@openwop/openwop-conformance 2.45.22 → 2.45.23

package/schemas/CORPUS-STAMP.json

@@ -1,17 +1,17 @@
 {
   "_comment": "Provenance of @openwop/spec-artifacts (RFC 0168 §D.2). files: SHA-256 per file; the conformance suite compares the installed peer against dist/spec-artifacts.lock.json at start.",
   "package": "@openwop/spec-artifacts",
-  "version": "2.45.22",
-  "corpusTag": "v2.45.22",
+  "version": "2.45.23",
+  "corpusTag": "v2.45.23",
   "files": {
     "api/.redocly.lint-ignore.yaml": "bf5a8350b88a72fa43f59605ed8d903ed24b6cfccda5e45509c9f6ed9ee4e712",
     "api/asyncapi.yaml": "d5ecb9ee6114582be3b1f662c84bfac9ae96dae7bacb853e461168f70a8e1c7d",
     "api/grpc/openwop.proto": "c3e72bb17cba514ee98feb6434e6c9b6ea6795bfd086489ec69fd882dd1ad977",
     "api/openapi.yaml": "ac6de5303872664b78ff419c035915593e01599e02835e777a0123de1baeb398",
     "api/redocly.yaml": "b0604c89b2ca6d5076ec25725c539dad44a741a811fe524439ee6daef8baa09f",
-    "api/seams-v2.yaml": "a3a2dd8f2691fe7fa831af534f41789abaea6e5a03ededf88dd4bc96803cdaea",
-    "api/v2/asyncapi.yaml": "587bab6ff008b0bb1d3144029bc7ed4c3badc52ac916a0afd49d6c85923bbe1b",
-    "api/v2/openapi.yaml": "33a60f1454fb0efeb22c667ecf505447775a0de84772b1003c3226a6e419685b",
+    "api/seams-v2.yaml": "97c463b975fb6831ef19f415cf66abc4693f834bb2940b6d299d5cd30181ae9d",
+    "api/v2/asyncapi.yaml": "f5b14bc6edc7a7ad798cb280b1824aa46582a4cce450fb5ef079d84349b6e58e",
+    "api/v2/openapi.yaml": "391814e12addeb810f20a4818b2f49a103a6b3d6262679e696bb14c4699d6402",
     "api/v2/redocly.yaml": "1e66b60e6118ad11a823bb620678be464d99dfe50a40e3e6f93ec9429b88b34c",
     "schemas/README.md": "a829e3208413062388e52ab6ba714d35889c9c7645db38a290b0c4f4992cd3da",
     "schemas/a2a-task-state.schema.json": "75d5049dea8bd873ff0e7546f1c60c8d36c219bec7084264360be54a8be30ae1",
@@ -117,8 +117,8 @@
     "schemas/v2/artifact.schema.json": "85b9dc284d39b99d2a66fa8cbf47f2dd3d8526d3bd6cc411ad315b372de38975",
     "schemas/v2/audit-verify-result.schema.json": "14af8e9283510f0a40e48a2059c929ee44e0fc9fa3cc66a95bfbe90b17c48297",
     "schemas/v2/budget-policy.schema.json": "1de68095db0beb5c7a4be629de26e79f62ebbe748a88d46f36e768edfd1f0d68",
-    "schemas/v2/capabilities.schema.json": "a24c99d07971dde0e4596eba0bf5616e3df4459dc2174e8aebb2c544f964337c",
-    "schemas/v2/certification-bundle.schema.json": "9a3c67860f3b0867ff4733d3f8ae0f5d5d747b815ab39b6c255589f103119fa6",
+    "schemas/v2/capabilities.schema.json": "d859a413ff463ec39acc32a9cb76f2e8c7419e45683d6b7f886861765a9c36c7",
+    "schemas/v2/certification-bundle.schema.json": "ee3b10966458a10568a32b8a7eb4ab7bdb2f2d00da3ef6b698cd06462d52de40",
     "schemas/v2/channel-presence-payload.schema.json": "fc03df0c20cc12a25f7ee6a47503a4c5931d79fe3d5ff24815e8fd7c1bcb9a87",
     "schemas/v2/channel-written-payload.schema.json": "ccecff3c71a3275ad8db035ac0e04db25e6f8d23cf091ddbcd5a60d1be1cbb6b",
     "schemas/v2/chat-card-pack-manifest.schema.json": "92a57db2fd4b2463f14ef155fef8e3f18afc78960b646459dcf32efc79ff6bf5",
@@ -144,7 +144,7 @@
     "schemas/v2/envelopes/schema.request.schema.json": "be2c5f7aa881cdd252ccff47ac02193659e1393633a1541f4297383205d384a2",
     "schemas/v2/envelopes/schema.response.schema.json": "d049a081267c06c28879c331b147f3ed821b14ccfd93005c67aff64db0a8c68e",
     "schemas/v2/envelopes/ui.a2ui-surface.schema.json": "e92a2548ba65454c9e0a34f72ea6768d18f59e61fa5da7668d0b2d5baddaddc8",
-    "schemas/v2/error-envelope.schema.json": "fb85e2020a91e0c1590a78f57bbf3bbf1cffbc1bc60e1ae692265a77e9d937ff",
+    "schemas/v2/error-envelope.schema.json": "fd561987db4d277d007666f533b53d6cf0e7eacb57f930f3ce7e431573120890",
     "schemas/v2/eval-summary.schema.json": "2f384daf05b8f3b4f604688cae504d6d9971ba41b8c771e55fe9a17e09e86b7a",
     "schemas/v2/export-bundle.schema.json": "bd28905a7729437ab7f2ad8bb33e13a371b2bf5605a7eb2962a0d246de312d69",
     "schemas/v2/form-content-pack-manifest.schema.json": "a1942a124e250a6e9fbdb6b811c5a125e78fbcbcaa46dfc71d0636f24710a339",
@@ -192,7 +192,7 @@
     "schemas/v2/trigger-event.schema.json": "710ecca8b3ecdad3a532a96768177f062192b24a589a4f798c7eb24bab64b30a",
     "schemas/v2/trigger-subscription-registration.schema.json": "5f7959f3e13f49399783e47f73101d6af95e5abccea1af2f0014ccbe3e51006c",
     "schemas/v2/trigger-subscription.schema.json": "06abe021712a4bfc5a107a067053cd3cc9704f47ae7066d8449a508c368a0ab2",
-    "schemas/v2/ui-plugin-message.schema.json": "879d65867c01656b3962d64283e66364dcb8f626ad26c5fcf2d2d55a79ae0ce9",
+    "schemas/v2/ui-plugin-message.schema.json": "2211d58ddc3c42586586a61f03e637212465aff6c922755131f0beab58823435",
     "schemas/v2/webhook-dead-letter-page.schema.json": "78f3284722c2b42d52ff8a1e6d9b9092ba1ac35c2dbe036f3ff2470b34086d1e",
     "schemas/v2/webhook-delivery.schema.json": "5f5361ede12098b5c2d685f0aa70fcb07219fd6b68c6ad6af393ca8dd266d56a",
     "schemas/v2/webhook-verification.schema.json": "76e4e0d81143ffd2649bc7adba2aa34f2525e2c4e9f0300a425d908b3163196b",
@@ -206,16 +206,16 @@
     "schemas/workload-identity.schema.json": "64ed93e12cc9f0657e56ff9b8f045e5d68d397df5276d103c07f42c7f34f0579",
     "schemas/workspace-file-create.schema.json": "70a23b92c2958c0165d7d29aea9020a045dc7816af82c80c5f50d0aac19c4856",
     "schemas/workspace-file.schema.json": "464de85c2a068243084ee9c1d969bc7cd5d8f7948574e58450d6493c38a0e1e4",
-    "spec/v1/alias-detectors.json": "0b2f28808ffe0b9d98a187775038c3406bb70919747a788a6e4f866e293ae6d3",
+    "spec/v1/alias-detectors.json": "22444c22bb88c568339ef512553f9fc38146e22b566d11ab8608f655d688d19c",
     "spec/v1/capability-declaration-classes.json": "e7729aed5c4b4e1dd02abab0530f14cc95f5d4070fe51fb139e7f5cccefa00c6",
-    "spec/v1/core-standard-manifest.json": "b1d45d8fc106392a46ea67fd227bcdf623454ec0499e115487ed4e8dc5647d7f",
-    "spec/v1/deprecations.json": "a3293072ea951857395d05f0437264e88965f1e9019ff61c55bacfa9c1aaa17c",
+    "spec/v1/core-standard-manifest.json": "c4f11f11dffb4b2492fa9f1870c3fb6c0cf66b4cd0f232c8e2b860ee931adb8b",
+    "spec/v1/deprecations.json": "e723bc11d7272c71789ad1303bb7f21809a8a024abf57594f9d5c35dc199ece9",
     "spec/v1/deprecations.schema.json": "3e393c405d2a41b467d8c5e3c468549078df1ce6a6d2588fc488097b95d9b55b",
     "spec/v1/end-of-support.json": "35f0bf3b70fe78b16e2a2fd81a153fc27e703f6c16376c6fe7cdf1f4f2c4e6d4",
     "spec/v1/event-codemap.json": "3da60d884157793a360da532a9fcbbfb5285636db325a74cec94b34622186d97",
     "spec/v1/event-codemap.schema.json": "d05933b2e88103aff51a2f774df97b9bda065e0fc88dbd9b114cc47a32189174",
     "spec/v1/extensions.json": "79a60754aa16cbdbdb604f8e5c00038af535a1690a4d07bd5ff7c38f0256a7bc",
-    "spec/v1/gaps.json": "335186074848531561262525967bd85b379b3137a2233dd4c8b63914222dfa71",
+    "spec/v1/gaps.json": "8b4da733ecec873f0e5d060e83cbe044fe168e57940a8d3fc9ea7c3cc0de7240",
     "spec/v1/gaps.schema.json": "8fd83259f556553c9df0f53e7a82ca8c2a4771d471197f69b4e2ae0ceeacfd66",
     "spec/v1/migrations.json": "4c50760be70cb644d02427bcaf5749606700edf4513f423903cf3b1d12f5c300",
     "spec/v1/migrations.schema.json": "886779aa6c22e646db097f5df210adb018a4dd14a7b815465a18c8a7056c8f72",
@@ -223,15 +223,15 @@
     "spec/v1/spec-gaps.json": "ea9612af55bea9dae3e82223d4f714243f8f590b0193f1188257b13491a38afc",
     "spec/v2/README.md": "ddea90d7cf14aefffe1a43eeeecd4222dadad1d1e5ac64dceb073990eb93d9ef",
     "spec/v2/core/artifact-type-packs.md": "f734740cc3963f86c9f273a7dace26291bba2855161ddd3540618131a2c8d13e",
-    "spec/v2/core/capabilities.md": "503fd78ce55aca2cf83b872a5d6086f016470df2d9bcd7fb427b8f16fb9d044a",
+    "spec/v2/core/capabilities.md": "8218c44f90782df9630dd276e004def162dad989464cba85e7fc42d987bb61f8",
     "spec/v2/core/conformance.md": "3ca291e63bc70a6ef829ae8759ad0ded3741ea7aa507bbbdffc57de443ab2ae2",
     "spec/v2/core/connection-packs.md": "c80f95bd6a03698f35c72cdb2b46bd973f49203bbd786c26760e35fa86e6f23d",
-    "spec/v2/core/conversation.md": "e0351883a57e90f13d2e9f6f5d3e80080b46be4988617448cb7a0e0c7c0bfbad",
-    "spec/v2/core/errors.md": "91f46acc9c9a5532a98cf62c69285d68575c100ff6064f0b1bf94731a087e34a",
-    "spec/v2/core/events.md": "00746062621ec98052ee323755fbdb10f4fb070439058039e44feb6bb19b073a",
+    "spec/v2/core/conversation.md": "8d6abedf6af408a74577753bfca24719d318e2632e10b45ff5d63bdcf31a8aaa",
+    "spec/v2/core/errors.md": "e48838701b86bbfe0ffee77b18a8ffc4e5f04724b4318507d9771da653f8da0f",
+    "spec/v2/core/events.md": "3eb297c1ca8a4c20017248051fbe9c5319bb51ef1ba4cb476e29840cbbe141a6",
     "spec/v2/core/execution.md": "8a0c9db1bbfb97c008ab9328b7333c1cc3318196e78bfbefb49e781bdf4f9d44",
     "spec/v2/core/form-content-packs.md": "02931227899676fd4581a27017be2a6c4953904717be9b81c29d12f87ab3917d",
-    "spec/v2/core/headers.md": "24b0d84ab5521e20f2669fca8006a11f9faf5c2311199e57375b8fa64ce763ed",
+    "spec/v2/core/headers.md": "18e52477898e67b0b3778d1fdd22e07bc43d561c03b501573404cd53245edef6",
     "spec/v2/core/host-services.md": "73f26ea32891044131d63f9861d2cbddccb5d08bf76e29e47afef9bb5b646791",
     "spec/v2/core/i18n.md": "882904b7d59f992ab1e5f7346167161a54cf665b8fee47e64a3862cf9133a580",
     "spec/v2/core/idempotency.md": "adbd317a6ebb57c2759c076297b31f67def9e391576bccd0bbea787b13e85872",
@@ -241,10 +241,10 @@
     "spec/v2/core/node-pack-runtimes.md": "e1088cb69b8c3c67256c494063328916c2980ab1aa97a7063de25bab82fdb1e5",
     "spec/v2/core/oauth.md": "c069ae4f9aae2eafe14c07c0bf709aa7ade0dcc821973d740400d49d901f7061",
     "spec/v2/core/overview.md": "999cb657711d6c28e62032fc31a013cc175f7a981a3b012e4bf4a90a2b84344c",
-    "spec/v2/core/packs.md": "0d1516c4b08fe67b85759feb9ccbafdd766216435a4a0a7e58e27e6f9fe6b6cc",
+    "spec/v2/core/packs.md": "74d9c804a71e0e0400e7a5667a918670bcb435be0702b4625ec774ef0f1aa359",
     "spec/v2/core/persistence.md": "249a1de353f421cdf92b9006a13a10afdb002f4029eb6a13520cc95252edb2ec",
     "spec/v2/core/portability.md": "ab13a6ca43544b9a6a91edfb377ec680c768d14be841c84fb79125b231426891",
-    "spec/v2/core/replay.md": "4a8b53325e18aa53400ece81168c76b4402b932e5e304a391754f293b126eabf",
+    "spec/v2/core/replay.md": "9e66e2029b65866187c0920428a8c5bf8ad1c2b39feefbd5c02f0e59909afc7d",
     "spec/v2/core/runs.md": "1c292c0ab4a3119aeff3a6e9b6e99cff69782df78c3872179f9f0661b6204f23",
     "spec/v2/core/security-defaults.md": "887d8c4bc592094e3b931c23f1c2175c18ebbd47528b074016f9d2091bc513b2",
     "spec/v2/core/storage.md": "dc94b985847c1341c7a064f04a6010f0fdbe6c3ab3e555d4362878c81d764c18",
@@ -254,10 +254,10 @@
     "spec/v2/core/workflow-chain-packs.md": "fdce7a8477e269950a2bac05ee6eddbd66eb0b670b464d00054f7196ec05d29c",
     "spec/v2/corrections.json": "3a8d93e33865b692d26a3b6bfd3819766e206b2e0c2a69669baa4bf833d05a49",
     "spec/v2/corrections.schema.json": "46bbffb954d13bd9995aebc912ceeb2544f7064331abf25fd6ab85c81a5cec94",
-    "spec/v2/declaration.json": "5ae9b7c84ab841930dd2885f048d99342ee81ba08cf6a6c07015070f8e17b9d1",
+    "spec/v2/declaration.json": "396ac924068f25d4a178062a54e244f870c556c3db9fe7a98fcc933fb318ed30",
     "spec/v2/declaration.schema.json": "ef951633e4070899f64828f5cf1b5f4870270a0360f81dbb49b5b4d6cd407550",
     "spec/v2/eos-override.json": "4c72d2f6a658943b01c1de1643cf294642091933af7832f38ee5495df684cb2d",
-    "spec/v2/errors.json": "83f048b0a06952b4af6f125fb66c4212acab51056b411390f1010acd6ab9cdc0",
+    "spec/v2/errors.json": "c3456c8cb1f36f4b6252bbc1fa3a643eabf28cdb7088e3743e50bd51a10c4936",
     "spec/v2/errors.schema.json": "47404ad53e6147cf9017b813483712466573e419fb33e6c4b6c12d3e7deba1bc",
     "spec/v2/event-codemap.json": "37869a03cdfd8758b57e6f350641a6ebbd383231cebda51f5473ad85f94ab74c",
     "spec/v2/event-codemap.schema.json": "b173f2a9bcc0bf9b62a474ce3b91e1431d597e64fd1560fc58662cd8606eaf9c",
@@ -291,6 +291,7 @@
     "spec/v2/facets/hostEvents.schema.json": "973ff452cb91356b4c625d0b06c8d2ef335e18183de09e1afde8acead22290b3",
     "spec/v2/facets/interrupt.schema.json": "2110ef32c3f880bf706475ef4cf8ddf97ff06871b8e6003a5edbcf4439f1fb70",
     "spec/v2/facets/mcp.schema.json": "7060657dfcff170f079beed160e3db7c1d3cc4410cd3cf64863baf6459f781cd",
+    "spec/v2/facets/nondeterminismPolicy.schema.json": "e9dfaa32e0778a1a837fdad3b8a0673fccda9579ab08c8bfe9777362dd15e989",
     "spec/v2/facets/oauth.schema.json": "3a0cbe249d3bd5a5982349ae7ba2534776cc958e4a57e0fbeabf2bdab6e99e69",
     "spec/v2/facets/packs.schema.json": "d544a280419c0052ce0f3c3b378f7aa04085cadc31df52a3c8f43da600b131b1",
     "spec/v2/facets/replay.schema.json": "0a5aefb0108c708c6794fadd533cf256709704c4f16dbf44cd63fa8980c78018",
@@ -298,9 +299,10 @@
     "spec/v2/facets/sandbox.schema.json": "e75f54486d387b2d089791aa93b5093cd1450f1920753a0f97fc23acdfe978ed",
     "spec/v2/facets/schemaVersions.schema.json": "890d3416c4b66511d51f329abc68e6f467f4338f16807e489fe682999b2b56b9",
     "spec/v2/facets/supportedEnvelopes.schema.json": "644f22cc2236e30a611b5b7f1ba0458ff1925d68b94c514d9672583224e126bd",
+    "spec/v2/facets/uiPlugins.schema.json": "1fd3f8440cfb6e4422553a7c4b5f091eb3e10a40da0d43e8b977a18929116758",
     "spec/v2/facets/webhooks.schema.json": "54b576f1d150e28e1642693d846ce471c118e9c521bdf3924185305fbd1d0de4",
     "spec/v2/facets/workflowChainPacks.schema.json": "ea625ce818fbeb746478f00f31f96ee9613d538e4409c258c1bfb517acdeaba9",
-    "spec/v2/generated/error-codes.md": "f171c0ca1be40221f9b4fbfcbce73c728c315a1e8feb8dd6bf738d6ca9e29526",
+    "spec/v2/generated/error-codes.md": "eafb66f1632da783c9a0347a416ae32bcf322f41b9f8783375f579791e9cdcf0",
     "spec/v2/harness-trust-anchors.json": "6007b92eae16a070fbc3777424efb0abfe865fda89d096963109b96282b91205",
     "spec/v2/harness-trust-anchors.schema.json": "372b5d92337c893d3449eff3f6bfd009ac09fdac285296d8bdbe0a08fff9e34c",
     "spec/v2/id-field-bindings.json": "aa3e7c3590a490a77286e3ae60c1ab7407e7d627e05f981c3e08f221af4bd5dc",
@@ -308,12 +310,12 @@
     "spec/v2/interop-map.schema.json": "0017c882df34ee215e2e0729de051490e09d43aac3d2c949285698ed51832f12",
     "spec/v2/migrations.json": "651954938a1e154c0b6f1e3dd6e105889d30de3bb65789f21de7f77a12869e9e",
     "spec/v2/migrations.schema.json": "b91ade6320ad1b1185c9495b9424f3aa63438ed8e412c45171c227d82c0afd86",
-    "spec/v2/path-manifest.json": "b84c7561f50c7df0cb61b202bd6595acad3ee7edca7a45f711949bea3c69bd27",
+    "spec/v2/path-manifest.json": "50fc251f296b06ec5fad35724f5c63b1a32e0e8fc222a85cd29b785cebdb9c98",
     "spec/v2/peer-dependency-aliases.json": "d10299280abee08258502925bc327293ee413e0108cd6e6ec75ff6110653308d",
     "spec/v2/profiles.json": "180beb9ef2d161766fa23b2987e7e829851e3d316273147cf6a4a3f324befd6b",
-    "spec/v2/release.json": "72fec975046a00db77ff1666dc76ada8663cbd18366104e451091e3f82c02455",
+    "spec/v2/release.json": "f24ac113647fb96986e03c1355ae9b741ba447e6e1ef5653f955f07e777c93dd",
     "spec/v2/retention-floors.json": "eaf3722d95c79947af1d4269ef85117e126518c588cfcf1a2b21b97269f51624",
-    "spec/v2/surface-baseline.json": "12f193f56af68402c747503b465f8d7e18580ef832ac7b95c218ab06286478ea"
+    "spec/v2/surface-baseline.json": "a2f690b3222532cc625d94f195d84d4b62a5b3e2b7ab02c164297e0483c32a9d"
   },
-  "corpusCommit": "b768269329be09d06da2de25b668ce27d5cc51df"
+  "corpusCommit": "cc5dd653ba3aba746ed1b3fc8086df84803dbf46"
 }

package/src/lib/council-roster-witness.ts

@@ -0,0 +1,144 @@
+/**
+ * The council roster (RFC 0239; `spec/v2/core/conversation.md`
+ * §multiPartyConversation), observed through normative operations only: run
+ * creation, the run snapshot and event poll, and `resolveInterrupt`.
+ *
+ * Each leg observes through the suite driver and returns findings or the
+ * reason it could not run, so the scenario and the self-test double run the
+ * same code. The `judge*` functions are pure.
+ */
+
+import { driver } from './driver.js';
+import { v2Discovery } from './v2.js';
+import { readErrorCode } from './error-envelope.js';
+import { majorProfile } from './major-profile.js';
+import { readEvents, readRun, type Ev } from './fixture-run-observer.js';
+
+export const COUNCIL = 'conformance-multi-party-council';
+export const OVERSIZE = 'conformance-multi-party-council-oversize';
+export const OVERSIZE_COUNT = 64;
+export const GATE_NODE = 'convo';
+export const ROSTER = ['host:conformance-council-a', 'host:conformance-council-b', 'host:conformance-council-c'] as const;
+export const INTRUDER = 'host:conformance-intruder';
+
+export type Skip = { readonly kind: 'skip'; readonly skip: 'blocked' | 'inapplicable'; readonly reason: string };
+export type LegOutcome = { readonly kind: 'observed'; readonly findings: string[] } | Skip;
+const skip = (s: 'blocked' | 'inapplicable', reason: string): Skip => ({ kind: 'skip', skip: s, reason });
+const P = majorProfile(2);
+const WAITING = new Set(['waiting-input', 'waiting-approval', 'waiting-external', 'paused']);
+const TERMINAL = new Set(['completed', 'failed', 'cancelled']);
+
+const isRecord = (v: unknown): v is Record<string, unknown> => typeof v === 'object' && v !== null && !Array.isArray(v);
+
+/** `conversation.opened.participants` agent ids, in order. */
+export function rosterOf(events: readonly Ev[]): string[] | null {
+  const opened = events.find((e) => e.type === 'conversation.opened');
+  if (!opened) return null;
+  const p = opened.payload['participants'];
+  return Array.isArray(p) ? p.map((x) => (isRecord(x) ? String(x['agentId']) : String(x))) : [];
+}
+
+/** §A.2 — the configured roster is carried unchanged. */
+export function judgeRoster(events: readonly Ev[]): string[] {
+  const got = rosterOf(events);
+  if (got === null) return ['no conversation.opened event was emitted'];
+  return JSON.stringify(got) === JSON.stringify([...ROSTER]) ? [] : [`conversation.opened.participants MUST carry the configured roster ${JSON.stringify(ROSTER)}; got ${JSON.stringify(got)}`];
+}
+
+/** §B.2–§B.3 — the non-member turn is refused with its code, unconsumed. */
+export function judgeRefusal(status: number, body: unknown, statusAfter: string | null, exchangedAfter: number): string[] {
+  const out: string[] = [];
+  const code = readErrorCode(body);
+  if (status !== 422 || code !== 'conversation_speaker_not_participant') out.push(`a turn from ${INTRUDER} MUST be refused 422 conversation_speaker_not_participant; got ${status} ${String(code)}`);
+  const speaker = isRecord(body) && isRecord(body['details']) ? body['details']['speakerId'] : undefined;
+  if (status === 422 && speaker !== INTRUDER) out.push(`details.speakerId MUST name the refused speaker ${INTRUDER}; got ${String(speaker)}`);
+  if (statusAfter === null || !WAITING.has(statusAfter)) out.push(`the refused turn MUST NOT be consumed: the run MUST still wait on the interrupt; it is ${String(statusAfter)}`);
+  if (exchangedAfter > 0) out.push(`a refused turn MUST NOT emit conversation.exchanged; ${exchangedAfter} were emitted`);
+  return out;
+}
+
+/** The control — a member's turn still resolves the interrupt. */
+export function judgeMemberAccepted(status: number, exchanged: number): string[] {
+  if (status >= 200 && status < 300 && exchanged > 0) return [];
+  return [`after the refusal, a turn from ${ROSTER[0]} MUST resolve the interrupt and emit conversation.exchanged; got ${status} with ${exchanged} conversation.exchanged`];
+}
+
+/** §C — the oversized roster is refused at creation with its code. */
+export function judgeOversize(status: number, body: unknown, max: number): string[] {
+  const code = readErrorCode(body);
+  const out: string[] = [];
+  if (status !== 422 || code !== 'conversation_roster_exceeded') out.push(`a ${OVERSIZE_COUNT}-member roster over maxParticipants ${max} MUST be refused 422 conversation_roster_exceeded at run creation; got ${status} ${String(code)}`);
+  const d = isRecord(body) && isRecord(body['details']) ? body['details']['maxParticipants'] : undefined;
+  if (status === 422 && d !== max) out.push(`details.maxParticipants MUST be the advertised ${max}; got ${String(d)}`);
+  return out;
+}
+
+// ------------------------------------------------------------------ the legs
+
+async function gate(fixture: string): Promise<{ family: Record<string, unknown> } | Skip> {
+  let doc: Record<string, unknown> | null = null;
+  try { doc = await v2Discovery(); } catch { doc = null; }
+  if (!doc) return skip('blocked', 'v2 discovery unreachable');
+  const family = doc['multiPartyConversation'];
+  if (!isRecord(family)) return skip('inapplicable', 'the host does not advertise multiPartyConversation');
+  const fixtures = Array.isArray(doc['fixtures']) ? (doc['fixtures'] as unknown[]) : [];
+  if (!fixtures.includes(fixture)) return skip('inapplicable', `the host does not advertise the ${fixture} fixture (RFC 0239 §E; RFC 0003)`);
+  return { family };
+}
+
+async function waitRun(runId: string, timeoutMs = 15_000): Promise<string | null> {
+  const deadline = Date.now() + timeoutMs;
+  for (;;) {
+    const r = await readRun(P, runId);
+    const s = typeof r.snapshot['status'] === 'string' ? (r.snapshot['status'] as string) : null;
+    if ((s && (WAITING.has(s) || TERMINAL.has(s))) || Date.now() > deadline) return s;
+    await new Promise((res) => setTimeout(res, 250));
+  }
+}
+
+async function openCouncil(): Promise<{ runId: string } | Skip> {
+  const g = await gate(COUNCIL);
+  if ('kind' in g) return g;
+  const created = await driver.post(P.runsPath, { workflowId: COUNCIL });
+  const runId = isRecord(created.json) ? created.json['runId'] : undefined;
+  if (created.status !== 201 || typeof runId !== 'string') return skip('blocked', `POST /runs for the advertised ${COUNCIL} answered ${created.status} ${String(readErrorCode(created.json) ?? '')}`.trim());
+  const s = await waitRun(runId);
+  if (s === null || !WAITING.has(s)) return skip('blocked', `the council run did not suspend on its conversation.exchange interrupt (status ${String(s)})`);
+  return { runId };
+}
+
+const resolve = (runId: string, speakerId: string) =>
+  driver.post(`${P.runsPath}/${P.idSegment(runId)}/interrupts/${encodeURIComponent(GATE_NODE)}`, { resumeValue: { role: 'agent', speakerId, content: 'openwop-conformance turn' } });
+const exchangedCount = async (runId: string): Promise<number> => (await readEvents(P, runId)).filter((e) => e.type === 'conversation.exchanged').length;
+
+/** §A.2, `openwop.requirement.0239.council.roster-carried`. */
+export async function rosterLeg(): Promise<LegOutcome> {
+  const o = await openCouncil();
+  if ('kind' in o) return o;
+  return { kind: 'observed', findings: judgeRoster(await readEvents(P, o.runId)) };
+}
+
+/** §B, `openwop.requirement.0239.council.speaker-refused`. */
+export async function speakerLeg(): Promise<LegOutcome> {
+  const o = await openCouncil();
+  if ('kind' in o) return o;
+  const refused = await resolve(o.runId, INTRUDER);
+  const after = await readRun(P, o.runId);
+  const statusAfter = typeof after.snapshot['status'] === 'string' ? (after.snapshot['status'] as string) : null;
+  const findings = judgeRefusal(refused.status, refused.json, statusAfter, await exchangedCount(o.runId));
+  const member = await resolve(o.runId, ROSTER[0]);
+  await waitRun(o.runId, 5_000);
+  findings.push(...judgeMemberAccepted(member.status, await exchangedCount(o.runId)));
+  return { kind: 'observed', findings };
+}
+
+/** §C, `openwop.requirement.0239.council.roster-exceeded`. */
+export async function oversizeLeg(): Promise<LegOutcome> {
+  const g = await gate(OVERSIZE);
+  if ('kind' in g) return g;
+  const max = g.family['maxParticipants'];
+  if (typeof max !== 'number') return skip('inapplicable', 'the host advertises no multiPartyConversation.maxParticipants, so no roster is oversized');
+  if (max >= OVERSIZE_COUNT) return skip('inapplicable', `maxParticipants is ${max}; the ${OVERSIZE_COUNT}-member fixture cannot exceed it (RFC 0239 §Decisions 4, gap G2)`);
+  const created = await driver.post(P.runsPath, { workflowId: OVERSIZE });
+  return { kind: 'observed', findings: judgeOversize(created.status, created.json, max) };
+}

package/src/lib/ui-plugin-boundary-witness.ts

@@ -0,0 +1,180 @@
+/**
+ * The front-end plugin boundary (RFC 0238; `spec/v2/core/packs.md` §Front-end
+ * plugin packs), observed through the two `uiPlugins.served` operations against
+ * the operator-installed `ui-plugin-pack-narrow` fixture.
+ *
+ * Two halves, as in the other shared witnesses: `observe*` assert nothing and
+ * return what the host answered (or why it could not be read); the `judge*`
+ * functions are pure and return findings. The scenario maps findings to
+ * requirement ids.
+ */
+
+import { findCanaryLeaks } from './canaries.js';
+import { driver, type OpenWOPResponse } from './driver.js';
+import { v2Discovery } from './v2.js';
+
+export const FIXTURE_PACK = 'core.openwop.conformance.ui-plugin-narrow';
+export const FIXTURE_PLUGIN = 'narrow';
+export const FIXTURE_ARTIFACT = 'ui-plugin-narrow-artifact';
+
+export const framePath = (pack = FIXTURE_PACK, plugin = FIXTURE_PLUGIN): string =>
+  `/host/ui-plugins/${encodeURIComponent(pack)}/${encodeURIComponent(plugin)}/frame`;
+export const rpcPath = (pack = FIXTURE_PACK, plugin = FIXTURE_PLUGIN): string =>
+  `/host/ui-plugins/${encodeURIComponent(pack)}/${encodeURIComponent(plugin)}/rpc`;
+
+/** A Content-Security-Policy header as directive → source/token list (names lower-cased). */
+export function parseCsp(header: string | null): Map<string, string[]> {
+  const out = new Map<string, string[]>();
+  for (const part of (header ?? '').split(';')) {
+    const [name, ...tokens] = part.trim().split(/\s+/).filter(Boolean);
+    if (name && !out.has(name.toLowerCase())) out.set(name.toLowerCase(), tokens);
+  }
+  return out;
+}
+
+/** §B.3 — the `sandbox` directive admits `allow-scripts` and never `allow-same-origin`. */
+export function judgeIsolation(csp: string | null): string[] {
+  const p = parseCsp(csp);
+  const sandbox = p.get('sandbox');
+  if (sandbox === undefined) return [`the frame's Content-Security-Policy carries no sandbox directive (got ${JSON.stringify(csp)})`];
+  const out: string[] = [];
+  const tokens = sandbox.map((t) => t.toLowerCase());
+  if (tokens.includes('allow-same-origin')) out.push('the sandbox directive admits allow-same-origin, so the plugin shares the host origin');
+  if (!tokens.includes('allow-scripts')) out.push('the sandbox directive does not admit allow-scripts, so the plugin cannot run');
+  return out;
+}
+
+/** §B.4 — `default-src 'none'`, and no `connect-src` source beyond the declared `connectSrc`. */
+export function judgeEgress(csp: string | null, declared: readonly string[] = []): string[] {
+  const p = parseCsp(csp);
+  const out: string[] = [];
+  const def = p.get('default-src');
+  if (def === undefined || def.length !== 1 || def[0] !== "'none'") out.push(`default-src MUST be 'none' (got ${def === undefined ? 'no default-src' : def.join(' ')})`);
+  const connect = (p.get('connect-src') ?? []).filter((s) => s !== "'none'");
+  const extra = connect.filter((s) => !declared.includes(s));
+  if (extra.length) out.push(`connect-src admits ${extra.join(' ')}, which the plugin did not declare`);
+  return out;
+}
+
+export interface RpcReply { readonly status: number; readonly json: unknown; readonly text: string }
+
+/** One `ui-plugin/1` request envelope. */
+export const request = (id: number, method: string, params?: Record<string, unknown>): Record<string, unknown> =>
+  ({ openwop: 'ui-plugin/1', type: 'request', id, method, ...(params ? { params } : {}) });
+
+const field = (o: unknown, k: string): unknown => (o && typeof o === 'object' ? (o as Record<string, unknown>)[k] : undefined);
+
+/**
+ * §C.4 — a method the plugin did not declare (or the host does not allow) is
+ * refused inside a `200` with `method_not_allowed`, never executed.
+ */
+export function judgeRefused(method: string, r: RpcReply): string[] {
+  const code = field(field(r.json, 'error'), 'code');
+  if (r.status === 200 && field(r.json, 'ok') === false && code === 'method_not_allowed') return [];
+  return [`${method}: a method outside the allowlists MUST return 200 with ok:false and method_not_allowed; got ${r.status} ${JSON.stringify(r.json)?.slice(0, 200)}`];
+}
+
+/** §C.2 — a method outside the closed `ui-plugin/1` enum fails validation: `400`, never executed. */
+export function judgeInvalid(method: string, r: RpcReply): string[] {
+  if (r.status === 400) return [];
+  if (r.status === 200 && field(r.json, 'ok') === false) return [];
+  return [`${method}: a request outside the ui-plugin/1 method enum MUST NOT execute; got ${r.status} ${JSON.stringify(r.json)?.slice(0, 200)}`];
+}
+
+/** The control: the one declared method succeeds on the fixture artifact. */
+export function judgeControl(r: RpcReply): string[] {
+  if (r.status === 200 && field(r.json, 'ok') === true) return [];
+  return [`artifact.read of ${FIXTURE_ARTIFACT}, the plugin's one declared method, MUST succeed; got ${r.status} ${JSON.stringify(r.json)?.slice(0, 200)}`];
+}
+
+/** §C.6 — no response carries the BYOK canary. */
+export function judgeNoCanary(replies: readonly RpcReply[]): string[] {
+  const out: string[] = [];
+  for (const r of replies) for (const leak of findCanaryLeaks(r.text)) out.push(`a dispatch response carries canary material (${leak.label})`);
+  return out;
+}
+
+// ------------------------------------------------------------------ the legs
+// Each leg observes through the suite driver and returns findings or the reason it
+// could not run, so the scenario and the self-test double run the same code.
+
+
+export type Skip = { readonly kind: 'skip'; readonly skip: 'blocked' | 'inapplicable'; readonly reason: string };
+export type LegOutcome = { readonly kind: 'observed'; readonly findings: string[] } | Skip;
+
+const skip = (s: 'blocked' | 'inapplicable', reason: string): Skip => ({ kind: 'skip', skip: s, reason });
+const NOT_INSTALLED = "the ui-plugin-pack-narrow fixture is not installed (404); installing it is the operator's choice (RFC 0238 §D)";
+
+async function http(fn: () => Promise<OpenWOPResponse>): Promise<OpenWOPResponse | null> { try { return await fn(); } catch { return null; } }
+
+async function gate(): Promise<{ isolation: string } | Skip> {
+  let doc: Record<string, unknown> | null = null;
+  try { doc = await v2Discovery(); } catch { doc = null; }
+  if (!doc) return skip('blocked', 'v2 discovery unreachable');
+  const fam = doc['uiPlugins'] as { served?: unknown; isolation?: unknown } | undefined;
+  if (!fam || fam.served !== true) return skip('inapplicable', 'the host does not advertise uiPlugins.served');
+  return { isolation: typeof fam.isolation === 'string' ? fam.isolation : 'cross-origin-iframe' };
+}
+
+async function frameCsp(): Promise<{ csp: string | null } | Skip> {
+  const r = await http(() => driver.get(framePath()));
+  if (r === null) return skip('blocked', 'GET …/frame could not be made');
+  if (r.status === 404) return skip('inapplicable', NOT_INSTALLED);
+  if (r.status !== 200) return skip('blocked', `GET …/frame answered ${r.status}`);
+  return { csp: r.headers.get('content-security-policy') };
+}
+
+async function rpc(id: number, method: string, params?: Record<string, unknown>): Promise<RpcReply | null> {
+  const r = await http(() => driver.post(rpcPath(), { message: request(id, method, params) }));
+  return r === null ? null : { status: r.status, json: r.json, text: r.text };
+}
+
+/** §B.3, `openwop.requirement.0238.ui-plugin.frame-isolated`. */
+export async function isolationLeg(): Promise<LegOutcome> {
+  const g = await gate();
+  if ('kind' in g) return g;
+  if (g.isolation !== 'cross-origin-iframe') return skip('inapplicable', `uiPlugins.isolation is ${g.isolation}: only a cross-origin-iframe boundary is visible over HTTP (RFC 0238 §Decisions 3)`);
+  const f = await frameCsp();
+  return 'kind' in f ? f : { kind: 'observed', findings: judgeIsolation(f.csp) };
+}
+
+/** §B.4, `openwop.requirement.0238.ui-plugin.frame-deny-egress`. */
+export async function egressLeg(): Promise<LegOutcome> {
+  const g = await gate();
+  if ('kind' in g) return g;
+  const f = await frameCsp();
+  return 'kind' in f ? f : { kind: 'observed', findings: judgeEgress(f.csp) };
+}
+
+/** §C.2/§C.4, `openwop.requirement.0238.ui-plugin.rpc-allowlist`. */
+export async function allowlistLeg(): Promise<LegOutcome> {
+  const g = await gate();
+  if ('kind' in g) return g;
+  const control = await rpc(1, 'artifact.read', { artifactId: FIXTURE_ARTIFACT });
+  if (control === null) return skip('blocked', 'POST …/rpc could not be made');
+  if (control.status === 404) return skip('inapplicable', NOT_INSTALLED);
+  const findings = [...judgeControl(control)];
+  for (const [id, method, params] of [[2, 'artifact.write', { artifactId: FIXTURE_ARTIFACT, content: 'openwop-conformance' }], [3, 'host.navigate', { to: '/' }]] as const) {
+    const r = await rpc(id, method, params);
+    if (r === null) return skip('blocked', `the ${method} dispatch could not be made`);
+    findings.push(...judgeRefused(method, r));
+  }
+  const exec = await rpc(4, 'host.exec');
+  if (exec === null) return skip('blocked', 'the host.exec dispatch could not be made');
+  findings.push(...judgeInvalid('host.exec', exec));
+  return { kind: 'observed', findings };
+}
+
+/** §C.6, `openwop.requirement.0238.ui-plugin.no-byok`. */
+export async function noByokLeg(): Promise<LegOutcome> {
+  const g = await gate();
+  if ('kind' in g) return g;
+  const replies: RpcReply[] = [];
+  for (const [id, method] of [[1, 'artifact.read'], [2, 'artifact.write']] as const) {
+    const r = await rpc(id, method, { artifactId: FIXTURE_ARTIFACT });
+    if (r === null) return skip('blocked', `the ${method} dispatch could not be made`);
+    if (r.status === 404) return skip('inapplicable', NOT_INSTALLED);
+    replies.push(r);
+  }
+  return { kind: 'observed', findings: judgeNoCanary(replies) };
+}

package/src/lib/wasm-memory-cap-witness.ts

@@ -0,0 +1,46 @@
+/**
+ * The WASM memory ceiling (`spec/v2/core/node-pack-runtimes.md` §WASM; RFC 0008
+ * §K), observed through run creation and the event poll against the
+ * operator-installed `vendor.openwop.misbehaving` fixture pack
+ * (`conformance/fixtures/wasm-packs/misbehaving-memory/`), whose one node grows
+ * linear memory until the host refuses.
+ *
+ * `memoryCapLeg` observes and returns findings or the reason it could not run;
+ * `judgeMemoryCap` is pure. The scenario and the self-test double run the same code.
+ */
+
+import { v2Discovery } from './v2.js';
+import { majorProfile } from './major-profile.js';
+import { observeRun, type ObservedRun } from './fixture-run-observer.js';
+
+export const MEMORY_CAP_FIXTURE = 'conformance-wasm-pack-memory-cap-breach';
+export const BOMB_TYPE_ID = 'vendor.openwop.misbehaving.memory-bomb';
+
+export type Skip = { readonly kind: 'skip'; readonly skip: 'blocked' | 'inapplicable'; readonly reason: string };
+export type LegOutcome = { readonly kind: 'observed'; readonly findings: string[] } | Skip;
+const skip = (s: 'blocked' | 'inapplicable', reason: string): Skip => ({ kind: 'skip', skip: s, reason });
+const isRecord = (v: unknown): v is Record<string, unknown> => typeof v === 'object' && v !== null && !Array.isArray(v);
+
+/** A breach emits `cap.breached` `kind: wasm-memory` and the run ends `failed`. */
+export function judgeMemoryCap(o: ObservedRun): string[] {
+  const out: string[] = [];
+  if (o.createStatus !== 201 && o.createStatus !== 202) return [`createRun of ${MEMORY_CAP_FIXTURE} MUST be accepted (got ${o.createStatus})`];
+  const breaches = o.events.filter((e) => e.type === 'cap.breached' && e.payload['kind'] === 'wasm-memory');
+  if (breaches.length === 0) out.push(`a module exceeding maxMemoryBytes MUST produce cap.breached with kind wasm-memory; the log has ${o.events.filter((e) => e.type === 'cap.breached').map((e) => String(e.payload['kind'])).join(', ') || 'no cap.breached'}`);
+  if (o.terminalStatus !== 'failed') out.push(`the run MUST end failed after the breach (got ${String(o.terminalStatus)})`);
+  return out;
+}
+
+/** node-pack-runtimes.md §WASM bullet 2 — `openwop.requirement.node-pack-runtimes.wasm-memory-cap`. */
+export async function memoryCapLeg(): Promise<LegOutcome> {
+  let doc: Record<string, unknown> | null = null;
+  try { doc = await v2Discovery(); } catch { doc = null; }
+  if (!doc) return skip('blocked', 'v2 discovery unreachable');
+  const fam = doc['nodePackRuntimes'];
+  const wasm = isRecord(fam) ? fam['wasm'] : undefined;
+  if (!isRecord(wasm)) return skip('inapplicable', 'the host does not advertise nodePackRuntimes.wasm');
+  if (typeof wasm['maxMemoryBytes'] !== 'number') return skip('inapplicable', 'the host advertises no nodePackRuntimes.wasm.maxMemoryBytes; the enforcement MUST binds only when it does');
+  const fixtures = Array.isArray(doc['fixtures']) ? (doc['fixtures'] as unknown[]) : [];
+  if (!fixtures.includes(MEMORY_CAP_FIXTURE)) return skip('inapplicable', `the host does not advertise ${MEMORY_CAP_FIXTURE}; the operator installs conformance/fixtures/wasm-packs/misbehaving-memory/ to run it`);
+  return { kind: 'observed', findings: judgeMemoryCap(await observeRun(majorProfile(2), MEMORY_CAP_FIXTURE, { timeoutMs: 30_000 })) };
+}

package/src/scenarios/v2-bound-id-path-projection.test.ts

@@ -38,6 +38,11 @@
  * harness (`conformance/run.ts`) overwrites `OPENWOP_API_KEYS` with a `:*` key, so
  * moving the tenant needs that line edited, not just the env var.
  *
+ * Since 2.45.23 the leg also mints one run under `OPENWOP_TEST_TENANT_B_API_KEY`
+ * when it is set, so a host can bind tenant B to a non-clean tenant and make the
+ * leg bite in a production cut without moving the primary key (asked by
+ * openwop-app, whose primary production tenant is clean).
+ *
  * The codec's own edge cases (marker escaping, UTF-8 vs UTF-16, malformed
  * decode) are a unit concern and live in `src/lib/bound-id.test.ts`, which is
  * sabotage-checked. This file asserts only what needs a HOST to answer.
@@ -166,5 +171,20 @@ describe('v2 bound-id path projection (identity.md §5)', () => {
       runId.includes('~'),
       req(ID_MINT, DOC, `a host MUST NOT mint a tenant-bound id containing ~ (RFC 0184 §A.2) — the created runId is ${runId}. A literal ~ is ambiguous with the path projection's escape marker; map the tenant key to a clean segment instead of projecting it`),
     ).toBe(false);
+
+    // The second-tenant credential, when configured, mints one more run, so a
+    // host can put tenant B in a non-clean tenant without moving the primary key
+    // every other scenario depends on. A refused create here skips only this half.
+    const other = process.env['OPENWOP_TEST_TENANT_B_API_KEY']?.trim();
+    if (other && other !== process.env['OPENWOP_API_KEY']?.trim()) {
+      const createdB = await http(() => driver.post('/runs', { workflowId: NOOP_WORKFLOW_ID }, { headers: { Authorization: `Bearer ${other}` } }));
+      const runIdB = (createdB?.json as { runId?: unknown } | null | undefined)?.runId;
+      if (createdB?.status === 201 && typeof runIdB === 'string') {
+        expect(
+          runIdB.includes('~'),
+          req(ID_MINT, DOC, `a host MUST NOT mint a tenant-bound id containing ~ (RFC 0184 §A.2) — the runId created under the second-tenant credential is ${runIdB}`),
+        ).toBe(false);
+      }
+    }
   });
 });

package/src/scenarios/v2-envelope-contracts-advertisement.test.ts

@@ -37,4 +37,12 @@ describe('v2 envelopeContracts advertisement (events.md §Envelope contracts)',
     if (out.kind === 'skip') return softSkip(out.disposition, out.reason);
     for (const x of out.findings) expect(x.ok, req(ID_RECORD, x.doc, x.message)).toBe(true);
   });
+
+  it('envelopeContracts.advertised is not false: a host that does not offer the family omits it', async () => {
+    const doc = await discovery();
+    if (!doc) return softSkip('blocked', UNREADABLE);
+    const rec = await familyAdvertised('envelopeContracts');
+    if (!rec) return softSkip('inapplicable', 'the host does not advertise envelopeContracts');
+    expect(rec['advertised'], req('openwop.requirement.0237.no-false-advertisement', 'RFC 0237 §C; capabilities.md §2', 'envelopeContracts.advertised: false is not a v2 state; a host that does not offer the family MUST omit it')).not.toBe(false);
+  });
 });