@openwop/openwop-conformance 2.45.24 → 2.45.26

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # `@openwop/openwop-conformance` Changelog
 
+## [2.45.26] — 2026-10-08 — RFC 0236's legs run without the seam (RFC 0241 Active)
+
+- **No scenario change.** RFC 0237 goes `Accepted` on the v2 reference host's certified 2.45.25 cut; its gaps G1 and G2 close, which changes the packed `spec/v1/gaps.json`.
+- **`v2-host-event-delivery` causes events through RFC 0241's `POST /host/events/test`** when the host lists the reserved `host-test.durable-triggered` / `host-test.ephemeral-triggered` types, else through the §G seam, so a seam-free production host witnesses all six `openwop.requirement.0236.*` rows. New leg `openwop.requirement.0241.trigger.bound-by-listing`: each listed class is accepted with its reserved type, an unlisted class is `400 validation_error`, and nothing is served (`404`/`405`) when no `host-test.*` type is listed. Proven on a seams-off v2 reference host: all eight rows `executed-pass`; a trigger answering a real type, and a frame reaching a second tenant, each `executed-fail`. The self-test double gains the trigger choice and the binding judge.
+- **`v2-host-event-delivery`: `0236.webhook.ephemeral-refused` no longer gates on the seams profile.** It registers a webhook naming an ephemeral type and expects `400 validation_error`; it causes no event, so the §G emit seam was never needed. It now runs on any host advertising `hostEvents` with an ephemeral type, preferring an `example.*` one (a production host's `channel.presence` will do), and records `inapplicable` when none is listed. Proven on a seam-free v2 reference host: `executed-pass`, and `executed-fail` with the refusal removed. The five legs that cause an event use RFC 0241's trigger when the host lists it (next bullet).
+
+## [2.45.25] — 2026-10-07 — `v2-wasm-abi-reject`; the frontend-plugin schema legs leave host bundles
+
+- **New `v2-wasm-abi-reject` (`openwop.requirement.node-pack-runtimes.wasm-abi-reject`).** Gated on `nodePackRuntimes.wasm` and the new operator-installed fixture `conformance-wasm-pack-abi-mismatch`, which invokes `vendor.openwop.misbehaving.abi-bomb` (the `misbehaving-abi` pack, ABI version 999). Loading is not a protocol operation, so the leg reads what a rejection at load prevents: the pack in an advertised `loadedPacks`, and the node completing. The run must be refused at creation (4xx) or end without that node completing; a 401/403/429/5xx is `blocked`. Proof: a 9-case self-test double (`lib/wasm-abi-reject-witness.test.ts`). No RFC was needed: both observations already exist.
+- **No scenario change.** RFC 0238 goes `Accepted` on openwop-app's certified 2.45.23 cut; its gaps G1 and G3 close, which changes the packed `spec/v1/gaps.json`.
+- **No scenario change.** RFC 0239 goes `Accepted` on the v2 reference host's certified 2.45.23 cut; its gap G1 closes, which changes the packed `spec/v1/gaps.json`.
+- **No scenario change (RFC 0238 G3).** The 13 always-on schema legs of `frontend-plugin-packs` read only the corpus, so they move to `src/coherence/frontend-plugin-schemas.test.ts` and leave host bundles; their ids become `openwop.it.frontend-plugin-schemas.*`, which changes the packed `requirements.json`. The host-reading legs stay.
+
 ## [2.45.24] — 2026-10-07 — the effect receiver fails fast on a held pinned port; the README index check reads `spec/v2/core`
 
 - **The effect receiver fails fast on a held pinned port.** With `OPENWOP_WEBHOOK_RECEIVER_PORT` pinned to a port another process holds, `startEffectReceiver` attached no `error` handler, so `EADDRINUSE` never settled its `listen` promise and the `0158`/`0194` duplicate-delivery rows hung to their 180 s timeout instead of failing with the cause. It now rejects at once with the bind error, as `scoped-receiver` has since 2.39.3. Self-test: a held port rejects in under 2 s; without the handler the test times out. Reported by MyndHyve (2.45.18 cut, port 8787).

package/README.md

@@ -137,7 +137,7 @@ Each scenario file records its disposition and assertion count in `<report-dir>/
 
 ## What's Covered
 
-The current suite has 649 scenario files under `src/scenarios/`. By target major ([`scenario-majors.json`](./scenario-majors.json)): 209 files run against a v2 host and 455 against a v1 host; 15 of them run at both.
+The current suite has 650 scenario files under `src/scenarios/`. By target major ([`scenario-majors.json`](./scenario-majors.json)): 210 files run against a v2 host and 455 against a v1 host; 15 of them run at both.
 
 The v2 scenarios (`src/scenarios/v2-*.test.ts`) cover, by area:
 
@@ -154,7 +154,7 @@ The v2 scenarios (`src/scenarios/v2-*.test.ts`) cover, by area:
 | Security defaults | SSRF refusal, filesystem sandbox, cross-tenant isolation for storage, memory and queues, secret canaries | `v2-safefetch-ssrf-refused`, `v2-fs-sandbox-escape-refused`, `v2-storage-cross-tenant-isolation`, `v2-secret-canary-absent` |
 | Webhooks | Delivery shape, Standard Webhooks signing, durable retries, secret rotation, egress refusal, endpoint verification | `v2-webhook-delivery-shape`, `v2-webhook-durable-delivery`, `v2-webhook-secret-rotation`, `v2-webhook-egress-refusal` |
 | Durability and execution | Recovery after a kill, effect seams that never re-fire, execution bounds, budgets | `v2-durability-recovery`, `v2-effect-seam-no-refire`, `v2-run-execution-bounds`, `v2-budget-enforcement` |
-| Packs and composition | Pack isolation, peer dependencies, sub-workflow dispatch and input mapping, chain pins, WASM memory caps, registry lifecycle | `v2-pack-isolation`, `v2-subworkflow-linkage`, `v2-chain-pin-exact`, `v2-wasm-memory-cap` |
+| Packs and composition | Pack isolation, peer dependencies, sub-workflow dispatch and input mapping, chain pins, WASM memory caps and ABI rejection, registry lifecycle | `v2-pack-isolation`, `v2-subworkflow-linkage`, `v2-chain-pin-exact`, `v2-wasm-memory-cap`, `v2-wasm-abi-reject` |
 | AI, prompts and agents | AI envelopes, providers and usage, prompt libraries and rendering, model capabilities, conversations, multi-party councils | `v2-prompt-render-deterministic`, `v2-provider-usage-emission`, `v2-conversation-turn-parts`, `v2-multi-party-council` |
 | Interop | A2A agent cards and operation map, MCP mounts and tasks, A2UI v0.9 surfaces, trace context | `v2-a2a-operation-map`, `v2-mcp-mount-map`, `v2-a2ui-v09-surface`, `v2-interop-trace-context` |
 | Family advertisements | Each optional capability family's discovery record validates against its schema seat | `v2-*-advertisement` |
@@ -166,7 +166,7 @@ Three kinds of scenario share the tree:
 - **Host** checks drive a live host over HTTP.
 - **Gated** checks run only when the host advertises the family, profile or fixture they need, and otherwise record `inapplicable` or `blocked` with a reason. `--require-behavior` turns an advertised-but-unwitnessable behaviour into a failure.
 
-Current source tree: 649 scenario files. [`coverage.md`](./coverage.md) maps each spec document and every OpenAPI operation to its scenarios. [`CHANGELOG.md`](./CHANGELOG.md) records when each scenario landed.
+Current source tree: 650 scenario files. [`coverage.md`](./coverage.md) maps each spec document and every OpenAPI operation to its scenarios. [`CHANGELOG.md`](./CHANGELOG.md) records when each scenario landed.
 
 ## How the 2.x suite is built
 

package/coverage.md

@@ -32,7 +32,7 @@ Each scenario that targets major 2 is listed once, under the [`spec/v2/core/`](.
 | [`identity.md`](../spec/v2/core/identity.md) | `auth-challenge-no-oracle.test.ts`, `v2-assurance-downgrade-audited.test.ts`, `v2-auth-challenge.test.ts`, `v2-authorization-advertisement.test.ts`, `v2-bound-id-kinds.test.ts`, `v2-bound-id-path-projection.test.ts`, `v2-id-grammar.test.ts`, `v2-interrupt-token-scheme.test.ts`, `v2-lane-exp-only-bound.test.ts`, `v2-lane-issuer-advertised.test.ts`, `v2-oidc-id-token-audience.test.ts`, `v2-owner-subject-required.test.ts`, `v2-protected-resource-metadata.test.ts`, `v2-revocation-honored.test.ts`, `v2-subject-link-record.test.ts` |
 | [`interop.md`](../spec/v2/core/interop.md) | `otel-mcp-semconv-projection.test.ts`, `v2-a2a-agent-cards.test.ts`, `v2-a2a-client-error-details.test.ts`, `v2-a2a-operation-map.test.ts`, `v2-a2a-push-delivery.test.ts`, `v2-interop-trace-context.test.ts`, `v2-legacy-profiles-absent.test.ts`, `v2-mcp-mount-map.test.ts`, `v2-mcp-tasks.test.ts`, `v2-minimum-version-refused.test.ts`, `v2-mrtr-rounds-ceiling.test.ts`, `v2-negotiation-authenticated.test.ts`, `v2-negotiation-decided-emitted.test.ts`, `v2-no-transport-advertisement.test.ts`, `v2-refresh-sla.test.ts` |
 | [`interrupt.md`](../spec/v2/core/interrupt.md) | `v2-approval-reject-disposition.test.ts`, `v2-approver-enforced.test.ts`, `v2-callback-url-guarded.test.ts` |
-| [`node-pack-runtimes.md`](../spec/v2/core/node-pack-runtimes.md) | `v2-node-pack-runtimes-advertisement.test.ts`, `v2-wasm-memory-cap.test.ts` |
+| [`node-pack-runtimes.md`](../spec/v2/core/node-pack-runtimes.md) | `v2-node-pack-runtimes-advertisement.test.ts`, `v2-wasm-memory-cap.test.ts`, `v2-wasm-abi-reject.test.ts` |
 | [`oauth.md`](../spec/v2/core/oauth.md) | `v2-credential-interrupt.test.ts`, `v2-credentials-advertisement.test.ts`, `v2-oauth-client-pkce-state-iss.test.ts`, `v2-oauth-mcp-reach-discovery.test.ts` |
 | [`packs.md`](../spec/v2/core/packs.md) | `v2-manifest-ceiling-refused.test.ts`, `v2-manifest-hatch-carried.test.ts`, `v2-peer-dependency-declared.test.ts`, `v2-registry-lifecycle.test.ts`, `v2-ui-plugin-boundary.test.ts`, `v2-ui-plugins-advertisement.test.ts` |
 | [`persistence.md`](../spec/v2/core/persistence.md) | `v2-era-2-append-vocabulary.test.ts`, `v2-era-key.test.ts`, `v2-era-stamp-universal.test.ts`, `v2-pinned-run-disposition.test.ts`, `v2-unmapped-type-refused.test.ts`, `v2-v1-events-translated.test.ts` |

package/dist/spec-artifacts.lock.json

@@ -1,5 +1,5 @@
 {
   "package": "@openwop/spec-artifacts",
-  "version": "2.45.24",
-  "stampSha256": "eddfc3a323cff5ccd6a745bd97319f63e89d8982678d824bfe5af5fafebbd7de"
+  "version": "2.45.26",
+  "stampSha256": "01d0c29c58bd680baa38517e507d8c14b73ca1bf9aa888d79efc7d78a94d9e1b"
 }

package/fixtures/conformance-wasm-pack-abi-mismatch.json

@@ -0,0 +1,41 @@
+{
+  "id": "conformance-wasm-pack-abi-mismatch",
+  "name": "Conformance: WASM Pack ABI Mismatch (Refused at Load)",
+  "version": "1.0",
+  "description": "node-pack-runtimes.md §WASM fixture. Invokes `vendor.openwop.misbehaving.abi-bomb`, whose module reports `openwop_abi_version()` 999, which no host lists. A host advertising this fixture says its operator offered `conformance/fixtures/wasm-packs/misbehaving-abi/` to its loader; a conforming host rejected the pack at load, so `nodePackRuntimes.wasm.loadedPacks` (when advertised) omits it, and the run is refused at creation or ends without the node completing. Fixture-only; not signed for the registry.",
+  "nodes": [
+    {
+      "id": "abi",
+      "typeId": "vendor.openwop.misbehaving.abi-bomb",
+      "name": "ABI bomb",
+      "position": {
+        "x": 0,
+        "y": 0
+      },
+      "config": {},
+      "inputs": {}
+    }
+  ],
+  "edges": [],
+  "triggers": [
+    {
+      "id": "manual",
+      "type": "manual",
+      "enabled": true
+    }
+  ],
+  "variables": [],
+  "metadata": {
+    "tags": [
+      "conformance",
+      "wasm",
+      "node-pack",
+      "rfc-0008",
+      "abi-version",
+      "misbehaving"
+    ]
+  },
+  "settings": {
+    "timeout": 10000
+  }
+}

package/fixtures.md

@@ -126,6 +126,7 @@ All fixtures MUST advertise:
 | A2A Task Roundtrip                        | `conformance-a2a-task-roundtrip`                                                                | Track 6 — host consumes the conformance suite's synthetic A2A peer; covers drift points #3 (`AUTH_REQUIRED`) and #4 (`REJECTED`). Node `core.conformance.a2a-invoke` is a **conformance-RESERVED** typeId (renamed 2026-08-16 from `core.a2a.invoke`, a multi-segment `core.*` id no host shipped and the corpus never defined): a host that consumes A2A peers MUST map it to its A2A bridge node (a host-extension node — `a2a-integration.md` §"State projection"); a host that does not consume A2A MUST NOT advertise this fixture                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `failed` or `waiting-input` (per `driftScenario` input)                             | ≤ 30s                        |
 | WASM Pack Roundtrip                       | `conformance-wasm-pack-roundtrip`                                                               | RFC 0008 — invokes `vendor.openwop.rust-hello.greet` (loaded WASM pack); exercises required exports + at least one import                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 | `completed`                                                                         | ≤ 10s                        |
 | WASM Pack Memory-Cap Breach               | `conformance-wasm-pack-memory-cap-breach`                                                       | RFC 0008 §K — invokes the deliberately-misbehaving `vendor.openwop.misbehaving.memory-bomb` pack (allocates 1 GiB beyond the host's `memoryPagesMax`). Host MUST emit `cap.breached` with `kind: "wasm-memory"` and drive the run to terminal `failed`. Misbehaving pack lives at `openwop-examples:examples/packs/rust-misbehaving-memory/` (repo-qualified per the 2026-06 monorepo split — the `openwop-examples` sibling repo) and is fixture-only (NOT signed for registry publication).                                                                                                                                                             | `failed` (with `cap.breached`)                                                      | ≤ 10s                        |
+| WASM Pack ABI Mismatch | `conformance-wasm-pack-abi-mismatch` | node-pack-runtimes.md §WASM — invokes `vendor.openwop.misbehaving.abi-bomb`, whose module reports `openwop_abi_version()` 999. Advertising the fixture says the operator offered `fixtures/wasm-packs/misbehaving-abi/` to the loader; a conforming host rejected it at load, so `loadedPacks` (when advertised) omits it and the node never runs. Fixture-only (NOT signed for registry publication). | refused at creation (4xx), or `failed` / `cancelled` without `node.completed` for `abi` | ≤ 10s |
 | Configurable Schema                       | `conformance-configurable-schema`                                                               | Track 13 — workflow declares `configurableSchema` (`additionalProperties: false`, `recursionLimit: integer ≥ 1`). Suite verifies `GET /workflows/{id}` surfaces the schema AND `POST /runs` with a mismatched `configurable` returns `validation_error`.                                                                                                                                                                                                                                                                                                                                                                                            | `completed` (with accepted overlay)                                                 | ≤ 5s                         |
 | Smoke — BYOK Roundtrip                    | `openwop-smoke-byok-roundtrip`                                                                  | End-to-end BYOK secret-resolution smoke. Single `conformance.secret.echo` node fetches the host-provisioned canary secret `openwop-conformance-canary-secret`, emits SHA-256 hex + byte length to variables — never the raw value. Spec: `run-options.md` §"Credential references" + `auth.md` §"Secret resolution" + `observability.md` §"Redaction".                                                                                                                                                                                                                                                                                                    | `completed`                                                                         | ≤ 10s                        |
 | Secrets — Run Witness | `openwop-secrets-run-witness` | RFC 0229 §C — one `core.secret.witness` node. The client supplies a value with the run (`runSecrets`, a `run:` ref) and its SHA-256 as an input; the node outputs only `{ matched }`. It can confirm only a value the caller already holds, so it is safe to advertise in production. Advertised by every host that advertises `secrets.runSecrets`. | `completed` (`matched: true` or `false`); `failed` (`credential_forbidden` / `credential_not_found`) on the scope legs | ≤ 10s |
@@ -841,7 +842,7 @@ The `fixtures/wasm-packs/` sub-directory holds two node packs (`language: "wasm"
 | Pack | Node | Purpose |
 | --- | --- | --- |
 | `misbehaving-memory` (`vendor.openwop.misbehaving`) | `vendor.openwop.misbehaving.memory-bomb` | Grows linear memory 64 MiB at a time until the host refuses, then traps. A host advertising `nodePackRuntimes.wasm.maxMemoryBytes` MUST emit `cap.breached` `kind: "wasm-memory"`. Drives `conformance-wasm-pack-memory-cap-breach` and `v2-wasm-memory-cap`. |
-| `misbehaving-abi` (`vendor.openwop.misbehaving-abi`) | `vendor.openwop.misbehaving.abi-bomb` | Reports `openwop_abi_version` 999, which no host lists, so a conforming host refuses it at load. Rejection at load is not yet observable over the protocol (TODO §8), so no v2 leg reads it. |
+| `misbehaving-abi` (`vendor.openwop.misbehaving-abi`) | `vendor.openwop.misbehaving.abi-bomb` | Reports `openwop_abi_version` 999, which no host lists, so a conforming host refuses it at load. Drives `conformance-wasm-pack-abi-mismatch` and `v2-wasm-abi-reject`, which read the refusal from what it prevents: the pack in `nodePackRuntimes.wasm.loadedPacks`, and its node completing. |
 
 ---
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openwop/openwop-conformance",
-  "version": "2.45.24",
+  "version": "2.45.26",
   "description": "Black-box conformance suite for OpenWOP hosts (v2 current; v1 scenarios retained for the frozen v1 tree).",
   "repository": {
     "type": "git",
@@ -56,6 +56,6 @@
     "@openwop/spec-artifacts": "file:../spec-artifacts"
   },
   "peerDependencies": {
-    "@openwop/spec-artifacts": "2.45.24"
+    "@openwop/spec-artifacts": "2.45.26"
   }
 }

package/requirements.json

@@ -2,11 +2,11 @@
   "$comment": "GENERATED by conformance/scripts/generate-requirement-registry.mjs — do not edit. One record per it()/test() in src/scenarios. Ids: openwop.it.<file-stem>.<title-slug>[~n] (src/lib/requirement-ids.ts). A record with id null has an interpolated title; its run-time row is keyed by the rendered title and maps here by file+line only. Renamed ids need a row in requirement-aliases.json.",
   "generatedFrom": "src/scenarios/*.test.ts",
   "counts": {
-    "files": 735,
-    "tests": 2780,
-    "withStableId": 2780,
+    "files": 737,
+    "tests": 2782,
+    "withStableId": 2782,
     "interpolatedTitles": 0,
-    "explicitIds": 2643
+    "explicitIds": 2644
   },
   "records": [
     {
@@ -13928,184 +13928,10 @@
         }
       ]
     },
-    {
-      "id": "openwop.it.frontend-plugin-packs.a-well-formed-frontend-plugin-manifest-validates",
-      "file": "frontend-plugin-packs.test.ts",
-      "line": 70,
-      "title": "a well-formed frontend-plugin manifest validates",
-      "explicitId": "openwop.it.frontend-plugin-packs.a-well-formed-frontend-plugin-manifest-validates",
-      "citations": [
-        {
-          "section": "frontend-plugin-packs.md",
-          "requirement": null,
-          "interpolated": true
-        }
-      ]
-    },
-    {
-      "id": "openwop.it.frontend-plugin-packs.a-backend-runtime-member-is-rejected-a-plugin-is-sandboxed-ui-not-a-node-entry",
-      "file": "frontend-plugin-packs.test.ts",
-      "line": 77,
-      "title": "a backend `runtime` member is rejected (a plugin is sandboxed UI, not a node entry)",
-      "explicitId": "openwop.it.frontend-plugin-packs.a-backend-runtime-member-is-rejected-a-plugin-is-sandboxed-ui-not-a-node-entry",
-      "citations": [
-        {
-          "section": "frontend-plugin-packs.md",
-          "requirement": "node-packs.md §Pack kinds — a kind:\"frontend-plugin\" manifest carrying `runtime` MUST be rejected (pack_kind_invalid)"
-        }
-      ]
-    },
-    {
-      "id": "openwop.it.frontend-plugin-packs.a-uiplugins-entry-missing-entry-is-rejected",
-      "file": "frontend-plugin-packs.test.ts",
-      "line": 85,
-      "title": "a uiPlugins[] entry missing `entry` is rejected",
-      "explicitId": "openwop.it.frontend-plugin-packs.a-uiplugins-entry-missing-entry-is-rejected",
-      "citations": [
-        {
-          "section": "frontend-plugin-packs.md",
-          "requirement": "a uiPlugins[] entry missing `entry` MUST NOT validate"
-        }
-      ]
-    },
-    {
-      "id": "openwop.it.frontend-plugin-packs.an-entry-path-with-traversal-is-rejected",
-      "file": "frontend-plugin-packs.test.ts",
-      "line": 91,
-      "title": "an `entry` path with `..` traversal is rejected",
-      "explicitId": "openwop.it.frontend-plugin-packs.an-entry-path-with-traversal-is-rejected",
-      "citations": [
-        {
-          "section": "frontend-plugin-packs.md",
-          "requirement": "an `entry` path MUST NOT contain `..` (path-traversal)"
-        }
-      ]
-    },
-    {
-      "id": "openwop.it.frontend-plugin-packs.a-hostapi-method-outside-the-closed-allowlist-is-rejected-frontend-plugin-rpc-al",
-      "file": "frontend-plugin-packs.test.ts",
-      "line": 97,
-      "title": "a hostApi method outside the closed allowlist is rejected (frontend-plugin-rpc-allowlist)",
-      "explicitId": "openwop.it.frontend-plugin-packs.a-hostapi-method-outside-the-closed-allowlist-is-rejected-frontend-plugin-rpc-al",
-      "citations": [
-        {
-          "section": "frontend-plugin-packs.md",
-          "requirement": "frontend-plugin-packs.md §Host-RPC — only the closed allowlist methods are permitted; `host.exec` MUST NOT validate"
-        }
-      ]
-    },
-    {
-      "id": "openwop.it.frontend-plugin-packs.an-empty-uiplugins-is-rejected-a-pack-must-declare-at-least-one-plugin",
-      "file": "frontend-plugin-packs.test.ts",
-      "line": 106,
-      "title": "an empty uiPlugins[] is rejected (a pack MUST declare at least one plugin)",
-      "explicitId": "openwop.it.frontend-plugin-packs.an-empty-uiplugins-is-rejected-a-pack-must-declare-at-least-one-plugin",
-      "citations": [
-        {
-          "section": "frontend-plugin-packs.md",
-          "requirement": "a frontend-plugin pack MUST declare at least one uiPlugins[] entry"
-        }
-      ]
-    },
-    {
-      "id": "openwop.it.frontend-plugin-packs.a-canvas-preview-entry-with-canvastypes-host-announce-validates-rfc-0130",
-      "file": "frontend-plugin-packs.test.ts",
-      "line": 111,
-      "title": "a canvas-preview entry with canvasTypes + host.announce validates (RFC 0130)",
-      "explicitId": "openwop.it.frontend-plugin-packs.a-canvas-preview-entry-with-canvastypes-host-announce-validates-rfc-0130",
-      "citations": [
-        {
-          "section": "RFC 0130",
-          "requirement": null,
-          "interpolated": true
-        }
-      ]
-    },
-    {
-      "id": "openwop.it.frontend-plugin-packs.a-surface-outside-the-closed-set-is-still-rejected-rfc-0130-keeps-the-enum-close",
-      "file": "frontend-plugin-packs.test.ts",
-      "line": 126,
-      "title": "a surface outside the closed set is still rejected (RFC 0130 keeps the enum closed)",
-      "explicitId": "openwop.it.frontend-plugin-packs.a-surface-outside-the-closed-set-is-still-rejected-rfc-0130-keeps-the-enum-close",
-      "citations": [
-        {
-          "section": "RFC 0130",
-          "requirement": "frontend-plugin-packs.md §The pack — the surface enum stays closed; an unknown surface MUST NOT validate"
-        }
-      ]
-    },
-    {
-      "id": "openwop.it.frontend-plugin-packs.a-valid-artifact-write-request-carrying-a-version-token-validates",
-      "file": "frontend-plugin-packs.test.ts",
-      "line": 141,
-      "title": "a valid artifact.write request carrying a version token validates",
-      "explicitId": "openwop.it.frontend-plugin-packs.a-valid-artifact-write-request-carrying-a-version-token-validates",
-      "citations": [
-        {
-          "section": "frontend-plugin-packs.md",
-          "requirement": null,
-          "interpolated": true
-        }
-      ]
-    },
-    {
-      "id": "openwop.it.frontend-plugin-packs.an-artifact-conflict-response-carries-currentversion-version-token-concurrency",
-      "file": "frontend-plugin-packs.test.ts",
-      "line": 152,
-      "title": "an artifact_conflict response carries currentVersion (version-token concurrency)",
-      "explicitId": "openwop.it.frontend-plugin-packs.an-artifact-conflict-response-carries-currentversion-version-token-concurrency",
-      "citations": [
-        {
-          "section": "frontend-plugin-packs.md",
-          "requirement": null,
-          "interpolated": true
-        }
-      ]
-    },
-    {
-      "id": "openwop.it.frontend-plugin-packs.a-request-with-a-method-outside-the-allowlist-is-schema-rejected",
-      "file": "frontend-plugin-packs.test.ts",
-      "line": 166,
-      "title": "a request with a method outside the allowlist is schema-rejected",
-      "explicitId": "openwop.it.frontend-plugin-packs.a-request-with-a-method-outside-the-allowlist-is-schema-rejected",
-      "citations": [
-        {
-          "section": "frontend-plugin-packs.md",
-          "requirement": "a method outside the ui-plugin/1 allowlist MUST NOT validate"
-        }
-      ]
-    },
-    {
-      "id": "openwop.it.frontend-plugin-packs.a-message-without-the-ui-plugin-1-protocol-tag-is-rejected",
-      "file": "frontend-plugin-packs.test.ts",
-      "line": 171,
-      "title": "a message without the ui-plugin/1 protocol tag is rejected",
-      "explicitId": "openwop.it.frontend-plugin-packs.a-message-without-the-ui-plugin-1-protocol-tag-is-rejected",
-      "citations": [
-        {
-          "section": "frontend-plugin-packs.md",
-          "requirement": "a host MUST ignore messages whose ui-plugin tag it does not recognize"
-        }
-      ]
-    },
-    {
-      "id": "openwop.it.frontend-plugin-packs.no-credential-bearing-field-is-admitted-on-the-envelope-frontend-plugin-no-byok",
-      "file": "frontend-plugin-packs.test.ts",
-      "line": 176,
-      "title": "no credential-bearing field is admitted on the envelope (frontend-plugin-no-byok)",
-      "explicitId": "openwop.it.frontend-plugin-packs.no-credential-bearing-field-is-admitted-on-the-envelope-frontend-plugin-no-byok",
-      "citations": [
-        {
-          "section": "frontend-plugin-packs.md",
-          "requirement": null,
-          "interpolated": true
-        }
-      ]
-    },
     {
       "id": "openwop.it.frontend-plugin-packs.a-host-advertising-uiplugins-must-advertise-a-conformant-isolation-model",
       "file": "frontend-plugin-packs.test.ts",
-      "line": 197,
+      "line": 40,
       "title": "a host advertising uiPlugins MUST advertise a conformant isolation model",
       "explicitId": "openwop.it.frontend-plugin-packs.a-host-advertising-uiplugins-must-advertise-a-conformant-isolation-model",
       "citations": [
@@ -14118,7 +13944,7 @@
     {
       "id": "openwop.it.frontend-plugin-packs.an-undeclared-host-rpc-method-is-refused-with-method-not-allowed",
       "file": "frontend-plugin-packs.test.ts",
-      "line": 212,
+      "line": 55,
       "title": "an undeclared host-RPC method is refused with method_not_allowed",
       "explicitId": "openwop.it.frontend-plugin-packs.an-undeclared-host-rpc-method-is-refused-with-method-not-allowed",
       "citations": [
@@ -14135,7 +13961,7 @@
     {
       "id": "openwop.it.frontend-plugin-packs.a-stale-artifact-write-is-refused-with-artifact-conflict-currentversion-no-persi",
       "file": "frontend-plugin-packs.test.ts",
-      "line": 235,
+      "line": 78,
       "title": "a stale artifact.write is refused with artifact_conflict + currentVersion (no persist)",
       "explicitId": "openwop.it.frontend-plugin-packs.a-stale-artifact-write-is-refused-with-artifact-conflict-currentversion-no-persi",
       "citations": [
@@ -31527,7 +31353,7 @@
     {
       "id": "openwop.it.v2-host-event-delivery.an-emitted-durable-host-event-arrives-on-host-events-as-a-valid-envelope",
       "file": "v2-host-event-delivery.test.ts",
-      "line": 131,
+      "line": 160,
       "title": "an emitted durable host event arrives on /host/events as a valid envelope",
       "explicitId": "openwop.requirement.0236.host-event.envelope",
       "citations": [
@@ -31540,7 +31366,7 @@
     {
       "id": "openwop.it.v2-host-event-delivery.an-ephemeral-host-event-has-no-id-and-is-not-redelivered-after-last-event-id",
       "file": "v2-host-event-delivery.test.ts",
-      "line": 145,
+      "line": 174,
       "title": "an ephemeral host event has no id: and is not redelivered after Last-Event-ID",
       "explicitId": null,
       "citations": []
@@ -31548,7 +31374,7 @@
     {
       "id": "openwop.it.v2-host-event-delivery.registerwebhook-refuses-an-ephemeral-host-event-type-with-400-validation-error",
       "file": "v2-host-event-delivery.test.ts",
-      "line": 162,
+      "line": 191,
       "title": "registerWebhook refuses an ephemeral host-event type with 400 validation_error",
       "explicitId": "openwop.requirement.0236.webhook.ephemeral-refused",
       "citations": [
@@ -31566,7 +31392,7 @@
     {
       "id": "openwop.it.v2-host-event-delivery.a-subscribed-durable-host-event-is-delivered-as-hostevent-signed",
       "file": "v2-host-event-delivery.test.ts",
-      "line": 175,
+      "line": 207,
       "title": "a subscribed durable host event is delivered as { hostEvent }, signed",
       "explicitId": "openwop.requirement.0236.webhook.host-variant",
       "citations": [
@@ -31580,15 +31406,23 @@
     {
       "id": "openwop.it.v2-host-event-delivery.the-same-subscription-never-receives-the-ephemeral-host-event",
       "file": "v2-host-event-delivery.test.ts",
-      "line": 211,
+      "line": 243,
       "title": "the same subscription never receives the ephemeral host event",
       "explicitId": null,
       "citations": []
     },
+    {
+      "id": "openwop.it.v2-host-event-delivery.emittesthostevent-is-served-exactly-for-the-listed-host-test-classes",
+      "file": "v2-host-event-delivery.test.ts",
+      "line": 256,
+      "title": "emitTestHostEvent is served exactly for the listed host-test classes",
+      "explicitId": null,
+      "citations": []
+    },
     {
       "id": "openwop.it.v2-host-event-delivery.a-second-tenant-receives-nothing-for-the-first-tenant-s-host-event",
       "file": "v2-host-event-delivery.test.ts",
-      "line": 224,
+      "line": 270,
       "title": "a second tenant receives nothing for the first tenant’s host event",
       "explicitId": null,
       "citations": []
@@ -38101,6 +37935,19 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.v2-wasm-abi-reject.a-pack-whose-openwop-abi-version-is-not-listed-is-not-loaded-and-its-node-never",
+      "file": "v2-wasm-abi-reject.test.ts",
+      "line": 30,
+      "title": "a pack whose openwop_abi_version() is not listed is not loaded and its node never runs",
+      "explicitId": "openwop.requirement.node-pack-runtimes.wasm-abi-reject",
+      "citations": [
+        {
+          "section": "spec/v2/core/node-pack-runtimes.md §WASM",
+          "requirement": "a host MUST reject at load a pack whose openwop_abi_version() is not listed"
+        }
+      ]
+    },
     {
       "id": "openwop.it.v2-wasm-memory-cap.a-module-exceeding-maxmemorybytes-produces-cap-breached-wasm-memory-and-fails-th",
       "file": "v2-wasm-memory-cap.test.ts",
@@ -43444,6 +43291,180 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.frontend-plugin-schemas.a-well-formed-frontend-plugin-manifest-validates",
+      "file": "frontend-plugin-schemas.test.ts",
+      "line": 63,
+      "title": "a well-formed frontend-plugin manifest validates",
+      "explicitId": "openwop.it.frontend-plugin-schemas.a-well-formed-frontend-plugin-manifest-validates",
+      "citations": [
+        {
+          "section": "frontend-plugin-packs.md",
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.frontend-plugin-schemas.a-backend-runtime-member-is-rejected-a-plugin-is-sandboxed-ui-not-a-node-entry",
+      "file": "frontend-plugin-schemas.test.ts",
+      "line": 71,
+      "title": "a backend `runtime` member is rejected (a plugin is sandboxed UI, not a node entry)",
+      "explicitId": "openwop.it.frontend-plugin-schemas.a-backend-runtime-member-is-rejected-a-plugin-is-sandboxed-ui-not-a-node-entry",
+      "citations": [
+        {
+          "section": "frontend-plugin-packs.md",
+          "requirement": "node-packs.md §Pack kinds — a kind:\"frontend-plugin\" manifest carrying `runtime` MUST be rejected (pack_kind_invalid)"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.frontend-plugin-schemas.a-uiplugins-entry-missing-entry-is-rejected",
+      "file": "frontend-plugin-schemas.test.ts",
+      "line": 80,
+      "title": "a uiPlugins[] entry missing `entry` is rejected",
+      "explicitId": "openwop.it.frontend-plugin-schemas.a-uiplugins-entry-missing-entry-is-rejected",
+      "citations": [
+        {
+          "section": "frontend-plugin-packs.md",
+          "requirement": "a uiPlugins[] entry missing `entry` MUST NOT validate"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.frontend-plugin-schemas.an-entry-path-with-traversal-is-rejected",
+      "file": "frontend-plugin-schemas.test.ts",
+      "line": 87,
+      "title": "an `entry` path with `..` traversal is rejected",
+      "explicitId": "openwop.it.frontend-plugin-schemas.an-entry-path-with-traversal-is-rejected",
+      "citations": [
+        {
+          "section": "frontend-plugin-packs.md",
+          "requirement": "an `entry` path MUST NOT contain `..` (path-traversal)"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.frontend-plugin-schemas.a-hostapi-method-outside-the-closed-allowlist-is-rejected-frontend-plugin-rpc-al",
+      "file": "frontend-plugin-schemas.test.ts",
+      "line": 94,
+      "title": "a hostApi method outside the closed allowlist is rejected (frontend-plugin-rpc-allowlist)",
+      "explicitId": "openwop.it.frontend-plugin-schemas.a-hostapi-method-outside-the-closed-allowlist-is-rejected-frontend-plugin-rpc-al",
+      "citations": [
+        {
+          "section": "frontend-plugin-packs.md",
+          "requirement": "frontend-plugin-packs.md §Host-RPC — only the closed allowlist methods are permitted; `host.exec` MUST NOT validate"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.frontend-plugin-schemas.an-empty-uiplugins-is-rejected-a-pack-must-declare-at-least-one-plugin",
+      "file": "frontend-plugin-schemas.test.ts",
+      "line": 104,
+      "title": "an empty uiPlugins[] is rejected (a pack MUST declare at least one plugin)",
+      "explicitId": "openwop.it.frontend-plugin-schemas.an-empty-uiplugins-is-rejected-a-pack-must-declare-at-least-one-plugin",
+      "citations": [
+        {
+          "section": "frontend-plugin-packs.md",
+          "requirement": "a frontend-plugin pack MUST declare at least one uiPlugins[] entry"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.frontend-plugin-schemas.a-canvas-preview-entry-with-canvastypes-host-announce-validates-rfc-0130",
+      "file": "frontend-plugin-schemas.test.ts",
+      "line": 110,
+      "title": "a canvas-preview entry with canvasTypes + host.announce validates (RFC 0130)",
+      "explicitId": "openwop.it.frontend-plugin-schemas.a-canvas-preview-entry-with-canvastypes-host-announce-validates-rfc-0130",
+      "citations": [
+        {
+          "section": "RFC 0130",
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.frontend-plugin-schemas.a-surface-outside-the-closed-set-is-still-rejected-rfc-0130-keeps-the-enum-close",
+      "file": "frontend-plugin-schemas.test.ts",
+      "line": 126,
+      "title": "a surface outside the closed set is still rejected (RFC 0130 keeps the enum closed)",
+      "explicitId": "openwop.it.frontend-plugin-schemas.a-surface-outside-the-closed-set-is-still-rejected-rfc-0130-keeps-the-enum-close",
+      "citations": [
+        {
+          "section": "RFC 0130",
+          "requirement": "frontend-plugin-packs.md §The pack — the surface enum stays closed; an unknown surface MUST NOT validate"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.frontend-plugin-schemas.a-valid-artifact-write-request-carrying-a-version-token-validates",
+      "file": "frontend-plugin-schemas.test.ts",
+      "line": 140,
+      "title": "a valid artifact.write request carrying a version token validates",
+      "explicitId": "openwop.it.frontend-plugin-schemas.a-valid-artifact-write-request-carrying-a-version-token-validates",
+      "citations": [
+        {
+          "section": "frontend-plugin-packs.md",
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.frontend-plugin-schemas.an-artifact-conflict-response-carries-currentversion-version-token-concurrency",
+      "file": "frontend-plugin-schemas.test.ts",
+      "line": 152,
+      "title": "an artifact_conflict response carries currentVersion (version-token concurrency)",
+      "explicitId": "openwop.it.frontend-plugin-schemas.an-artifact-conflict-response-carries-currentversion-version-token-concurrency",
+      "citations": [
+        {
+          "section": "frontend-plugin-packs.md",
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.frontend-plugin-schemas.a-request-with-a-method-outside-the-allowlist-is-schema-rejected",
+      "file": "frontend-plugin-schemas.test.ts",
+      "line": 167,
+      "title": "a request with a method outside the allowlist is schema-rejected",
+      "explicitId": "openwop.it.frontend-plugin-schemas.a-request-with-a-method-outside-the-allowlist-is-schema-rejected",
+      "citations": [
+        {
+          "section": "frontend-plugin-packs.md",
+          "requirement": "a method outside the ui-plugin/1 allowlist MUST NOT validate"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.frontend-plugin-schemas.a-message-without-the-ui-plugin-1-protocol-tag-is-rejected",
+      "file": "frontend-plugin-schemas.test.ts",
+      "line": 173,
+      "title": "a message without the ui-plugin/1 protocol tag is rejected",
+      "explicitId": "openwop.it.frontend-plugin-schemas.a-message-without-the-ui-plugin-1-protocol-tag-is-rejected",
+      "citations": [
+        {
+          "section": "frontend-plugin-packs.md",
+          "requirement": "a host MUST ignore messages whose ui-plugin tag it does not recognize"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.frontend-plugin-schemas.no-credential-bearing-field-is-admitted-on-the-envelope-frontend-plugin-no-byok",
+      "file": "frontend-plugin-schemas.test.ts",
+      "line": 179,
+      "title": "no credential-bearing field is admitted on the envelope (frontend-plugin-no-byok)",
+      "explicitId": "openwop.it.frontend-plugin-schemas.no-credential-bearing-field-is-admitted-on-the-envelope-frontend-plugin-no-byok",
+      "citations": [
+        {
+          "section": "frontend-plugin-packs.md",
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
     {
       "id": "openwop.it.locale-key-grammar.extended-bcp-47-keys-validate-at-every-locale-site-v1-and-v2",
       "file": "locale-key-grammar.test.ts",