@openwop/openwop-conformance 2.45.15 → 2.45.17

package/scenario-majors.json

@@ -1,9 +1,9 @@
 {
   "$comment": "GENERATED by conformance/scripts/generate-scenario-majors.mjs (RFC 0168 §D.3). Do not edit; add a file to BOTH_MAJORS in the generator to target both majors.",
   "counts": {
-    "files": 615,
+    "files": 649,
     "v1": 455,
-    "v2": 175
+    "v2": 209
   },
   "majors": {
     "a2a-1-0-agent-card.test.ts": [
@@ -1299,6 +1299,12 @@
     "v2-agent-org-chart-served-shape.test.ts": [
       2
     ],
+    "v2-agent-runtime-advertisement.test.ts": [
+      2
+    ],
+    "v2-ai-envelope-advertisement.test.ts": [
+      2
+    ],
     "v2-ai-envelope-shape-static.test.ts": [
       2
     ],
@@ -1314,12 +1320,24 @@
     "v2-artifact-a2a-shape.test.ts": [
       2
     ],
+    "v2-artifact-created-static.test.ts": [
+      2
+    ],
+    "v2-artifact-type-schema-url.test.ts": [
+      2
+    ],
+    "v2-artifact-types-advertisement.test.ts": [
+      2
+    ],
     "v2-assurance-downgrade-audited.test.ts": [
       2
     ],
     "v2-auth-challenge.test.ts": [
       2
     ],
+    "v2-authorization-advertisement.test.ts": [
+      2
+    ],
     "v2-bound-id-kinds.test.ts": [
       2
     ],
@@ -1350,6 +1368,9 @@
     "v2-chain-pin-exact.test.ts": [
       2
     ],
+    "v2-channel-presence-advertisement.test.ts": [
+      2
+    ],
     "v2-client-version-header.test.ts": [
       2
     ],
@@ -1365,6 +1386,12 @@
     "v2-content-locale-keys.test.ts": [
       2
     ],
+    "v2-conversation-turn-model-provenance-advertisement.test.ts": [
+      2
+    ],
+    "v2-conversation-turn-model-provenance.test.ts": [
+      2
+    ],
     "v2-conversation-turn-parts.test.ts": [
       2
     ],
@@ -1377,6 +1404,27 @@
     "v2-credential-interrupt.test.ts": [
       2
     ],
+    "v2-credentials-advertisement.test.ts": [
+      2
+    ],
+    "v2-data-residency-admission.test.ts": [
+      2
+    ],
+    "v2-data-residency-advertisement.test.ts": [
+      2
+    ],
+    "v2-dead-letter-advertisement.test.ts": [
+      2
+    ],
+    "v2-discovery-etag.test.ts": [
+      2
+    ],
+    "v2-dispatch-input-mapping.test.ts": [
+      2
+    ],
+    "v2-dispatch-loop.test.ts": [
+      2
+    ],
     "v2-dual-stack-negotiation.test.ts": [
       2
     ],
@@ -1395,6 +1443,9 @@
     "v2-enum-growth-rule.test.ts": [
       2
     ],
+    "v2-envelope-contracts-advertisement.test.ts": [
+      2
+    ],
     "v2-envelope-reasoning-shape.test.ts": [
       2
     ],
@@ -1425,6 +1476,9 @@
     "v2-event-type-closed.test.ts": [
       2
     ],
+    "v2-export-bundle-static.test.ts": [
+      2
+    ],
     "v2-ext-family-claims.test.ts": [
       2
     ],
@@ -1521,6 +1575,9 @@
     "v2-mrtr-rounds-ceiling.test.ts": [
       2
     ],
+    "v2-multi-party-conversation-advertisement.test.ts": [
+      2
+    ],
     "v2-negotiation-authenticated.test.ts": [
       2
     ],
@@ -1530,6 +1587,12 @@
     "v2-no-transport-advertisement.test.ts": [
       2
     ],
+    "v2-node-pack-runtimes-advertisement.test.ts": [
+      2
+    ],
+    "v2-nondeterminism-policy-advertisement.test.ts": [
+      2
+    ],
     "v2-oauth-client-pkce-state-iss.test.ts": [
       2
     ],
@@ -1563,6 +1626,9 @@
     "v2-poll-cursor-v2.test.ts": [
       2
     ],
+    "v2-portability-advertisement.test.ts": [
+      2
+    ],
     "v2-preferred-version-default.test.ts": [
       2
     ],
@@ -1578,6 +1644,9 @@
     "v2-prompt-end-to-end-events.test.ts": [
       2
     ],
+    "v2-prompt-library-advertisement.test.ts": [
+      2
+    ],
     "v2-prompt-list-and-fetch.test.ts": [
       2
     ],
@@ -1602,6 +1671,18 @@
     "v2-provider-conflict.test.ts": [
       2
     ],
+    "v2-provider-usage-advertisement.test.ts": [
+      2
+    ],
+    "v2-provider-usage-emission.test.ts": [
+      2
+    ],
+    "v2-provider-usage-payload-static.test.ts": [
+      2
+    ],
+    "v2-purpose-propagation-advertisement.test.ts": [
+      2
+    ],
     "v2-queue-cross-tenant-isolation.test.ts": [
       2
     ],
@@ -1662,12 +1743,21 @@
     "v2-safefetch-ssrf-refused.test.ts": [
       2
     ],
+    "v2-scheduling-advertisement.test.ts": [
+      2
+    ],
     "v2-secret-canary-absent.test.ts": [
       2
     ],
     "v2-secrets-run-witness.test.ts": [
       2
     ],
+    "v2-self-hosted-runner-advertisement.test.ts": [
+      2
+    ],
+    "v2-self-hosted-runner-frames-static.test.ts": [
+      2
+    ],
     "v2-sse-last-event-id-cursor.test.ts": [
       2
     ],
@@ -1683,9 +1773,18 @@
     "v2-stream-sse-projection.test.ts": [
       2
     ],
+    "v2-sub-workflow-advertisement.test.ts": [
+      2
+    ],
     "v2-subject-link-record.test.ts": [
       2
     ],
+    "v2-subworkflow-input-mapping.test.ts": [
+      2
+    ],
+    "v2-subworkflow-linkage.test.ts": [
+      2
+    ],
     "v2-table-schema-enforcement.test.ts": [
       2
     ],
@@ -1704,6 +1803,9 @@
     "v2-trigger-dead-letter-read.test.ts": [
       2
     ],
+    "v2-ui-plugins-advertisement.test.ts": [
+      2
+    ],
     "v2-unadvertised-operation-not-found.test.ts": [
       2
     ],

package/schemas/CORPUS-STAMP.json

@@ -1,17 +1,17 @@
 {
   "_comment": "Provenance of @openwop/spec-artifacts (RFC 0168 §D.2). files: SHA-256 per file; the conformance suite compares the installed peer against dist/spec-artifacts.lock.json at start.",
   "package": "@openwop/spec-artifacts",
-  "version": "2.45.15",
-  "corpusTag": "v2.45.15",
+  "version": "2.45.17",
+  "corpusTag": "v2.45.17",
   "files": {
     "api/.redocly.lint-ignore.yaml": "bf5a8350b88a72fa43f59605ed8d903ed24b6cfccda5e45509c9f6ed9ee4e712",
     "api/asyncapi.yaml": "d5ecb9ee6114582be3b1f662c84bfac9ae96dae7bacb853e461168f70a8e1c7d",
     "api/grpc/openwop.proto": "c3e72bb17cba514ee98feb6434e6c9b6ea6795bfd086489ec69fd882dd1ad977",
     "api/openapi.yaml": "ac6de5303872664b78ff419c035915593e01599e02835e777a0123de1baeb398",
     "api/redocly.yaml": "b0604c89b2ca6d5076ec25725c539dad44a741a811fe524439ee6daef8baa09f",
-    "api/seams-v2.yaml": "b8a98faeb78af296f41b6c4bb926d8c01d45b5b81974d785924d6d4efa939831",
-    "api/v2/asyncapi.yaml": "667763e99e9bbaf49ed0468e2f10fca37a94327fb1d6a6168d011ab4e892066e",
-    "api/v2/openapi.yaml": "be44d7aa5c911d59c2a993206bb9b491070ad8551d03d49be04371cac7e6b6af",
+    "api/seams-v2.yaml": "d963b75d8b3b689a67e276f29024d7d2b58a4b4a79c11b9f2c112b30c5173156",
+    "api/v2/asyncapi.yaml": "a1d8826c7a8c6bc64361a1db69b607025988fc7fb64a2cb52cca0a79f9ace7c5",
+    "api/v2/openapi.yaml": "d9c1a78a13a32c653d148126c7dd086bd25e1394cac2f4a35db6290ffdc7fa3b",
     "api/v2/redocly.yaml": "1e66b60e6118ad11a823bb620678be464d99dfe50a40e3e6f93ec9429b88b34c",
     "schemas/README.md": "bd1c00fae7b6fda506a75aff841bbdc438d4ce092642a72041203bee999b88de",
     "schemas/a2a-task-state.schema.json": "75d5049dea8bd873ff0e7546f1c60c8d36c219bec7084264360be54a8be30ae1",
@@ -118,7 +118,7 @@
     "schemas/v2/audit-verify-result.schema.json": "14af8e9283510f0a40e48a2059c929ee44e0fc9fa3cc66a95bfbe90b17c48297",
     "schemas/v2/budget-policy.schema.json": "1de68095db0beb5c7a4be629de26e79f62ebbe748a88d46f36e768edfd1f0d68",
     "schemas/v2/capabilities.schema.json": "c7a01b2f569139f99ba5e1a5329a42556fbd82bc743f8fd96963304395fc9ef0",
-    "schemas/v2/certification-bundle.schema.json": "82ce31a1ed6c7e21b0ba88ff62a7b8b768fc3b176b1d06fce023203830b94725",
+    "schemas/v2/certification-bundle.schema.json": "012c0176fbe05425507a8096412344388c0e2e1884c5fe1bc189ef1af0532997",
     "schemas/v2/channel-presence-payload.schema.json": "4eeb224910e6f7eee3ab5e7c3899559c25c83a26d0022e0ad195c4672611977a",
     "schemas/v2/channel-written-payload.schema.json": "ccecff3c71a3275ad8db035ac0e04db25e6f8d23cf091ddbcd5a60d1be1cbb6b",
     "schemas/v2/chat-card-pack-manifest.schema.json": "92a57db2fd4b2463f14ef155fef8e3f18afc78960b646459dcf32efc79ff6bf5",
@@ -128,7 +128,7 @@
     "schemas/v2/configurable.schema.json": "33a6884047e2490f723733bf8b74d3b9164e00374cfea6dc3eac5a70dc368861",
     "schemas/v2/connection-pack-manifest.schema.json": "8d019de6bd0c5b14ea3b227580734ec792521493b396a850f7f9217aa7a6a547",
     "schemas/v2/connection-provider-registry.schema.json": "5b404da328a95c45808929e233ee766ebd635cf0df6f5d15d4c19354dfd7e75d",
-    "schemas/v2/conversation-event.schema.json": "9ad4c57285818edbf38b17816de0c4162f777c835f59e68702d0367a81cbccf6",
+    "schemas/v2/conversation-event.schema.json": "51dce69b33e3eb1913b9b2a0fcc0bee3dcf86761faf0c56dd004f4c580c95d39",
     "schemas/v2/conversation-turn.schema.json": "75bb6a4a03072a958feb5b34e2a1f40471e9e3996a81fa430b65717f0773c9a4",
     "schemas/v2/credential-provenance.schema.json": "f86b09e94b1c524dec7d1c6353965665ae8891e9517faef6e742d639c5578c99",
     "schemas/v2/credential-reference.schema.json": "ea699ce30f58fb2c32d4279158b3f730f70be7b2dc8c3037693a76e66eb3e001",
@@ -160,7 +160,7 @@
     "schemas/v2/memory-entry.schema.json": "290576ae84f4fef4cdf975932b87963283b11c50ea3d2654b32cd96aa6537c3d",
     "schemas/v2/memory-list-options.schema.json": "f66703bccb68efb28391c273abb66aa117ee5b5ce475c477846ed700c336afcd",
     "schemas/v2/node-pack-manifest.schema.json": "6e25106c647d58ff6b11c198a83de7f1f988e47c8e3bf9f28ac5f84eef900f5d",
-    "schemas/v2/orchestrator-decision.schema.json": "2da17538e84cfbe70151eb118f1ccf670cff58b8697148e394074d32ac4af6b4",
+    "schemas/v2/orchestrator-decision.schema.json": "4d4b4c5fe73c22a1f42242b403650206ad58fd981f8fd45795894cebe3a514ae",
     "schemas/v2/org-chart-responsibility-view.schema.json": "8a2565e4cdc6737a3946a70799f93642808b92f9c8d56dcdff3a0782053b89a1",
     "schemas/v2/pack-lockfile.schema.json": "2685417702c105146b780cd99154296a46578fbb10d81c8c713348ee26fea898",
     "schemas/v2/part.schema.json": "08b75eaec9a0b4a8cedca7bab732dd906b52b0749eaa444ec1ac015aa43519a5",
@@ -173,7 +173,7 @@
     "schemas/v2/residency.schema.json": "3fd23c9732beb140504e81560fc426eb6764d547e56da5fb92c5a5c7bf04db3a",
     "schemas/v2/run-ancestry-response.schema.json": "334c17f2062dea62726ca1d07b8be3f169cdc422af843c1def5fb317039814c9",
     "schemas/v2/run-diff-response.schema.json": "8bdb2045c274580038bd74781f7d062f5049839797c164a89de4ed89edc53a74",
-    "schemas/v2/run-event-payloads.schema.json": "fc1af4245dec98f7be86d20ad339e3409d0b2aaaa301dace083f734999c470b7",
+    "schemas/v2/run-event-payloads.schema.json": "942d6f65a765f6b574922a54d1e531ab66bc8d5c673a006ec68f8d75f3f0aec9",
     "schemas/v2/run-event.schema.json": "2f0d7416bd376c56affe97b6b2b49981532e8e9ff45c0a162cf806c78b3e7fb7",
     "schemas/v2/run-list-response.schema.json": "c2dbc34768dcf64528914a213aa3cb55952e8e3e90a64b04a9423b2a19749d38",
     "schemas/v2/run-options.schema.json": "f0e9f494d80086c2ed2cf9fe87df54e5b4e66601699c4a1089f4edbc7ba58867",
@@ -207,7 +207,7 @@
     "schemas/workspace-file.schema.json": "464de85c2a068243084ee9c1d969bc7cd5d8f7948574e58450d6493c38a0e1e4",
     "spec/v1/alias-detectors.json": "0b2f28808ffe0b9d98a187775038c3406bb70919747a788a6e4f866e293ae6d3",
     "spec/v1/capability-declaration-classes.json": "e7729aed5c4b4e1dd02abab0530f14cc95f5d4070fe51fb139e7f5cccefa00c6",
-    "spec/v1/core-standard-manifest.json": "430abcd05b35ca4fbb14f21f1d7a76a7408d80a795986b6c6a4aa525870e7624",
+    "spec/v1/core-standard-manifest.json": "2ad9ad7d0d478da17f8b9829997c4fc9b905162e3c2b0c6e4828f50470f7f4e0",
     "spec/v1/deprecations.json": "a3293072ea951857395d05f0437264e88965f1e9019ff61c55bacfa9c1aaa17c",
     "spec/v1/deprecations.schema.json": "3e393c405d2a41b467d8c5e3c468549078df1ce6a6d2588fc488097b95d9b55b",
     "spec/v1/end-of-support.json": "35f0bf3b70fe78b16e2a2fd81a153fc27e703f6c16376c6fe7cdf1f4f2c4e6d4",
@@ -309,9 +309,9 @@
     "spec/v2/path-manifest.json": "b84c7561f50c7df0cb61b202bd6595acad3ee7edca7a45f711949bea3c69bd27",
     "spec/v2/peer-dependency-aliases.json": "d10299280abee08258502925bc327293ee413e0108cd6e6ec75ff6110653308d",
     "spec/v2/profiles.json": "180beb9ef2d161766fa23b2987e7e829851e3d316273147cf6a4a3f324befd6b",
-    "spec/v2/release.json": "75a6a33e253e1015ff582bcd3dbc2ed23cd8bea95e12d34006ee3239c91b71bb",
+    "spec/v2/release.json": "5b6e531003a3c47ed176f1f4fa1777b3b597cb386f31b1bfe4ac962df16ae4a3",
     "spec/v2/retention-floors.json": "eaf3722d95c79947af1d4269ef85117e126518c588cfcf1a2b21b97269f51624",
-    "spec/v2/surface-baseline.json": "49311a9dd16aaa597d1c6724aa24456edd5f372d9b7d0bd6f5f1647f68db6db8"
+    "spec/v2/surface-baseline.json": "273566823eac3465b9f692c9cb795eca669e753bd0e733575b4722d176e115ce"
   },
-  "corpusCommit": "eef96d5601f777c4bf94d9c2a69b06df86948172"
+  "corpusCommit": "725db8ec383cc3d61068846def2d5b90771b8933"
 }

package/src/lib/artifact-schema-url-witness.ts

@@ -0,0 +1,83 @@
+/**
+ * The artifact canonical schema-URL witness (`artifact-type-packs.md`
+ * §Schema distribution), unaided.
+ *
+ * "Its canonical URL and `$id` is
+ * `{HostBase}/schemas/artifacts/{artifactTypeId}.schema.json`, served as
+ * `application/schema+json`. A host advertising `artifactTypes` SHOULD serve
+ * each installed type's schema there, and MUST for a host-registered type whose
+ * `schemaVersion` it advertises."
+ *
+ * The MUST set is read from discovery alone: every `artifactTypes.types[id]`
+ * with `registrationSource: "host"` and an integer `schemaVersion`
+ * (`capabilities.schema.json`: the facet "discloses which §Schema distribution
+ * regime applies"). For each, `GET {HostBase}/schemas/artifacts/{id}.schema.json`:
+ *   served    answers `200`;
+ *   media     with `Content-Type: application/schema+json`;
+ *   schema    a JSON object whose `$id` is an absolute URL ending
+ *             `/schemas/artifacts/{id}.schema.json`.
+ * `{HostBase}` is the base the suite drives the host at (the v2 text does not
+ * define it further), so the `$id`'s origin is not compared: a host fronted by
+ * a public origin legitimately mints its `$id` there.
+ *
+ * {@link driveSchemaUrls} observes and asserts nothing; {@link judgeSchemaUrl}
+ * is pure, proven in `artifact-schema-url-witness.test.ts`.
+ */
+
+import { driver } from './driver.js';
+import type { MajorProfile } from './major-profile.js';
+import { finding, isRecord, skip, type Finding, type Skip } from './fixture-run-observer.js';
+
+const DOC = 'artifact-type-packs.md §Schema distribution';
+
+export interface SchemaUrlObservation {
+  readonly artifactTypeId: string;
+  readonly path: string;
+  readonly status: number;
+  readonly contentType: string | null;
+  readonly json: unknown;
+}
+
+/** The host-registered types whose `schemaVersion` the host advertises, sorted. */
+export function hostRegisteredTypes(profile: MajorProfile, doc: unknown): string[] | Skip {
+  const fam = profile.family(doc, 'artifactTypes');
+  if (fam === null) return skip('inapplicable', 'the host does not advertise artifactTypes');
+  const types = isRecord(fam['types']) ? fam['types'] : {};
+  const ids = Object.entries(types)
+    .filter(([, t]) => isRecord(t) && t['registrationSource'] === 'host' && Number.isInteger(t['schemaVersion']))
+    .map(([id]) => id)
+    .sort();
+  if (ids.length === 0) return skip('inapplicable', 'the host advertises no artifactTypes.types entry with registrationSource "host" and a schemaVersion — serving the canonical URL is only a SHOULD for the rest');
+  return ids;
+}
+
+export const schemaPath = (artifactTypeId: string): string => `/schemas/artifacts/${encodeURIComponent(artifactTypeId)}.schema.json`;
+
+/** Fetch each MUST-served schema. Asserts nothing. */
+export async function driveSchemaUrls(profile: MajorProfile, doc: unknown): Promise<Skip | SchemaUrlObservation[]> {
+  const ids = hostRegisteredTypes(profile, doc);
+  if (!Array.isArray(ids)) return ids;
+  const out: SchemaUrlObservation[] = [];
+  for (const artifactTypeId of ids) {
+    const path = schemaPath(artifactTypeId);
+    const r = await driver.get(path, { headers: { Accept: 'application/schema+json, application/json' } });
+    out.push({ artifactTypeId, path, status: r.status, contentType: r.headers.get('content-type'), json: r.json });
+  }
+  return out;
+}
+
+/** One type's served schema. Pure. */
+export function judgeSchemaUrl(o: SchemaUrlObservation): Finding[] {
+  const media = (o.contentType ?? '').split(';')[0]!.trim().toLowerCase();
+  const id = isRecord(o.json) ? o.json['$id'] : undefined;
+  let idOk = false;
+  if (typeof id === 'string') {
+    try { idOk = /^https?:$/.test(new URL(id).protocol) && id.endsWith(`/schemas/artifacts/${o.artifactTypeId}.schema.json`); } catch { idOk = false; }
+  }
+  return [
+    finding(o.status === 200, DOC, `the host MUST serve host-registered ${o.artifactTypeId}'s schema at ${o.path} (got ${o.status})`),
+    finding(media === 'application/schema+json', DOC, `${o.path} MUST be served as application/schema+json (got ${JSON.stringify(o.contentType)})`),
+    finding(isRecord(o.json), DOC, `${o.path} MUST be a JSON Schema object`),
+    finding(idOk, DOC, `the schema's $id MUST be its canonical URL, {HostBase}/schemas/artifacts/${o.artifactTypeId}.schema.json (got ${JSON.stringify(id)})`),
+  ];
+}

package/src/lib/dispatch-witness.ts

@@ -0,0 +1,212 @@
+/**
+ * The `core.dispatch` witnesses, fixture ports through `POST /runs` and
+ * `events/poll`. No seam.
+ *
+ * Input mapping (`spec/v2/facets/agents.schema.json` `dispatchMapping`;
+ * `schemas/v2/dispatch-config.schema.json` `inputMapping`), on
+ * `conformance-dispatch-input-mapping[-no-default]` →
+ * `conformance-dispatch-input-mapping-child`. A host advertising
+ * `agents.dispatchMapping: true` honors `inputMapping`, "building child inputs
+ * from parent variables before dispatch": the child receives
+ * `inputs[childKey] = parentVariables[parentKey]`.
+ *   projection  the child's `inputs.childGreeting` is the parent's
+ *               `parentName` ("Alice");
+ *   unset       an unset `parentName` projects to undefined — the child's
+ *               `inputs.childGreeting` is absent, never `null` or a placeholder.
+ *
+ * Supervisor loop (`execution.md` §`multiAgent`, level 1 and level 5), on
+ * `conformance-dispatch-loop`:
+ *   terminates  the run completes; each turn records a decision as
+ *               `runOrchestrator.decided` (`orchestrator.decided` at major 2),
+ *               and the last is `terminate` — `terminate` completes the run,
+ *               so no decision follows it;
+ *   decisions   every decision payload is well-formed (the decision checked
+ *               branch by branch — see {@link decisionBranchValidator}), and
+ *               its `agentId` is the same for the run's lifetime;
+ *   iteration   at `executionModel.version >= 5`, every decision carries
+ *               `iteration`, 1-based, incremented by exactly 1 per turn.
+ *
+ * The drivers observe and assert nothing; the judges are pure, proven in
+ * `dispatch-witness.test.ts`.
+ */
+
+import { isFixtureAdvertised } from './fixtures.js';
+import type { MajorProfile } from './major-profile.js';
+import {
+  completionsOf, finding, isRecord, observed, observeRun, readRun, runCompleted, skip,
+  type Ev, type Finding, type ObservedRun, type ObserveOpts, type Outcome, type RunRead, type Skip, type Validate,
+} from './fixture-run-observer.js';
+
+export const DISPATCH_PARENT_FIXTURE = 'conformance-dispatch-input-mapping';
+export const DISPATCH_NO_DEFAULT_FIXTURE = 'conformance-dispatch-input-mapping-no-default';
+export const DISPATCH_CHILD_FIXTURE = 'conformance-dispatch-input-mapping-child';
+export const DISPATCH_NODE = 'dispatch';
+export const LOOP_FIXTURE = 'conformance-dispatch-loop';
+
+const DOC_MAP = 'agents.schema.json dispatchMapping; dispatch-config.schema.json inputMapping';
+const DOC_LOOP = 'execution.md §multiAgent';
+
+export interface DispatchObservation {
+  readonly parent: ObservedRun;
+  /** How the child was found: the parent's `node.dispatched`, or the dispatch node's `node.completed` outputs. */
+  readonly childRunId: string | undefined;
+  readonly child: RunRead | undefined;
+}
+
+/** `agents.dispatchMapping: true`, the parent fixture and the child fixture. */
+export function dispatchMappingGate(profile: MajorProfile, doc: unknown, fixture: string): Skip | null {
+  const agents = profile.family(doc, 'agents');
+  if (agents === null) return skip('inapplicable', 'the host does not advertise agents');
+  if (agents['dispatchMapping'] !== true) return skip('inapplicable', 'the host does not advertise agents.dispatchMapping: true, so inputMapping does not bind it (it must refuse the field at registration instead)');
+  for (const id of [fixture, DISPATCH_CHILD_FIXTURE]) if (!isFixtureAdvertised(id)) return skip('inapplicable', `fixture ${id} is not advertised — the fixture is the opt-in`);
+  return null;
+}
+
+/** Find the dispatched child: `node.dispatched` naming the child workflow, else the dispatch node's outputs. */
+export function locateChild(profile: MajorProfile, events: readonly Ev[], childWorkflowId: string): string | undefined {
+  const dispatchedType = profile.eventType('node.dispatched') ?? 'node.dispatched';
+  const d = events.find((e) => e.type === dispatchedType && e.payload['childWorkflowId'] === childWorkflowId && typeof e.payload['childRunId'] === 'string');
+  if (d !== undefined) return d.payload['childRunId'] as string;
+  for (const c of completionsOf(events, DISPATCH_NODE)) {
+    const out = c.payload['outputs'];
+    if (isRecord(out) && typeof out['childRunId'] === 'string' && out['childRunId'].length > 0) return out['childRunId'];
+  }
+  return undefined;
+}
+
+/** Run a dispatch input-mapping fixture and follow it to the child. Asserts nothing. */
+export async function driveDispatchMapping(profile: MajorProfile, doc: unknown, fixture: string, opts: ObserveOpts = {}): Promise<Skip | DispatchObservation> {
+  const g = dispatchMappingGate(profile, doc, fixture);
+  if (g) return g;
+  const parent = await observeRun(profile, fixture, opts);
+  const childRunId = locateChild(profile, parent.events, DISPATCH_CHILD_FIXTURE);
+  return { parent, childRunId, child: childRunId === undefined ? undefined : await readRun(profile, childRunId) };
+}
+
+function childInputs(o: DispatchObservation): Skip | { inputs: Record<string, unknown>; reached: Finding[] } {
+  if (o.parent.createStatus !== 201 && o.parent.createStatus !== 202) return { inputs: {}, reached: runCompleted(o.parent) };
+  if (o.childRunId === undefined) return skip('inapplicable', `no v2 rule requires a host to expose the dispatched child, and this one does not: the parent log names no ${DISPATCH_CHILD_FIXTURE} run (no node.dispatched, no dispatch-node outputs.childRunId), so its inputs cannot be read`);
+  const c = o.child;
+  return {
+    inputs: c !== undefined && isRecord(c.snapshot['inputs']) ? c.snapshot['inputs'] : {},
+    reached: [
+      ...runCompleted(o.parent),
+      finding(c?.status === 200, 'runs.md getRun', `the dispatched child run MUST be readable (GET answered ${String(c?.status)})`),
+      finding(c?.snapshot['status'] === 'completed', `fixtures.md ${DISPATCH_CHILD_FIXTURE}`, `the child run MUST end completed (got ${JSON.stringify(c?.snapshot['status'])})`),
+    ],
+  };
+}
+
+/** Leg: the child's inputs carry the parent's projected variable. Pure. */
+export function judgeProjection(o: DispatchObservation): Outcome {
+  const c = childInputs(o);
+  if ('kind' in c) return c;
+  return observed([
+    ...c.reached,
+    finding(c.inputs['childGreeting'] === 'Alice', DOC_MAP, `the child MUST receive inputs.childGreeting = parentVariables.parentName ("Alice"; got ${JSON.stringify(c.inputs['childGreeting'])})`),
+  ]);
+}
+
+/** Leg: an unset parent variable projects to undefined — absent, never null. Pure. */
+export function judgeUnsetProjection(o: DispatchObservation): Outcome {
+  const c = childInputs(o);
+  if ('kind' in c) return c;
+  return observed([
+    ...c.reached,
+    finding(c.inputs['childGreeting'] !== null, `${DOC_MAP} (mirrors execution.md §subWorkflow inputMapping: never null)`, 'an unset parent variable MUST NOT project as null'),
+    finding(!('childGreeting' in c.inputs), DOC_MAP, `inputs[childKey] = parentVariables[parentKey] is undefined for an unset parent variable: inputs.childGreeting MUST be absent (got ${JSON.stringify(c.inputs['childGreeting'])})`),
+  ]);
+}
+
+export interface LoopObservation { readonly run: ObservedRun; readonly decidedType: string; readonly version: number }
+
+/** `multiAgent.executionModel.version >= 1`, the fixture, and this major's event name. */
+export function loopGate(profile: MajorProfile, doc: unknown): Skip | { decidedType: string; version: number } {
+  const ma = profile.family(doc, 'multiAgent');
+  const em = isRecord(ma?.['executionModel']) ? ma['executionModel'] : undefined;
+  const version = em?.['version'];
+  if (typeof version !== 'number' || version < 1) return skip('inapplicable', 'the host does not advertise multiAgent.executionModel (version >= 1), so the supervisor loop does not bind it');
+  if (!isFixtureAdvertised(LOOP_FIXTURE)) return skip('inapplicable', `fixture ${LOOP_FIXTURE} is not advertised — the fixture is the opt-in`);
+  const decidedType = profile.eventType('runOrchestrator.decided');
+  if (decidedType === undefined) return skip('blocked', 'the event codemap is not on disk in this layout — the suite will not guess an event name');
+  return { decidedType, version };
+}
+
+/** Run the loop fixture. Asserts nothing. */
+export async function driveLoop(profile: MajorProfile, doc: unknown, opts: ObserveOpts = {}): Promise<Skip | LoopObservation> {
+  const g = loopGate(profile, doc);
+  if ('kind' in g) return g;
+  return { run: await observeRun(profile, LOOP_FIXTURE, opts), ...g };
+}
+
+const decisions = (o: LoopObservation): Ev[] => o.run.events.filter((e) => e.type === o.decidedType);
+const kindOf = (e: Ev): unknown => (isRecord(e.payload['decision']) ? e.payload['decision']['kind'] : undefined);
+
+/** Leg: decisions are recorded, the last is `terminate`, and it completes the run. Pure. */
+export function judgeLoopTerminates(o: LoopObservation): Outcome {
+  const ds = decisions(o);
+  const firstTerminate = ds.findIndex((e) => kindOf(e) === 'terminate');
+  return observed([
+    ...runCompleted(o.run),
+    finding(ds.length > 0, `${DOC_LOOP} (level 1)`, `each turn MUST record its decision as ${o.decidedType} (got none)`),
+    finding(ds.length > 0 && kindOf(ds[ds.length - 1]!) === 'terminate', `${DOC_LOOP} (level 1: terminate completes the run)`, `the completed loop's last decision MUST be terminate (got ${JSON.stringify(ds.map(kindOf))})`),
+    finding(firstTerminate === -1 || firstTerminate === ds.length - 1, `${DOC_LOOP} (level 1: terminate completes the run)`, `no decision may follow a terminate (got ${JSON.stringify(ds.map(kindOf))})`),
+  ]);
+}
+
+/**
+ * A validator for one `OrchestratorDecision`, by its `oneOf` branches.
+ *
+ * `schemas/v2/orchestrator-decision.schema.json` closes its ROOT with
+ * `additionalProperties: false` and declares no root `properties`, so the
+ * schema as a whole rejects every decision, `kind` included (the v1 root is
+ * open). Validating against it would convict every host. Until the corpus
+ * fixes it, a decision is valid when exactly one branch accepts it.
+ */
+export function decisionBranchValidator(branch: (index: number) => Validate, branches = 3): Validate {
+  const vs = Array.from({ length: branches }, (_, i) => branch(i));
+  return (doc) => {
+    const results = vs.map((v) => v(doc));
+    const ok = results.filter((r) => r.ok).length === 1;
+    return { ok, errors: ok ? '' : results.map((r, i) => `branch ${i}: ${r.errors || 'accepted'}`).join(' | ') };
+  };
+}
+
+const PAYLOAD_KEYS = new Set(['agentId', 'decision', 'iteration', 'causationHostId']);
+const AGENT_ID = /^[A-Za-z0-9._~:-]{1,128}$/;
+
+/**
+ * Leg: every decision payload is well-formed (the `runOrchestratorDecided`
+ * def's closed key set and `agentId`; the decision by its branches), and the
+ * deciding agent never changes. Pure.
+ */
+export function judgeDecisions(o: LoopObservation, validateDecision: Validate): Outcome {
+  const ds = decisions(o);
+  if (ds.length === 0) return skip('inapplicable', `the loop recorded no ${o.decidedType}, so there is nothing to judge here — the terminates leg convicts that`);
+  const agents = new Set(ds.map((e) => e.payload['agentId']));
+  const DEF = 'schemas run-event-payloads runOrchestratorDecided';
+  return observed([
+    ...ds.flatMap((e) => {
+      const extra = Object.keys(e.payload).filter((k) => !PAYLOAD_KEYS.has(k));
+      const agentId = e.payload['agentId'];
+      const v = validateDecision(e.payload['decision']);
+      return [
+        finding(extra.length === 0, DEF, `a ${o.decidedType} payload carries only agentId, decision, iteration, causationHostId (seq ${e.sequence}; extra ${JSON.stringify(extra)})`),
+        finding(typeof agentId === 'string' && AGENT_ID.test(agentId), `${DEF}.agentId`, `every ${o.decidedType} MUST carry agentId (seq ${e.sequence}; got ${JSON.stringify(agentId)})`),
+        finding(v.ok, 'schemas orchestrator-decision', `every decision MUST be one OrchestratorDecision (seq ${e.sequence}): ${v.errors}`),
+      ];
+    }),
+    finding(agents.size === 1, `${DEF}.agentId`, `orchestrator identity is set at the first decision and does not change (got ${JSON.stringify([...agents])})`),
+  ]);
+}
+
+/** Leg: at version >= 5, `iteration` is 1-based and +1 per turn. Pure. */
+export function judgeIteration(o: LoopObservation): Outcome {
+  if (o.version < 5) return skip('inapplicable', `the host advertises multiAgent.executionModel.version ${o.version}; iteration binds from level 5`);
+  const ds = decisions(o);
+  if (ds.length === 0) return skip('inapplicable', `the loop recorded no ${o.decidedType}, so there is nothing to judge here — the terminates leg convicts that`);
+  const its = ds.map((e) => e.payload['iteration']);
+  return observed([
+    finding(its.every((n, i) => n === i + 1), `${DOC_LOOP} (level 5)`, `every ${o.decidedType} MUST carry iteration, 1-based and incremented by exactly 1 per turn (got ${JSON.stringify(its)})`),
+  ]);
+}