@openwop/openwop-conformance 2.45.22 → 2.45.23

package/fixtures.md

@@ -43,6 +43,7 @@ All fixtures MUST advertise:
 | Fixture                                   | `workflowId`                                                                                    | Purpose                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   | Terminal status                                                                     | Bounded duration             |
 | ----------------------------------------- | ----------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------- | ---------------------------- |
 | Noop                                      | `conformance-noop`                                                                              | Cheapest possible run-lifecycle test                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      | `completed`                                                                         | ≤ 5s                         |
+| Nondeterminism Sources | `conformance-nondeterminism` | RFC 0237 §D — one `core.conformance.nondeterminism` node draws one value per source the host lists in `nondeterminismPolicy.sources` into the run outputs; a `replay` fork from `fromSeq: 0` MUST reproduce each | `completed`; replay outputs byte-equal per listed source | ≤ 10s |
 | Identity                                  | `conformance-identity`                                                                          | Verifies input/output passthrough                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         | `completed`                                                                         | ≤ 5s                         |
 | Delay                                     | `conformance-delay`                                                                             | Verifies poll/SSE behavior over time                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      | `completed`                                                                         | ≤ 30s (input-controlled)     |
 | Failure                                   | `conformance-failure`                                                                           | Verifies error-event surface                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              | `failed`                                                                            | ≤ 5s                         |
@@ -108,6 +109,8 @@ All fixtures MUST advertise:
 | Context-Budget Multi-Turn                 | `conformance-context-budget-multiturn`                                                          | RFC 0111 — **superseded as the witness gate in suite 2.41.0.** Drives the supervisor through `mockDecisions`, i.e. a mock supervisor — exactly what RFC 0111 §Scope forbids from advertising `contextBudget`, so no honest host can witness against it. Kept (v1 compatibility: hosts may still list it); both RFC 0111 scenarios now gate on `conformance-context-budget-live`                                                                                                                                              | `completed`                                                                         | ≤ 60s                        |
 | Context-Budget Live Orchestrator | `conformance-context-budget-live` | RFC 0111 witness (suite 2.41.0) — `core.orchestrator.supervisor` driven by the host's LIVE model (no mock keys; `config.instructions` is the objective), dispatching `conformance-noop` until it terminates, bounded by `settings.maxLoopbackIterations: 8`. The host reports each iteration's fed transcript through `GET /v1/host/sample/agent/transcript-window` including `entries[] { eventId, rendered }`; `context-budget-transcript-bound` recounts `chars`, checks real events + the recent tail + budget PRESSURE (no pressure ⇒ `partial-witness`); `context-summarization-replay` replays and compares the fed summary text byte for byte. A host whose supervisor has no live model MUST NOT advertise this fixture | `completed` | ≤ 300s |
 | Conversation Lifecycle                    | `conformance-conversation-lifecycle`                                                            | Phase 4 — open → exchange → close event ordering                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `completed`                                                                         | ≤ 20s                        |
+| Multi-Party Council | `conformance-multi-party-council` | RFC 0239 §E.1 — a `core.conversationGate` with a three-member `participants` roster and `mockAutoResume: false`. `conversation.opened` carries the roster; a resumed turn from a non-member is refused `422 conversation_speaker_not_participant` and left unconsumed, then a member's turn resolves it. A host advertises it in `fixtures` when it can run it (RFC 0003) | `completed` | ≤ 20s |
+| Multi-Party Council (oversize) | `conformance-multi-party-council-oversize` | RFC 0239 §E.2 — the same gate with a 64-member roster. A host advertising `multiPartyConversation.maxParticipants` below 64 refuses run creation `422 conversation_roster_exceeded` and opens no conversation | refused at creation | — |
 | Conversation vs Clarification             | `conformance-conversation-vs-clarification`                                                     | Phase 4 — conversation suspend emits `conversation.*`, NOT `clarification.*`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              | `completed`                                                                         | ≤ 15s                        |
 | Conversation Replay                       | `conformance-conversation-replay`                                                               | Phase 4 — `:fork` preserves conversation channel projection                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               | `completed`                                                                         | ≤ 30s                        |
 | Conversation Capability Negotiation       | `conformance-conversation-capability-negotiation`                                               | Phase 4 — INVERTED gate: hosts without `conversationPrimitive: true` MUST refuse                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `failed` / refusal                                                                  | ≤ 5s                         |
@@ -148,6 +151,14 @@ The `messages`-mode stream fixture (AI token streaming) is covered by the determ
 
 ## Per-fixture contracts
 
+### `conformance-nondeterminism`
+
+- **Purpose**: verify RFC 0237 §B — a value drawn from a source the host lists in `nondeterminismPolicy.sources` is recorded where it is read, and a `replay` fork reproduces it.
+- **Shape**: one node, `draw` (`core.conformance.nondeterminism`).
+- **`core.conformance.nondeterminism` is a conformance-RESERVED typeId** (same pattern as `core.conformance.side-effect`): a host listing `sources` maps it to a node that, for each listed source, draws one value and writes it to the run's outputs under the source's name: `clock` an RFC 3339 time, `random` and `id` the drawn value as a string, `env` a configuration value of the host's choosing, an `x-*` source a string.
+- **Expected behavior**: the run reaches `completed`, and `run.completed.outputs` carries one string per listed source. A `replay` fork with `fromSeq: 0` reaches `completed` with byte-equal outputs for every listed source.
+- **Advertise only if** the host lists `nondeterminismPolicy.sources` and records the drawn values. Consumed by `v2-nondeterminism-sources`.
+
 ### `conformance-noop`
 
 - **Purpose**: cheapest run-lifecycle test. Used by the conformance suite's `runs.test.ts` to verify create/read/terminal-event/cleanup work end-to-end.
@@ -815,6 +826,27 @@ Pack-manifest fixtures are exercised by the server-free `fixtures-valid.test.ts`
 
 ---
 
+## Front-end plugin pack fixtures
+
+The `fixtures/frontend-plugin-packs/` sub-directory holds front-end plugin packs (RFC 0117, `kind: "frontend-plugin"`) that an operator installs to make the plugin boundary observable (RFC 0238 §D). Their shape is checked server-free by `src/coherence/ui-plugin-fixtures.test.ts`.
+
+| Fixture | Plugin | Purpose |
+| --- | --- | --- |
+| `ui-plugin-pack-narrow` | `narrow` | RFC 0238 §D: one plugin declaring only `artifact.read` and no `connectSrc` (entry `ui/narrow.html`). The operator installs it under a key trusted for this pack only, never by default, and creates `ui-plugin-narrow-artifact`, a record whose content references the BYOK canary `openwop-conformance-canary-secret` without resolving it. Drives `v2-ui-plugin-boundary`: the frame's isolation and egress policy, `method_not_allowed` for undeclared methods, and no canary material in any dispatch response. Not advertised in discovery `fixtures`. |
+
+---
+
+## WASM fixture packs
+
+The `fixtures/wasm-packs/` sub-directory holds two node packs (`language: "wasm"`) an operator installs to make `node-pack-runtimes.md` §WASM observable. Each is a hand-written WebAssembly text module (`module.wat`) with its built `module.wasm` (`build.mjs`, using `wabt`; no Rust toolchain), exporting the RFC 0008 §B functions. Their shape is checked server-free by `src/coherence/wasm-fixture-packs.test.ts`.
+
+| Pack | Node | Purpose |
+| --- | --- | --- |
+| `misbehaving-memory` (`vendor.openwop.misbehaving`) | `vendor.openwop.misbehaving.memory-bomb` | Grows linear memory 64 MiB at a time until the host refuses, then traps. A host advertising `nodePackRuntimes.wasm.maxMemoryBytes` MUST emit `cap.breached` `kind: "wasm-memory"`. Drives `conformance-wasm-pack-memory-cap-breach` and `v2-wasm-memory-cap`. |
+| `misbehaving-abi` (`vendor.openwop.misbehaving-abi`) | `vendor.openwop.misbehaving.abi-bomb` | Reports `openwop_abi_version` 999, which no host lists, so a conforming host refuses it at load. Rejection at load is not yet observable over the protocol (TODO §8), so no v2 leg reads it. |
+
+---
+
 ## Connection pack fixtures
 
 The `fixtures/connection-packs/` sub-directory holds canonical connection-pack manifests (RFC 0095, `kind: "connection"`) used as schema-level proof points (validated server-free against `../schemas/connection-pack-manifest.schema.json`) AND as the install payloads the capability-gated behavioral scenarios POST to the `POST /v1/host/sample/connection-packs/install` seam. They are NOT seeded into a server.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openwop/openwop-conformance",
-  "version": "2.45.22",
+  "version": "2.45.23",
   "description": "Production-ready black-box conformance suite for OpenWOP v1.0 compliant servers.",
   "repository": {
     "type": "git",
@@ -56,6 +56,6 @@
     "@openwop/spec-artifacts": "file:../spec-artifacts"
   },
   "peerDependencies": {
-    "@openwop/spec-artifacts": "2.45.22"
+    "@openwop/spec-artifacts": "2.45.23"
   }
 }

package/requirements.json

@@ -2,11 +2,11 @@
   "$comment": "GENERATED by conformance/scripts/generate-requirement-registry.mjs — do not edit. One record per it()/test() in src/scenarios. Ids: openwop.it.<file-stem>.<title-slug>[~n] (src/lib/requirement-ids.ts). A record with id null has an interpolated title; its run-time row is keyed by the rendered title and maps here by file+line only. Renamed ids need a row in requirement-aliases.json.",
   "generatedFrom": "src/scenarios/*.test.ts",
   "counts": {
-    "files": 728,
-    "tests": 2763,
-    "withStableId": 2763,
+    "files": 735,
+    "tests": 2780,
+    "withStableId": 2780,
     "interpolatedTitles": 0,
-    "explicitIds": 2626
+    "explicitIds": 2643
   },
   "records": [
     {
@@ -28969,7 +28969,7 @@
     {
       "id": "openwop.it.v2-bound-id-path-projection.a-tenant-bound-id-is-readable-at-its-escaped-path-segment-links-carry-that-form",
       "file": "v2-bound-id-path-projection.test.ts",
-      "line": 69,
+      "line": 74,
       "title": "a tenant-bound id is readable at its ~-escaped path segment, links carry that form, and a malformed escape is refused",
       "explicitId": "openwop.requirement.0184.bound-id-path-projection",
       "citations": [
@@ -29016,10 +29016,15 @@
     {
       "id": "openwop.it.v2-bound-id-path-projection.a-tenant-bound-id-the-host-mints-for-this-run-contains-no-bites-only-when-the-cr",
       "file": "v2-bound-id-path-projection.test.ts",
-      "line": 154,
+      "line": 159,
       "title": "a tenant-bound id the host mints for this run contains no ~ (bites only when the credential tenant is not grammar-clean)",
       "explicitId": "openwop.requirement.0184.mint-no-tilde",
       "citations": [
+        {
+          "section": "spec/v2/core/identity.md §5",
+          "requirement": null,
+          "interpolated": true
+        },
         {
           "section": "spec/v2/core/identity.md §5",
           "requirement": null,
@@ -30714,6 +30719,19 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.v2-envelope-contracts-advertisement.envelopecontracts-advertised-is-not-false-a-host-that-does-not-offer-the-family",
+      "file": "v2-envelope-contracts-advertisement.test.ts",
+      "line": 41,
+      "title": "envelopeContracts.advertised is not false: a host that does not offer the family omits it",
+      "explicitId": "openwop.requirement.0237.no-false-advertisement",
+      "citations": [
+        {
+          "section": "RFC 0237 §C; capabilities.md §2",
+          "requirement": "envelopeContracts.advertised: false is not a v2 state; a host that does not offer the family MUST omit it"
+        }
+      ]
+    },
     {
       "id": "openwop.requirement.envelopes.reasoning-declared-optional-string",
       "file": "v2-envelope-reasoning-shape.test.ts",
@@ -33669,6 +33687,45 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.v2-multi-party-council.the-configured-roster-is-carried-on-conversation-opened",
+      "file": "v2-multi-party-council.test.ts",
+      "line": 39,
+      "title": "the configured roster is carried on conversation.opened",
+      "explicitId": "openwop.requirement.0239.council.roster-carried",
+      "citations": [
+        {
+          "section": "spec/v2/core/conversation.md §multiPartyConversation",
+          "requirement": "a host MUST accept participants in core.conversationGate config and carry them on conversation.opened"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-multi-party-council.a-turn-from-outside-the-roster-is-refused-and-left-unconsumed",
+      "file": "v2-multi-party-council.test.ts",
+      "line": 45,
+      "title": "a turn from outside the roster is refused and left unconsumed",
+      "explicitId": "openwop.requirement.0239.council.speaker-refused",
+      "citations": [
+        {
+          "section": "spec/v2/core/conversation.md §multiPartyConversation",
+          "requirement": "a host MUST refuse a resumed turn whose speakerId is off the roster with conversation_speaker_not_participant, leaving the interrupt open"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-multi-party-council.an-oversized-roster-is-refused-at-run-creation",
+      "file": "v2-multi-party-council.test.ts",
+      "line": 51,
+      "title": "an oversized roster is refused at run creation",
+      "explicitId": "openwop.requirement.0239.council.roster-exceeded",
+      "citations": [
+        {
+          "section": "spec/v2/core/conversation.md §multiPartyConversation",
+          "requirement": "a host MUST refuse at run creation, never truncate, a roster over maxParticipants, with conversation_roster_exceeded"
+        }
+      ]
+    },
     {
       "id": "openwop.it.v2-negotiation-authenticated.an-unauthenticated-a2a-exchange-cannot-lower-the-version-below-preferredversion",
       "file": "v2-negotiation-authenticated.test.ts",
@@ -33759,7 +33816,7 @@
     {
       "id": "openwop.it.v2-nondeterminism-policy-advertisement.the-nondeterminismpolicy-record-validates-against-its-capabilities-schema-seat",
       "file": "v2-nondeterminism-policy-advertisement.test.ts",
-      "line": 33,
+      "line": 35,
       "title": "the nondeterminismPolicy record validates against its capabilities-schema seat",
       "explicitId": "openwop.requirement.nondeterminism-policy.advert-record-schema",
       "citations": [
@@ -33770,6 +33827,43 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.v2-nondeterminism-policy-advertisement.nondeterminismpolicy-declared-is-not-false-a-host-that-does-not-offer-the-family",
+      "file": "v2-nondeterminism-policy-advertisement.test.ts",
+      "line": 44,
+      "title": "nondeterminismPolicy.declared is not false: a host that does not offer the family omits it",
+      "explicitId": "openwop.requirement.0237.no-false-advertisement",
+      "citations": [
+        {
+          "section": "RFC 0237 §C; capabilities.md §2",
+          "requirement": "nondeterminismPolicy.declared: false is not a v2 state; a host that does not offer the family MUST omit it"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-nondeterminism-sources.a-replay-fork-reproduces-every-value-drawn-from-a-listed-source",
+      "file": "v2-nondeterminism-sources.test.ts",
+      "line": 52,
+      "title": "a replay fork reproduces every value drawn from a listed source",
+      "explicitId": "openwop.requirement.0237.declared-source-replays",
+      "citations": [
+        {
+          "section": "spec/v2/core/replay.md §Declared nondeterminism",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "spec/v2/core/replay.md §Declared nondeterminism",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "spec/v2/core/replay.md §Declared nondeterminism",
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
     {
       "id": "openwop.it.v2-oauth-client-pkce-state-iss.sends-pkce-s256-and-the-verifier-at-the-token-endpoint-hashes-to-the-challenge",
       "file": "v2-oauth-client-pkce-state-iss.test.ts",
@@ -35506,6 +35600,39 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.v2-purpose-propagation-onward.a-received-label-is-re-emitted-on-the-onward-message-never-widened",
+      "file": "v2-purpose-propagation-onward.test.ts",
+      "line": 83,
+      "title": "a received label is re-emitted on the onward message, never widened",
+      "explicitId": "openwop.requirement.purpose-propagation.onward-reemit-no-widen",
+      "citations": [
+        {
+          "section": "spec/v2/core/security-defaults.md §Onward hops",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "spec/v2/core/security-defaults.md §Onward hops",
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-purpose-propagation-onward.an-empty-label-means-no-onward-call-while-an-unlabelled-control-call-goes-throug",
+      "file": "v2-purpose-propagation-onward.test.ts",
+      "line": 102,
+      "title": "an empty label means no onward call, while an unlabelled control call goes through",
+      "explicitId": "openwop.requirement.purpose-propagation.empty-no-onward",
+      "citations": [
+        {
+          "section": "spec/v2/core/security-defaults.md §Onward hops",
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
     {
       "id": "openwop.it.v2-queue-cross-tenant-isolation.a-message-tenant-a-publishes-on-topic-t-is-never-consumed-by-tenant-b-on-t-and-a",
       "file": "v2-queue-cross-tenant-isolation.test.ts",
@@ -37631,6 +37758,58 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.v2-ui-plugin-boundary.the-frame-is-sandboxed-without-same-origin",
+      "file": "v2-ui-plugin-boundary.test.ts",
+      "line": 45,
+      "title": "the frame is sandboxed without same-origin",
+      "explicitId": "openwop.requirement.0238.ui-plugin.frame-isolated",
+      "citations": [
+        {
+          "section": "spec/v2/core/packs.md §Front-end plugin packs",
+          "requirement": "a cross-origin-iframe plugin frame MUST carry a sandbox directive admitting allow-scripts and never allow-same-origin"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-ui-plugin-boundary.the-frame-denies-egress",
+      "file": "v2-ui-plugin-boundary.test.ts",
+      "line": 51,
+      "title": "the frame denies egress",
+      "explicitId": "openwop.requirement.0238.ui-plugin.frame-deny-egress",
+      "citations": [
+        {
+          "section": "spec/v2/core/packs.md §Front-end plugin packs",
+          "requirement": "the frame MUST set default-src 'none' and admit no connect-src source the plugin did not declare"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-ui-plugin-boundary.the-dispatch-refuses-methods-outside-the-allowlists-and-runs-the-declared-one",
+      "file": "v2-ui-plugin-boundary.test.ts",
+      "line": 57,
+      "title": "the dispatch refuses methods outside the allowlists and runs the declared one",
+      "explicitId": "openwop.requirement.0238.ui-plugin.rpc-allowlist",
+      "citations": [
+        {
+          "section": "spec/v2/core/packs.md §Front-end plugin packs",
+          "requirement": "a method outside the plugin's declared hostApi or the advertised uiPlugins.hostApi MUST return method_not_allowed and MUST NOT execute"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-ui-plugin-boundary.no-dispatch-response-carries-credential-material",
+      "file": "v2-ui-plugin-boundary.test.ts",
+      "line": 63,
+      "title": "no dispatch response carries credential material",
+      "explicitId": "openwop.requirement.0238.ui-plugin.no-byok",
+      "citations": [
+        {
+          "section": "spec/v2/core/packs.md §Front-end plugin packs",
+          "requirement": "a ui-plugin/1 response MUST NOT carry credential material across the boundary"
+        }
+      ]
+    },
     {
       "id": "openwop.it.v2-ui-plugins-advertisement.the-uiplugins-record-validates-against-its-capabilities-schema-seat",
       "file": "v2-ui-plugins-advertisement.test.ts",
@@ -37922,6 +38101,19 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.v2-wasm-memory-cap.a-module-exceeding-maxmemorybytes-produces-cap-breached-wasm-memory-and-fails-th",
+      "file": "v2-wasm-memory-cap.test.ts",
+      "line": 29,
+      "title": "a module exceeding maxMemoryBytes produces cap.breached wasm-memory and fails the run",
+      "explicitId": "openwop.requirement.node-pack-runtimes.wasm-memory-cap",
+      "citations": [
+        {
+          "section": "spec/v2/core/node-pack-runtimes.md §WASM",
+          "requirement": "a host advertising maxMemoryBytes MUST enforce it and emit cap.breached with kind wasm-memory on a breach"
+        }
+      ]
+    },
     {
       "id": "openwop.requirement.0215.no-head-of-line",
       "file": "v2-webhook-delivery-isolation.test.ts",
@@ -45792,6 +45984,32 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.ui-plugin-fixtures.ui-plugin-pack-narrow-validates-against-the-v2-frontend-plugin-manifest-schema",
+      "file": "ui-plugin-fixtures.test.ts",
+      "line": 29,
+      "title": "ui-plugin-pack-narrow validates against the v2 frontend-plugin manifest schema",
+      "explicitId": "openwop.it.ui-plugin-fixtures.ui-plugin-pack-narrow-validates-against-the-v2-frontend-plugin-manifest-s",
+      "citations": [
+        {
+          "section": "RFCS/0238-ui-plugin-observation-path.md §D",
+          "requirement": "the fixture pack is a valid v2 frontend-plugin manifest"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.ui-plugin-fixtures.declares-one-plugin-narrow-with-only-artifact-read-and-no-connectsrc-and-ships-i",
+      "file": "ui-plugin-fixtures.test.ts",
+      "line": 36,
+      "title": "declares one plugin, narrow, with only artifact.read and no connectSrc, and ships its entry",
+      "explicitId": "openwop.it.ui-plugin-fixtures.declares-one-plugin-narrow-with-only-artifact-read-and-no-connectsrc-and-ships-its",
+      "citations": [
+        {
+          "section": "RFCS/0238-ui-plugin-observation-path.md §D",
+          "requirement": "the legs depend on exactly this shape"
+        }
+      ]
+    },
     {
       "id": "openwop.it.v1-webhook-rotation-contract.the-v1-rotation-route-the-prose-mandates-is-an-api-openapi-yaml-operation-with-t",
       "file": "v1-webhook-rotation-contract.test.ts",
@@ -48423,6 +48641,32 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.wasm-fixture-packs.misbehaving-memory-is-the-memory-bomb-pack-its-manifest-describes-at-abi-version",
+      "file": "wasm-fixture-packs.test.ts",
+      "line": 70,
+      "title": "misbehaving-memory is the memory-bomb pack its manifest describes, at ABI version 1",
+      "explicitId": "openwop.it.wasm-fixture-packs.misbehaving-memory-is-the-memory-bomb-pack-its-manifest-describes-at-abi-version-1",
+      "citations": [
+        {
+          "section": "spec/v2/core/node-pack-runtimes.md §WASM",
+          "requirement": "the fixture module is the pack its manifest describes"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.wasm-fixture-packs.misbehaving-abi-is-the-abi-bomb-pack-its-manifest-describes-at-the-unlisted-abi",
+      "file": "wasm-fixture-packs.test.ts",
+      "line": 76,
+      "title": "misbehaving-abi is the abi-bomb pack its manifest describes, at the unlisted ABI version 999",
+      "explicitId": "openwop.it.wasm-fixture-packs.misbehaving-abi-is-the-abi-bomb-pack-its-manifest-describes-at-the-unlisted-abi-versi",
+      "citations": [
+        {
+          "section": "spec/v2/core/node-pack-runtimes.md §WASM",
+          "requirement": "the fixture module is the pack its manifest describes"
+        }
+      ]
+    },
     {
       "id": "openwop.it.workflow-chain-internal-flag.the-manifest-workflowchain-declares-a-boolean-internal-property",
       "file": "workflow-chain-internal-flag.test.ts",

package/scenario-majors.json

@@ -1,9 +1,9 @@
 {
   "$comment": "GENERATED by conformance/scripts/generate-scenario-majors.mjs (RFC 0168 §D.3). Do not edit; add a file to BOTH_MAJORS in the generator to target both majors.",
   "counts": {
-    "files": 644,
+    "files": 649,
     "v1": 455,
-    "v2": 204
+    "v2": 209
   },
   "majors": {
     "a2a-1-0-agent-card.test.ts": [
@@ -1569,6 +1569,9 @@
     "v2-multi-party-conversation-advertisement.test.ts": [
       2
     ],
+    "v2-multi-party-council.test.ts": [
+      2
+    ],
     "v2-negotiation-authenticated.test.ts": [
       2
     ],
@@ -1584,6 +1587,9 @@
     "v2-nondeterminism-policy-advertisement.test.ts": [
       2
     ],
+    "v2-nondeterminism-sources.test.ts": [
+      2
+    ],
     "v2-oauth-client-pkce-state-iss.test.ts": [
       2
     ],
@@ -1671,6 +1677,9 @@
     "v2-purpose-propagation-advertisement.test.ts": [
       2
     ],
+    "v2-purpose-propagation-onward.test.ts": [
+      2
+    ],
     "v2-queue-cross-tenant-isolation.test.ts": [
       2
     ],
@@ -1788,6 +1797,9 @@
     "v2-trigger-dead-letter-read.test.ts": [
       2
     ],
+    "v2-ui-plugin-boundary.test.ts": [
+      2
+    ],
     "v2-ui-plugins-advertisement.test.ts": [
       2
     ],
@@ -1806,6 +1818,9 @@
     "v2-version-header-honored.test.ts": [
       2
     ],
+    "v2-wasm-memory-cap.test.ts": [
+      2
+    ],
     "v2-webhook-delivery-isolation.test.ts": [
       2
     ],