted the floor unclassified and rejected the whole certification, not just the profile. `byok-roundtrip` hit this on openwop-app's 2026-09-28 major-1 cut (`certified: none`) and was fixed in #1708. Each test in the nine files now opens with `if (SKIP) return softSkip('blocked', NO_FIXTURE_REASON)`, so a withheld fixture records `blocked` with the fixture named. That denies only the affected profile. It is `blocked`, not `inapplicable`: the host advertises the capability the floor witnesses, so the requirement applies to the captured discovery, and a withheld fixture is exactly RFC 0148 §A's `blocked` ("a required seam, fixture … was unavailable"). `byok-roundtrip`'s `blocked` (#1708) stands for the same reason. Measured against a stub host that advertises no fixtures, with the ledger on: before, `runs-lifecycle` wrote no ledger row; after, `openwop.floor.runs-lifecycle` is `blocked` with the reason. A test that passed before still passes: the gates are unchanged, only where they sit.
+- **New self-test, `describe-level-skip.test.ts`** (server-free, `test:self`). It fails when a v1 floor file (`PROFILE_FLOOR_SCENARIOS`, `required` plus every `conditional` branch) can skip every test at describe level. A gate on having no target (`!process.env.OPENWOP_BASE_URL`) is exempt, since with no host there is no bundle. A ratchet also holds the 56 non-floor files with the same shape at a ceiling of 56. Those rows resolve to a report-derived `blocked` that names no reason; that is the right disposition, and they certify nothing either way. Sabotage: reverting `runs-lifecycle` to its describe-level gate fails the floor rule, and adding a new all-gated file fails the ratchet.
+
+## [2.44.8] — 2026-09-29 — every subscribed event of a run is delivered
+
+- **`0173.webhook-delivery-complete`: every matching event reaches a healthy receiver at least once** (#1781). A new leg in `v2-webhook-durable-delivery` (target major 2, gated on `webhooks` and `conformance-noop`) reads `webhooks.md` §Durability, "deliver each matching event at least once", across a whole run; no row did before. It registers one subscription to `run.started`, `node.started`, `node.completed` and `run.completed` with a receiver that answers `204` to everything, and runs the noop fixture. The expected set is every logged event of a subscribed type (`GET /runs/{runId}/events/poll`), keyed by `sequence`. Each must arrive at least once, deduplicated on `(webhookId, runId, sequence)`; duplicates are counted, never held against the host. The wait is `retryWaitFor`: the advertised `maxElapsedMs` plus the grace (RFC 0225), else the cap or the floor. The row convicts when some of the run's subscribed events arrived and others did not, or when nothing arrived and nothing reached the listener; nothing of this run arriving while other traffic did is `blocked`. A pass carries an `observed:` detail (counts, duplicates, slowest first arrival, wait path). The leg unregisters its subscription. Measured on the v2 reference host (openwop-examples `d0255b4b`): `executed-pass` in 255 ms; with its `run.started` fan-out removed, `executed-fail` naming `run.started (sequence 0)` after the 90 s window, and the file's other five legs stay green, which is the gap: myndhyve#560's lost `run.started` fan-out was convicted only incidentally, under the wrong MUST (#1780). Surveyed against the three hosts' code: each delivers every subscribed type and passes on its certified deployment (MyndHyve's window is its advertised 600000 ms plus the grace).
+
 ## [2.44.7] — 2026-09-29 — RFC 0223 G11 and RFC 0140 G10 close on a certified cut
 
 - **The 2.44.7 cycle opens.** The packed `@openwop/spec-artifacts` gaps register changes: RFC 0223 G11 (`0223.reject-loopback-reasks`) and RFC 0140 G10 (`replay.suppression-execution-ordinal`) close on the v2 reference host's certified 2.44.6 cut. No scenario is added or removed.

package/dist/spec-artifacts.lock.json

@@ -1,5 +1,5 @@
 {
   "package": "@openwop/spec-artifacts",
-  "version": "2.44.7",
-  "stampSha256": "4a05e0a24a939362a2c051c2c142e4aa1403e6e52b672c91c2b9e76a2da28770"
+  "version": "2.44.9",
+  "stampSha256": "7803a5db18abdf8649235a2665ae9bb801aea6ee7584cdd13ada047fd25a8993"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openwop/openwop-conformance",
-  "version": "2.44.7",
+  "version": "2.44.9",
   "description": "Production-ready black-box conformance suite for OpenWOP v1.0 compliant servers.",
   "repository": {
     "type": "git",
@@ -56,6 +56,6 @@
     "@openwop/spec-artifacts": "file:../spec-artifacts"
   },
   "peerDependencies": {
-    "@openwop/spec-artifacts": "2.44.7"
+    "@openwop/spec-artifacts": "2.44.9"
   }
 }

package/requirements.json

@@ -3,10 +3,10 @@
   "generatedFrom": "src/scenarios/*.test.ts",
   "counts": {
     "files": 649,
-    "tests": 2494,
-    "withStableId": 2494,
+    "tests": 2495,
+    "withStableId": 2495,
     "interpolatedTitles": 0,
-    "explicitIds": 2373
+    "explicitIds": 2374
   },
   "records": [
     {
@@ -12791,7 +12791,7 @@
     {
       "id": "openwop.it.eventOrdering.events-from-a-single-poll-have-non-decreasing-sequence-numbers",
       "file": "eventOrdering.test.ts",
-      "line": 53,
+      "line": 55,
       "title": "events from a single poll have non-decreasing sequence numbers",
       "explicitId": "openwop.it.eventOrdering.events-from-a-single-poll-have-non-decreasing-sequence-numbers",
       "citations": [
@@ -12805,7 +12805,7 @@
     {
       "id": "openwop.it.eventOrdering.repeated-polls-of-a-terminal-run-yield-identical-event-sequences",
       "file": "eventOrdering.test.ts",
-      "line": 78,
+      "line": 81,
       "title": "repeated polls of a terminal run yield identical event sequences",
       "explicitId": "openwop.it.eventOrdering.repeated-polls-of-a-terminal-run-yield-identical-event-sequences",
       "citations": [
@@ -12823,7 +12823,7 @@
     {
       "id": "openwop.it.eventOrdering.event-stream-contains-exactly-one-of-run-completed-run-failed-run-cancelled",
       "file": "eventOrdering.test.ts",
-      "line": 110,
+      "line": 114,
       "title": "event stream contains exactly one of run.completed / run.failed / run.cancelled",
       "explicitId": "openwop.it.eventOrdering.event-stream-contains-exactly-one-of-run-completed-run-failed-run-cancelled",
       "citations": [
@@ -12836,7 +12836,7 @@
     {
       "id": "openwop.it.eventOrdering.the-terminal-event-is-the-last-event-in-the-stream",
       "file": "eventOrdering.test.ts",
-      "line": 131,
+      "line": 136,
       "title": "the terminal event is the LAST event in the stream",
       "explicitId": "openwop.it.eventOrdering.the-terminal-event-is-the-last-event-in-the-stream",
       "citations": [
@@ -13103,7 +13103,7 @@
     {
       "id": "openwop.it.failure-path.post-v1-runs-accepts-the-run-and-run-terminates-as-failed-with-structured-error",
       "file": "failure-path.test.ts",
-      "line": 17,
+      "line": 19,
       "title": "POST /v1/runs accepts the run and run terminates as failed with structured error",
       "explicitId": "openwop.it.failure-path.post-v1-runs-accepts-the-run-and-run-terminates-as-failed-with-structured-error",
       "citations": [
@@ -14869,7 +14869,7 @@
     {
       "id": "openwop.it.idempotency.returns-same-runid-twice-and-sets-openwop-idempotent-replay-on-the-replay",
       "file": "idempotency.test.ts",
-      "line": 31,
+      "line": 33,
       "title": "returns same runId twice and sets openwop-Idempotent-Replay on the replay",
       "explicitId": "openwop.it.idempotency.returns-same-runid-twice-and-sets-openwop-idempotent-replay-on-the-replay",
       "citations": [
@@ -14894,7 +14894,7 @@
     {
       "id": "openwop.it.idempotency.returns-409-when-the-body-changes-under-the-same-key",
       "file": "idempotency.test.ts",
-      "line": 70,
+      "line": 73,
       "title": "returns 409 when the body changes under the same key",
       "explicitId": "openwop.it.idempotency.returns-409-when-the-body-changes-under-the-same-key",
       "citations": [
@@ -15354,7 +15354,7 @@
     {
       "id": "openwop.it.interrupt-clarification.run-suspends-at-ask-answers-payload-drives-terminal-completed",
       "file": "interrupt-clarification.test.ts",
-      "line": 20,
+      "line": 22,
       "title": "run suspends at ask, answers payload drives terminal completed",
       "explicitId": "openwop.it.interrupt-clarification.run-suspends-at-ask-answers-payload-drives-terminal-completed",
       "citations": [
@@ -22575,7 +22575,7 @@
     {
       "id": "openwop.it.replay-fork.produces-a-new-run-that-reaches-terminal-completed",
       "file": "replay-fork.test.ts",
-      "line": 60,
+      "line": 61,
       "title": "produces a new run that reaches terminal `completed`",
       "explicitId": "openwop.it.replay-fork.produces-a-new-run-that-reaches-terminal-completed",
       "citations": [
@@ -22608,7 +22608,7 @@
     {
       "id": "openwop.it.replay-fork.produces-a-new-run-that-reaches-terminal-completed~2",
       "file": "replay-fork.test.ts",
-      "line": 105,
+      "line": 107,
       "title": "produces a new run that reaches terminal `completed`",
       "explicitId": "openwop.it.replay-fork.produces-a-new-run-that-reaches-terminal-completed~2",
       "citations": [
@@ -22621,7 +22621,7 @@
     {
       "id": "openwop.it.replay-fork.rejects-negative-fromseq-with-400",
       "file": "replay-fork.test.ts",
-      "line": 142,
+      "line": 145,
       "title": "rejects negative fromSeq with 400",
       "explicitId": "openwop.it.replay-fork.rejects-negative-fromseq-with-400",
       "citations": [
@@ -22634,7 +22634,7 @@
     {
       "id": "openwop.it.replay-fork.rejects-fromseq-beyond-source-event-log-length-with-422",
       "file": "replay-fork.test.ts",
-      "line": 161,
+      "line": 165,
       "title": "rejects fromSeq beyond source event log length with 422",
       "explicitId": "openwop.it.replay-fork.rejects-fromseq-beyond-source-event-log-length-with-422",
       "citations": [
@@ -22647,7 +22647,7 @@
     {
       "id": "openwop.it.replay-fork.rejects-replay-mode-with-non-empty-runoptionsoverlay-overlay-is-branch-only",
       "file": "replay-fork.test.ts",
-      "line": 182,
+      "line": 187,
       "title": "rejects replay mode with non-empty runOptionsOverlay (overlay is branch-only)",
       "explicitId": "openwop.it.replay-fork.rejects-replay-mode-with-non-empty-runoptionsoverlay-overlay-is-branch-only",
       "citations": [
@@ -22660,7 +22660,7 @@
     {
       "id": "openwop.it.replay-fork.rejects-fork-on-a-non-existent-run-with-404",
       "file": "replay-fork.test.ts",
-      "line": 208,
+      "line": 214,
       "title": "rejects fork on a non-existent run with 404",
       "explicitId": "openwop.it.replay-fork.rejects-fork-on-a-non-existent-run-with-404",
       "citations": [
@@ -23735,7 +23735,7 @@
     {
       "id": "openwop.it.runs-lifecycle.post-v1-runs-returns-201-with-runid-per-rest-endpoints-md",
       "file": "runs-lifecycle.test.ts",
-      "line": 22,
+      "line": 24,
       "title": "POST /v1/runs returns 201 with runId per rest-endpoints.md",
       "explicitId": "openwop.it.runs-lifecycle.post-v1-runs-returns-201-with-runid-per-rest-endpoints-md",
       "citations": [
@@ -23756,7 +23756,7 @@
     {
       "id": "openwop.it.runs-lifecycle.reaches-terminal-completed-within-bounded-time-per-fixtures-md-noop-spec",
       "file": "runs-lifecycle.test.ts",
-      "line": 41,
+      "line": 44,
       "title": "reaches terminal `completed` within bounded time per fixtures.md noop spec",
       "explicitId": "openwop.it.runs-lifecycle.reaches-terminal-completed-within-bounded-time-per-fixtures-md-noop-spec",
       "citations": [
@@ -23773,7 +23773,7 @@
     {
       "id": "openwop.it.runs-lifecycle.get-v1-runs-nonexistentid-returns-404-or-403-per-rest-endpoints-md",
       "file": "runs-lifecycle.test.ts",
-      "line": 59,
+      "line": 63,
       "title": "GET /v1/runs/{nonexistentId} returns 404 (or 403) per rest-endpoints.md",
       "explicitId": "openwop.it.runs-lifecycle.get-v1-runs-nonexistentid-returns-404-or-403-per-rest-endpoints-md",
       "citations": [
@@ -25058,7 +25058,7 @@
     {
       "id": "openwop.it.stream-modes-buffer.accepts-bufferms-in-range-and-emits-at-least-one-event-batch-frame",
       "file": "stream-modes-buffer.test.ts",
-      "line": 36,
+      "line": 38,
       "title": "accepts bufferMs in range and emits at least one event: batch frame",
       "explicitId": "openwop.it.stream-modes-buffer.accepts-bufferms-in-range-and-emits-at-least-one-event-batch-frame",
       "citations": [
@@ -25079,7 +25079,7 @@
     {
       "id": "openwop.it.stream-modes-buffer.rejects-out-of-range-bufferms-with-400-validation-error",
       "file": "stream-modes-buffer.test.ts",
-      "line": 72,
+      "line": 75,
       "title": "rejects out-of-range bufferMs with 400 validation_error",
       "explicitId": "openwop.it.stream-modes-buffer.rejects-out-of-range-bufferms-with-400-validation-error",
       "citations": [
@@ -25092,7 +25092,7 @@
     {
       "id": "openwop.it.stream-modes-buffer.forces-flush-on-terminal-run-completed-arrives-bundled-in-a-batch-before-the-tim",
       "file": "stream-modes-buffer.test.ts",
-      "line": 90,
+      "line": 94,
       "title": "forces flush on terminal — run.completed arrives bundled in a batch BEFORE the timer fires",
       "explicitId": "openwop.it.stream-modes-buffer.forces-flush-on-terminal-run-completed-arrives-bundled-in-a-batch-before-the-tim",
       "citations": [
@@ -25110,7 +25110,7 @@
     {
       "id": "openwop.it.stream-modes-buffer.bufferms-0-behaves-identically-to-omitting-per-event-mode",
       "file": "stream-modes-buffer.test.ts",
-      "line": 134,
+      "line": 139,
       "title": "bufferMs=0 behaves identically to omitting (per-event mode)",
       "explicitId": "openwop.it.stream-modes-buffer.bufferms-0-behaves-identically-to-omitting-per-event-mode",
       "citations": [
@@ -25123,7 +25123,7 @@
     {
       "id": "openwop.it.stream-modes-mixed.accepts-streammode-updates-messages-and-emits-a-server-closed-stream",
       "file": "stream-modes-mixed.test.ts",
-      "line": 34,
+      "line": 36,
       "title": "accepts streamMode=updates,messages and emits a server-closed stream",
       "explicitId": "openwop.it.stream-modes-mixed.accepts-streammode-updates-messages-and-emits-a-server-closed-stream",
       "citations": [
@@ -25144,7 +25144,7 @@
     {
       "id": "openwop.it.stream-modes-mixed.rejects-streammode-values-updates-with-400-unsupported-stream-mode",
       "file": "stream-modes-mixed.test.ts",
-      "line": 64,
+      "line": 67,
       "title": "rejects streamMode=values,updates with 400 + unsupported_stream_mode",
       "explicitId": "openwop.it.stream-modes-mixed.rejects-streammode-values-updates-with-400-unsupported-stream-mode",
       "citations": [
@@ -25169,7 +25169,7 @@
     {
       "id": "openwop.it.stream-modes-mixed.rejects-streammode-updates-bogus-one-bad-mode-fails-the-whole-list",
       "file": "stream-modes-mixed.test.ts",
-      "line": 98,
+      "line": 102,
       "title": "rejects streamMode=updates,bogus (one bad mode fails the whole list)",
       "explicitId": "openwop.it.stream-modes-mixed.rejects-streammode-updates-bogus-one-bad-mode-fails-the-whole-list",
       "citations": [
@@ -25182,7 +25182,7 @@
     {
       "id": "openwop.it.stream-modes-mixed.mixed-mode-union-updates-debug-sees-every-event-updates-sees",
       "file": "stream-modes-mixed.test.ts",
-      "line": 116,
+      "line": 121,
       "title": "mixed mode union: updates,debug sees every event updates sees",
       "explicitId": "openwop.it.stream-modes-mixed.mixed-mode-union-updates-debug-sees-every-event-updates-sees",
       "citations": [
@@ -25196,7 +25196,7 @@
     {
       "id": "openwop.it.stream-modes.emits-at-least-run-started-run-completed-and-server-closes-the-stream",
       "file": "stream-modes.test.ts",
-      "line": 35,
+      "line": 37,
       "title": "emits at least run.started + run.completed and server closes the stream",
       "explicitId": "openwop.it.stream-modes.emits-at-least-run-started-run-completed-and-server-closes-the-stream",
       "citations": [
@@ -25217,7 +25217,7 @@
     {
       "id": "openwop.it.stream-modes.returns-400-and-a-structured-error-body",
       "file": "stream-modes.test.ts",
-      "line": 60,
+      "line": 63,
       "title": "returns 400 and a structured error body",
       "explicitId": "openwop.it.stream-modes.returns-400-and-a-structured-error-body",
       "citations": [
@@ -25242,7 +25242,7 @@
     {
       "id": "openwop.it.stream-modes.returns-200-emits-at-least-one-event-server-closes-per-stream-modes-md-values",
       "file": "stream-modes.test.ts",
-      "line": 90,
+      "line": 94,
       "title": "returns 200 + emits at least one event + server-closes per stream-modes.md §values",
       "explicitId": "openwop.it.stream-modes.returns-200-emits-at-least-one-event-server-closes-per-stream-modes-md-values",
       "citations": [
@@ -25259,7 +25259,7 @@
     {
       "id": "openwop.it.stream-modes.debug-stream-is-a-superset-of-updates-per-stream-modes-md-mode-mapping",
       "file": "stream-modes.test.ts",
-      "line": 114,
+      "line": 119,
       "title": "debug stream is a superset of updates per stream-modes.md mode-mapping",
       "explicitId": "openwop.it.stream-modes.debug-stream-is-a-superset-of-updates-per-stream-modes-md-mode-mapping",
       "citations": [
@@ -34418,7 +34418,7 @@
     {
       "id": "openwop.it.v2-webhook-durable-delivery.a-failed-attempt-is-retried-and-the-event-is-delivered-at-least-once",
       "file": "v2-webhook-durable-delivery.test.ts",
-      "line": 279,
+      "line": 309,
       "title": "a failed attempt is retried and the event is delivered at least once",
       "explicitId": "openwop.requirement.0173.webhook-durable-delivery",
       "citations": [
@@ -34455,7 +34455,7 @@
     {
       "id": "openwop.it.v2-webhook-durable-delivery.an-exhausted-delivery-is-dead-lettered-never-dropped",
       "file": "v2-webhook-durable-delivery.test.ts",
-      "line": 400,
+      "line": 430,
       "title": "an exhausted delivery is dead-lettered, never dropped",
       "explicitId": "openwop.requirement.0173.webhook-durable-delivery.dead-letter",
       "citations": [
@@ -34494,7 +34494,7 @@
     {
       "id": "openwop.it.v2-webhook-durable-delivery.the-dead-letter-read-is-served-and-its-records-carry-no-payload",
       "file": "v2-webhook-durable-delivery.test.ts",
-      "line": 509,
+      "line": 539,
       "title": "the dead-letter read is served and its records carry no payload",
       "explicitId": "openwop.requirement.0188.dead-letter-read",
       "citations": [
@@ -34507,7 +34507,7 @@
     {
       "id": "openwop.it.v2-webhook-durable-delivery.after-unregister-the-dead-letter-read-answers-404-not-found-as-for-a-subscriptio",
       "file": "v2-webhook-durable-delivery.test.ts",
-      "line": 530,
+      "line": 560,
       "title": "after unregister, the dead-letter read answers 404 not_found, as for a subscription that never existed",
       "explicitId": "openwop.requirement.0217.dead-letter-read-after-unregister",
       "citations": [
@@ -34534,7 +34534,7 @@
     {
       "id": "openwop.it.v2-webhook-durable-delivery.a-dead-letter-record-carries-no-delivered-payload",
       "file": "v2-webhook-durable-delivery.test.ts",
-      "line": 563,
+      "line": 593,
       "title": "a dead-letter record carries no delivered payload",
       "explicitId": "openwop.requirement.0188.dead-letter-content-free",
       "citations": [
@@ -34549,6 +34549,33 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.v2-webhook-durable-delivery.every-logged-event-of-a-subscribed-type-reaches-a-healthy-receiver-at-least-once",
+      "file": "v2-webhook-durable-delivery.test.ts",
+      "line": 688,
+      "title": "every logged event of a subscribed type reaches a healthy receiver at least once within the retry bound",
+      "explicitId": "openwop.requirement.0173.webhook-delivery-complete",
+      "citations": [
+        {
+          "section": "webhooks.md §Surfaces",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "webhooks.md §Surfaces",
+          "requirement": "the 201 body MUST carry `webhookId`"
+        },
+        {
+          "section": "runs.md §Create",
+          "requirement": "POST /runs MUST answer 201 for the noop fixture"
+        },
+        {
+          "section": "webhooks.md §Durability",
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
     {
       "id": "openwop.it.v2-webhook-egress-refusal.a-webhook-registration-naming-a-destination-the-guard-must-refuse-is-refused-400",
       "file": "v2-webhook-egress-refusal.test.ts",

package/schemas/CORPUS-STAMP.json

@@ -1,17 +1,17 @@
 {
   "_comment": "Provenance of @openwop/spec-artifacts (RFC 0168 §D.2). files: SHA-256 per file; the conformance suite compares the installed peer against dist/spec-artifacts.lock.json at start.",
   "package": "@openwop/spec-artifacts",
-  "version": "2.44.7",
-  "corpusTag": "v2.44.7",
+  "version": "2.44.9",
+  "corpusTag": "v2.44.9",
   "files": {
     "api/.redocly.lint-ignore.yaml": "bf5a8350b88a72fa43f59605ed8d903ed24b6cfccda5e45509c9f6ed9ee4e712",
     "api/asyncapi.yaml": "d5ecb9ee6114582be3b1f662c84bfac9ae96dae7bacb853e461168f70a8e1c7d",
     "api/grpc/openwop.proto": "c3e72bb17cba514ee98feb6434e6c9b6ea6795bfd086489ec69fd882dd1ad977",
     "api/openapi.yaml": "69464bc0e1e71ef3b543a73d4fa4f67202343d2603c80af8033f6c3619ef1b30",
     "api/redocly.yaml": "b0604c89b2ca6d5076ec25725c539dad44a741a811fe524439ee6daef8baa09f",
-    "api/seams-v2.yaml": "99305cbee2bbb0f19fe9fce9894dc956f065b8d015b73fdf260d8caf3e116db1",
-    "api/v2/asyncapi.yaml": "204f599e5b45249a6a8b3019f135116173684182497f6a733cf5a7fccc20807f",
-    "api/v2/openapi.yaml": "979fad796d37f5284eeef749cacb824d5412f00058a7d83d47c7f6e838d87d43",
+    "api/seams-v2.yaml": "57cf1d472f2bf9bf61bcd2239b9fd43277072d02a367d7a85725aea0e01300db",
+    "api/v2/asyncapi.yaml": "40cb3ee66657a736b92c6f79241169e3669486058a65e143d99509d41d691d67",
+    "api/v2/openapi.yaml": "08581315aa90da54f9a1c56f8b972a801eec99bda752d92c3ea2b16113b33a92",
     "api/v2/redocly.yaml": "1e66b60e6118ad11a823bb620678be464d99dfe50a40e3e6f93ec9429b88b34c",
     "schemas/README.md": "0c0b737ffcf8f30e7d2809cec8a498232de710f41443212922ad8337cdde0b51",
     "schemas/a2a-task-state.schema.json": "75d5049dea8bd873ff0e7546f1c60c8d36c219bec7084264360be54a8be30ae1",
@@ -204,7 +204,7 @@
     "schemas/workspace-file.schema.json": "464de85c2a068243084ee9c1d969bc7cd5d8f7948574e58450d6493c38a0e1e4",
     "spec/v1/alias-detectors.json": "0b2f28808ffe0b9d98a187775038c3406bb70919747a788a6e4f866e293ae6d3",
     "spec/v1/capability-declaration-classes.json": "e7729aed5c4b4e1dd02abab0530f14cc95f5d4070fe51fb139e7f5cccefa00c6",
-    "spec/v1/core-standard-manifest.json": "7b446eab4e5028a786e8b097b55671c3a22b61aace20c8e3478040519fbb9eac",
+    "spec/v1/core-standard-manifest.json": "cdc802f553a24b2ea8288370a54a9cf9a88d65bb80ec33c258c8fe2d2737edd1",
     "spec/v1/deprecations.json": "a3293072ea951857395d05f0437264e88965f1e9019ff61c55bacfa9c1aaa17c",
     "spec/v1/deprecations.schema.json": "3e393c405d2a41b467d8c5e3c468549078df1ce6a6d2588fc488097b95d9b55b",
     "spec/v1/event-codemap.json": "3da60d884157793a360da532a9fcbbfb5285636db325a74cec94b34622186d97",
@@ -303,9 +303,9 @@
     "spec/v2/path-manifest.json": "17298a245c5da9a70aa7ab0b7f2db4277e06209d6fcdd7187a8b4cea179c08f3",
     "spec/v2/peer-dependency-aliases.json": "d10299280abee08258502925bc327293ee413e0108cd6e6ec75ff6110653308d",
     "spec/v2/profiles.json": "180beb9ef2d161766fa23b2987e7e829851e3d316273147cf6a4a3f324befd6b",
-    "spec/v2/release.json": "a0f3cf27cb26a50a217b96d2695cf58d77373c6b315359ac275493a0e01f44c4",
+    "spec/v2/release.json": "0219a1874302b4f3f2e8494d3c972cb649483838f53076e612c04bdf298c56dd",
     "spec/v2/retention-floors.json": "eaf3722d95c79947af1d4269ef85117e126518c588cfcf1a2b21b97269f51624",
-    "spec/v2/surface-baseline.json": "03d6ae15f694dc96ec7e3f4a19387e80b939a89c9435c309803085fafcd9b706"
+    "spec/v2/surface-baseline.json": "88e9e211ec1c8d532c413b7407a15f15a3001099b9cda77f2bcc694028a72544"
   },
-  "corpusCommit": "8d99b484cb25dc85e36ba60a419f5abe7b5c9e21"
+  "corpusCommit": "16a175bf4ad0485d8c1eefe97a83bfbc8d1057bc"
 }

package/src/scenarios/eventOrdering.test.ts

@@ -21,9 +21,11 @@ import { pollUntilTerminal } from '../lib/polling.js';
 import { isFixtureAdvertised } from '../lib/fixtures.js';
 import { req } from '../lib/requirement-ids.js';
 import { blockedDespiteAssertions } from '../lib/soft-skip.js';
+import { softSkip } from '../lib/soft-skip.js';
 
 const NOOP_WORKFLOW_ID = 'conformance-noop';
 const SKIP_NO_NOOP = !isFixtureAdvertised(NOOP_WORKFLOW_ID);
+const NO_FIXTURE_REASON = `precondition not met — \`${NOOP_WORKFLOW_ID}\` is not advertised, so this host cannot witness the eventOrdering floor. RFC 0148 §A: \`blocked\`, naming the fixture (#1686: a describe-level skip recorded no disposition, and an unrecorded floor rejected the whole certification)`;
 
 interface RawEvent {
   // Event shape may use `seq` or `sequence` depending on host's event-
@@ -49,8 +51,9 @@ function getSeq(event: RawEvent): number | null {
 // always yields a readable events[] of at least two. A host that does not was
 // never observed ordering anything — until 2026-09-27 these recorded a
 // partial-witness PASS.
-describe.skipIf(SKIP_NO_NOOP)('event-ordering: polling returns events in monotonic order', () => {
+describe('event-ordering: polling returns events in monotonic order', () => {
   it('events from a single poll have non-decreasing sequence numbers', async () => {
+    if (SKIP_NO_NOOP) return softSkip('blocked', NO_FIXTURE_REASON);
     const create = await driver.post('/v1/runs', { workflowId: NOOP_WORKFLOW_ID });
     expect(create.status).toBe(201);
     const runId = (create.json as { runId: string }).runId;
@@ -76,6 +79,7 @@ describe.skipIf(SKIP_NO_NOOP)('event-ordering: polling returns events in monoton
   });
 
   it('repeated polls of a terminal run yield identical event sequences', async () => {
+    if (SKIP_NO_NOOP) return softSkip('blocked', NO_FIXTURE_REASON);
     const create = await driver.post('/v1/runs', { workflowId: NOOP_WORKFLOW_ID });
     expect(create.status).toBe(201);
     const runId = (create.json as { runId: string }).runId;
@@ -106,8 +110,9 @@ describe.skipIf(SKIP_NO_NOOP)('event-ordering: polling returns events in monoton
   });
 });
 
-describe.skipIf(SKIP_NO_NOOP)('event-ordering: terminal run has at most one terminal event', () => {
+describe('event-ordering: terminal run has at most one terminal event', () => {
   it('event stream contains exactly one of run.completed / run.failed / run.cancelled', async () => {
+    if (SKIP_NO_NOOP) return softSkip('blocked', NO_FIXTURE_REASON);
     const create = await driver.post('/v1/runs', { workflowId: NOOP_WORKFLOW_ID });
     expect(create.status).toBe(201);
     const runId = (create.json as { runId: string }).runId;
@@ -129,6 +134,7 @@ describe.skipIf(SKIP_NO_NOOP)('event-ordering: terminal run has at most one term
   });
 
   it('the terminal event is the LAST event in the stream', async () => {
+    if (SKIP_NO_NOOP) return softSkip('blocked', NO_FIXTURE_REASON);
     const create = await driver.post('/v1/runs', { workflowId: NOOP_WORKFLOW_ID });
     expect(create.status).toBe(201);
     const runId = (create.json as { runId: string }).runId;

package/src/scenarios/failure-path.test.ts

@@ -9,12 +9,15 @@ import { driver } from '../lib/driver.js';
 import { pollUntilTerminal } from '../lib/polling.js';
 import { isFixtureAdvertised } from '../lib/fixtures.js';
 import { req } from '../lib/requirement-ids.js';
+import { softSkip } from '../lib/soft-skip.js';
 
 const WORKFLOW_ID = 'conformance-failure';
 const SKIP_NO_FIXTURE = !isFixtureAdvertised(WORKFLOW_ID);
+const NO_FIXTURE_REASON = `precondition not met — \`${WORKFLOW_ID}\` is not advertised, so this host cannot witness the failure-path floor. RFC 0148 §A: \`blocked\`, naming the fixture (#1686: a describe-level skip recorded no disposition, and an unrecorded floor rejected the whole certification)`;
 
-describe.skipIf(SKIP_NO_FIXTURE)('failure: conformance-failure fixture reaches terminal `failed`', () => {
+describe('failure: conformance-failure fixture reaches terminal `failed`', () => {
   it('POST /v1/runs accepts the run and run terminates as failed with structured error', async () => {
+    if (SKIP_NO_FIXTURE) return softSkip('blocked', NO_FIXTURE_REASON);
     const create = await driver.post('/v1/runs', { workflowId: WORKFLOW_ID });
     expect(create.status, req('openwop.it.failure-path.post-v1-runs-accepts-the-run-and-run-terminates-as-failed-with-structured-error', 
       'rest-endpoints.md',

package/src/scenarios/idempotency.test.ts

@@ -19,16 +19,19 @@ import { driver } from '../lib/driver.js';
 import { isFixtureAdvertised } from '../lib/fixtures.js';
 import { readErrorCode } from '../lib/error-envelope.js';
 import { req } from '../lib/requirement-ids.js';
+import { softSkip } from '../lib/soft-skip.js';
 
 const WORKFLOW_ID = 'conformance-idempotent';
 const SKIP_NO_FIXTURE = !isFixtureAdvertised(WORKFLOW_ID);
+const NO_FIXTURE_REASON = `precondition not met — \`${WORKFLOW_ID}\` is not advertised, so this host cannot witness the idempotency floor. RFC 0148 §A: \`blocked\`, naming the fixture (#1686: a describe-level skip recorded no disposition, and an unrecorded floor rejected the whole certification)`;
 
 function freshKey(suffix: string): string {
   return `openwop-conformance-${Date.now()}-${Math.random().toString(36).slice(2, 8)}-${suffix}`;
 }
 
-describe.skipIf(SKIP_NO_FIXTURE)('idempotency: same key + same body replays per idempotency.md §Layer 1', () => {
+describe('idempotency: same key + same body replays per idempotency.md §Layer 1', () => {
   it('returns same runId twice and sets openwop-Idempotent-Replay on the replay', async () => {
+    if (SKIP_NO_FIXTURE) return softSkip('blocked', NO_FIXTURE_REASON);
     const key = freshKey('replay');
     const body = { workflowId: WORKFLOW_ID, inputs: { nonce: 'abc-123' } };
 
@@ -66,8 +69,9 @@ describe.skipIf(SKIP_NO_FIXTURE)('idempotency: same key + same body replays per
   });
 });
 
-describe.skipIf(SKIP_NO_FIXTURE)('idempotency: same key + different body conflicts per idempotency.md §Layer 1', () => {
+describe('idempotency: same key + different body conflicts per idempotency.md §Layer 1', () => {
   it('returns 409 when the body changes under the same key', async () => {
+    if (SKIP_NO_FIXTURE) return softSkip('blocked', NO_FIXTURE_REASON);
     const key = freshKey('conflict');
 
     const first = await driver.post(

package/src/scenarios/interrupt-clarification.test.ts

@@ -11,13 +11,16 @@ import { driver } from '../lib/driver.js';
 import { pollUntilStatus, pollUntilTerminal } from '../lib/polling.js';
 import { isFixtureAdvertised } from '../lib/fixtures.js';
 import { req } from '../lib/requirement-ids.js';
+import { softSkip } from '../lib/soft-skip.js';
 
 const WORKFLOW_ID = 'conformance-clarification';
 const NODE_ID = 'ask';
 const SKIP_NO_FIXTURE = !isFixtureAdvertised(WORKFLOW_ID);
+const NO_FIXTURE_REASON = `precondition not met — \`${WORKFLOW_ID}\` is not advertised, so this host cannot witness the interrupt-clarification floor. RFC 0148 §A: \`blocked\`, naming the fixture (#1686: a describe-level skip recorded no disposition, and an unrecorded floor rejected the whole certification)`;
 
-describe.skipIf(SKIP_NO_FIXTURE)('interrupt: clarification answers resume to `completed`', () => {
+describe('interrupt: clarification answers resume to `completed`', () => {
   it('run suspends at ask, answers payload drives terminal completed', async () => {
+    if (SKIP_NO_FIXTURE) return softSkip('blocked', NO_FIXTURE_REASON);
     const create = await driver.post('/v1/runs', { workflowId: WORKFLOW_ID });
     expect(create.status).toBe(201);
     const runId = (create.json as { runId: string }).runId;

package/src/scenarios/replay-fork.test.ts

@@ -33,6 +33,7 @@ import { req } from '../lib/requirement-ids.js';
 
 const SOURCE_WORKFLOW_ID = 'conformance-noop';
 const SKIP_NO_NOOP = !isFixtureAdvertised(SOURCE_WORKFLOW_ID);
+const NO_FIXTURE_REASON = `precondition not met — \`${SOURCE_WORKFLOW_ID}\` is not advertised, so this host cannot witness the replay-fork floor. RFC 0148 §A: \`blocked\`, naming the fixture (#1686: a describe-level skip recorded no disposition, and an unrecorded floor rejected the whole certification)`;
 
 async function fetchReplayModes(): Promise<readonly string[]> {
   const res = await driver.get('/.well-known/openwop', { authenticated: false });
@@ -56,8 +57,9 @@ async function startAndFinishNoop(): Promise<string> {
   return runId;
 }
 
-describe.skipIf(SKIP_NO_NOOP)('replay: fork from fromSeq=0 in replay mode', () => {
+describe('replay: fork from fromSeq=0 in replay mode', () => {
   it('produces a new run that reaches terminal `completed`', async (ctx) => {
+    if (SKIP_NO_NOOP) return softSkip('blocked', NO_FIXTURE_REASON);
     const modes = await fetchReplayModes();
     if (!modes.includes('replay')) {
       // Visible skip — earlier this was a silent `return` that
@@ -101,8 +103,9 @@ describe.skipIf(SKIP_NO_NOOP)('replay: fork from fromSeq=0 in replay mode', () =
   });
 });
 
-describe.skipIf(SKIP_NO_NOOP)('replay: fork from fromSeq=0 in branch mode with empty overlay', () => {
+describe('replay: fork from fromSeq=0 in branch mode with empty overlay', () => {
   it('produces a new run that reaches terminal `completed`', async (ctx) => {
+    if (SKIP_NO_NOOP) return softSkip('blocked', NO_FIXTURE_REASON);
     const modes = await fetchReplayModes();
     if (!modes.includes('branch')) {
       softSkip('inapplicable', "host does not advertise the `branch` fork mode — this leg's rule has no path to apply");
@@ -130,7 +133,7 @@ describe.skipIf(SKIP_NO_NOOP)('replay: fork from fromSeq=0 in branch mode with e
   });
 });
 
-describe.skipIf(SKIP_NO_NOOP)('replay: validation errors', () => {
+describe('replay: validation errors', () => {
   // Earlier each of these tests had a silent `return;` early-exit
   // when the host advertised no replay modes (or only the wrong mode for
   // the assertion). That collapsed unexercised paths into vacuous green
@@ -140,6 +143,7 @@ describe.skipIf(SKIP_NO_NOOP)('replay: validation errors', () => {
   // "exercised the validation path and got the expected error code."
 
   it('rejects negative fromSeq with 400', async (ctx) => {
+    if (SKIP_NO_NOOP) return softSkip('blocked', NO_FIXTURE_REASON);
     const modes = await fetchReplayModes();
     if (modes.length === 0) {
       softSkip('inapplicable', "host advertises no usable fork mode for this leg");
@@ -159,6 +163,7 @@ describe.skipIf(SKIP_NO_NOOP)('replay: validation errors', () => {
   });
 
   it('rejects fromSeq beyond source event log length with 422', async (ctx) => {
+    if (SKIP_NO_NOOP) return softSkip('blocked', NO_FIXTURE_REASON);
     const modes = await fetchReplayModes();
     if (modes.length === 0) {
       softSkip('inapplicable', "host advertises no usable fork mode for this leg");
@@ -180,6 +185,7 @@ describe.skipIf(SKIP_NO_NOOP)('replay: validation errors', () => {
   });
 
   it('rejects replay mode with non-empty runOptionsOverlay (overlay is branch-only)', async (ctx) => {
+    if (SKIP_NO_NOOP) return softSkip('blocked', NO_FIXTURE_REASON);
     const modes = await fetchReplayModes();
     if (!modes.includes('replay')) {
       // The rule under test (`replay` + non-empty `runOptionsOverlay`
@@ -206,6 +212,7 @@ describe.skipIf(SKIP_NO_NOOP)('replay: validation errors', () => {
   });
 
   it('rejects fork on a non-existent run with 404', async (ctx) => {
+    if (SKIP_NO_NOOP) return softSkip('blocked', NO_FIXTURE_REASON);
     const modes = await fetchReplayModes();
     if (modes.length === 0) {
       softSkip('inapplicable', "host advertises no usable fork mode for this leg");

package/src/scenarios/runs-lifecycle.test.ts

@@ -14,12 +14,15 @@ import { driver } from '../lib/driver.js';
 import { pollUntilTerminal } from '../lib/polling.js';
 import { isFixtureAdvertised } from '../lib/fixtures.js';
 import { req } from '../lib/requirement-ids.js';
+import { softSkip } from '../lib/soft-skip.js';
 
 const NOOP_WORKFLOW_ID = 'conformance-noop';
 const SKIP_NO_NOOP = !isFixtureAdvertised(NOOP_WORKFLOW_ID);
+const NO_FIXTURE_REASON = `precondition not met — \`${NOOP_WORKFLOW_ID}\` is not advertised, so this host cannot witness the runs-lifecycle floor. RFC 0148 §A: \`blocked\`, naming the fixture (#1686: a describe-level skip recorded no disposition, and an unrecorded floor rejected the whole certification)`;
 
-describe.skipIf(SKIP_NO_NOOP)('run lifecycle: conformance-noop fixture', () => {
+describe('run lifecycle: conformance-noop fixture', () => {
   it('POST /v1/runs returns 201 with runId per rest-endpoints.md', async () => {
+    if (SKIP_NO_NOOP) return softSkip('blocked', NO_FIXTURE_REASON);
     const res = await driver.post('/v1/runs', { workflowId: NOOP_WORKFLOW_ID });
 
     expect(res.status, req('openwop.it.runs-lifecycle.post-v1-runs-returns-201-with-runid-per-rest-endpoints-md', 
@@ -39,6 +42,7 @@ describe.skipIf(SKIP_NO_NOOP)('run lifecycle: conformance-noop fixture', () => {
   });
 
   it('reaches terminal `completed` within bounded time per fixtures.md noop spec', async () => {
+    if (SKIP_NO_NOOP) return softSkip('blocked', NO_FIXTURE_REASON);
     const create = await driver.post('/v1/runs', { workflowId: NOOP_WORKFLOW_ID });
     expect(create.status).toBe(201);
     const runId = (create.json as { runId: string }).runId;
@@ -57,6 +61,7 @@ describe.skipIf(SKIP_NO_NOOP)('run lifecycle: conformance-noop fixture', () => {
   });
 
   it('GET /v1/runs/{nonexistentId} returns 404 (or 403) per rest-endpoints.md', async () => {
+    if (SKIP_NO_NOOP) return softSkip('blocked', NO_FIXTURE_REASON);
     const res = await driver.get('/v1/runs/openwop-conformance-this-run-id-does-not-exist');
     expect(
       [403, 404].includes(res.status),

package/src/scenarios/stream-modes-buffer.test.ts

@@ -23,17 +23,20 @@ import { subscribe } from '../lib/sse.js';
 import { pollUntilTerminal } from '../lib/polling.js';
 import { isFixtureAdvertised } from '../lib/fixtures.js';
 import { req } from '../lib/requirement-ids.js';
+import { softSkip } from '../lib/soft-skip.js';
 
 const WORKFLOW_ID = 'conformance-delay';
 const SKIP_NO_FIXTURE = !isFixtureAdvertised(WORKFLOW_ID);
+const NO_FIXTURE_REASON = `precondition not met — \`${WORKFLOW_ID}\` is not advertised, so this host cannot witness the stream-modes-buffer floor. RFC 0148 §A: \`blocked\`, naming the fixture (#1686: a describe-level skip recorded no disposition, and an unrecorded floor rejected the whole certification)`;
 
 interface RunEventDoc {
   readonly type: string;
   readonly sequence: number;
 }
 
-describe.skipIf(SKIP_NO_FIXTURE)('stream-modes-buffer: ?bufferMs= aggregation hint', () => {
+describe('stream-modes-buffer: ?bufferMs= aggregation hint', () => {
   it('accepts bufferMs in range and emits at least one event: batch frame', async () => {
+    if (SKIP_NO_FIXTURE) return softSkip('blocked', NO_FIXTURE_REASON);
     const create = await driver.post('/v1/runs', { workflowId: WORKFLOW_ID });
     expect(create.status).toBe(201);
     const runId = (create.json as { runId: string }).runId;
@@ -70,6 +73,7 @@ describe.skipIf(SKIP_NO_FIXTURE)('stream-modes-buffer: ?bufferMs= aggregation hi
   });
 
   it('rejects out-of-range bufferMs with 400 validation_error', async () => {
+    if (SKIP_NO_FIXTURE) return softSkip('blocked', NO_FIXTURE_REASON);
     const create = await driver.post('/v1/runs', { workflowId: WORKFLOW_ID });
     const runId = (create.json as { runId: string }).runId;
 
@@ -88,6 +92,7 @@ describe.skipIf(SKIP_NO_FIXTURE)('stream-modes-buffer: ?bufferMs= aggregation hi
   });
 
   it('forces flush on terminal — run.completed arrives bundled in a batch BEFORE the timer fires', async () => {
+    if (SKIP_NO_FIXTURE) return softSkip('blocked', NO_FIXTURE_REASON);
     const create = await driver.post('/v1/runs', { workflowId: WORKFLOW_ID });
     const runId = (create.json as { runId: string }).runId;
 
@@ -132,6 +137,7 @@ describe.skipIf(SKIP_NO_FIXTURE)('stream-modes-buffer: ?bufferMs= aggregation hi
   });
 
   it('bufferMs=0 behaves identically to omitting (per-event mode)', async () => {
+    if (SKIP_NO_FIXTURE) return softSkip('blocked', NO_FIXTURE_REASON);
     const create = await driver.post('/v1/runs', { workflowId: WORKFLOW_ID });
     const runId = (create.json as { runId: string }).runId;
 

package/src/scenarios/stream-modes-mixed.test.ts

@@ -22,16 +22,19 @@ import { subscribe, type SseEvent } from '../lib/sse.js';
 import { pollUntilTerminal } from '../lib/polling.js';
 import { isFixtureAdvertised } from '../lib/fixtures.js';
 import { req } from '../lib/requirement-ids.js';
+import { softSkip } from '../lib/soft-skip.js';
 
 const WORKFLOW_ID = 'conformance-delay';
 const SKIP_NO_FIXTURE = !isFixtureAdvertised(WORKFLOW_ID);
+const NO_FIXTURE_REASON = `precondition not met — \`${WORKFLOW_ID}\` is not advertised, so this host cannot witness the stream-modes-mixed floor. RFC 0148 §A: \`blocked\`, naming the fixture (#1686: a describe-level skip recorded no disposition, and an unrecorded floor rejected the whole certification)`;
 
 function eventTypes(events: readonly SseEvent[]): string[] {
   return events.map((e) => e.event);
 }
 
-describe.skipIf(SKIP_NO_FIXTURE)('stream-modes-mixed: comma-separated subsets', () => {
+describe('stream-modes-mixed: comma-separated subsets', () => {
   it('accepts streamMode=updates,messages and emits a server-closed stream', async () => {
+    if (SKIP_NO_FIXTURE) return softSkip('blocked', NO_FIXTURE_REASON);
     const create = await driver.post('/v1/runs', {
       workflowId: WORKFLOW_ID,
       inputs: { delayMs: 500 },
@@ -62,6 +65,7 @@ describe.skipIf(SKIP_NO_FIXTURE)('stream-modes-mixed: comma-separated subsets',
   });
 
   it('rejects streamMode=values,updates with 400 + unsupported_stream_mode', async () => {
+    if (SKIP_NO_FIXTURE) return softSkip('blocked', NO_FIXTURE_REASON);
     const create = await driver.post('/v1/runs', {
       workflowId: WORKFLOW_ID,
       inputs: { delayMs: 100 },
@@ -96,6 +100,7 @@ describe.skipIf(SKIP_NO_FIXTURE)('stream-modes-mixed: comma-separated subsets',
   });
 
   it('rejects streamMode=updates,bogus (one bad mode fails the whole list)', async () => {
+    if (SKIP_NO_FIXTURE) return softSkip('blocked', NO_FIXTURE_REASON);
     const create = await driver.post('/v1/runs', {
       workflowId: WORKFLOW_ID,
       inputs: { delayMs: 100 },
@@ -114,6 +119,7 @@ describe.skipIf(SKIP_NO_FIXTURE)('stream-modes-mixed: comma-separated subsets',
   });
 
   it('mixed mode union: updates,debug sees every event updates sees', async () => {
+    if (SKIP_NO_FIXTURE) return softSkip('blocked', NO_FIXTURE_REASON);
     // Run twice — once with updates only, once with updates,debug.
     // The mixed-mode response MUST be a superset of the updates-only
     // response (union semantics).

package/src/scenarios/stream-modes.test.ts

@@ -12,9 +12,11 @@ import { driver } from '../lib/driver.js';
 import { subscribe, type SseEvent } from '../lib/sse.js';
 import { isFixtureAdvertised } from '../lib/fixtures.js';
 import { req } from '../lib/requirement-ids.js';
+import { softSkip } from '../lib/soft-skip.js';
 
 const WORKFLOW_ID = 'conformance-delay';
 const SKIP_NO_FIXTURE = !isFixtureAdvertised(WORKFLOW_ID);
+const NO_FIXTURE_REASON = `precondition not met — \`${WORKFLOW_ID}\` is not advertised, so this host cannot witness the stream-modes floor. RFC 0148 §A: \`blocked\`, naming the fixture (#1686: a describe-level skip recorded no disposition, and an unrecorded floor rejected the whole certification)`;
 
 async function startDelayRun(delayMs: number): Promise<string> {
   const create = await driver.post('/v1/runs', {
@@ -31,8 +33,9 @@ function eventTypes(events: readonly SseEvent[]): string[] {
   return events.map((e) => e.event);
 }
 
-describe.skipIf(SKIP_NO_FIXTURE)('stream-modes: updates (default) closes on terminal event', () => {
+describe('stream-modes: updates (default) closes on terminal event', () => {
   it('emits at least run.started + run.completed and server closes the stream', async () => {
+    if (SKIP_NO_FIXTURE) return softSkip('blocked', NO_FIXTURE_REASON);
     const runId = await startDelayRun(1_000);
     const { events, closedBy } = await subscribe(
       `/v1/runs/${encodeURIComponent(runId)}/events?streamMode=updates`,
@@ -56,8 +59,9 @@ describe.skipIf(SKIP_NO_FIXTURE)('stream-modes: updates (default) closes on term
   });
 });
 
-describe.skipIf(SKIP_NO_FIXTURE)('stream-modes: invalid streamMode is rejected', () => {
+describe('stream-modes: invalid streamMode is rejected', () => {
   it('returns 400 and a structured error body', async () => {
+    if (SKIP_NO_FIXTURE) return softSkip('blocked', NO_FIXTURE_REASON);
     const runId = await startDelayRun(1_000);
     const res = await driver.get(
       `/v1/runs/${encodeURIComponent(runId)}/events?streamMode=does-not-exist`,
@@ -86,8 +90,9 @@ describe.skipIf(SKIP_NO_FIXTURE)('stream-modes: invalid streamMode is rejected',
   });
 });
 
-describe.skipIf(SKIP_NO_FIXTURE)('stream-modes: values mode is reachable + closes on terminal', () => {
+describe('stream-modes: values mode is reachable + closes on terminal', () => {
   it('returns 200 + emits at least one event + server-closes per stream-modes.md §values', async () => {
+    if (SKIP_NO_FIXTURE) return softSkip('blocked', NO_FIXTURE_REASON);
     const runId = await startDelayRun(1_000);
     const result = await subscribe(
       `/v1/runs/${encodeURIComponent(runId)}/events?streamMode=values`,
@@ -110,8 +115,9 @@ describe.skipIf(SKIP_NO_FIXTURE)('stream-modes: values mode is reachable + close
   });
 });
 
-describe.skipIf(SKIP_NO_FIXTURE)('stream-modes: debug emits at least as many events as updates', () => {
+describe('stream-modes: debug emits at least as many events as updates', () => {
   it('debug stream is a superset of updates per stream-modes.md mode-mapping', async () => {
+    if (SKIP_NO_FIXTURE) return softSkip('blocked', NO_FIXTURE_REASON);
     const runIdUpdates = await startDelayRun(1_000);
     const updatesResult = await subscribe(
       `/v1/runs/${encodeURIComponent(runIdUpdates)}/events?streamMode=updates`,

package/src/scenarios/v2-webhook-durable-delivery.test.ts

@@ -8,6 +8,10 @@
  * (`spec/v2/core/webhooks.md` §Durability; security-defaults.md §Webhook
  * durability; RFC 0173 §B row C6.3).
  *
+ * The last leg (suite 2.44.8, openwop#1781) reads "deliver each matching event
+ * at least once" across a whole run, with a receiver that never fails: see
+ * `webhook-delivery-complete` below.
+ *
  * How the receiver is driven: the suite boots its own HTTP receiver (the same
  * shape `webhook-signed-delivery.test.ts` uses) in a FAILING mode — it answers
  * `500` to the first N attempts for a delivery key and `204` afterwards — so
@@ -35,7 +39,7 @@ import { absenceIsUnmeasured, noDeliveryCause, startScopedReceiver, type ScopedR
 import { readErrorCode } from '../lib/error-envelope.js';
 import { blockedDespiteAssertions, softSkip } from '../lib/soft-skip.js';
 import { req } from '../lib/requirement-ids.js';
-import { pastAdvertisedBound, retryTestTimeoutMs, retryWaitCapMs, retryWaitFor, retryWaitSelection, waitObservation, windowClosedNote } from '../lib/webhook-retry-window.js';
+import { pastAdvertisedBound, retryTestTimeoutMs, retryWaitCapMs, retryWaitFor, retryWaitSelection, waitObservation, waitPathNote, windowClosedNote } from '../lib/webhook-retry-window.js';
 import { noteObservation } from '../lib/row-observation.js';
 
 export const REQUIRES_HOST_CALLBACK = 'the host POSTs and retries webhook deliveries to the suite-owned scoped receiver behind OPENWOP_WEBHOOK_RECEIVER_URL';
@@ -43,7 +47,7 @@ export const REQUIRES_HOST_CALLBACK = 'the host POSTs and retries webhook delive
 const FIXTURE = 'conformance-noop';
 const TERMINAL = new Set(['completed', 'failed', 'cancelled']);
 
-interface Attempt { readonly key: string; readonly runId: string | null; readonly webhookId: string; readonly status: number; readonly at: number }
+interface Attempt { readonly key: string; readonly runId: string | null; readonly webhookId: string; readonly sequence: number | null; readonly status: number; readonly at: number }
 
 /**
  * A receiver that fails the first `failFirst` attempts for each delivery key
@@ -75,7 +79,7 @@ async function startReceiver(failFirst: number): Promise<ScopedReceiver & { atte
     const n = (seen.get(key) ?? 0) + 1;
     seen.set(key, n);
     const status = n <= failFirst ? 500 : 204;
-    attempts.push({ key, runId, webhookId, status, at: Date.now() });
+    attempts.push({ key, runId, webhookId, sequence: typeof sequence === 'number' ? sequence : null, status, at: Date.now() });
     res.writeHead(status);
     res.end();
   });
@@ -275,6 +279,32 @@ async function register(rx: ScopedReceiver): Promise<{ webhookId: string } | nul
   return { webhookId: webhookId as string };
 }
 
+/**
+ * `webhook-delivery-complete` (suite 2.44.8, openwop#1781): the lifecycle types
+ * a one-node run emits. The EXPECTED deliveries are still read from the host's
+ * own log, so the suite assumes nothing about what the fixture emits.
+ */
+const COMPLETE_ID = 'openwop.requirement.0173.webhook-delivery-complete';
+const COMPLETE_TYPES = ['run.started', 'node.started', 'node.completed', 'run.completed'] as const;
+const COMPLETE_TERMINAL_WAIT_MS = 30_000;
+
+/** The run's logged events of a subscribed type, by sequence; null when the log is unreadable or carries no sequences. */
+async function subscribedLog(runId: string): Promise<Map<number, string> | null> {
+  const res = await driver.get(`/runs/${encodeURIComponent(runId)}/events/poll?timeout=1`);
+  if (res.status !== 200) return null;
+  const events = (res.json as { events?: Array<{ type?: unknown; sequence?: unknown }> } | null)?.events;
+  if (!Array.isArray(events)) return null;
+  const want = new Map<number, string>();
+  for (const e of events) {
+    if (typeof e.type !== 'string' || !(COMPLETE_TYPES as readonly string[]).includes(e.type)) continue;
+    if (typeof e.sequence !== 'number') return null;
+    want.set(e.sequence, e.type);
+  }
+  return want;
+}
+
+const bareId = (id: string): string => (id.includes('/') ? id.slice(id.indexOf('/') + 1) : id);
+
 describe('RFC 0173 §B — webhook-durable-delivery (gated on webhooks)', () => {
   it('a failed attempt is retried and the event is delivered at least once', async () => {
     const doc = await discovery();
@@ -626,4 +656,93 @@ describe('RFC 0173 §B — webhook-durable-delivery (gated on webhooks)', () =>
       req('openwop.requirement.0188.dead-letter-content-free', 'RFC 0188 §B.1', `a dead-letter record MUST NOT carry the delivered body, headers or subscription secret — the queue is precisely the traffic the subscriber never received, so a record carrying any of it turns one read scope into a replay of that traffic for the whole retention window (read ${rows.length} record(s))`),
     ).toBe(true);
   }, DEAD_LETTER_TEST_TIMEOUT_MS);
+  /**
+   * openwop#1781: "deliver each matching event at least once" binds EVERY
+   * matching event, and no row read it that way. `v2-webhook-delivery-shape`
+   * records `blocked` on a missing delivery; `v2-webhook-standard-webhooks-delivery`
+   * fails only on a missing `run.completed`; the legs above subscribe to
+   * `run.completed` alone and drive retries after a FAILING receiver. So a host
+   * that lost part of a run's fan-out certified green. Measured on a tier-2
+   * host: its `run.started` fan-out was fire-and-forget work that Cloud Run CPU
+   * throttling starved once the appending request ended (myndhyve#560); the
+   * only row that reddened was `0215.no-head-of-line`, under the wrong MUST,
+   * and #1780 correctly stopped it convicting.
+   *
+   * One subscription to the four lifecycle types, a receiver that answers 204
+   * to everything, one noop run. Every logged event of a subscribed type must
+   * arrive at least once, deduplicated on `(webhookId, runId, sequence)` — the
+   * triple webhooks.md §Verification names. Duplicates are counted in the
+   * `observed:` detail and never held against the host: at-least-once permits
+   * them. The wait is `retryWaitFor`: the advertised `maxElapsedMs` plus the
+   * grace when the host states one (RFC 0225), else the cap or the floor. It
+   * only bounds how long a missing event is waited for; a healthy receiver
+   * needs no retry.
+   *
+   * Convicts only when some of this run's subscribed events arrived and others
+   * did not, or when nothing arrived and nothing else reached the listener (the
+   * rule the first leg applies). Nothing of this run arriving while other
+   * traffic did is `blocked`: the path works, and what is absent is this
+   * exercise's identity. Negative control: the v2 reference host with its
+   * `run.started` fan-out removed fails this leg naming `run.started`.
+   */
+  it('every logged event of a subscribed type reaches a healthy receiver at least once within the retry bound', async () => {
+    const doc = await discovery();
+    if (!doc) return softSkip('blocked', 'discovery unreachable');
+    if (!(await gateFamily('webhooks'))) return softSkip('inapplicable', 'webhooks family not advertised (gate recorded under openwop.family.webhooks)');
+    if (!fixtureAdvertised(doc, FIXTURE)) return softSkip('inapplicable', `${FIXTURE} fixture not advertised — no run to deliver`);
+
+    const receiver = await startReceiver(0); // 204 to every attempt
+    active = receiver;
+    const reg = await driver.post('/webhooks', { url: receiver.url, events: [...COMPLETE_TYPES] });
+    if (reg.status === 400 && readErrorCode(reg.json) === 'webhook_url_rejected') {
+      if (!receiver.tunnelled) return softSkip('blocked', 'host SSRF guard rejected the loopback receiver (webhooks.md §Egress requires it); set OPENWOP_WEBHOOK_RECEIVER_URL to a public https tunnel in front of the suite receiver');
+      expect.fail(`host rejected the operator-supplied public https receiver (${receiver.url}) with webhook_url_rejected — a public https destination is legitimate under webhooks.md §Egress`);
+    }
+    expect(reg.status, req(COMPLETE_ID, 'webhooks.md §Surfaces', `POST /webhooks MUST answer 201 { webhookId } for events [${COMPLETE_TYPES.join(', ')}], each a v2 event type name`)).toBe(201);
+    const webhookId = (reg.json as { webhookId?: unknown } | null)?.webhookId;
+    expect(typeof webhookId, req(COMPLETE_ID, 'webhooks.md §Surfaces', 'the 201 body MUST carry `webhookId`')).toBe('string');
+    const sub = webhookId as string;
+    try {
+      const create = await driver.post('/runs', { workflowId: FIXTURE });
+      expect(create.status, req(COMPLETE_ID, 'runs.md §Create', 'POST /runs MUST answer 201 for the noop fixture')).toBe(201);
+      const runId = (create.json as { runId: string }).runId;
+      const createdAt = Date.now();
+      const status = await waitTerminal(runId, COMPLETE_TERMINAL_WAIT_MS);
+      if (status === null || !TERMINAL.has(status)) return softSkip('blocked', `the ${FIXTURE} run did not reach a terminal status inside ${COMPLETE_TERMINAL_WAIT_MS}ms (last ${status ?? 'unreadable'}), so its event log, the expected set, is not final`);
+      const want = await subscribedLog(runId);
+      if (want === null) return softSkip('blocked', 'GET /runs/{runId}/events/poll did not yield the run\'s events with a numeric sequence, so the expected deliveries cannot be keyed (webhooks.md §Verification dedupes on sequence)');
+      if (want.size === 0) return softSkip('blocked', `the run's event log holds no event of a subscribed type [${COMPLETE_TYPES.join(', ')}]: nothing to deliver, nothing measured`);
+
+      const ours = (): Attempt[] => receiver.attempts.filter((a) => a.runId !== null && bareId(a.runId) === bareId(runId) && bareId(a.webhookId) === bareId(sub));
+      const missing = (): number[] => {
+        const got = new Set(ours().map((a) => a.sequence));
+        return [...want.keys()].filter((q) => !got.has(q)).sort((a, b) => a - b);
+      };
+      const policy = advertisedRetryPolicy(doc);
+      const selection = retryWaitSelection(policy, RETRY_WAIT_CAP_MS);
+      const deadline = Date.now() + retryWaitFor(policy, RETRY_WAIT_CAP_MS);
+      while (missing().length > 0 && Date.now() < deadline) await new Promise((r) => setTimeout(r, 250));
+
+      const arrivals = ours();
+      const firstAt = new Map<number, number>();
+      for (const a of arrivals) if (a.sequence !== null && want.has(a.sequence) && !firstAt.has(a.sequence)) firstAt.set(a.sequence, a.at);
+      const slowest = firstAt.size === 0 ? null : Math.max(...[...firstAt.values()].map((t) => t - createdAt));
+      const duplicates = arrivals.filter((a) => a.sequence !== null && want.has(a.sequence)).length - firstAt.size;
+      const lost = missing();
+      noteObservation(`${firstAt.size}/${want.size} subscribed event(s) delivered, ${duplicates} duplicate arrival(s); slowest first arrival ${slowest === null ? 'none' : `${slowest}ms after the run was created`}; ${waitPathNote(selection)}`);
+
+      if (arrivals.length === 0 && absenceIsUnmeasured(receiver)) {
+        return blockedDespiteAssertions(noDeliveryCause(receiver, 'delivery for this run'));
+      }
+      const lostList = lost.map((q) => `${want.get(q)} (sequence ${q})`).join(', ');
+      expect(
+        lost,
+        req(COMPLETE_ID, 'webhooks.md §Durability', `the host MUST deliver each matching event at least once; best-effort delivery is not a conforming mode (RFC 0173 §B). ${lost.length} of ${want.size} subscribed event(s) in this run's log never reached the healthy receiver inside ${selection.windowMs}ms: ${lostList}. ${firstAt.size > 0 ? `${firstAt.size} other(s) did arrive, so the receiver was reachable.` : noDeliveryCause(receiver, 'delivery for this run')}`),
+      ).toEqual([]);
+    } finally {
+      // Four lifecycle types on a live subscription would keep fanning every later
+      // run's events at a closed nonce, each retried to exhaustion.
+      try { await driver.delete(`/webhooks/${encodeURIComponent(sub)}`); } catch { /* best effort: the verdict is already recorded */ }
+    }
+  }, retryTestTimeoutMs(1, COMPLETE_TERMINAL_WAIT_MS + WAIT_SLACK_MS));
 });