@openwop/openwop-conformance 2.45.24 → 2.45.25

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # `@openwop/openwop-conformance` Changelog
 
+## [2.45.25] — 2026-10-07 — `v2-wasm-abi-reject`; the frontend-plugin schema legs leave host bundles
+
+- **New `v2-wasm-abi-reject` (`openwop.requirement.node-pack-runtimes.wasm-abi-reject`).** Gated on `nodePackRuntimes.wasm` and the new operator-installed fixture `conformance-wasm-pack-abi-mismatch`, which invokes `vendor.openwop.misbehaving.abi-bomb` (the `misbehaving-abi` pack, ABI version 999). Loading is not a protocol operation, so the leg reads what a rejection at load prevents: the pack in an advertised `loadedPacks`, and the node completing. The run must be refused at creation (4xx) or end without that node completing; a 401/403/429/5xx is `blocked`. Proof: a 9-case self-test double (`lib/wasm-abi-reject-witness.test.ts`). No RFC was needed: both observations already exist.
+- **No scenario change.** RFC 0238 goes `Accepted` on openwop-app's certified 2.45.23 cut; its gaps G1 and G3 close, which changes the packed `spec/v1/gaps.json`.
+- **No scenario change.** RFC 0239 goes `Accepted` on the v2 reference host's certified 2.45.23 cut; its gap G1 closes, which changes the packed `spec/v1/gaps.json`.
+- **No scenario change (RFC 0238 G3).** The 13 always-on schema legs of `frontend-plugin-packs` read only the corpus, so they move to `src/coherence/frontend-plugin-schemas.test.ts` and leave host bundles; their ids become `openwop.it.frontend-plugin-schemas.*`, which changes the packed `requirements.json`. The host-reading legs stay.
+
 ## [2.45.24] — 2026-10-07 — the effect receiver fails fast on a held pinned port; the README index check reads `spec/v2/core`
 
 - **The effect receiver fails fast on a held pinned port.** With `OPENWOP_WEBHOOK_RECEIVER_PORT` pinned to a port another process holds, `startEffectReceiver` attached no `error` handler, so `EADDRINUSE` never settled its `listen` promise and the `0158`/`0194` duplicate-delivery rows hung to their 180 s timeout instead of failing with the cause. It now rejects at once with the bind error, as `scoped-receiver` has since 2.39.3. Self-test: a held port rejects in under 2 s; without the handler the test times out. Reported by MyndHyve (2.45.18 cut, port 8787).

package/README.md

@@ -137,7 +137,7 @@ Each scenario file records its disposition and assertion count in `<report-dir>/
 
 ## What's Covered
 
-The current suite has 649 scenario files under `src/scenarios/`. By target major ([`scenario-majors.json`](./scenario-majors.json)): 209 files run against a v2 host and 455 against a v1 host; 15 of them run at both.
+The current suite has 650 scenario files under `src/scenarios/`. By target major ([`scenario-majors.json`](./scenario-majors.json)): 210 files run against a v2 host and 455 against a v1 host; 15 of them run at both.
 
 The v2 scenarios (`src/scenarios/v2-*.test.ts`) cover, by area:
 
@@ -154,7 +154,7 @@ The v2 scenarios (`src/scenarios/v2-*.test.ts`) cover, by area:
 | Security defaults | SSRF refusal, filesystem sandbox, cross-tenant isolation for storage, memory and queues, secret canaries | `v2-safefetch-ssrf-refused`, `v2-fs-sandbox-escape-refused`, `v2-storage-cross-tenant-isolation`, `v2-secret-canary-absent` |
 | Webhooks | Delivery shape, Standard Webhooks signing, durable retries, secret rotation, egress refusal, endpoint verification | `v2-webhook-delivery-shape`, `v2-webhook-durable-delivery`, `v2-webhook-secret-rotation`, `v2-webhook-egress-refusal` |
 | Durability and execution | Recovery after a kill, effect seams that never re-fire, execution bounds, budgets | `v2-durability-recovery`, `v2-effect-seam-no-refire`, `v2-run-execution-bounds`, `v2-budget-enforcement` |
-| Packs and composition | Pack isolation, peer dependencies, sub-workflow dispatch and input mapping, chain pins, WASM memory caps, registry lifecycle | `v2-pack-isolation`, `v2-subworkflow-linkage`, `v2-chain-pin-exact`, `v2-wasm-memory-cap` |
+| Packs and composition | Pack isolation, peer dependencies, sub-workflow dispatch and input mapping, chain pins, WASM memory caps and ABI rejection, registry lifecycle | `v2-pack-isolation`, `v2-subworkflow-linkage`, `v2-chain-pin-exact`, `v2-wasm-memory-cap`, `v2-wasm-abi-reject` |
 | AI, prompts and agents | AI envelopes, providers and usage, prompt libraries and rendering, model capabilities, conversations, multi-party councils | `v2-prompt-render-deterministic`, `v2-provider-usage-emission`, `v2-conversation-turn-parts`, `v2-multi-party-council` |
 | Interop | A2A agent cards and operation map, MCP mounts and tasks, A2UI v0.9 surfaces, trace context | `v2-a2a-operation-map`, `v2-mcp-mount-map`, `v2-a2ui-v09-surface`, `v2-interop-trace-context` |
 | Family advertisements | Each optional capability family's discovery record validates against its schema seat | `v2-*-advertisement` |
@@ -166,7 +166,7 @@ Three kinds of scenario share the tree:
 - **Host** checks drive a live host over HTTP.
 - **Gated** checks run only when the host advertises the family, profile or fixture they need, and otherwise record `inapplicable` or `blocked` with a reason. `--require-behavior` turns an advertised-but-unwitnessable behaviour into a failure.
 
-Current source tree: 649 scenario files. [`coverage.md`](./coverage.md) maps each spec document and every OpenAPI operation to its scenarios. [`CHANGELOG.md`](./CHANGELOG.md) records when each scenario landed.
+Current source tree: 650 scenario files. [`coverage.md`](./coverage.md) maps each spec document and every OpenAPI operation to its scenarios. [`CHANGELOG.md`](./CHANGELOG.md) records when each scenario landed.
 
 ## How the 2.x suite is built
 

package/coverage.md

@@ -32,7 +32,7 @@ Each scenario that targets major 2 is listed once, under the [`spec/v2/core/`](.
 | [`identity.md`](../spec/v2/core/identity.md) | `auth-challenge-no-oracle.test.ts`, `v2-assurance-downgrade-audited.test.ts`, `v2-auth-challenge.test.ts`, `v2-authorization-advertisement.test.ts`, `v2-bound-id-kinds.test.ts`, `v2-bound-id-path-projection.test.ts`, `v2-id-grammar.test.ts`, `v2-interrupt-token-scheme.test.ts`, `v2-lane-exp-only-bound.test.ts`, `v2-lane-issuer-advertised.test.ts`, `v2-oidc-id-token-audience.test.ts`, `v2-owner-subject-required.test.ts`, `v2-protected-resource-metadata.test.ts`, `v2-revocation-honored.test.ts`, `v2-subject-link-record.test.ts` |
 | [`interop.md`](../spec/v2/core/interop.md) | `otel-mcp-semconv-projection.test.ts`, `v2-a2a-agent-cards.test.ts`, `v2-a2a-client-error-details.test.ts`, `v2-a2a-operation-map.test.ts`, `v2-a2a-push-delivery.test.ts`, `v2-interop-trace-context.test.ts`, `v2-legacy-profiles-absent.test.ts`, `v2-mcp-mount-map.test.ts`, `v2-mcp-tasks.test.ts`, `v2-minimum-version-refused.test.ts`, `v2-mrtr-rounds-ceiling.test.ts`, `v2-negotiation-authenticated.test.ts`, `v2-negotiation-decided-emitted.test.ts`, `v2-no-transport-advertisement.test.ts`, `v2-refresh-sla.test.ts` |
 | [`interrupt.md`](../spec/v2/core/interrupt.md) | `v2-approval-reject-disposition.test.ts`, `v2-approver-enforced.test.ts`, `v2-callback-url-guarded.test.ts` |
-| [`node-pack-runtimes.md`](../spec/v2/core/node-pack-runtimes.md) | `v2-node-pack-runtimes-advertisement.test.ts`, `v2-wasm-memory-cap.test.ts` |
+| [`node-pack-runtimes.md`](../spec/v2/core/node-pack-runtimes.md) | `v2-node-pack-runtimes-advertisement.test.ts`, `v2-wasm-memory-cap.test.ts`, `v2-wasm-abi-reject.test.ts` |
 | [`oauth.md`](../spec/v2/core/oauth.md) | `v2-credential-interrupt.test.ts`, `v2-credentials-advertisement.test.ts`, `v2-oauth-client-pkce-state-iss.test.ts`, `v2-oauth-mcp-reach-discovery.test.ts` |
 | [`packs.md`](../spec/v2/core/packs.md) | `v2-manifest-ceiling-refused.test.ts`, `v2-manifest-hatch-carried.test.ts`, `v2-peer-dependency-declared.test.ts`, `v2-registry-lifecycle.test.ts`, `v2-ui-plugin-boundary.test.ts`, `v2-ui-plugins-advertisement.test.ts` |
 | [`persistence.md`](../spec/v2/core/persistence.md) | `v2-era-2-append-vocabulary.test.ts`, `v2-era-key.test.ts`, `v2-era-stamp-universal.test.ts`, `v2-pinned-run-disposition.test.ts`, `v2-unmapped-type-refused.test.ts`, `v2-v1-events-translated.test.ts` |

package/dist/spec-artifacts.lock.json

@@ -1,5 +1,5 @@
 {
   "package": "@openwop/spec-artifacts",
-  "version": "2.45.24",
-  "stampSha256": "eddfc3a323cff5ccd6a745bd97319f63e89d8982678d824bfe5af5fafebbd7de"
+  "version": "2.45.25",
+  "stampSha256": "071daf4502be07fdcaa748880b10f91bcbddaee45417cfdcd43d8c53b15e1e88"
 }

package/fixtures/conformance-wasm-pack-abi-mismatch.json

@@ -0,0 +1,41 @@
+{
+  "id": "conformance-wasm-pack-abi-mismatch",
+  "name": "Conformance: WASM Pack ABI Mismatch (Refused at Load)",
+  "version": "1.0",
+  "description": "node-pack-runtimes.md §WASM fixture. Invokes `vendor.openwop.misbehaving.abi-bomb`, whose module reports `openwop_abi_version()` 999, which no host lists. A host advertising this fixture says its operator offered `conformance/fixtures/wasm-packs/misbehaving-abi/` to its loader; a conforming host rejected the pack at load, so `nodePackRuntimes.wasm.loadedPacks` (when advertised) omits it, and the run is refused at creation or ends without the node completing. Fixture-only; not signed for the registry.",
+  "nodes": [
+    {
+      "id": "abi",
+      "typeId": "vendor.openwop.misbehaving.abi-bomb",
+      "name": "ABI bomb",
+      "position": {
+        "x": 0,
+        "y": 0
+      },
+      "config": {},
+      "inputs": {}
+    }
+  ],
+  "edges": [],
+  "triggers": [
+    {
+      "id": "manual",
+      "type": "manual",
+      "enabled": true
+    }
+  ],
+  "variables": [],
+  "metadata": {
+    "tags": [
+      "conformance",
+      "wasm",
+      "node-pack",
+      "rfc-0008",
+      "abi-version",
+      "misbehaving"
+    ]
+  },
+  "settings": {
+    "timeout": 10000
+  }
+}

package/fixtures.md

@@ -126,6 +126,7 @@ All fixtures MUST advertise:
 | A2A Task Roundtrip                        | `conformance-a2a-task-roundtrip`                                                                | Track 6 — host consumes the conformance suite's synthetic A2A peer; covers drift points #3 (`AUTH_REQUIRED`) and #4 (`REJECTED`). Node `core.conformance.a2a-invoke` is a **conformance-RESERVED** typeId (renamed 2026-08-16 from `core.a2a.invoke`, a multi-segment `core.*` id no host shipped and the corpus never defined): a host that consumes A2A peers MUST map it to its A2A bridge node (a host-extension node — `a2a-integration.md` §"State projection"); a host that does not consume A2A MUST NOT advertise this fixture                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `failed` or `waiting-input` (per `driftScenario` input)                             | ≤ 30s                        |
 | WASM Pack Roundtrip                       | `conformance-wasm-pack-roundtrip`                                                               | RFC 0008 — invokes `vendor.openwop.rust-hello.greet` (loaded WASM pack); exercises required exports + at least one import                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 | `completed`                                                                         | ≤ 10s                        |
 | WASM Pack Memory-Cap Breach               | `conformance-wasm-pack-memory-cap-breach`                                                       | RFC 0008 §K — invokes the deliberately-misbehaving `vendor.openwop.misbehaving.memory-bomb` pack (allocates 1 GiB beyond the host's `memoryPagesMax`). Host MUST emit `cap.breached` with `kind: "wasm-memory"` and drive the run to terminal `failed`. Misbehaving pack lives at `openwop-examples:examples/packs/rust-misbehaving-memory/` (repo-qualified per the 2026-06 monorepo split — the `openwop-examples` sibling repo) and is fixture-only (NOT signed for registry publication).                                                                                                                                                             | `failed` (with `cap.breached`)                                                      | ≤ 10s                        |
+| WASM Pack ABI Mismatch | `conformance-wasm-pack-abi-mismatch` | node-pack-runtimes.md §WASM — invokes `vendor.openwop.misbehaving.abi-bomb`, whose module reports `openwop_abi_version()` 999. Advertising the fixture says the operator offered `fixtures/wasm-packs/misbehaving-abi/` to the loader; a conforming host rejected it at load, so `loadedPacks` (when advertised) omits it and the node never runs. Fixture-only (NOT signed for registry publication). | refused at creation (4xx), or `failed` / `cancelled` without `node.completed` for `abi` | ≤ 10s |
 | Configurable Schema                       | `conformance-configurable-schema`                                                               | Track 13 — workflow declares `configurableSchema` (`additionalProperties: false`, `recursionLimit: integer ≥ 1`). Suite verifies `GET /workflows/{id}` surfaces the schema AND `POST /runs` with a mismatched `configurable` returns `validation_error`.                                                                                                                                                                                                                                                                                                                                                                                            | `completed` (with accepted overlay)                                                 | ≤ 5s                         |
 | Smoke — BYOK Roundtrip                    | `openwop-smoke-byok-roundtrip`                                                                  | End-to-end BYOK secret-resolution smoke. Single `conformance.secret.echo` node fetches the host-provisioned canary secret `openwop-conformance-canary-secret`, emits SHA-256 hex + byte length to variables — never the raw value. Spec: `run-options.md` §"Credential references" + `auth.md` §"Secret resolution" + `observability.md` §"Redaction".                                                                                                                                                                                                                                                                                                    | `completed`                                                                         | ≤ 10s                        |
 | Secrets — Run Witness | `openwop-secrets-run-witness` | RFC 0229 §C — one `core.secret.witness` node. The client supplies a value with the run (`runSecrets`, a `run:` ref) and its SHA-256 as an input; the node outputs only `{ matched }`. It can confirm only a value the caller already holds, so it is safe to advertise in production. Advertised by every host that advertises `secrets.runSecrets`. | `completed` (`matched: true` or `false`); `failed` (`credential_forbidden` / `credential_not_found`) on the scope legs | ≤ 10s |
@@ -841,7 +842,7 @@ The `fixtures/wasm-packs/` sub-directory holds two node packs (`language: "wasm"
 | Pack | Node | Purpose |
 | --- | --- | --- |
 | `misbehaving-memory` (`vendor.openwop.misbehaving`) | `vendor.openwop.misbehaving.memory-bomb` | Grows linear memory 64 MiB at a time until the host refuses, then traps. A host advertising `nodePackRuntimes.wasm.maxMemoryBytes` MUST emit `cap.breached` `kind: "wasm-memory"`. Drives `conformance-wasm-pack-memory-cap-breach` and `v2-wasm-memory-cap`. |
-| `misbehaving-abi` (`vendor.openwop.misbehaving-abi`) | `vendor.openwop.misbehaving.abi-bomb` | Reports `openwop_abi_version` 999, which no host lists, so a conforming host refuses it at load. Rejection at load is not yet observable over the protocol (TODO §8), so no v2 leg reads it. |
+| `misbehaving-abi` (`vendor.openwop.misbehaving-abi`) | `vendor.openwop.misbehaving.abi-bomb` | Reports `openwop_abi_version` 999, which no host lists, so a conforming host refuses it at load. Drives `conformance-wasm-pack-abi-mismatch` and `v2-wasm-abi-reject`, which read the refusal from what it prevents: the pack in `nodePackRuntimes.wasm.loadedPacks`, and its node completing. |
 
 ---
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openwop/openwop-conformance",
-  "version": "2.45.24",
+  "version": "2.45.25",
   "description": "Black-box conformance suite for OpenWOP hosts (v2 current; v1 scenarios retained for the frozen v1 tree).",
   "repository": {
     "type": "git",
@@ -56,6 +56,6 @@
     "@openwop/spec-artifacts": "file:../spec-artifacts"
   },
   "peerDependencies": {
-    "@openwop/spec-artifacts": "2.45.24"
+    "@openwop/spec-artifacts": "2.45.25"
   }
 }

package/requirements.json

@@ -2,11 +2,11 @@
   "$comment": "GENERATED by conformance/scripts/generate-requirement-registry.mjs — do not edit. One record per it()/test() in src/scenarios. Ids: openwop.it.<file-stem>.<title-slug>[~n] (src/lib/requirement-ids.ts). A record with id null has an interpolated title; its run-time row is keyed by the rendered title and maps here by file+line only. Renamed ids need a row in requirement-aliases.json.",
   "generatedFrom": "src/scenarios/*.test.ts",
   "counts": {
-    "files": 735,
-    "tests": 2780,
-    "withStableId": 2780,
+    "files": 737,
+    "tests": 2781,
+    "withStableId": 2781,
     "interpolatedTitles": 0,
-    "explicitIds": 2643
+    "explicitIds": 2644
   },
   "records": [
     {
@@ -13928,184 +13928,10 @@
         }
       ]
     },
-    {
-      "id": "openwop.it.frontend-plugin-packs.a-well-formed-frontend-plugin-manifest-validates",
-      "file": "frontend-plugin-packs.test.ts",
-      "line": 70,
-      "title": "a well-formed frontend-plugin manifest validates",
-      "explicitId": "openwop.it.frontend-plugin-packs.a-well-formed-frontend-plugin-manifest-validates",
-      "citations": [
-        {
-          "section": "frontend-plugin-packs.md",
-          "requirement": null,
-          "interpolated": true
-        }
-      ]
-    },
-    {
-      "id": "openwop.it.frontend-plugin-packs.a-backend-runtime-member-is-rejected-a-plugin-is-sandboxed-ui-not-a-node-entry",
-      "file": "frontend-plugin-packs.test.ts",
-      "line": 77,
-      "title": "a backend `runtime` member is rejected (a plugin is sandboxed UI, not a node entry)",
-      "explicitId": "openwop.it.frontend-plugin-packs.a-backend-runtime-member-is-rejected-a-plugin-is-sandboxed-ui-not-a-node-entry",
-      "citations": [
-        {
-          "section": "frontend-plugin-packs.md",
-          "requirement": "node-packs.md §Pack kinds — a kind:\"frontend-plugin\" manifest carrying `runtime` MUST be rejected (pack_kind_invalid)"
-        }
-      ]
-    },
-    {
-      "id": "openwop.it.frontend-plugin-packs.a-uiplugins-entry-missing-entry-is-rejected",
-      "file": "frontend-plugin-packs.test.ts",
-      "line": 85,
-      "title": "a uiPlugins[] entry missing `entry` is rejected",
-      "explicitId": "openwop.it.frontend-plugin-packs.a-uiplugins-entry-missing-entry-is-rejected",
-      "citations": [
-        {
-          "section": "frontend-plugin-packs.md",
-          "requirement": "a uiPlugins[] entry missing `entry` MUST NOT validate"
-        }
-      ]
-    },
-    {
-      "id": "openwop.it.frontend-plugin-packs.an-entry-path-with-traversal-is-rejected",
-      "file": "frontend-plugin-packs.test.ts",
-      "line": 91,
-      "title": "an `entry` path with `..` traversal is rejected",
-      "explicitId": "openwop.it.frontend-plugin-packs.an-entry-path-with-traversal-is-rejected",
-      "citations": [
-        {
-          "section": "frontend-plugin-packs.md",
-          "requirement": "an `entry` path MUST NOT contain `..` (path-traversal)"
-        }
-      ]
-    },
-    {
-      "id": "openwop.it.frontend-plugin-packs.a-hostapi-method-outside-the-closed-allowlist-is-rejected-frontend-plugin-rpc-al",
-      "file": "frontend-plugin-packs.test.ts",
-      "line": 97,
-      "title": "a hostApi method outside the closed allowlist is rejected (frontend-plugin-rpc-allowlist)",
-      "explicitId": "openwop.it.frontend-plugin-packs.a-hostapi-method-outside-the-closed-allowlist-is-rejected-frontend-plugin-rpc-al",
-      "citations": [
-        {
-          "section": "frontend-plugin-packs.md",
-          "requirement": "frontend-plugin-packs.md §Host-RPC — only the closed allowlist methods are permitted; `host.exec` MUST NOT validate"
-        }
-      ]
-    },
-    {
-      "id": "openwop.it.frontend-plugin-packs.an-empty-uiplugins-is-rejected-a-pack-must-declare-at-least-one-plugin",
-      "file": "frontend-plugin-packs.test.ts",
-      "line": 106,
-      "title": "an empty uiPlugins[] is rejected (a pack MUST declare at least one plugin)",
-      "explicitId": "openwop.it.frontend-plugin-packs.an-empty-uiplugins-is-rejected-a-pack-must-declare-at-least-one-plugin",
-      "citations": [
-        {
-          "section": "frontend-plugin-packs.md",
-          "requirement": "a frontend-plugin pack MUST declare at least one uiPlugins[] entry"
-        }
-      ]
-    },
-    {
-      "id": "openwop.it.frontend-plugin-packs.a-canvas-preview-entry-with-canvastypes-host-announce-validates-rfc-0130",
-      "file": "frontend-plugin-packs.test.ts",
-      "line": 111,
-      "title": "a canvas-preview entry with canvasTypes + host.announce validates (RFC 0130)",
-      "explicitId": "openwop.it.frontend-plugin-packs.a-canvas-preview-entry-with-canvastypes-host-announce-validates-rfc-0130",
-      "citations": [
-        {
-          "section": "RFC 0130",
-          "requirement": null,
-          "interpolated": true
-        }
-      ]
-    },
-    {
-      "id": "openwop.it.frontend-plugin-packs.a-surface-outside-the-closed-set-is-still-rejected-rfc-0130-keeps-the-enum-close",
-      "file": "frontend-plugin-packs.test.ts",
-      "line": 126,
-      "title": "a surface outside the closed set is still rejected (RFC 0130 keeps the enum closed)",
-      "explicitId": "openwop.it.frontend-plugin-packs.a-surface-outside-the-closed-set-is-still-rejected-rfc-0130-keeps-the-enum-close",
-      "citations": [
-        {
-          "section": "RFC 0130",
-          "requirement": "frontend-plugin-packs.md §The pack — the surface enum stays closed; an unknown surface MUST NOT validate"
-        }
-      ]
-    },
-    {
-      "id": "openwop.it.frontend-plugin-packs.a-valid-artifact-write-request-carrying-a-version-token-validates",
-      "file": "frontend-plugin-packs.test.ts",
-      "line": 141,
-      "title": "a valid artifact.write request carrying a version token validates",
-      "explicitId": "openwop.it.frontend-plugin-packs.a-valid-artifact-write-request-carrying-a-version-token-validates",
-      "citations": [
-        {
-          "section": "frontend-plugin-packs.md",
-          "requirement": null,
-          "interpolated": true
-        }
-      ]
-    },
-    {
-      "id": "openwop.it.frontend-plugin-packs.an-artifact-conflict-response-carries-currentversion-version-token-concurrency",
-      "file": "frontend-plugin-packs.test.ts",
-      "line": 152,
-      "title": "an artifact_conflict response carries currentVersion (version-token concurrency)",
-      "explicitId": "openwop.it.frontend-plugin-packs.an-artifact-conflict-response-carries-currentversion-version-token-concurrency",
-      "citations": [
-        {
-          "section": "frontend-plugin-packs.md",
-          "requirement": null,
-          "interpolated": true
-        }
-      ]
-    },
-    {
-      "id": "openwop.it.frontend-plugin-packs.a-request-with-a-method-outside-the-allowlist-is-schema-rejected",
-      "file": "frontend-plugin-packs.test.ts",
-      "line": 166,
-      "title": "a request with a method outside the allowlist is schema-rejected",
-      "explicitId": "openwop.it.frontend-plugin-packs.a-request-with-a-method-outside-the-allowlist-is-schema-rejected",
-      "citations": [
-        {
-          "section": "frontend-plugin-packs.md",
-          "requirement": "a method outside the ui-plugin/1 allowlist MUST NOT validate"
-        }
-      ]
-    },
-    {
-      "id": "openwop.it.frontend-plugin-packs.a-message-without-the-ui-plugin-1-protocol-tag-is-rejected",
-      "file": "frontend-plugin-packs.test.ts",
-      "line": 171,
-      "title": "a message without the ui-plugin/1 protocol tag is rejected",
-      "explicitId": "openwop.it.frontend-plugin-packs.a-message-without-the-ui-plugin-1-protocol-tag-is-rejected",
-      "citations": [
-        {
-          "section": "frontend-plugin-packs.md",
-          "requirement": "a host MUST ignore messages whose ui-plugin tag it does not recognize"
-        }
-      ]
-    },
-    {
-      "id": "openwop.it.frontend-plugin-packs.no-credential-bearing-field-is-admitted-on-the-envelope-frontend-plugin-no-byok",
-      "file": "frontend-plugin-packs.test.ts",
-      "line": 176,
-      "title": "no credential-bearing field is admitted on the envelope (frontend-plugin-no-byok)",
-      "explicitId": "openwop.it.frontend-plugin-packs.no-credential-bearing-field-is-admitted-on-the-envelope-frontend-plugin-no-byok",
-      "citations": [
-        {
-          "section": "frontend-plugin-packs.md",
-          "requirement": null,
-          "interpolated": true
-        }
-      ]
-    },
     {
       "id": "openwop.it.frontend-plugin-packs.a-host-advertising-uiplugins-must-advertise-a-conformant-isolation-model",
       "file": "frontend-plugin-packs.test.ts",
-      "line": 197,
+      "line": 40,
       "title": "a host advertising uiPlugins MUST advertise a conformant isolation model",
       "explicitId": "openwop.it.frontend-plugin-packs.a-host-advertising-uiplugins-must-advertise-a-conformant-isolation-model",
       "citations": [
@@ -14118,7 +13944,7 @@
     {
       "id": "openwop.it.frontend-plugin-packs.an-undeclared-host-rpc-method-is-refused-with-method-not-allowed",
       "file": "frontend-plugin-packs.test.ts",
-      "line": 212,
+      "line": 55,
       "title": "an undeclared host-RPC method is refused with method_not_allowed",
       "explicitId": "openwop.it.frontend-plugin-packs.an-undeclared-host-rpc-method-is-refused-with-method-not-allowed",
       "citations": [
@@ -14135,7 +13961,7 @@
     {
       "id": "openwop.it.frontend-plugin-packs.a-stale-artifact-write-is-refused-with-artifact-conflict-currentversion-no-persi",
       "file": "frontend-plugin-packs.test.ts",
-      "line": 235,
+      "line": 78,
       "title": "a stale artifact.write is refused with artifact_conflict + currentVersion (no persist)",
       "explicitId": "openwop.it.frontend-plugin-packs.a-stale-artifact-write-is-refused-with-artifact-conflict-currentversion-no-persi",
       "citations": [
@@ -38101,6 +37927,19 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.v2-wasm-abi-reject.a-pack-whose-openwop-abi-version-is-not-listed-is-not-loaded-and-its-node-never",
+      "file": "v2-wasm-abi-reject.test.ts",
+      "line": 30,
+      "title": "a pack whose openwop_abi_version() is not listed is not loaded and its node never runs",
+      "explicitId": "openwop.requirement.node-pack-runtimes.wasm-abi-reject",
+      "citations": [
+        {
+          "section": "spec/v2/core/node-pack-runtimes.md §WASM",
+          "requirement": "a host MUST reject at load a pack whose openwop_abi_version() is not listed"
+        }
+      ]
+    },
     {
       "id": "openwop.it.v2-wasm-memory-cap.a-module-exceeding-maxmemorybytes-produces-cap-breached-wasm-memory-and-fails-th",
       "file": "v2-wasm-memory-cap.test.ts",
@@ -43444,6 +43283,180 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.frontend-plugin-schemas.a-well-formed-frontend-plugin-manifest-validates",
+      "file": "frontend-plugin-schemas.test.ts",
+      "line": 63,
+      "title": "a well-formed frontend-plugin manifest validates",
+      "explicitId": "openwop.it.frontend-plugin-schemas.a-well-formed-frontend-plugin-manifest-validates",
+      "citations": [
+        {
+          "section": "frontend-plugin-packs.md",
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.frontend-plugin-schemas.a-backend-runtime-member-is-rejected-a-plugin-is-sandboxed-ui-not-a-node-entry",
+      "file": "frontend-plugin-schemas.test.ts",
+      "line": 71,
+      "title": "a backend `runtime` member is rejected (a plugin is sandboxed UI, not a node entry)",
+      "explicitId": "openwop.it.frontend-plugin-schemas.a-backend-runtime-member-is-rejected-a-plugin-is-sandboxed-ui-not-a-node-entry",
+      "citations": [
+        {
+          "section": "frontend-plugin-packs.md",
+          "requirement": "node-packs.md §Pack kinds — a kind:\"frontend-plugin\" manifest carrying `runtime` MUST be rejected (pack_kind_invalid)"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.frontend-plugin-schemas.a-uiplugins-entry-missing-entry-is-rejected",
+      "file": "frontend-plugin-schemas.test.ts",
+      "line": 80,
+      "title": "a uiPlugins[] entry missing `entry` is rejected",
+      "explicitId": "openwop.it.frontend-plugin-schemas.a-uiplugins-entry-missing-entry-is-rejected",
+      "citations": [
+        {
+          "section": "frontend-plugin-packs.md",
+          "requirement": "a uiPlugins[] entry missing `entry` MUST NOT validate"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.frontend-plugin-schemas.an-entry-path-with-traversal-is-rejected",
+      "file": "frontend-plugin-schemas.test.ts",
+      "line": 87,
+      "title": "an `entry` path with `..` traversal is rejected",
+      "explicitId": "openwop.it.frontend-plugin-schemas.an-entry-path-with-traversal-is-rejected",
+      "citations": [
+        {
+          "section": "frontend-plugin-packs.md",
+          "requirement": "an `entry` path MUST NOT contain `..` (path-traversal)"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.frontend-plugin-schemas.a-hostapi-method-outside-the-closed-allowlist-is-rejected-frontend-plugin-rpc-al",
+      "file": "frontend-plugin-schemas.test.ts",
+      "line": 94,
+      "title": "a hostApi method outside the closed allowlist is rejected (frontend-plugin-rpc-allowlist)",
+      "explicitId": "openwop.it.frontend-plugin-schemas.a-hostapi-method-outside-the-closed-allowlist-is-rejected-frontend-plugin-rpc-al",
+      "citations": [
+        {
+          "section": "frontend-plugin-packs.md",
+          "requirement": "frontend-plugin-packs.md §Host-RPC — only the closed allowlist methods are permitted; `host.exec` MUST NOT validate"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.frontend-plugin-schemas.an-empty-uiplugins-is-rejected-a-pack-must-declare-at-least-one-plugin",
+      "file": "frontend-plugin-schemas.test.ts",
+      "line": 104,
+      "title": "an empty uiPlugins[] is rejected (a pack MUST declare at least one plugin)",
+      "explicitId": "openwop.it.frontend-plugin-schemas.an-empty-uiplugins-is-rejected-a-pack-must-declare-at-least-one-plugin",
+      "citations": [
+        {
+          "section": "frontend-plugin-packs.md",
+          "requirement": "a frontend-plugin pack MUST declare at least one uiPlugins[] entry"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.frontend-plugin-schemas.a-canvas-preview-entry-with-canvastypes-host-announce-validates-rfc-0130",
+      "file": "frontend-plugin-schemas.test.ts",
+      "line": 110,
+      "title": "a canvas-preview entry with canvasTypes + host.announce validates (RFC 0130)",
+      "explicitId": "openwop.it.frontend-plugin-schemas.a-canvas-preview-entry-with-canvastypes-host-announce-validates-rfc-0130",
+      "citations": [
+        {
+          "section": "RFC 0130",
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.frontend-plugin-schemas.a-surface-outside-the-closed-set-is-still-rejected-rfc-0130-keeps-the-enum-close",
+      "file": "frontend-plugin-schemas.test.ts",
+      "line": 126,
+      "title": "a surface outside the closed set is still rejected (RFC 0130 keeps the enum closed)",
+      "explicitId": "openwop.it.frontend-plugin-schemas.a-surface-outside-the-closed-set-is-still-rejected-rfc-0130-keeps-the-enum-close",
+      "citations": [
+        {
+          "section": "RFC 0130",
+          "requirement": "frontend-plugin-packs.md §The pack — the surface enum stays closed; an unknown surface MUST NOT validate"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.frontend-plugin-schemas.a-valid-artifact-write-request-carrying-a-version-token-validates",
+      "file": "frontend-plugin-schemas.test.ts",
+      "line": 140,
+      "title": "a valid artifact.write request carrying a version token validates",
+      "explicitId": "openwop.it.frontend-plugin-schemas.a-valid-artifact-write-request-carrying-a-version-token-validates",
+      "citations": [
+        {
+          "section": "frontend-plugin-packs.md",
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.frontend-plugin-schemas.an-artifact-conflict-response-carries-currentversion-version-token-concurrency",
+      "file": "frontend-plugin-schemas.test.ts",
+      "line": 152,
+      "title": "an artifact_conflict response carries currentVersion (version-token concurrency)",
+      "explicitId": "openwop.it.frontend-plugin-schemas.an-artifact-conflict-response-carries-currentversion-version-token-concurrency",
+      "citations": [
+        {
+          "section": "frontend-plugin-packs.md",
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.frontend-plugin-schemas.a-request-with-a-method-outside-the-allowlist-is-schema-rejected",
+      "file": "frontend-plugin-schemas.test.ts",
+      "line": 167,
+      "title": "a request with a method outside the allowlist is schema-rejected",
+      "explicitId": "openwop.it.frontend-plugin-schemas.a-request-with-a-method-outside-the-allowlist-is-schema-rejected",
+      "citations": [
+        {
+          "section": "frontend-plugin-packs.md",
+          "requirement": "a method outside the ui-plugin/1 allowlist MUST NOT validate"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.frontend-plugin-schemas.a-message-without-the-ui-plugin-1-protocol-tag-is-rejected",
+      "file": "frontend-plugin-schemas.test.ts",
+      "line": 173,
+      "title": "a message without the ui-plugin/1 protocol tag is rejected",
+      "explicitId": "openwop.it.frontend-plugin-schemas.a-message-without-the-ui-plugin-1-protocol-tag-is-rejected",
+      "citations": [
+        {
+          "section": "frontend-plugin-packs.md",
+          "requirement": "a host MUST ignore messages whose ui-plugin tag it does not recognize"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.frontend-plugin-schemas.no-credential-bearing-field-is-admitted-on-the-envelope-frontend-plugin-no-byok",
+      "file": "frontend-plugin-schemas.test.ts",
+      "line": 179,
+      "title": "no credential-bearing field is admitted on the envelope (frontend-plugin-no-byok)",
+      "explicitId": "openwop.it.frontend-plugin-schemas.no-credential-bearing-field-is-admitted-on-the-envelope-frontend-plugin-no-byok",
+      "citations": [
+        {
+          "section": "frontend-plugin-packs.md",
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
     {
       "id": "openwop.it.locale-key-grammar.extended-bcp-47-keys-validate-at-every-locale-site-v1-and-v2",
       "file": "locale-key-grammar.test.ts",

package/scenario-majors.json

@@ -1,9 +1,9 @@
 {
   "$comment": "GENERATED by conformance/scripts/generate-scenario-majors.mjs (RFC 0168 §D.3). Do not edit; add a file to BOTH_MAJORS in the generator to target both majors.",
   "counts": {
-    "files": 649,
+    "files": 650,
     "v1": 455,
-    "v2": 209
+    "v2": 210
   },
   "majors": {
     "a2a-1-0-agent-card.test.ts": [
@@ -1818,6 +1818,9 @@
     "v2-version-header-honored.test.ts": [
       2
     ],
+    "v2-wasm-abi-reject.test.ts": [
+      2
+    ],
     "v2-wasm-memory-cap.test.ts": [
       2
     ],

package/schemas/CORPUS-STAMP.json

@@ -1,17 +1,17 @@
 {
   "_comment": "Provenance of @openwop/spec-artifacts (RFC 0168 §D.2). files: SHA-256 per file; the conformance suite compares the installed peer against dist/spec-artifacts.lock.json at start.",
   "package": "@openwop/spec-artifacts",
-  "version": "2.45.24",
-  "corpusTag": "v2.45.24",
+  "version": "2.45.25",
+  "corpusTag": "v2.45.25",
   "files": {
     "api/.redocly.lint-ignore.yaml": "bf5a8350b88a72fa43f59605ed8d903ed24b6cfccda5e45509c9f6ed9ee4e712",
     "api/asyncapi.yaml": "d5ecb9ee6114582be3b1f662c84bfac9ae96dae7bacb853e461168f70a8e1c7d",
     "api/grpc/openwop.proto": "c3e72bb17cba514ee98feb6434e6c9b6ea6795bfd086489ec69fd882dd1ad977",
     "api/openapi.yaml": "ac6de5303872664b78ff419c035915593e01599e02835e777a0123de1baeb398",
     "api/redocly.yaml": "b0604c89b2ca6d5076ec25725c539dad44a741a811fe524439ee6daef8baa09f",
-    "api/seams-v2.yaml": "139cd5f7411c714ef1f207ee3284dc75633be3817d9946c1bdd998220fa79eec",
-    "api/v2/asyncapi.yaml": "e9cc564d30c8ff03da39e2c1b64fa33f2f2e627dc6afebf2fddc4262e3b0a7c5",
-    "api/v2/openapi.yaml": "15fb4ae5e02a5366b9bb60a3c9eb05f79695d1ae3669c0746bcae34cc04c77a2",
+    "api/seams-v2.yaml": "0692397ec226e29431dbb2f0d7e645d42ac76a3e4f851f1342136186e55ede78",
+    "api/v2/asyncapi.yaml": "416a78c622b4b2bad33cc73d4f2676e53685d1ee99ab6576338dd426a5a0e0fb",
+    "api/v2/openapi.yaml": "907a0bbf13669b0db55effd35eae67bafc2df0a496f11de37d876f69cc7fbe98",
     "api/v2/redocly.yaml": "1e66b60e6118ad11a823bb620678be464d99dfe50a40e3e6f93ec9429b88b34c",
     "schemas/README.md": "276fc1d51eb08e14e9127b9fd27761d7046ee33c12000f3a64a801322db8bf58",
     "schemas/a2a-task-state.schema.json": "75d5049dea8bd873ff0e7546f1c60c8d36c219bec7084264360be54a8be30ae1",
@@ -118,7 +118,7 @@
     "schemas/v2/audit-verify-result.schema.json": "14af8e9283510f0a40e48a2059c929ee44e0fc9fa3cc66a95bfbe90b17c48297",
     "schemas/v2/budget-policy.schema.json": "1de68095db0beb5c7a4be629de26e79f62ebbe748a88d46f36e768edfd1f0d68",
     "schemas/v2/capabilities.schema.json": "d859a413ff463ec39acc32a9cb76f2e8c7419e45683d6b7f886861765a9c36c7",
-    "schemas/v2/certification-bundle.schema.json": "ee3b10966458a10568a32b8a7eb4ab7bdb2f2d00da3ef6b698cd06462d52de40",
+    "schemas/v2/certification-bundle.schema.json": "93fcdfe54b1db168b702bfaf632b60c7a8a602be92c3fe48c81cf25408c2332b",
     "schemas/v2/channel-presence-payload.schema.json": "fc03df0c20cc12a25f7ee6a47503a4c5931d79fe3d5ff24815e8fd7c1bcb9a87",
     "schemas/v2/channel-written-payload.schema.json": "ccecff3c71a3275ad8db035ac0e04db25e6f8d23cf091ddbcd5a60d1be1cbb6b",
     "schemas/v2/chat-card-pack-manifest.schema.json": "92a57db2fd4b2463f14ef155fef8e3f18afc78960b646459dcf32efc79ff6bf5",
@@ -208,14 +208,14 @@
     "schemas/workspace-file.schema.json": "464de85c2a068243084ee9c1d969bc7cd5d8f7948574e58450d6493c38a0e1e4",
     "spec/v1/alias-detectors.json": "22444c22bb88c568339ef512553f9fc38146e22b566d11ab8608f655d688d19c",
     "spec/v1/capability-declaration-classes.json": "e7729aed5c4b4e1dd02abab0530f14cc95f5d4070fe51fb139e7f5cccefa00c6",
-    "spec/v1/core-standard-manifest.json": "b1d32d221b43e1897cd65fc22bdac4384376fa720733be1a736dea31141eeee9",
+    "spec/v1/core-standard-manifest.json": "53a46c4dc0224f13f06c4aa6f07ac6aaa0db84407c4ef2127a9d9d5652255b9e",
     "spec/v1/deprecations.json": "e723bc11d7272c71789ad1303bb7f21809a8a024abf57594f9d5c35dc199ece9",
     "spec/v1/deprecations.schema.json": "3e393c405d2a41b467d8c5e3c468549078df1ce6a6d2588fc488097b95d9b55b",
     "spec/v1/end-of-support.json": "35f0bf3b70fe78b16e2a2fd81a153fc27e703f6c16376c6fe7cdf1f4f2c4e6d4",
     "spec/v1/event-codemap.json": "3da60d884157793a360da532a9fcbbfb5285636db325a74cec94b34622186d97",
     "spec/v1/event-codemap.schema.json": "d05933b2e88103aff51a2f774df97b9bda065e0fc88dbd9b114cc47a32189174",
     "spec/v1/extensions.json": "79a60754aa16cbdbdb604f8e5c00038af535a1690a4d07bd5ff7c38f0256a7bc",
-    "spec/v1/gaps.json": "ab22f506255eef90fba09585776dce09faa803207807eccbb3ea1c1a6cc80480",
+    "spec/v1/gaps.json": "a97d03cce8f59be6f84c66eeeacc56e01e500c7a32845afc95f4d4c4d91b4bfd",
     "spec/v1/gaps.schema.json": "8fd83259f556553c9df0f53e7a82ca8c2a4771d471197f69b4e2ae0ceeacfd66",
     "spec/v1/migrations.json": "4c50760be70cb644d02427bcaf5749606700edf4513f423903cf3b1d12f5c300",
     "spec/v1/migrations.schema.json": "886779aa6c22e646db097f5df210adb018a4dd14a7b815465a18c8a7056c8f72",
@@ -313,9 +313,9 @@
     "spec/v2/path-manifest.json": "50fc251f296b06ec5fad35724f5c63b1a32e0e8fc222a85cd29b785cebdb9c98",
     "spec/v2/peer-dependency-aliases.json": "d10299280abee08258502925bc327293ee413e0108cd6e6ec75ff6110653308d",
     "spec/v2/profiles.json": "180beb9ef2d161766fa23b2987e7e829851e3d316273147cf6a4a3f324befd6b",
-    "spec/v2/release.json": "013b562cc396f4c6f000ed977be781f6f3ace49f609ee5fae045ff57aacb53a1",
+    "spec/v2/release.json": "0fdc846e4aacfad6b0fe7a255002c4ad167bc41f14174ba6f2dcf2498cb540f3",
     "spec/v2/retention-floors.json": "eaf3722d95c79947af1d4269ef85117e126518c588cfcf1a2b21b97269f51624",
-    "spec/v2/surface-baseline.json": "1bc7b1cbf33591b9e9f406d2ce2de08b306dc6986e365a29d20a78331bce7344"
+    "spec/v2/surface-baseline.json": "91233acd0e69f99afbe4319260298ede7bddc2bd665d30305ecd443bef65ab58"
   },
-  "corpusCommit": "2941c09ee028be32e129b96dde8b269e2a098854"
+  "corpusCommit": "f204da96cb286ba47bed89d4f66d70bbfdcda5a4"
 }

package/src/lib/wasm-abi-reject-witness.ts

@@ -0,0 +1,66 @@
+/**
+ * The WASM ABI check (`spec/v2/core/node-pack-runtimes.md` §WASM: a host "MUST
+ * reject at load a pack whose `openwop_abi_version()` is not listed"; RFC 0008
+ * §H), observed through discovery and run creation against the
+ * operator-installed `vendor.openwop.misbehaving-abi` fixture pack
+ * (`conformance/fixtures/wasm-packs/misbehaving-abi/`), whose module reports
+ * ABI version 999.
+ *
+ * Loading is not a protocol operation, so the refusal is read from what it
+ * makes impossible. A host advertising `conformance-wasm-pack-abi-mismatch`
+ * says its operator offered the pack to its loader. Rejected at load, the pack
+ * is absent from `nodePackRuntimes.wasm.loadedPacks` (when advertised), and its
+ * one node never runs: the fixture's run is refused at creation or ends
+ * without that node completing.
+ *
+ * `abiRejectLeg` observes and returns findings or the reason it could not run;
+ * `judgeAbiReject` is pure. The scenario and the self-test double run the same code.
+ */
+
+import { v2Discovery } from './v2.js';
+import { majorProfile } from './major-profile.js';
+import { completionsOf, observeRun, type ObservedRun } from './fixture-run-observer.js';
+
+export const ABI_FIXTURE = 'conformance-wasm-pack-abi-mismatch';
+export const ABI_PACK = 'vendor.openwop.misbehaving-abi';
+export const ABI_NODE = 'abi';
+
+export type Skip = { readonly kind: 'skip'; readonly skip: 'blocked' | 'inapplicable'; readonly reason: string };
+export type LegOutcome = { readonly kind: 'observed'; readonly findings: string[] } | Skip;
+const skip = (s: 'blocked' | 'inapplicable', reason: string): Skip => ({ kind: 'skip', skip: s, reason });
+const isRecord = (v: unknown): v is Record<string, unknown> => typeof v === 'object' && v !== null && !Array.isArray(v);
+const TERMINAL = new Set(['completed', 'failed', 'cancelled']);
+
+/** A create the host refused on its merits, not for want of access or by its own fault. */
+const refusedAtCreate = (status: number): boolean => status >= 400 && status < 500 && status !== 401 && status !== 403 && status !== 429;
+
+/** The pack is not loaded, and its node never completes. */
+export function judgeAbiReject(loadedPacks: unknown, o: ObservedRun): string[] {
+  const out: string[] = [];
+  if (Array.isArray(loadedPacks) && loadedPacks.includes(ABI_PACK)) out.push(`nodePackRuntimes.wasm.loadedPacks MUST NOT list ${ABI_PACK}, whose openwop_abi_version() 999 no host lists; it does`);
+  if (o.createStatus === 201 || o.createStatus === 202) {
+    if (completionsOf(o.events, ABI_NODE).length > 0 || o.terminalStatus === 'completed') {
+      out.push(`the ${ABI_PACK} node ran (node.completed, run ${String(o.terminalStatus)}): a pack whose ABI version is not listed MUST be rejected at load, so its node cannot execute`);
+    } else if (o.terminalStatus === undefined || !TERMINAL.has(o.terminalStatus)) {
+      out.push(`the ${ABI_FIXTURE} run MUST be refused at creation or end without the node completing; it is still ${String(o.terminalStatus)}`);
+    }
+  } else if (!refusedAtCreate(o.createStatus)) {
+    out.push(`createRun of ${ABI_FIXTURE} answered ${o.createStatus}; a refusal of an unloaded node is a 4xx`);
+  }
+  return out;
+}
+
+/** node-pack-runtimes.md §WASM bullet 1 — `openwop.requirement.node-pack-runtimes.wasm-abi-reject`. */
+export async function abiRejectLeg(): Promise<LegOutcome> {
+  let doc: Record<string, unknown> | null = null;
+  try { doc = await v2Discovery(); } catch { doc = null; }
+  if (!doc) return skip('blocked', 'v2 discovery unreachable');
+  const fam = doc['nodePackRuntimes'];
+  const wasm = isRecord(fam) ? fam['wasm'] : undefined;
+  if (!isRecord(wasm)) return skip('inapplicable', 'the host does not advertise nodePackRuntimes.wasm');
+  const fixtures = Array.isArray(doc['fixtures']) ? (doc['fixtures'] as unknown[]) : [];
+  if (!fixtures.includes(ABI_FIXTURE)) return skip('inapplicable', `the host does not advertise ${ABI_FIXTURE}; the operator offers conformance/fixtures/wasm-packs/misbehaving-abi/ to the loader to run it`);
+  const o = await observeRun(majorProfile(2), ABI_FIXTURE, { timeoutMs: 30_000 });
+  if (o.createStatus === 401 || o.createStatus === 403 || o.createStatus === 429 || o.createStatus >= 500) return skip('blocked', `createRun of ${ABI_FIXTURE} answered ${o.createStatus}`);
+  return { kind: 'observed', findings: judgeAbiReject(wasm['loadedPacks'], o) };
+}

package/src/scenarios/frontend-plugin-packs.test.ts

@@ -5,25 +5,17 @@
  * plus the manifest shape and the `ui-plugin/1` host-RPC + version-token concurrency
  * contract.
  *
- * Two layers:
+ * The always-on schema layer (manifest and `ui-plugin/1` message shapes) reads
+ * only the corpus, so it lives in `src/coherence/frontend-plugin-schemas.test.ts`
+ * (RFC 0238 G3). What stays here reads a host:
  *
- *   A. Always-on, server-free schema probe — `frontend-plugin-manifest.schema.json`
- *      and `ui-plugin-message.schema.json` enforce the wire shape: a valid manifest /
- *      message validates; a backend `runtime` member, a `uiPlugins[]` entry missing
- *      `entry`, an out-of-allowlist `method`, and any envelope `additionalProperties`
- *      are rejected. The `version`-token concurrency contract (the `artifact_conflict`
- *      error code + `currentVersion`) is schema-pinned. No credential-bearing field is
- *      admitted on the envelope (`frontend-plugin-no-byok`).
- *
- *   B. Capability-gated behavioral leg — on a host advertising
- *      `capabilities.uiPlugins.supported: true` that exposes the
- *      `POST /v1/host/sample/ui-plugin/rpc` test seam, an undeclared-method request
- *      MUST be refused with `method_not_allowed` (`frontend-plugin-rpc-allowlist`), and
- *      a stale `artifact.write` MUST be refused with `artifact_conflict` + `currentVersion`
- *      and MUST NOT persist (§Concurrency). Hosts without the seam soft-skip (404);
- *      unadvertised hosts skip via the behavior gate. (No conformant host advertises
- *      `uiPlugins` yet — these legs soft-skip until the openwop-app reference host (ADR
- *      0153) lands, the first witness that graduates the invariants to protocol.)
+ *   - the `uiPlugins` isolation advertisement, on a host that advertises it; and
+ *   - the capability-gated host-RPC legs over the v1 test seam
+ *     `POST /v1/host/sample/ui-plugin/rpc`: an undeclared method is refused with
+ *     `method_not_allowed` (`frontend-plugin-rpc-allowlist`), and a stale
+ *     `artifact.write` is refused with `artifact_conflict` + `currentVersion` and
+ *     does not persist. Hosts without the seam soft-skip (404). The v2 witness is
+ *     `v2-ui-plugin-boundary` (RFC 0238).
  *
  * @see spec/v1/frontend-plugin-packs.md
  * @see SECURITY/invariants.yaml ids: frontend-plugin-{isolation,egress,rpc-allowlist,no-byok}
@@ -31,161 +23,12 @@
  */
 
 import { describe, it, expect } from 'vitest';
-import { readFileSync } from 'node:fs';
-import { join } from 'node:path';
-import Ajv2020 from 'ajv/dist/2020.js';
-import addFormats from 'ajv-formats';
-import { SCHEMAS_DIR } from '../lib/paths.js';
 import { driver } from '../lib/driver.js';
 import { behaviorGate } from '../lib/behavior-gate.js';
 import { readCapabilityFamily } from '../lib/discovery-capabilities.js';
 import { req } from '../lib/requirement-ids.js';
 import { softSkip } from '../lib/soft-skip.js';
 
-const MANIFEST_SCHEMA = join(SCHEMAS_DIR, 'frontend-plugin-manifest.schema.json');
-const MESSAGE_SCHEMA = join(SCHEMAS_DIR, 'ui-plugin-message.schema.json');
-
-function validManifest(): Record<string, unknown> {
-  return {
-    name: 'vendor.acme.canvas-editor',
-    version: '1.0.0',
-    kind: 'frontend-plugin',
-    engines: { openwop: '>=1.2.0' },
-    uiPlugins: [
-      {
-        pluginId: 'app-builder',
-        surface: 'artifact-viewer',
-        entry: 'ui/app-builder.mjs',
-        hostApi: ['artifact.read', 'artifact.write'],
-      },
-    ],
-  };
-}
-
-describe('frontend-plugin manifest: schema layer (always-on, server-free)', () => {
-  const ajv = new Ajv2020({ allErrors: true, strict: false });
-  addFormats(ajv);
-  const validate = ajv.compile(JSON.parse(readFileSync(MANIFEST_SCHEMA, 'utf8')));
-
-  it('a well-formed frontend-plugin manifest validates', () => {
-    expect(
-      validate(validManifest()),
-      req('openwop.it.frontend-plugin-packs.a-well-formed-frontend-plugin-manifest-validates', 'frontend-plugin-packs.md', `frontend-plugin-packs.md §The pack — a valid manifest MUST validate. Errors: ${JSON.stringify(validate.errors)}`),
-    ).toBe(true);
-  });
-
-  it('a backend `runtime` member is rejected (a plugin is sandboxed UI, not a node entry)', () => {
-    const m = { ...validManifest(), runtime: { language: 'javascript', entry: 'index.mjs' } };
-    expect(
-      validate(m),
-      req('openwop.it.frontend-plugin-packs.a-backend-runtime-member-is-rejected-a-plugin-is-sandboxed-ui-not-a-node-entry', 'frontend-plugin-packs.md', 'node-packs.md §Pack kinds — a kind:"frontend-plugin" manifest carrying `runtime` MUST be rejected (pack_kind_invalid)'),
-    ).toBe(false);
-  });
-
-  it('a uiPlugins[] entry missing `entry` is rejected', () => {
-    const m = validManifest();
-    delete (m.uiPlugins as Array<Record<string, unknown>>)[0].entry;
-    expect(validate(m), req('openwop.it.frontend-plugin-packs.a-uiplugins-entry-missing-entry-is-rejected', 'frontend-plugin-packs.md', 'a uiPlugins[] entry missing `entry` MUST NOT validate')).toBe(false);
-  });
-
-  it('an `entry` path with `..` traversal is rejected', () => {
-    const m = validManifest();
-    (m.uiPlugins as Array<Record<string, unknown>>)[0].entry = '../escape.mjs';
-    expect(validate(m), req('openwop.it.frontend-plugin-packs.an-entry-path-with-traversal-is-rejected', 'frontend-plugin-packs.md', 'an `entry` path MUST NOT contain `..` (path-traversal)')).toBe(false);
-  });
-
-  it('a hostApi method outside the closed allowlist is rejected (frontend-plugin-rpc-allowlist)', () => {
-    const m = validManifest();
-    (m.uiPlugins as Array<Record<string, unknown>>)[0].hostApi = ['artifact.read', 'host.exec'];
-    expect(
-      validate(m),
-      req('openwop.it.frontend-plugin-packs.a-hostapi-method-outside-the-closed-allowlist-is-rejected-frontend-plugin-rpc-al', 'frontend-plugin-packs.md', 'frontend-plugin-packs.md §Host-RPC — only the closed allowlist methods are permitted; `host.exec` MUST NOT validate'),
-    ).toBe(false);
-  });
-
-  it('an empty uiPlugins[] is rejected (a pack MUST declare at least one plugin)', () => {
-    const m = { ...validManifest(), uiPlugins: [] };
-    expect(validate(m), req('openwop.it.frontend-plugin-packs.an-empty-uiplugins-is-rejected-a-pack-must-declare-at-least-one-plugin', 'frontend-plugin-packs.md', 'a frontend-plugin pack MUST declare at least one uiPlugins[] entry')).toBe(false);
-  });
-
-  it('a canvas-preview entry with canvasTypes + host.announce validates (RFC 0130)', () => {
-    const m = validManifest();
-    (m.uiPlugins as Array<Record<string, unknown>>)[0] = {
-      pluginId: 'gantt-preview',
-      surface: 'canvas-preview',
-      canvasTypes: ['canvas.gantt'],
-      entry: 'ui/preview.html',
-      hostApi: ['artifact.read', 'host.announce'],
-    };
-    expect(
-      validate(m),
-      req('openwop.it.frontend-plugin-packs.a-canvas-preview-entry-with-canvastypes-host-announce-validates-rfc-0130', 'RFC 0130', `frontend-plugin-packs.md §The pack (RFC 0130) — a canvas-preview entry MUST validate. Errors: ${JSON.stringify(validate.errors)}`),
-    ).toBe(true);
-  });
-
-  it('a surface outside the closed set is still rejected (RFC 0130 keeps the enum closed)', () => {
-    const m = validManifest();
-    (m.uiPlugins as Array<Record<string, unknown>>)[0].surface = 'omni-panel';
-    expect(
-      validate(m),
-      req('openwop.it.frontend-plugin-packs.a-surface-outside-the-closed-set-is-still-rejected-rfc-0130-keeps-the-enum-close', 'RFC 0130', 'frontend-plugin-packs.md §The pack — the surface enum stays closed; an unknown surface MUST NOT validate'),
-    ).toBe(false);
-  });
-});
-
-describe('ui-plugin/1 message: schema layer (always-on, server-free)', () => {
-  const ajv = new Ajv2020({ allErrors: true, strict: false });
-  addFormats(ajv);
-  const validate = ajv.compile(JSON.parse(readFileSync(MESSAGE_SCHEMA, 'utf8')));
-
-  it('a valid artifact.write request carrying a version token validates', () => {
-    const reqBody = {
-      openwop: 'ui-plugin/1',
-      type: 'request',
-      id: 7,
-      method: 'artifact.write',
-      params: { artifactId: 'a-1', version: 'opaque-v1', payload: {} },
-    };
-    expect(validate(reqBody), req('openwop.it.frontend-plugin-packs.a-valid-artifact-write-request-carrying-a-version-token-validates', 'frontend-plugin-packs.md', `a valid artifact.write request MUST validate. Errors: ${JSON.stringify(validate.errors)}`)).toBe(true);
-  });
-
-  it('an artifact_conflict response carries currentVersion (version-token concurrency)', () => {
-    const res = {
-      openwop: 'ui-plugin/1',
-      type: 'response',
-      id: 7,
-      ok: false,
-      error: { code: 'artifact_conflict', currentVersion: 'opaque-v2' },
-    };
-    expect(
-      validate(res),
-      req('openwop.it.frontend-plugin-packs.an-artifact-conflict-response-carries-currentversion-version-token-concurrency', 'frontend-plugin-packs.md', `frontend-plugin-packs.md §Concurrency — a stale write surfaces artifact_conflict + currentVersion. Errors: ${JSON.stringify(validate.errors)}`),
-    ).toBe(true);
-  });
-
-  it('a request with a method outside the allowlist is schema-rejected', () => {
-    const reqBody = { openwop: 'ui-plugin/1', type: 'request', id: 1, method: 'host.exec' };
-    expect(validate(reqBody), req('openwop.it.frontend-plugin-packs.a-request-with-a-method-outside-the-allowlist-is-schema-rejected', 'frontend-plugin-packs.md', 'a method outside the ui-plugin/1 allowlist MUST NOT validate')).toBe(false);
-  });
-
-  it('a message without the ui-plugin/1 protocol tag is rejected', () => {
-    const reqBody = { openwop: 'ui-plugin/2', type: 'request', id: 1, method: 'artifact.read' };
-    expect(validate(reqBody), req('openwop.it.frontend-plugin-packs.a-message-without-the-ui-plugin-1-protocol-tag-is-rejected', 'frontend-plugin-packs.md', 'a host MUST ignore messages whose ui-plugin tag it does not recognize')).toBe(false);
-  });
-
-  it('no credential-bearing field is admitted on the envelope (frontend-plugin-no-byok)', () => {
-    // additionalProperties:false on every envelope variant — a stray apiKey/token at the
-    // envelope root cannot ride the boundary.
-    for (const leak of ['apiKey', 'token', 'clientSecret', 'authorization']) {
-      const reqBody = { openwop: 'ui-plugin/1', type: 'request', id: 1, method: 'artifact.read', [leak]: 'xxx' };
-      expect(
-        validate(reqBody),
-        req('openwop.it.frontend-plugin-packs.no-credential-bearing-field-is-admitted-on-the-envelope-frontend-plugin-no-byok', 'frontend-plugin-packs.md', `frontend-plugin-no-byok — a credential-named envelope field ("${leak}") MUST NOT validate (additionalProperties:false)`),
-      ).toBe(false);
-    }
-  });
-});
-
 describe('frontend-plugin: isolation advertisement (always-on, capability shape)', () => {
   // RFC 0119: `isolation` is a categorical model, not a single browser const. A conformant host
   // advertises a member of the enum (cross-origin-iframe default) or an x-host-* vendor model —

package/src/scenarios/v2-wasm-abi-reject.test.ts

@@ -0,0 +1,35 @@
+/**
+ * v2 — a host rejecting at load a WASM pack whose ABI version it does not list
+ * (`spec/v2/core/node-pack-runtimes.md` §WASM: "MUST reject at load a pack
+ * whose `openwop_abi_version()` is not listed").
+ *
+ * The v1 twin, `wasm-pack-abi-version-rejection`, runs at major 1 only. Here the
+ * operator offers the hand-written fixture pack at
+ * `conformance/fixtures/wasm-packs/misbehaving-abi/` (`vendor.openwop.misbehaving-abi`,
+ * ABI version 999) to the host's loader and advertises
+ * `conformance-wasm-pack-abi-mismatch`. Loading is not a protocol operation, so
+ * the leg reads what a rejection makes impossible: the pack in
+ * `nodePackRuntimes.wasm.loadedPacks`, and its node completing.
+ *
+ * The leg lives in `lib/wasm-abi-reject-witness.ts`, proven against a double in
+ * `lib/wasm-abi-reject-witness.test.ts`.
+ *
+ * Dispositions: no `nodePackRuntimes.wasm`, or the fixture not advertised ⇒
+ * `inapplicable`; discovery unreachable or a 401/403/429/5xx at creation ⇒ `blocked`.
+ *
+ * @see spec/v2/core/node-pack-runtimes.md §WASM
+ * @see RFCS/0008-wasm-abi.md §H
+ */
+
+import { describe, it, expect } from 'vitest';
+import { softSkip } from '../lib/soft-skip.js';
+import { req } from '../lib/requirement-ids.js';
+import { abiRejectLeg } from '../lib/wasm-abi-reject-witness.js';
+
+describe('v2 WASM ABI rejection (node-pack-runtimes.md §WASM)', () => {
+  it('a pack whose openwop_abi_version() is not listed is not loaded and its node never runs', async () => {
+    const out = await abiRejectLeg();
+    if (out.kind === 'skip') return softSkip(out.skip, out.reason);
+    expect(out.findings.join('; '), req('openwop.requirement.node-pack-runtimes.wasm-abi-reject', 'spec/v2/core/node-pack-runtimes.md §WASM', 'a host MUST reject at load a pack whose openwop_abi_version() is not listed')).toBe('');
+  });
+});