@openwop/openwop-conformance 2.45.22 → 2.45.24

package/requirements.json

@@ -2,11 +2,11 @@
   "$comment": "GENERATED by conformance/scripts/generate-requirement-registry.mjs — do not edit. One record per it()/test() in src/scenarios. Ids: openwop.it.<file-stem>.<title-slug>[~n] (src/lib/requirement-ids.ts). A record with id null has an interpolated title; its run-time row is keyed by the rendered title and maps here by file+line only. Renamed ids need a row in requirement-aliases.json.",
   "generatedFrom": "src/scenarios/*.test.ts",
   "counts": {
-    "files": 728,
-    "tests": 2763,
-    "withStableId": 2763,
+    "files": 735,
+    "tests": 2780,
+    "withStableId": 2780,
     "interpolatedTitles": 0,
-    "explicitIds": 2626
+    "explicitIds": 2643
   },
   "records": [
     {
@@ -28969,7 +28969,7 @@
     {
       "id": "openwop.it.v2-bound-id-path-projection.a-tenant-bound-id-is-readable-at-its-escaped-path-segment-links-carry-that-form",
       "file": "v2-bound-id-path-projection.test.ts",
-      "line": 69,
+      "line": 74,
       "title": "a tenant-bound id is readable at its ~-escaped path segment, links carry that form, and a malformed escape is refused",
       "explicitId": "openwop.requirement.0184.bound-id-path-projection",
       "citations": [
@@ -29016,10 +29016,15 @@
     {
       "id": "openwop.it.v2-bound-id-path-projection.a-tenant-bound-id-the-host-mints-for-this-run-contains-no-bites-only-when-the-cr",
       "file": "v2-bound-id-path-projection.test.ts",
-      "line": 154,
+      "line": 159,
       "title": "a tenant-bound id the host mints for this run contains no ~ (bites only when the credential tenant is not grammar-clean)",
       "explicitId": "openwop.requirement.0184.mint-no-tilde",
       "citations": [
+        {
+          "section": "spec/v2/core/identity.md §5",
+          "requirement": null,
+          "interpolated": true
+        },
         {
           "section": "spec/v2/core/identity.md §5",
           "requirement": null,
@@ -30714,6 +30719,19 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.v2-envelope-contracts-advertisement.envelopecontracts-advertised-is-not-false-a-host-that-does-not-offer-the-family",
+      "file": "v2-envelope-contracts-advertisement.test.ts",
+      "line": 41,
+      "title": "envelopeContracts.advertised is not false: a host that does not offer the family omits it",
+      "explicitId": "openwop.requirement.0237.no-false-advertisement",
+      "citations": [
+        {
+          "section": "RFC 0237 §C; capabilities.md §2",
+          "requirement": "envelopeContracts.advertised: false is not a v2 state; a host that does not offer the family MUST omit it"
+        }
+      ]
+    },
     {
       "id": "openwop.requirement.envelopes.reasoning-declared-optional-string",
       "file": "v2-envelope-reasoning-shape.test.ts",
@@ -33669,6 +33687,45 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.v2-multi-party-council.the-configured-roster-is-carried-on-conversation-opened",
+      "file": "v2-multi-party-council.test.ts",
+      "line": 39,
+      "title": "the configured roster is carried on conversation.opened",
+      "explicitId": "openwop.requirement.0239.council.roster-carried",
+      "citations": [
+        {
+          "section": "spec/v2/core/conversation.md §multiPartyConversation",
+          "requirement": "a host MUST accept participants in core.conversationGate config and carry them on conversation.opened"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-multi-party-council.a-turn-from-outside-the-roster-is-refused-and-left-unconsumed",
+      "file": "v2-multi-party-council.test.ts",
+      "line": 45,
+      "title": "a turn from outside the roster is refused and left unconsumed",
+      "explicitId": "openwop.requirement.0239.council.speaker-refused",
+      "citations": [
+        {
+          "section": "spec/v2/core/conversation.md §multiPartyConversation",
+          "requirement": "a host MUST refuse a resumed turn whose speakerId is off the roster with conversation_speaker_not_participant, leaving the interrupt open"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-multi-party-council.an-oversized-roster-is-refused-at-run-creation",
+      "file": "v2-multi-party-council.test.ts",
+      "line": 51,
+      "title": "an oversized roster is refused at run creation",
+      "explicitId": "openwop.requirement.0239.council.roster-exceeded",
+      "citations": [
+        {
+          "section": "spec/v2/core/conversation.md §multiPartyConversation",
+          "requirement": "a host MUST refuse at run creation, never truncate, a roster over maxParticipants, with conversation_roster_exceeded"
+        }
+      ]
+    },
     {
       "id": "openwop.it.v2-negotiation-authenticated.an-unauthenticated-a2a-exchange-cannot-lower-the-version-below-preferredversion",
       "file": "v2-negotiation-authenticated.test.ts",
@@ -33759,7 +33816,7 @@
     {
       "id": "openwop.it.v2-nondeterminism-policy-advertisement.the-nondeterminismpolicy-record-validates-against-its-capabilities-schema-seat",
       "file": "v2-nondeterminism-policy-advertisement.test.ts",
-      "line": 33,
+      "line": 35,
       "title": "the nondeterminismPolicy record validates against its capabilities-schema seat",
       "explicitId": "openwop.requirement.nondeterminism-policy.advert-record-schema",
       "citations": [
@@ -33770,6 +33827,43 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.v2-nondeterminism-policy-advertisement.nondeterminismpolicy-declared-is-not-false-a-host-that-does-not-offer-the-family",
+      "file": "v2-nondeterminism-policy-advertisement.test.ts",
+      "line": 44,
+      "title": "nondeterminismPolicy.declared is not false: a host that does not offer the family omits it",
+      "explicitId": "openwop.requirement.0237.no-false-advertisement",
+      "citations": [
+        {
+          "section": "RFC 0237 §C; capabilities.md §2",
+          "requirement": "nondeterminismPolicy.declared: false is not a v2 state; a host that does not offer the family MUST omit it"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-nondeterminism-sources.a-replay-fork-reproduces-every-value-drawn-from-a-listed-source",
+      "file": "v2-nondeterminism-sources.test.ts",
+      "line": 52,
+      "title": "a replay fork reproduces every value drawn from a listed source",
+      "explicitId": "openwop.requirement.0237.declared-source-replays",
+      "citations": [
+        {
+          "section": "spec/v2/core/replay.md §Declared nondeterminism",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "spec/v2/core/replay.md §Declared nondeterminism",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "spec/v2/core/replay.md §Declared nondeterminism",
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
     {
       "id": "openwop.it.v2-oauth-client-pkce-state-iss.sends-pkce-s256-and-the-verifier-at-the-token-endpoint-hashes-to-the-challenge",
       "file": "v2-oauth-client-pkce-state-iss.test.ts",
@@ -35506,6 +35600,39 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.v2-purpose-propagation-onward.a-received-label-is-re-emitted-on-the-onward-message-never-widened",
+      "file": "v2-purpose-propagation-onward.test.ts",
+      "line": 83,
+      "title": "a received label is re-emitted on the onward message, never widened",
+      "explicitId": "openwop.requirement.purpose-propagation.onward-reemit-no-widen",
+      "citations": [
+        {
+          "section": "spec/v2/core/security-defaults.md §Onward hops",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "spec/v2/core/security-defaults.md §Onward hops",
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-purpose-propagation-onward.an-empty-label-means-no-onward-call-while-an-unlabelled-control-call-goes-throug",
+      "file": "v2-purpose-propagation-onward.test.ts",
+      "line": 102,
+      "title": "an empty label means no onward call, while an unlabelled control call goes through",
+      "explicitId": "openwop.requirement.purpose-propagation.empty-no-onward",
+      "citations": [
+        {
+          "section": "spec/v2/core/security-defaults.md §Onward hops",
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
     {
       "id": "openwop.it.v2-queue-cross-tenant-isolation.a-message-tenant-a-publishes-on-topic-t-is-never-consumed-by-tenant-b-on-t-and-a",
       "file": "v2-queue-cross-tenant-isolation.test.ts",
@@ -37631,6 +37758,58 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.v2-ui-plugin-boundary.the-frame-is-sandboxed-without-same-origin",
+      "file": "v2-ui-plugin-boundary.test.ts",
+      "line": 45,
+      "title": "the frame is sandboxed without same-origin",
+      "explicitId": "openwop.requirement.0238.ui-plugin.frame-isolated",
+      "citations": [
+        {
+          "section": "spec/v2/core/packs.md §Front-end plugin packs",
+          "requirement": "a cross-origin-iframe plugin frame MUST carry a sandbox directive admitting allow-scripts and never allow-same-origin"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-ui-plugin-boundary.the-frame-denies-egress",
+      "file": "v2-ui-plugin-boundary.test.ts",
+      "line": 51,
+      "title": "the frame denies egress",
+      "explicitId": "openwop.requirement.0238.ui-plugin.frame-deny-egress",
+      "citations": [
+        {
+          "section": "spec/v2/core/packs.md §Front-end plugin packs",
+          "requirement": "the frame MUST set default-src 'none' and admit no connect-src source the plugin did not declare"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-ui-plugin-boundary.the-dispatch-refuses-methods-outside-the-allowlists-and-runs-the-declared-one",
+      "file": "v2-ui-plugin-boundary.test.ts",
+      "line": 57,
+      "title": "the dispatch refuses methods outside the allowlists and runs the declared one",
+      "explicitId": "openwop.requirement.0238.ui-plugin.rpc-allowlist",
+      "citations": [
+        {
+          "section": "spec/v2/core/packs.md §Front-end plugin packs",
+          "requirement": "a method outside the plugin's declared hostApi or the advertised uiPlugins.hostApi MUST return method_not_allowed and MUST NOT execute"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-ui-plugin-boundary.no-dispatch-response-carries-credential-material",
+      "file": "v2-ui-plugin-boundary.test.ts",
+      "line": 63,
+      "title": "no dispatch response carries credential material",
+      "explicitId": "openwop.requirement.0238.ui-plugin.no-byok",
+      "citations": [
+        {
+          "section": "spec/v2/core/packs.md §Front-end plugin packs",
+          "requirement": "a ui-plugin/1 response MUST NOT carry credential material across the boundary"
+        }
+      ]
+    },
     {
       "id": "openwop.it.v2-ui-plugins-advertisement.the-uiplugins-record-validates-against-its-capabilities-schema-seat",
       "file": "v2-ui-plugins-advertisement.test.ts",
@@ -37922,6 +38101,19 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.v2-wasm-memory-cap.a-module-exceeding-maxmemorybytes-produces-cap-breached-wasm-memory-and-fails-th",
+      "file": "v2-wasm-memory-cap.test.ts",
+      "line": 29,
+      "title": "a module exceeding maxMemoryBytes produces cap.breached wasm-memory and fails the run",
+      "explicitId": "openwop.requirement.node-pack-runtimes.wasm-memory-cap",
+      "citations": [
+        {
+          "section": "spec/v2/core/node-pack-runtimes.md §WASM",
+          "requirement": "a host advertising maxMemoryBytes MUST enforce it and emit cap.breached with kind wasm-memory on a breach"
+        }
+      ]
+    },
     {
       "id": "openwop.requirement.0215.no-head-of-line",
       "file": "v2-webhook-delivery-isolation.test.ts",
@@ -44584,7 +44776,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.finds-at-least-three-schemas-workflow-definition-run-event-suspend-request",
       "file": "spec-corpus-validity.test.ts",
-      "line": 556,
+      "line": 557,
       "title": "finds at least three schemas (workflow-definition, run-event, suspend-request)",
       "explicitId": "openwop.it.spec-corpus-validity.finds-at-least-three-schemas-workflow-definition-run-event-suspend-request",
       "citations": [
@@ -44597,7 +44789,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.parses-compiles",
       "file": "spec-corpus-validity.test.ts",
-      "line": 564,
+      "line": 565,
       "title": null,
       "explicitId": "openwop.it.spec-corpus-validity.parses-compiles",
       "citations": [
@@ -44611,7 +44803,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.schemas-readme-md-exists-next-to-schema-files",
       "file": "spec-corpus-validity.test.ts",
-      "line": 583,
+      "line": 584,
       "title": "schemas/README.md exists next to schema files",
       "explicitId": "openwop.it.spec-corpus-validity.schemas-readme-md-exists-next-to-schema-files",
       "citations": [
@@ -44624,7 +44816,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.schemas-readme-md-lists-every-schema-json-exactly-once",
       "file": "spec-corpus-validity.test.ts",
-      "line": 587,
+      "line": 588,
       "title": "schemas/README.md lists every *.schema.json exactly once",
       "explicitId": "openwop.it.spec-corpus-validity.schemas-readme-md-lists-every-schema-json-exactly-once",
       "citations": [
@@ -44651,7 +44843,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.absolute-refs-point-to-known-schema-ids",
       "file": "spec-corpus-validity.test.ts",
-      "line": 628,
+      "line": 629,
       "title": null,
       "explicitId": "openwop.it.spec-corpus-validity.absolute-refs-point-to-known-schema-ids",
       "citations": [
@@ -44665,7 +44857,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.payload-type-index-keys-exactly-match-runeventtype-enum-values",
       "file": "spec-corpus-validity.test.ts",
-      "line": 662,
+      "line": 663,
       "title": "payload type-index keys exactly match RunEventType enum values",
       "explicitId": "openwop.it.spec-corpus-validity.payload-type-index-keys-exactly-match-runeventtype-enum-values",
       "citations": [
@@ -44678,7 +44870,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.payload-type-index-refs-point-to-declared-payload-defs",
       "file": "spec-corpus-validity.test.ts",
-      "line": 671,
+      "line": 672,
       "title": "payload type-index refs point to declared payload $defs",
       "explicitId": "openwop.it.spec-corpus-validity.payload-type-index-refs-point-to-declared-payload-defs",
       "citations": [
@@ -44706,7 +44898,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.payload-schema-description-states-the-current-runeventtype-variant-count",
       "file": "spec-corpus-validity.test.ts",
-      "line": 687,
+      "line": 688,
       "title": "payload schema description states the current RunEventType variant count",
       "explicitId": "openwop.it.spec-corpus-validity.payload-schema-description-states-the-current-runeventtype-variant-count",
       "citations": [
@@ -44723,7 +44915,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.exists",
       "file": "spec-corpus-validity.test.ts",
-      "line": 702,
+      "line": 703,
       "title": "exists",
       "explicitId": "openwop.it.spec-corpus-validity.exists",
       "citations": [
@@ -44736,7 +44928,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.declares-openapi-3-1-required-top-level-keys",
       "file": "spec-corpus-validity.test.ts",
-      "line": 706,
+      "line": 707,
       "title": "declares openapi: 3.1 + required top-level keys",
       "explicitId": "openwop.it.spec-corpus-validity.declares-openapi-3-1-required-top-level-keys",
       "citations": [
@@ -44749,7 +44941,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.every-ref-to-schemas-json-resolves-to-a-real-file",
       "file": "spec-corpus-validity.test.ts",
-      "line": 715,
+      "line": 716,
       "title": "every $ref to ../schemas/*.json resolves to a real file",
       "explicitId": "openwop.it.spec-corpus-validity.every-ref-to-schemas-json-resolves-to-a-real-file",
       "citations": [
@@ -44763,7 +44955,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.operationids-are-unique",
       "file": "spec-corpus-validity.test.ts",
-      "line": 725,
+      "line": 726,
       "title": "operationIds are unique",
       "explicitId": "openwop.it.spec-corpus-validity.operationids-are-unique",
       "citations": [
@@ -44781,7 +44973,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.every-operation-tag-is-declared-in-the-top-level-tags-list",
       "file": "spec-corpus-validity.test.ts",
-      "line": 734,
+      "line": 735,
       "title": "every operation tag is declared in the top-level tags list",
       "explicitId": "openwop.it.spec-corpus-validity.every-operation-tag-is-declared-in-the-top-level-tags-list",
       "citations": [
@@ -44803,7 +44995,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.declares-apikeyauth-as-the-global-default-security-requirement",
       "file": "spec-corpus-validity.test.ts",
-      "line": 750,
+      "line": 751,
       "title": "declares ApiKeyAuth as the global default security requirement",
       "explicitId": "openwop.it.spec-corpus-validity.declares-apikeyauth-as-the-global-default-security-requirement",
       "citations": [
@@ -44820,7 +45012,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.only-documented-public-or-signed-token-operations-clear-security",
       "file": "spec-corpus-validity.test.ts",
-      "line": 761,
+      "line": 762,
       "title": "only documented public or signed-token operations clear security",
       "explicitId": "openwop.it.spec-corpus-validity.only-documented-public-or-signed-token-operations-clear-security",
       "citations": [
@@ -44838,7 +45030,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.protected-operations-document-canonical-401-and-403-auth-failure-responses",
       "file": "spec-corpus-validity.test.ts",
-      "line": 782,
+      "line": 783,
       "title": "protected operations document canonical 401 and 403 auth failure responses",
       "explicitId": "openwop.it.spec-corpus-validity.protected-operations-document-canonical-401-and-403-auth-failure-responses",
       "citations": [
@@ -44861,7 +45053,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.declares-both-the-literal-v1-agents-roster-org-chart-routes-and-the-agentid-para",
       "file": "spec-corpus-validity.test.ts",
-      "line": 809,
+      "line": 810,
       "title": "declares both the literal /v1/agents/{roster,org-chart} routes and the {agentId} param route",
       "explicitId": "openwop.it.spec-corpus-validity.declares-both-the-literal-v1-agents-roster-org-chart-routes-and-the-agentid-para",
       "citations": [
@@ -44874,7 +45066,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.every-v1-agents-agentid-param-excludes-the-reserved-literals-roster-org-chart",
       "file": "spec-corpus-validity.test.ts",
-      "line": 816,
+      "line": 817,
       "title": "every /v1/agents/{agentId} param excludes the reserved literals (roster, org-chart)",
       "explicitId": "openwop.it.spec-corpus-validity.every-v1-agents-agentid-param-excludes-the-reserved-literals-roster-org-chart",
       "citations": [
@@ -44891,7 +45083,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.the-reserved-literal-exclusion-pattern-rejects-roster-org-chart-and-accepts-a-re",
       "file": "spec-corpus-validity.test.ts",
-      "line": 827,
+      "line": 828,
       "title": "the reserved-literal exclusion pattern rejects roster/org-chart and accepts a real agentId",
       "explicitId": "openwop.it.spec-corpus-validity.the-reserved-literal-exclusion-pattern-rejects-roster-org-chart-and-accepts-a-re",
       "citations": [
@@ -44908,7 +45100,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.the-agent-manifest-agentid-pattern-can-never-produce-a-reserved-literal-defense",
       "file": "spec-corpus-validity.test.ts",
-      "line": 834,
+      "line": 835,
       "title": "the agent-manifest agentId pattern can never produce a reserved literal (defense in depth)",
       "explicitId": "openwop.it.spec-corpus-validity.the-agent-manifest-agentid-pattern-can-never-produce-a-reserved-literal-defense",
       "citations": [
@@ -44929,7 +45121,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.typed-error-specializations-compose-the-canonical-error-schema",
       "file": "spec-corpus-validity.test.ts",
-      "line": 846,
+      "line": 847,
       "title": "typed error specializations compose the canonical Error schema",
       "explicitId": "openwop.it.spec-corpus-validity.typed-error-specializations-compose-the-canonical-error-schema",
       "citations": [
@@ -44953,7 +45145,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.every-openapi-operationid-is-represented-in-conformance-coverage-md",
       "file": "spec-corpus-validity.test.ts",
-      "line": 871,
+      "line": 872,
       "title": "every OpenAPI operationId is represented in conformance/coverage.md",
       "explicitId": "openwop.it.spec-corpus-validity.every-openapi-operationid-is-represented-in-conformance-coverage-md",
       "citations": [
@@ -44971,7 +45163,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.every-openapi-operation-has-a-matching-method-path-row-in-rest-endpoints-md",
       "file": "spec-corpus-validity.test.ts",
-      "line": 891,
+      "line": 892,
       "title": "every OpenAPI operation has a matching method/path row in rest-endpoints.md",
       "explicitId": "openwop.it.spec-corpus-validity.every-openapi-operation-has-a-matching-method-path-row-in-rest-endpoints-md",
       "citations": [
@@ -44993,7 +45185,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.rest-catalog-auth-scope-columns-match-openapi-security-overrides",
       "file": "spec-corpus-validity.test.ts",
-      "line": 909,
+      "line": 910,
       "title": "REST catalog auth/scope columns match OpenAPI security overrides",
       "explicitId": "openwop.it.spec-corpus-validity.rest-catalog-auth-scope-columns-match-openapi-security-overrides",
       "citations": [
@@ -45027,7 +45219,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.does-not-document-retry-conflict-metadata-as-top-level-error-fields",
       "file": "spec-corpus-validity.test.ts",
-      "line": 948,
+      "line": 949,
       "title": null,
       "explicitId": "openwop.it.spec-corpus-validity.does-not-document-retry-conflict-metadata-as-top-level-error-fields",
       "citations": [
@@ -45046,7 +45238,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.typescript-exports-http-error-codes-and-ishttperrorcode",
       "file": "spec-corpus-validity.test.ts",
-      "line": 1002,
+      "line": 1003,
       "title": "TypeScript exports HTTP_ERROR_CODES and isHttpErrorCode",
       "explicitId": "openwop.it.spec-corpus-validity.typescript-exports-http-error-codes-and-ishttperrorcode",
       "citations": [
@@ -45063,7 +45255,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.python-exports-http-error-codes-and-is-http-error-code",
       "file": "spec-corpus-validity.test.ts",
-      "line": 1009,
+      "line": 1010,
       "title": "Python exports HTTP_ERROR_CODES and is_http_error_code",
       "explicitId": "openwop.it.spec-corpus-validity.python-exports-http-error-codes-and-is-http-error-code",
       "citations": [
@@ -45080,7 +45272,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.go-exports-httperrorcodes-and-ishttperrorcode",
       "file": "spec-corpus-validity.test.ts",
-      "line": 1016,
+      "line": 1017,
       "title": "Go exports HTTPErrorCodes and IsHTTPErrorCode",
       "explicitId": "openwop.it.spec-corpus-validity.go-exports-httperrorcodes-and-ishttperrorcode",
       "citations": [
@@ -45097,7 +45289,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.sdk-readmes-document-the-http-error-helper-surface",
       "file": "spec-corpus-validity.test.ts",
-      "line": 1023,
+      "line": 1024,
       "title": "SDK READMEs document the HTTP error helper surface",
       "explicitId": "openwop.it.spec-corpus-validity.sdk-readmes-document-the-http-error-helper-surface",
       "citations": [
@@ -45110,7 +45302,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.sdk-changelogs-mention-the-http-error-helper-surface",
       "file": "spec-corpus-validity.test.ts",
-      "line": 1032,
+      "line": 1033,
       "title": "SDK changelogs mention the HTTP error helper surface",
       "explicitId": "openwop.it.spec-corpus-validity.sdk-changelogs-mention-the-http-error-helper-surface",
       "citations": [
@@ -45123,7 +45315,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.typescript-dist-exports-the-http-error-helper-surface",
       "file": "spec-corpus-validity.test.ts",
-      "line": 1041,
+      "line": 1042,
       "title": "TypeScript dist exports the HTTP error helper surface",
       "explicitId": "openwop.it.spec-corpus-validity.typescript-dist-exports-the-http-error-helper-surface",
       "citations": [
@@ -45137,7 +45329,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.typescript-dist-metadata-uses-openwop-branding",
       "file": "spec-corpus-validity.test.ts",
-      "line": 1057,
+      "line": 1058,
       "title": "TypeScript dist metadata uses openwop branding",
       "explicitId": "openwop.it.spec-corpus-validity.typescript-dist-metadata-uses-openwop-branding",
       "citations": [
@@ -45156,7 +45348,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.typescript-dist-source-maps-point-back-to-src-and-avoid-legacy-branding",
       "file": "spec-corpus-validity.test.ts",
-      "line": 1065,
+      "line": 1066,
       "title": "TypeScript dist source maps point back to src and avoid legacy branding",
       "explicitId": "openwop.it.spec-corpus-validity.typescript-dist-source-maps-point-back-to-src-and-avoid-legacy-branding",
       "citations": [
@@ -45185,7 +45377,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.all-sdk-http-error-helpers-include",
       "file": "spec-corpus-validity.test.ts",
-      "line": 1094,
+      "line": 1095,
       "title": null,
       "explicitId": "openwop.it.spec-corpus-validity.all-sdk-http-error-helpers-include",
       "citations": [
@@ -45199,7 +45391,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.readme-suite-count-equals-src-scenarios-test-ts-count",
       "file": "spec-corpus-validity.test.ts",
-      "line": 1110,
+      "line": 1111,
       "title": "README suite count equals src/scenarios/*.test.ts count",
       "explicitId": "openwop.it.spec-corpus-validity.readme-suite-count-equals-src-scenarios-test-ts-count",
       "citations": [
@@ -45220,7 +45412,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.exists~2",
       "file": "spec-corpus-validity.test.ts",
-      "line": 1130,
+      "line": 1131,
       "title": "exists",
       "explicitId": "openwop.it.spec-corpus-validity.exists~2",
       "citations": [
@@ -45233,7 +45425,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.declares-asyncapi-3-1-required-top-level-keys",
       "file": "spec-corpus-validity.test.ts",
-      "line": 1134,
+      "line": 1135,
       "title": "declares asyncapi: 3.1 + required top-level keys",
       "explicitId": "openwop.it.spec-corpus-validity.declares-asyncapi-3-1-required-top-level-keys",
       "citations": [
@@ -45246,7 +45438,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.every-ref-to-schemas-json-resolves-to-a-real-file~2",
       "file": "spec-corpus-validity.test.ts",
-      "line": 1143,
+      "line": 1144,
       "title": "every $ref to ../schemas/*.json resolves to a real file",
       "explicitId": "openwop.it.spec-corpus-validity.every-ref-to-schemas-json-resolves-to-a-real-file~2",
       "citations": [
@@ -45260,7 +45452,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.named-runeventdoc-messages-use-event-names-from-run-event-schema-json",
       "file": "spec-corpus-validity.test.ts",
-      "line": 1152,
+      "line": 1153,
       "title": "named RunEventDoc messages use event names from run-event.schema.json",
       "explicitId": "openwop.it.spec-corpus-validity.named-runeventdoc-messages-use-event-names-from-run-event-schema-json",
       "citations": [
@@ -45278,7 +45470,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.operation-channel-refs-point-to-declared-channels",
       "file": "spec-corpus-validity.test.ts",
-      "line": 1173,
+      "line": 1174,
       "title": "operation channel refs point to declared channels",
       "explicitId": "openwop.it.spec-corpus-validity.operation-channel-refs-point-to-declared-channels",
       "citations": [
@@ -45300,7 +45492,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.channel-keys-and-message-names-are-unique",
       "file": "spec-corpus-validity.test.ts",
-      "line": 1195,
+      "line": 1196,
       "title": "channel keys and message names are unique",
       "explicitId": "openwop.it.spec-corpus-validity.channel-keys-and-message-names-are-unique",
       "citations": [
@@ -45319,7 +45511,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.finds-the-expected-prose-doc-set",
       "file": "spec-corpus-validity.test.ts",
-      "line": 1242,
+      "line": 1243,
       "title": "finds the expected prose doc set",
       "explicitId": "openwop.it.spec-corpus-validity.finds-the-expected-prose-doc-set",
       "citations": [
@@ -45332,7 +45524,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.declares-a-status-tag-stub-draft-outline-final-stable-stabilizing-draft-experime",
       "file": "spec-corpus-validity.test.ts",
-      "line": 1249,
+      "line": 1250,
       "title": null,
       "explicitId": "openwop.it.spec-corpus-validity.declares-a-status-tag-stub-draft-outline-final-stable-stabilizing-draft-experime",
       "citations": [
@@ -45344,11 +45536,11 @@
       ]
     },
     {
-      "id": "openwop.it.spec-corpus-validity.readme-total-count-equals-the-number-of-spec-v1-prose-docs",
+      "id": "openwop.it.spec-corpus-validity.readme-total-count-equals-the-number-of-spec-v2-core-docs",
       "file": "spec-corpus-validity.test.ts",
-      "line": 1276,
-      "title": "README Total count equals the number of spec/v1 prose docs",
-      "explicitId": "openwop.it.spec-corpus-validity.readme-total-count-equals-the-number-of-spec-v1-prose-docs",
+      "line": 1279,
+      "title": "README Total count equals the number of spec/v2/core docs",
+      "explicitId": "openwop.it.spec-corpus-validity.readme-total-count-equals-the-number-of-spec-v2-core-docs",
       "citations": [
         {
           "section": "spec-corpus-validity.test.ts (no spec citation in file)",
@@ -45356,16 +45548,16 @@
         },
         {
           "section": "spec-corpus-validity.test.ts (no spec citation in file)",
-          "requirement": "README.md document total MUST match spec/v1/*.md count"
+          "requirement": "README.md document total MUST match the spec/v2/core/*.md count"
         }
       ]
     },
     {
-      "id": "openwop.it.spec-corpus-validity.readme-document-index-links-every-spec-v1-prose-doc-exactly-once",
+      "id": "openwop.it.spec-corpus-validity.readme-document-index-links-every-spec-v2-core-doc-exactly-once",
       "file": "spec-corpus-validity.test.ts",
-      "line": 1286,
-      "title": "README document index links every spec/v1 prose doc exactly once",
-      "explicitId": "openwop.it.spec-corpus-validity.readme-document-index-links-every-spec-v1-prose-doc-exactly-once",
+      "line": 1289,
+      "title": "README document index links every spec/v2/core doc exactly once",
+      "explicitId": "openwop.it.spec-corpus-validity.readme-document-index-links-every-spec-v2-core-doc-exactly-once",
       "citations": [
         {
           "section": "spec-corpus-validity.test.ts (no spec citation in file)",
@@ -45377,7 +45569,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.finds-markdown-files-to-check",
       "file": "spec-corpus-validity.test.ts",
-      "line": 1312,
+      "line": 1315,
       "title": "finds Markdown files to check",
       "explicitId": "openwop.it.spec-corpus-validity.finds-markdown-files-to-check",
       "citations": [
@@ -45390,7 +45582,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.has-no-broken-local-markdown-file-links",
       "file": "spec-corpus-validity.test.ts",
-      "line": 1318,
+      "line": 1321,
       "title": null,
       "explicitId": "openwop.it.spec-corpus-validity.has-no-broken-local-markdown-file-links",
       "citations": [
@@ -45404,7 +45596,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.scans-public-docs-and-schemas",
       "file": "spec-corpus-validity.test.ts",
-      "line": 1406,
+      "line": 1409,
       "title": "scans public docs and schemas",
       "explicitId": "openwop.it.spec-corpus-validity.scans-public-docs-and-schemas",
       "citations": [
@@ -45417,7 +45609,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.has-no-private-implementation-or-pre-v1-breadcrumbs",
       "file": "spec-corpus-validity.test.ts",
-      "line": 1412,
+      "line": 1415,
       "title": null,
       "explicitId": "openwop.it.spec-corpus-validity.has-no-private-implementation-or-pre-v1-breadcrumbs",
       "citations": [
@@ -45431,7 +45623,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.every-fixture-id-mentioned-in-fixtures-md-has-a-corresponding-json",
       "file": "spec-corpus-validity.test.ts",
-      "line": 1446,
+      "line": 1449,
       "title": "every fixture id mentioned in fixtures.md has a corresponding JSON",
       "explicitId": "openwop.it.spec-corpus-validity.every-fixture-id-mentioned-in-fixtures-md-has-a-corresponding-json",
       "citations": [
@@ -45445,7 +45637,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.every-fixture-json-file-is-referenced-by-fixtures-md",
       "file": "spec-corpus-validity.test.ts",
-      "line": 1488,
+      "line": 1491,
       "title": "every fixture JSON file is referenced by fixtures.md",
       "explicitId": "openwop.it.spec-corpus-validity.every-fixture-json-file-is-referenced-by-fixtures-md",
       "citations": [
@@ -45459,7 +45651,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.a-sample-bundle-validates-against-conformance-certification-bundle-schema-json",
       "file": "spec-corpus-validity.test.ts",
-      "line": 1541,
+      "line": 1544,
       "title": "a sample bundle validates against conformance-certification-bundle.schema.json",
       "explicitId": "openwop.it.spec-corpus-validity.a-sample-bundle-validates-against-conformance-certification-bundle-schema-json",
       "citations": [
@@ -45473,7 +45665,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.verifybundle-accepts-a-claim-that-is-discovery-derivable-and-floor-proven-b",
       "file": "spec-corpus-validity.test.ts",
-      "line": 1547,
+      "line": 1550,
       "title": "verifyBundle ACCEPTS a claim that is discovery-derivable AND floor-proven (§B)",
       "explicitId": "openwop.it.spec-corpus-validity.verifybundle-accepts-a-claim-that-is-discovery-derivable-and-floor-proven-b",
       "citations": [
@@ -45486,7 +45678,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.verifybundle-rejects-a-profile-its-discovery-document-does-not-derive-b-1",
       "file": "spec-corpus-validity.test.ts",
-      "line": 1554,
+      "line": 1557,
       "title": "verifyBundle REJECTS a profile its discovery document does not derive (§B(1))",
       "explicitId": "openwop.it.spec-corpus-validity.verifybundle-rejects-a-profile-its-discovery-document-does-not-derive-b-1",
       "citations": [
@@ -45499,7 +45691,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.verifybundle-rejects-a-bundle-missing-a-floor-scenario-b-2",
       "file": "spec-corpus-validity.test.ts",
-      "line": 1564,
+      "line": 1567,
       "title": "verifyBundle REJECTS a bundle missing a floor scenario (§B(2))",
       "explicitId": "openwop.it.spec-corpus-validity.verifybundle-rejects-a-bundle-missing-a-floor-scenario-b-2",
       "citations": [
@@ -45512,7 +45704,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.the-committed-bundle-file-exists-generated-by-certify",
       "file": "spec-corpus-validity.test.ts",
-      "line": 1601,
+      "line": 1604,
       "title": "the committed bundle file exists (generated by --certify)",
       "explicitId": "openwop.it.spec-corpus-validity.the-committed-bundle-file-exists-generated-by-certify",
       "citations": [
@@ -45526,7 +45718,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.the-committed-reference-bundle-validates-against-the-bundle-schema-a",
       "file": "spec-corpus-validity.test.ts",
-      "line": 1605,
+      "line": 1608,
       "title": "the committed reference bundle validates against the bundle schema (§A)",
       "explicitId": "openwop.it.spec-corpus-validity.the-committed-reference-bundle-validates-against-the-bundle-schema-a",
       "citations": [
@@ -45540,7 +45732,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.verifybundle-rejects-the-committed-reference-bundle-it-is-invalidated-rfc-0148-d",
       "file": "spec-corpus-validity.test.ts",
-      "line": 1612,
+      "line": 1615,
       "title": "verifyBundle REJECTS the committed reference bundle — it is `invalidated` (RFC 0148 §D)",
       "explicitId": "openwop.it.spec-corpus-validity.verifybundle-rejects-the-committed-reference-bundle-it-is-invalidated-rfc-0148-d",
       "citations": [
@@ -45561,7 +45753,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.discovery-sha256-is-the-canonical-json-sha-256-of-the-captured-discovery-documen",
       "file": "spec-corpus-validity.test.ts",
-      "line": 1638,
+      "line": 1641,
       "title": "discovery.sha256 is the canonical-JSON SHA-256 of the captured discovery.document",
       "explicitId": "openwop.it.spec-corpus-validity.discovery-sha256-is-the-canonical-json-sha-256-of-the-captured-discovery-documen",
       "citations": [
@@ -45574,7 +45766,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.the-requestbody-closes-at-the-composition-unevaluatedproperties-not-inside-a-bra",
       "file": "spec-corpus-validity.test.ts",
-      "line": 1699,
+      "line": 1702,
       "title": "the requestBody closes at the composition (unevaluatedProperties), not inside a branch",
       "explicitId": "openwop.it.spec-corpus-validity.the-requestbody-closes-at-the-composition-unevaluatedproperties-not-inside-a-bra",
       "citations": [
@@ -45587,7 +45779,7 @@
     {
       "id": "openwop.it.spec-corpus-validity.canonical-createrun-bodies-pass-the-composed-schema-an-undeclared-property-fails",
       "file": "spec-corpus-validity.test.ts",
-      "line": 1714,
+      "line": 1717,
       "title": "canonical createRun bodies PASS the composed schema; an undeclared property FAILS",
       "explicitId": "openwop.it.spec-corpus-validity.canonical-createrun-bodies-pass-the-composed-schema-an-undeclared-property-fails",
       "citations": [
@@ -45792,6 +45984,32 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.ui-plugin-fixtures.ui-plugin-pack-narrow-validates-against-the-v2-frontend-plugin-manifest-schema",
+      "file": "ui-plugin-fixtures.test.ts",
+      "line": 29,
+      "title": "ui-plugin-pack-narrow validates against the v2 frontend-plugin manifest schema",
+      "explicitId": "openwop.it.ui-plugin-fixtures.ui-plugin-pack-narrow-validates-against-the-v2-frontend-plugin-manifest-s",
+      "citations": [
+        {
+          "section": "RFCS/0238-ui-plugin-observation-path.md §D",
+          "requirement": "the fixture pack is a valid v2 frontend-plugin manifest"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.ui-plugin-fixtures.declares-one-plugin-narrow-with-only-artifact-read-and-no-connectsrc-and-ships-i",
+      "file": "ui-plugin-fixtures.test.ts",
+      "line": 36,
+      "title": "declares one plugin, narrow, with only artifact.read and no connectSrc, and ships its entry",
+      "explicitId": "openwop.it.ui-plugin-fixtures.declares-one-plugin-narrow-with-only-artifact-read-and-no-connectsrc-and-ships-its",
+      "citations": [
+        {
+          "section": "RFCS/0238-ui-plugin-observation-path.md §D",
+          "requirement": "the legs depend on exactly this shape"
+        }
+      ]
+    },
     {
       "id": "openwop.it.v1-webhook-rotation-contract.the-v1-rotation-route-the-prose-mandates-is-an-api-openapi-yaml-operation-with-t",
       "file": "v1-webhook-rotation-contract.test.ts",
@@ -48423,6 +48641,32 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.wasm-fixture-packs.misbehaving-memory-is-the-memory-bomb-pack-its-manifest-describes-at-abi-version",
+      "file": "wasm-fixture-packs.test.ts",
+      "line": 70,
+      "title": "misbehaving-memory is the memory-bomb pack its manifest describes, at ABI version 1",
+      "explicitId": "openwop.it.wasm-fixture-packs.misbehaving-memory-is-the-memory-bomb-pack-its-manifest-describes-at-abi-version-1",
+      "citations": [
+        {
+          "section": "spec/v2/core/node-pack-runtimes.md §WASM",
+          "requirement": "the fixture module is the pack its manifest describes"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.wasm-fixture-packs.misbehaving-abi-is-the-abi-bomb-pack-its-manifest-describes-at-the-unlisted-abi",
+      "file": "wasm-fixture-packs.test.ts",
+      "line": 76,
+      "title": "misbehaving-abi is the abi-bomb pack its manifest describes, at the unlisted ABI version 999",
+      "explicitId": "openwop.it.wasm-fixture-packs.misbehaving-abi-is-the-abi-bomb-pack-its-manifest-describes-at-the-unlisted-abi-versi",
+      "citations": [
+        {
+          "section": "spec/v2/core/node-pack-runtimes.md §WASM",
+          "requirement": "the fixture module is the pack its manifest describes"
+        }
+      ]
+    },
     {
       "id": "openwop.it.workflow-chain-internal-flag.the-manifest-workflowchain-declares-a-boolean-internal-property",
       "file": "workflow-chain-internal-flag.test.ts",