@openwop/openwop-conformance 2.45.25 → 2.45.27

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # `@openwop/openwop-conformance` Changelog
 
+## [2.45.27] — 2026-10-08 — a seam-free host's seam-driven legs record `inapplicable`, not `blocked`
+
+- **Three scenarios recorded `blocked` on a host without the seams profile**, which denies the bundle certification, where the rest of the suite records a seam-driven leg `inapplicable`. Found by the v2 reference host's first seams-off cut (RFC 0241's evidence): 11 rows `blocked`, all `executed-pass` with the seams profile.
+  - **`v2-pack-isolation` (8 rows):** `invoke` recorded `inapplicable`, then each leg added `blocked` (`seam unavailable`), which outranks it. A leg now returns the kind `invoke` recorded; a seams host whose sandbox seam answers 404 is still `blocked`.
+  - **`v2-negotiation-authenticated` and `v2-minimum-version-refused`, MCP legs:** `blocked` without the seams profile, where their A2A twins say `inapplicable`. Now `inapplicable`.
+  - **`v2-approval-reject-disposition`, the quorum leg:** the resume value's `voter` is a suite convention, not a protocol field, so a seam-free host rightly counts the bearer, and one bearer cannot cause a majority. That is now `inapplicable`; a seams host that ignores `voter` is still `blocked`.
+- Proven on the v2 reference host: seams off, the 11 rows `inapplicable` and none `blocked`; seams on, all 28 rows of the four files `executed-pass`; seams on with `voter` ignored, the quorum row `blocked`.
+
+## [2.45.26] — 2026-10-08 — RFC 0236's legs run without the seam (RFC 0241 Active)
+
+- **No scenario change.** RFC 0237 goes `Accepted` on the v2 reference host's certified 2.45.25 cut; its gaps G1 and G2 close, which changes the packed `spec/v1/gaps.json`.
+- **`v2-host-event-delivery` causes events through RFC 0241's `POST /host/events/test`** when the host lists the reserved `host-test.durable-triggered` / `host-test.ephemeral-triggered` types, else through the §G seam, so a seam-free production host witnesses all six `openwop.requirement.0236.*` rows. New leg `openwop.requirement.0241.trigger.bound-by-listing`: each listed class is accepted with its reserved type, an unlisted class is `400 validation_error`, and nothing is served (`404`/`405`) when no `host-test.*` type is listed. Proven on a seams-off v2 reference host: all eight rows `executed-pass`; a trigger answering a real type, and a frame reaching a second tenant, each `executed-fail`. The self-test double gains the trigger choice and the binding judge.
+- **`v2-host-event-delivery`: `0236.webhook.ephemeral-refused` no longer gates on the seams profile.** It registers a webhook naming an ephemeral type and expects `400 validation_error`; it causes no event, so the §G emit seam was never needed. It now runs on any host advertising `hostEvents` with an ephemeral type, preferring an `example.*` one (a production host's `channel.presence` will do), and records `inapplicable` when none is listed. Proven on a seam-free v2 reference host: `executed-pass`, and `executed-fail` with the refusal removed. The five legs that cause an event use RFC 0241's trigger when the host lists it (next bullet).
+
 ## [2.45.25] — 2026-10-07 — `v2-wasm-abi-reject`; the frontend-plugin schema legs leave host bundles
 
 - **New `v2-wasm-abi-reject` (`openwop.requirement.node-pack-runtimes.wasm-abi-reject`).** Gated on `nodePackRuntimes.wasm` and the new operator-installed fixture `conformance-wasm-pack-abi-mismatch`, which invokes `vendor.openwop.misbehaving.abi-bomb` (the `misbehaving-abi` pack, ABI version 999). Loading is not a protocol operation, so the leg reads what a rejection at load prevents: the pack in an advertised `loadedPacks`, and the node completing. The run must be refused at creation (4xx) or end without that node completing; a 401/403/429/5xx is `blocked`. Proof: a 9-case self-test double (`lib/wasm-abi-reject-witness.test.ts`). No RFC was needed: both observations already exist.

package/dist/spec-artifacts.lock.json

@@ -1,5 +1,5 @@
 {
   "package": "@openwop/spec-artifacts",
-  "version": "2.45.25",
-  "stampSha256": "071daf4502be07fdcaa748880b10f91bcbddaee45417cfdcd43d8c53b15e1e88"
+  "version": "2.45.27",
+  "stampSha256": "0ed61d1135dbf584a64a1d1780c8919a45a4e46da25798ad095629b94b61f0a1"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openwop/openwop-conformance",
-  "version": "2.45.25",
+  "version": "2.45.27",
   "description": "Black-box conformance suite for OpenWOP hosts (v2 current; v1 scenarios retained for the frozen v1 tree).",
   "repository": {
     "type": "git",
@@ -56,6 +56,6 @@
     "@openwop/spec-artifacts": "file:../spec-artifacts"
   },
   "peerDependencies": {
-    "@openwop/spec-artifacts": "2.45.25"
+    "@openwop/spec-artifacts": "2.45.27"
   }
 }

package/requirements.json

@@ -3,8 +3,8 @@
   "generatedFrom": "src/scenarios/*.test.ts",
   "counts": {
     "files": 737,
-    "tests": 2781,
-    "withStableId": 2781,
+    "tests": 2782,
+    "withStableId": 2782,
     "interpolatedTitles": 0,
     "explicitIds": 2644
   },
@@ -28193,7 +28193,7 @@
     {
       "id": "openwop.it.v2-approval-reject-disposition.a-rejected-gate-with-no-routing-edge-fails-the-run-with-approval-rejected",
       "file": "v2-approval-reject-disposition.test.ts",
-      "line": 141,
+      "line": 143,
       "title": "a rejected gate with no routing edge fails the run with approval_rejected",
       "explicitId": null,
       "citations": [
@@ -28216,7 +28216,7 @@
     {
       "id": "openwop.it.v2-approval-reject-disposition.interrupt-resolved-records-action-reject-and-decision-rejected",
       "file": "v2-approval-reject-disposition.test.ts",
-      "line": 152,
+      "line": 154,
       "title": "interrupt.resolved records action reject and decision rejected",
       "explicitId": null,
       "citations": [
@@ -28235,7 +28235,7 @@
     {
       "id": "openwop.it.v2-approval-reject-disposition.the-gate-node-fails-with-approval-rejected-not-retryable-and-run-failed-names-it",
       "file": "v2-approval-reject-disposition.test.ts",
-      "line": 165,
+      "line": 167,
       "title": "the gate node fails with approval_rejected, not retryable, and run.failed names it",
       "explicitId": null,
       "citations": [
@@ -28256,7 +28256,7 @@
     {
       "id": "openwop.it.v2-approval-reject-disposition.a-majority-reject-decides-the-quorum-gate-on-the-deciding-vote-and-fails-the-run",
       "file": "v2-approval-reject-disposition.test.ts",
-      "line": 178,
+      "line": 180,
       "title": "a majority reject decides the quorum gate on the deciding vote and fails the run with approval_rejected",
       "explicitId": null,
       "citations": [
@@ -28282,7 +28282,7 @@
     {
       "id": "openwop.it.v2-approval-reject-disposition.a-rejected-gate-routed-over-an-any-failed-edge-fails-as-a-node-its-all-success-s",
       "file": "v2-approval-reject-disposition.test.ts",
-      "line": 201,
+      "line": 207,
       "title": "a rejected gate routed over an any_failed edge fails as a node, its all_success sibling never runs, and the run completes",
       "explicitId": null,
       "citations": [
@@ -28308,7 +28308,7 @@
     {
       "id": "openwop.it.v2-approval-reject-disposition.an-unresolved-gate-past-its-timeoutms-with-no-ontimeout-is-resolved-rejected-by",
       "file": "v2-approval-reject-disposition.test.ts",
-      "line": 220,
+      "line": 226,
       "title": "an unresolved gate past its timeoutMs with no onTimeout is resolved rejected by the host and fails the run naming the gate",
       "explicitId": null,
       "citations": [
@@ -28329,7 +28329,7 @@
     {
       "id": "openwop.it.v2-approval-reject-disposition.a-gate-whose-ontimeout-is-approve-still-resolves-rejected-on-timeout-and-fails-t",
       "file": "v2-approval-reject-disposition.test.ts",
-      "line": 239,
+      "line": 245,
       "title": "a gate whose onTimeout is approve still resolves rejected on timeout and fails the run: a timeout never grants",
       "explicitId": null,
       "citations": [
@@ -28351,7 +28351,7 @@
     {
       "id": "openwop.it.v2-approval-reject-disposition.a-rejected-gate-looped-back-to-itself-is-asked-again-under-a-new-key-and-the-fir",
       "file": "v2-approval-reject-disposition.test.ts",
-      "line": 257,
+      "line": 263,
       "title": "a rejected gate looped back to itself is asked again under a new key, and the first rejection is not replayed",
       "explicitId": null,
       "citations": [
@@ -28377,7 +28377,7 @@
     {
       "id": "openwop.it.v2-approval-reject-disposition.a-replay-fork-of-a-decided-reject-derives-the-rejection-from-the-log-and-never-r",
       "file": "v2-approval-reject-disposition.test.ts",
-      "line": 333,
+      "line": 339,
       "title": "a replay fork of a decided reject derives the rejection from the log and never re-decides it (leg A)",
       "explicitId": null,
       "citations": [
@@ -28390,7 +28390,7 @@
     {
       "id": "openwop.it.v2-approval-reject-disposition.a-replay-fork-of-a-timed-out-gate-derives-the-timeout-rejection-from-the-log-and",
       "file": "v2-approval-reject-disposition.test.ts",
-      "line": 348,
+      "line": 354,
       "title": "a replay fork of a timed-out gate derives the timeout rejection from the log and never re-arms it (leg B)",
       "explicitId": null,
       "citations": [
@@ -31353,7 +31353,7 @@
     {
       "id": "openwop.it.v2-host-event-delivery.an-emitted-durable-host-event-arrives-on-host-events-as-a-valid-envelope",
       "file": "v2-host-event-delivery.test.ts",
-      "line": 131,
+      "line": 160,
       "title": "an emitted durable host event arrives on /host/events as a valid envelope",
       "explicitId": "openwop.requirement.0236.host-event.envelope",
       "citations": [
@@ -31366,7 +31366,7 @@
     {
       "id": "openwop.it.v2-host-event-delivery.an-ephemeral-host-event-has-no-id-and-is-not-redelivered-after-last-event-id",
       "file": "v2-host-event-delivery.test.ts",
-      "line": 145,
+      "line": 174,
       "title": "an ephemeral host event has no id: and is not redelivered after Last-Event-ID",
       "explicitId": null,
       "citations": []
@@ -31374,7 +31374,7 @@
     {
       "id": "openwop.it.v2-host-event-delivery.registerwebhook-refuses-an-ephemeral-host-event-type-with-400-validation-error",
       "file": "v2-host-event-delivery.test.ts",
-      "line": 162,
+      "line": 191,
       "title": "registerWebhook refuses an ephemeral host-event type with 400 validation_error",
       "explicitId": "openwop.requirement.0236.webhook.ephemeral-refused",
       "citations": [
@@ -31392,7 +31392,7 @@
     {
       "id": "openwop.it.v2-host-event-delivery.a-subscribed-durable-host-event-is-delivered-as-hostevent-signed",
       "file": "v2-host-event-delivery.test.ts",
-      "line": 175,
+      "line": 207,
       "title": "a subscribed durable host event is delivered as { hostEvent }, signed",
       "explicitId": "openwop.requirement.0236.webhook.host-variant",
       "citations": [
@@ -31406,15 +31406,23 @@
     {
       "id": "openwop.it.v2-host-event-delivery.the-same-subscription-never-receives-the-ephemeral-host-event",
       "file": "v2-host-event-delivery.test.ts",
-      "line": 211,
+      "line": 243,
       "title": "the same subscription never receives the ephemeral host event",
       "explicitId": null,
       "citations": []
     },
+    {
+      "id": "openwop.it.v2-host-event-delivery.emittesthostevent-is-served-exactly-for-the-listed-host-test-classes",
+      "file": "v2-host-event-delivery.test.ts",
+      "line": 256,
+      "title": "emitTestHostEvent is served exactly for the listed host-test classes",
+      "explicitId": null,
+      "citations": []
+    },
     {
       "id": "openwop.it.v2-host-event-delivery.a-second-tenant-receives-nothing-for-the-first-tenant-s-host-event",
       "file": "v2-host-event-delivery.test.ts",
-      "line": 224,
+      "line": 270,
       "title": "a second tenant receives nothing for the first tenant’s host event",
       "explicitId": null,
       "citations": []
@@ -34054,7 +34062,7 @@
     {
       "id": "openwop.it.v2-pack-isolation.sandbox-isolationmodel-names-a-real-mechanism-never-node-vm",
       "file": "v2-pack-isolation.test.ts",
-      "line": 82,
+      "line": 89,
       "title": "sandbox.isolationModel names a real mechanism, never node:vm",
       "explicitId": "openwop.requirement.0173.pack-isolation",
       "citations": [
@@ -34072,7 +34080,7 @@
     {
       "id": "openwop.it.v2-pack-isolation.the-sandbox-invoke-seam-answers-the-seam-contract",
       "file": "v2-pack-isolation.test.ts",
-      "line": 96,
+      "line": 103,
       "title": "the sandbox-invoke seam answers the seam contract",
       "explicitId": "openwop.requirement.0173.pack-isolation.seam",
       "citations": [
@@ -34086,7 +34094,7 @@
     {
       "id": "openwop.it.v2-pack-isolation.node-pack-sandbox-fs-gated-a-host-filesystem-read-is-refused",
       "file": "v2-pack-isolation.test.ts",
-      "line": 108,
+      "line": 115,
       "title": "node-pack-sandbox-fs-gated: a host filesystem read is refused",
       "explicitId": null,
       "citations": []
@@ -34094,7 +34102,7 @@
     {
       "id": "openwop.it.v2-pack-isolation.node-pack-sandbox-fs-gated-a-host-filesystem-write-is-refused",
       "file": "v2-pack-isolation.test.ts",
-      "line": 115,
+      "line": 122,
       "title": "node-pack-sandbox-fs-gated: a host filesystem write is refused",
       "explicitId": null,
       "citations": []
@@ -34102,7 +34110,7 @@
     {
       "id": "openwop.it.v2-pack-isolation.node-pack-sandbox-no-env-the-host-environment-does-not-leak",
       "file": "v2-pack-isolation.test.ts",
-      "line": 122,
+      "line": 129,
       "title": "node-pack-sandbox-no-env: the host environment does not leak",
       "explicitId": null,
       "citations": []
@@ -34110,7 +34118,7 @@
     {
       "id": "openwop.it.v2-pack-isolation.node-pack-sandbox-network-gated-ungated-network-egress-is-refused",
       "file": "v2-pack-isolation.test.ts",
-      "line": 129,
+      "line": 136,
       "title": "node-pack-sandbox-network-gated: ungated network egress is refused",
       "explicitId": null,
       "citations": []
@@ -34118,7 +34126,7 @@
     {
       "id": "openwop.it.v2-pack-isolation.node-pack-sandbox-no-process-host-process-access-is-refused",
       "file": "v2-pack-isolation.test.ts",
-      "line": 136,
+      "line": 143,
       "title": "node-pack-sandbox-no-process: host process access is refused",
       "explicitId": null,
       "citations": []
@@ -34126,7 +34134,7 @@
     {
       "id": "openwop.it.v2-pack-isolation.node-pack-sandbox-timeout-exceeding-wallclocklimitms-fails-with-sandbox-timeout",
       "file": "v2-pack-isolation.test.ts",
-      "line": 143,
+      "line": 150,
       "title": "node-pack-sandbox-timeout: exceeding wallClockLimitMs fails with sandbox_timeout",
       "explicitId": "openwop.requirement.0173.pack-isolation.timeout",
       "citations": [
@@ -34139,7 +34147,7 @@
     {
       "id": "openwop.it.v2-pack-isolation.node-pack-sandbox-memory-cap-exceeding-memorylimitbytes-fails-with-sandbox-memor",
       "file": "v2-pack-isolation.test.ts",
-      "line": 150,
+      "line": 157,
       "title": "node-pack-sandbox-memory-cap: exceeding memoryLimitBytes fails with sandbox_memory_exceeded",
       "explicitId": "openwop.requirement.0173.pack-isolation.memory-cap",
       "citations": [
@@ -34152,7 +34160,7 @@
     {
       "id": "openwop.it.v2-pack-isolation.node-pack-sandbox-isolated-context-a-pack-cannot-mutate-state-another-invocation",
       "file": "v2-pack-isolation.test.ts",
-      "line": 157,
+      "line": 164,
       "title": "node-pack-sandbox-isolated-context: a pack cannot mutate state another invocation sees",
       "explicitId": "openwop.requirement.0173.pack-isolation.isolated-context",
       "citations": [

package/schemas/CORPUS-STAMP.json

@@ -1,17 +1,17 @@
 {
   "_comment": "Provenance of @openwop/spec-artifacts (RFC 0168 §D.2). files: SHA-256 per file; the conformance suite compares the installed peer against dist/spec-artifacts.lock.json at start.",
   "package": "@openwop/spec-artifacts",
-  "version": "2.45.25",
-  "corpusTag": "v2.45.25",
+  "version": "2.45.27",
+  "corpusTag": "v2.45.27",
   "files": {
     "api/.redocly.lint-ignore.yaml": "bf5a8350b88a72fa43f59605ed8d903ed24b6cfccda5e45509c9f6ed9ee4e712",
     "api/asyncapi.yaml": "d5ecb9ee6114582be3b1f662c84bfac9ae96dae7bacb853e461168f70a8e1c7d",
     "api/grpc/openwop.proto": "c3e72bb17cba514ee98feb6434e6c9b6ea6795bfd086489ec69fd882dd1ad977",
     "api/openapi.yaml": "ac6de5303872664b78ff419c035915593e01599e02835e777a0123de1baeb398",
     "api/redocly.yaml": "b0604c89b2ca6d5076ec25725c539dad44a741a811fe524439ee6daef8baa09f",
-    "api/seams-v2.yaml": "0692397ec226e29431dbb2f0d7e645d42ac76a3e4f851f1342136186e55ede78",
-    "api/v2/asyncapi.yaml": "416a78c622b4b2bad33cc73d4f2676e53685d1ee99ab6576338dd426a5a0e0fb",
-    "api/v2/openapi.yaml": "907a0bbf13669b0db55effd35eae67bafc2df0a496f11de37d876f69cc7fbe98",
+    "api/seams-v2.yaml": "9b9455816461b5fc267d1f9a1624667f9f6bd81d2e251731767cca142cd9d0e0",
+    "api/v2/asyncapi.yaml": "ec80cec238dcb350f741b49138ed92c9d60f110fcb8ad4bdff2cf44c83c8e1d8",
+    "api/v2/openapi.yaml": "e3cff1191d97def0575096d0ec450622a39c1126ca4baaa72c24079ab3b50774",
     "api/v2/redocly.yaml": "1e66b60e6118ad11a823bb620678be464d99dfe50a40e3e6f93ec9429b88b34c",
     "schemas/README.md": "276fc1d51eb08e14e9127b9fd27761d7046ee33c12000f3a64a801322db8bf58",
     "schemas/a2a-task-state.schema.json": "75d5049dea8bd873ff0e7546f1c60c8d36c219bec7084264360be54a8be30ae1",
@@ -152,7 +152,7 @@
     "schemas/v2/goal.schema.json": "ad104ed5a3866736b8fed9d7c0b23dc82af526b5bef4afe848f01fc3af2161e9",
     "schemas/v2/heartbeat-evaluated.schema.json": "c897b0792fd518d6e12879851027252af1529f5e420c3eaf434ad7af284ecc05",
     "schemas/v2/heartbeat-state-changed.schema.json": "eb68d0082aa996650e3a6b8ccf32457f959cebc7e6728cc7c331b9d171a4bef6",
-    "schemas/v2/host-event.schema.json": "d2e2233d6464442c761ca985b0302c8350cabe2d694d3894f65d1696d80bdc98",
+    "schemas/v2/host-event.schema.json": "655b5475b1aeb41c8fc4ff7b6fc7e31a0fcc18fd59f368336ccbc138e6ba395e",
     "schemas/v2/ids.schema.json": "65cfaa193be0ca9cf48af39c18c553979e3ec1f7fc04509aaa513b322d7b7e4a",
     "schemas/v2/localized-content-language-settings.schema.json": "3c8350a178037a460f5d87466ccaf9ed5fe3d41497786d2504cc66e42152c8cc",
     "schemas/v2/localized-content-page-response.schema.json": "ef48329749758afb21e4d3cbc3f017abb911f75726819457f35b9f1390332c75",
@@ -208,14 +208,14 @@
     "schemas/workspace-file.schema.json": "464de85c2a068243084ee9c1d969bc7cd5d8f7948574e58450d6493c38a0e1e4",
     "spec/v1/alias-detectors.json": "22444c22bb88c568339ef512553f9fc38146e22b566d11ab8608f655d688d19c",
     "spec/v1/capability-declaration-classes.json": "e7729aed5c4b4e1dd02abab0530f14cc95f5d4070fe51fb139e7f5cccefa00c6",
-    "spec/v1/core-standard-manifest.json": "53a46c4dc0224f13f06c4aa6f07ac6aaa0db84407c4ef2127a9d9d5652255b9e",
+    "spec/v1/core-standard-manifest.json": "7e44d633d25ceae4d0d8de5462337e666c3a827c1a003e27b7005edd915fc909",
     "spec/v1/deprecations.json": "e723bc11d7272c71789ad1303bb7f21809a8a024abf57594f9d5c35dc199ece9",
     "spec/v1/deprecations.schema.json": "3e393c405d2a41b467d8c5e3c468549078df1ce6a6d2588fc488097b95d9b55b",
     "spec/v1/end-of-support.json": "35f0bf3b70fe78b16e2a2fd81a153fc27e703f6c16376c6fe7cdf1f4f2c4e6d4",
     "spec/v1/event-codemap.json": "3da60d884157793a360da532a9fcbbfb5285636db325a74cec94b34622186d97",
     "spec/v1/event-codemap.schema.json": "d05933b2e88103aff51a2f774df97b9bda065e0fc88dbd9b114cc47a32189174",
     "spec/v1/extensions.json": "79a60754aa16cbdbdb604f8e5c00038af535a1690a4d07bd5ff7c38f0256a7bc",
-    "spec/v1/gaps.json": "a97d03cce8f59be6f84c66eeeacc56e01e500c7a32845afc95f4d4c4d91b4bfd",
+    "spec/v1/gaps.json": "a0aec8f5ddf1002d46a461a9c7d930c8f0656a19b68bb1f52d183b97cc1962cf",
     "spec/v1/gaps.schema.json": "8fd83259f556553c9df0f53e7a82ca8c2a4771d471197f69b4e2ae0ceeacfd66",
     "spec/v1/migrations.json": "4c50760be70cb644d02427bcaf5749606700edf4513f423903cf3b1d12f5c300",
     "spec/v1/migrations.schema.json": "886779aa6c22e646db097f5df210adb018a4dd14a7b815465a18c8a7056c8f72",
@@ -228,10 +228,10 @@
     "spec/v2/core/connection-packs.md": "c80f95bd6a03698f35c72cdb2b46bd973f49203bbd786c26760e35fa86e6f23d",
     "spec/v2/core/conversation.md": "8d6abedf6af408a74577753bfca24719d318e2632e10b45ff5d63bdcf31a8aaa",
     "spec/v2/core/errors.md": "e48838701b86bbfe0ffee77b18a8ffc4e5f04724b4318507d9771da653f8da0f",
-    "spec/v2/core/events.md": "3eb297c1ca8a4c20017248051fbe9c5319bb51ef1ba4cb476e29840cbbe141a6",
+    "spec/v2/core/events.md": "d0f902edc080e9789e4fd05850a1264d905ebe5b06045b6a7a22486e22ef3091",
     "spec/v2/core/execution.md": "8a0c9db1bbfb97c008ab9328b7333c1cc3318196e78bfbefb49e781bdf4f9d44",
     "spec/v2/core/form-content-packs.md": "02931227899676fd4581a27017be2a6c4953904717be9b81c29d12f87ab3917d",
-    "spec/v2/core/headers.md": "18e52477898e67b0b3778d1fdd22e07bc43d561c03b501573404cd53245edef6",
+    "spec/v2/core/headers.md": "f69fe81e4a3ad21879bb85948660c16860eb05bf152928c31aa4898f6d7d1887",
     "spec/v2/core/host-services.md": "168a40935a03867ee82461b5d83d05578be25ee3e5af4eb080587b891231e242",
     "spec/v2/core/i18n.md": "882904b7d59f992ab1e5f7346167161a54cf665b8fee47e64a3862cf9133a580",
     "spec/v2/core/idempotency.md": "adbd317a6ebb57c2759c076297b31f67def9e391576bccd0bbea787b13e85872",
@@ -310,12 +310,12 @@
     "spec/v2/interop-map.schema.json": "0017c882df34ee215e2e0729de051490e09d43aac3d2c949285698ed51832f12",
     "spec/v2/migrations.json": "651954938a1e154c0b6f1e3dd6e105889d30de3bb65789f21de7f77a12869e9e",
     "spec/v2/migrations.schema.json": "b91ade6320ad1b1185c9495b9424f3aa63438ed8e412c45171c227d82c0afd86",
-    "spec/v2/path-manifest.json": "50fc251f296b06ec5fad35724f5c63b1a32e0e8fc222a85cd29b785cebdb9c98",
+    "spec/v2/path-manifest.json": "7b5679a4dad98c80d855361d88a98c8a4e045af15e310862a05b285b815dc9fc",
     "spec/v2/peer-dependency-aliases.json": "d10299280abee08258502925bc327293ee413e0108cd6e6ec75ff6110653308d",
     "spec/v2/profiles.json": "180beb9ef2d161766fa23b2987e7e829851e3d316273147cf6a4a3f324befd6b",
-    "spec/v2/release.json": "0fdc846e4aacfad6b0fe7a255002c4ad167bc41f14174ba6f2dcf2498cb540f3",
+    "spec/v2/release.json": "5edf0eb76b4b2d61addd3ebda82c0fa7cbfe9228665050da798cf1f26962cdbe",
     "spec/v2/retention-floors.json": "eaf3722d95c79947af1d4269ef85117e126518c588cfcf1a2b21b97269f51624",
-    "spec/v2/surface-baseline.json": "91233acd0e69f99afbe4319260298ede7bddc2bd665d30305ecd443bef65ab58"
+    "spec/v2/surface-baseline.json": "d75c8f150df9625594cb6405b603e4f6f4d0e8d0d62ce198d0028c1133e9cbfd"
   },
-  "corpusCommit": "f204da96cb286ba47bed89d4f66d70bbfdcda5a4"
+  "corpusCommit": "4bf2cc5a47102975d8710f50f619b3e4f1fcd9d8"
 }

package/src/lib/host-event-witness.ts

@@ -4,7 +4,7 @@
  * self-test (`host-event-witness.test.ts`) can feed each one a defect and show
  * it convicts.
  *
- * The scenario owns the I/O (the `/host/events` stream, the emit seam, the
+ * The scenario owns the I/O (the `/host/events` stream, the RFC 0241 trigger or the emit seam, the
  * scoped webhook receiver). This file owns only "given what arrived, which
  * `events.md` §Host events / `webhooks.md` §Delivery rule failed?".
  */
@@ -30,6 +30,52 @@ export function exampleType(types: readonly AdvertisedType[], delivery: Advertis
   return types.find((t) => t.type.startsWith('example.') && t.delivery === delivery)?.type ?? null;
 }
 
+/**
+ * Any advertised type of the class, preferring the conformance `example.*` one. For a leg
+ * that only names a type and causes no event, so it runs on a host without the §G seam.
+ */
+export function advertisedTypeOf(types: readonly AdvertisedType[], delivery: AdvertisedType['delivery']): string | null {
+  return exampleType(types, delivery) ?? types.find((t) => t.delivery === delivery)?.type ?? null;
+}
+
+/** RFC 0241 §A — the reserved test types, one per delivery class. */
+export const TEST_TYPES = { durable: 'host-test.durable-triggered', ephemeral: 'host-test.ephemeral-triggered' } as const;
+
+/** The reserved test type of a class, when the host lists it (RFC 0241 §B.1: listing it binds the trigger). */
+export function testTypeListed(types: readonly AdvertisedType[], delivery: AdvertisedType['delivery']): string | null {
+  return types.some((t) => t.type === TEST_TYPES[delivery] && t.delivery === delivery) ? TEST_TYPES[delivery] : null;
+}
+
+/** How the suite causes a host event: the normative trigger when a test type is listed, else the §G seam. */
+export type Trigger = 'normative' | 'seam';
+export function triggerOf(types: readonly AdvertisedType[], seamsProfile: boolean): Trigger | null {
+  if (testTypeListed(types, 'durable') !== null || testTypeListed(types, 'ephemeral') !== null) return 'normative';
+  return seamsProfile ? 'seam' : null;
+}
+
+/**
+ * RFC 0241 §B.1–§B.2 — `emitTestHostEvent` is served exactly for the listed classes: a class whose
+ * type is not listed is refused (`404`/`405` when none is listed, `400 validation_error` otherwise),
+ * and a listed class is accepted with `202` and its reserved type.
+ */
+export function judgeTriggerBinding(types: readonly AdvertisedType[], delivery: AdvertisedType['delivery'], status: number, code: string | undefined, returnedType: unknown): Finding[] {
+  const listed = testTypeListed(types, delivery) !== null;
+  const anyListed = triggerOf(types, false) === 'normative';
+  if (listed) {
+    return [status === 202 && returnedType === TEST_TYPES[delivery]
+      ? ok(`emitTestHostEvent accepts the listed ${delivery} class`)
+      : bad(`emitTestHostEvent MUST accept the listed ${delivery} class with 202 and type ${TEST_TYPES[delivery]}; got ${status} ${String(code ?? returnedType ?? '')}`.trim())];
+  }
+  if (!anyListed) {
+    return [status === 404 || status === 405
+      ? ok('emitTestHostEvent is not served while no host-test type is listed')
+      : bad(`a host listing no host-test.* type MUST NOT serve emitTestHostEvent; got ${status}`)];
+  }
+  return [status === 400 && code === 'validation_error'
+    ? ok(`emitTestHostEvent refuses the unlisted ${delivery} class`)
+    : bad(`emitTestHostEvent MUST refuse the unlisted ${delivery} class with 400 validation_error; got ${status} ${code ?? ''}`.trim())];
+}
+
 /** The frame carrying `eventId`, parsed, or null. */
 export function frameFor(frames: readonly Frame[], eventId: string): { frame: Frame; envelope: Record<string, unknown> } | null {
   for (const frame of frames) {

package/src/scenarios/v2-approval-reject-disposition.test.ts

@@ -59,7 +59,8 @@
  * The quorum leg presents distinct votes on one bearer through the resume
  * value's `voter` member, as `interrupt-quorum-resolution` does at major 1. A
  * host that counts both votes as one principal cannot be driven to a majority
- * this way; that records `blocked`, not a failure.
+ * this way: that records `blocked` on a host advertising the seams profile, and
+ * `inapplicable` on one without it, which rightly counts only the bearer.
  *
  * @see spec/v2/core/interrupt.md §Rejection
  * @see spec/v2/errors.json approval_rejected
@@ -68,7 +69,8 @@
 
 import { describe, it, expect } from 'vitest';
 import { driver, type OpenWOPResponse } from '../lib/driver.js';
-import { gateFamily } from '../lib/v2.js';
+import { gateFamily, v2Discovery } from '../lib/v2.js';
+import { seamsProfileAdvertised } from '../lib/seams.js';
 import { isFixtureAdvertised } from '../lib/fixtures.js';
 import { readErrorCode } from '../lib/error-envelope.js';
 import { softSkip } from '../lib/soft-skip.js';
@@ -190,6 +192,10 @@ describe('RFC 0223 — v2-approval-reject-disposition (gated on interrupt + conf
     const terminal = await waitStatus(s.runId, TERMINAL, 10_000);
     if (between === 'waiting-approval' && terminal?.['status'] === 'waiting-approval') {
       await http(() => driver.post(`/runs/${enc(s.runId)}/cancel`, {}));
+      // `voter` is a suite convention, not a protocol field: a host without the
+      // seams profile rightly counts the bearer, and one bearer cannot cause a
+      // majority there. Only a seams host that ignores it is `blocked`.
+      if (!seamsProfileAdvertised(await v2Discovery().catch(() => null))) return softSkip('inapplicable', 'the host counted both votes as one approver: one bearer, and the resume value\'s voter stand-in is a seams-profile convention this seam-free host rightly ignores; a majority needs distinct principals');
       return softSkip('blocked', 'the host counted both votes as one approver (one bearer; the resume value\'s voter was not honoured), so a majority could not be caused');
     }
     expect(between, req(id, DOC, 'one reject of three under majority does not decide the gate: the run MUST stay waiting-approval')).toBe('waiting-approval');

package/src/scenarios/v2-host-event-delivery.test.ts

@@ -1,11 +1,13 @@
 /**
  * v2 — host events (RFC 0236; `spec/v2/core/events.md` §Host events,
- * `webhooks.md` §Delivery; suite 2.45.20, target major 2; seam-gated).
+ * `webhooks.md` §Delivery; suite 2.45.20, target major 2; RFC 0241 trigger in 2.45.26).
  *
  * A host event belongs to no run: its envelope has no `runId` and no
  * `sequence`. It rides `/host/events` beside the heartbeat messages and, when
- * durable, webhooks. The suite cannot cause one unaided, so every leg drives
- * the §G emit seam with the `example.*` types a seams-profile host advertises.
+ * durable, webhooks. The suite causes one through `POST /host/events/test`
+ * (RFC 0241) when the host lists the reserved `host-test.*` types, so a
+ * seam-free production host witnesses every leg; otherwise through the RFC 0236
+ * §G emit seam with the `example.*` types a seams-profile host advertises.
  *
  *   0236.host-event.envelope         an emitted durable event arrives as a valid
  *                                    envelope, `event:` = type, `id:` = eventId;
@@ -22,16 +24,22 @@
  *                                    the host-variant leg observed: a bundle
  *                                    records one requirement id per `it`);
  *   0236.host-event.tenant-isolation a second tenant's stream receives nothing
- *                                    for the first tenant's event.
+ *                                    for the first tenant's event;
+ *   0241.trigger.bound-by-listing    `emitTestHostEvent` accepts each listed
+ *                                    `host-test.*` class and refuses the rest
+ *                                    (`404`/`405` when none is listed).
  *
  * Judged by `lib/host-event-witness.ts`, whose self-test convicts each defect.
  *
- * Dispositions: discovery unreadable ⇒ `blocked`; seams profile or `hostEvents`
- * not advertised ⇒ `inapplicable`; seam unwired, or no `example.*` type of the
- * needed class advertised ⇒ `seamAbsent`; no second-tenant credential
+ * Dispositions: discovery unreadable ⇒ `blocked`; `hostEvents` not advertised ⇒
+ * `inapplicable`; neither a listed `host-test.*` type nor the seams profile ⇒
+ * `inapplicable` for every event-causing leg (not `ephemeral-refused`, which causes no event and runs on any advertised
+ * ephemeral type, none listed ⇒ `inapplicable`); a listed trigger that fails ⇒ `blocked`; seam unwired, or no `example.*`
+ * type of the needed class advertised ⇒ `seamAbsent`; no second-tenant credential
  * (`OPENWOP_TEST_TENANT_B_API_KEY`) ⇒ `inapplicable` for the tenant leg.
  *
  * @see RFCS/0236-host-events.md
+ * @see RFCS/0241-host-event-test-trigger.md
  * @see spec/v2/core/events.md §Host events
  */
 
@@ -46,7 +54,7 @@ import { readErrorCode } from '../lib/error-envelope.js';
 import { absenceIsUnmeasured, noDeliveryCause, startScopedReceiver, type ScopedHit, type ScopedReceiver } from '../lib/scoped-receiver.js';
 import { createReceiverState, verifyWebhookDelivery } from '../lib/webhook-receiver.js';
 import {
-  advertisedTypes, exampleType, judgeEnvelope, judgeHostBody, judgeNoFanOut, judgeNoResume, judgeTenantScope, type AdvertisedType, type Finding,
+  TEST_TYPES, advertisedTypeOf, advertisedTypes, exampleType, judgeEnvelope, judgeTriggerBinding, testTypeListed, triggerOf, type Trigger, judgeHostBody, judgeNoFanOut, judgeNoResume, judgeTenantScope, type AdvertisedType, type Finding,
 } from '../lib/host-event-witness.js';
 
 export const REQUIRES_HOST_CALLBACK = 'the host POSTs host-event webhook deliveries to the suite-owned scoped receiver behind OPENWOP_WEBHOOK_RECEIVER_URL';
@@ -60,6 +68,8 @@ const ID_HOST_BODY = 'openwop.requirement.0236.webhook.host-variant';
 const ID_NO_FAN_OUT = 'openwop.requirement.0236.ephemeral.no-fan-out';
 const ID_TENANT = 'openwop.requirement.0236.host-event.tenant-isolation';
 const SEAM = seamPath('/v1/host/sample/host-events/emit');
+const TRIGGER = '/host/events/test';
+const ID_BINDING = 'openwop.requirement.0241.trigger.bound-by-listing';
 const V2 = { 'OpenWOP-Version': '2.0' };
 const STREAM_MS = 3_000;
 const SECRET = 'openwop-conformance-host-event-secret-0236';
@@ -77,30 +87,49 @@ const assertAll = (id: string, doc: string, findings: readonly Finding[]): void
 type Skip = { kind: 'blocked' | 'inapplicable' | 'seam'; reason: string };
 const skip = (s: Skip): undefined => (s.kind === 'seam' ? seamAbsent(s.reason) : softSkip(s.kind, s.reason));
 
-/** The shared gate: the advertised types, or why the leg cannot run. */
-async function gate(): Promise<{ types: AdvertisedType[]; record: Record<string, unknown> } | Skip> {
+/** The family gate: the advertised types, or why the leg cannot run. Needs no seam. */
+async function familyGate(): Promise<{ types: AdvertisedType[]; record: Record<string, unknown>; doc: Record<string, unknown> } | Skip> {
   let doc: Record<string, unknown> | null;
   try { doc = await v2Discovery(); } catch { doc = null; }
   if (!doc) return { kind: 'blocked', reason: 'v2 discovery unreachable — /.well-known/openwop did not answer 200 JSON under OpenWOP-Version: 2.0' };
   const record = await familyAdvertised('hostEvents');
   if (record === null) return { kind: 'inapplicable', reason: 'the host does not advertise hostEvents' };
-  if (!seamsProfileAdvertised(doc)) return { kind: 'inapplicable', reason: 'seams profile not advertised — the suite cannot cause a host event without the RFC 0236 §G emit seam' };
-  return { types: advertisedTypes(record), record };
+  return { types: advertisedTypes(record), record, doc };
 }
 
-function pick(types: readonly AdvertisedType[], delivery: AdvertisedType['delivery']): AdvertisedType | Skip {
-  const type = exampleType(types, delivery);
+/**
+ * The shared gate for the legs that cause an event: the family gate plus a way to cause one —
+ * the RFC 0241 trigger when the host lists a `host-test.*` type, else the RFC 0236 §G seam.
+ */
+async function gate(): Promise<{ types: AdvertisedType[]; record: Record<string, unknown>; trigger: Trigger } | Skip> {
+  const g = await familyGate();
+  if ('kind' in g) return g;
+  const trigger = triggerOf(g.types, seamsProfileAdvertised(g.doc));
+  if (trigger === null) return { kind: 'inapplicable', reason: 'no way to cause a host event: hostEvents.types lists no host-test.* type (RFC 0241) and the seams profile is not advertised (RFC 0236 §G)' };
+  return { types: g.types, record: g.record, trigger };
+}
+
+/** The type the suite causes for a class: the reserved test type under the trigger, the `example.*` type under the seam. */
+function pick(g: { types: readonly AdvertisedType[]; trigger: Trigger }, delivery: AdvertisedType['delivery']): AdvertisedType | Skip {
+  if (g.trigger === 'normative') {
+    const type = testTypeListed(g.types, delivery);
+    return type === null ? { kind: 'inapplicable', reason: `hostEvents.types lists no ${TEST_TYPES[delivery]}, so the suite cannot cause a ${delivery} host event (RFC 0241 §B.1)` } : { type, delivery };
+  }
+  const type = exampleType(g.types, delivery);
   return type === null
     ? { kind: 'seam', reason: `no example.* ${delivery} type is advertised in hostEvents.types — RFC 0236 §G: a seams-profile host advertises one for the suite to drive` }
     : { type, delivery };
 }
 
-async function emit(type: string): Promise<string | Skip> {
-  const res = await http(() => driver.post(SEAM, { type }));
-  if (res === null) return { kind: 'blocked', reason: `${SEAM} unreachable (fetch failed)` };
-  if (res.status === 404 || res.status === 405) return { kind: 'seam', reason: `${SEAM} not mounted (${res.status}) — RFC 0236 §G` };
+/** Cause one host event of `t` through the gate's trigger; its `eventId`, or why none was produced. */
+async function emit(trigger: Trigger, t: AdvertisedType): Promise<string | Skip> {
+  const path = trigger === 'normative' ? TRIGGER : SEAM;
+  const body = trigger === 'normative' ? { delivery: t.delivery } : { type: t.type };
+  const res = await http(() => driver.post(path, body));
+  if (res === null) return { kind: 'blocked', reason: `${path} unreachable (fetch failed)` };
+  if (trigger === 'seam' && (res.status === 404 || res.status === 405)) return { kind: 'seam', reason: `${SEAM} not mounted (${res.status}) — RFC 0236 §G` };
   const eventId = (res.json as { eventId?: unknown } | null)?.eventId;
-  if (res.status !== 202 || typeof eventId !== 'string') return { kind: 'blocked', reason: `${SEAM} answered ${res.status} ${readErrorCode(res.json) ?? ''} for ${type}, so no event was produced`.trim() };
+  if (res.status !== 202 || typeof eventId !== 'string') return { kind: 'blocked', reason: `${path} answered ${res.status} ${readErrorCode(res.json) ?? ''} for ${t.type}, so no event was produced`.trim() };
   return eventId;
 }
 
@@ -127,14 +156,14 @@ afterEach(async () => {
   if (receiver) { receiver.server.close(); receiver = null; }
 });
 
-describe('v2 host events (RFC 0236 — seam-gated)', () => {
+describe('v2 host events (RFC 0236; caused through RFC 0241 or the §G seam)', () => {
   it('an emitted durable host event arrives on /host/events as a valid envelope', async () => {
     const g = await gate();
     if ('kind' in g) return skip(g);
-    const d = pick(g.types, 'durable');
+    const d = pick(g, 'durable');
     if ('kind' in d) return skip(d);
     let eventId: string | Skip = '';
-    const frames = await streamWhile(async () => { eventId = await emit(d.type); });
+    const frames = await streamWhile(async () => { eventId = await emit(g.trigger, d); });
     if (typeof eventId !== 'string') return skip(eventId);
     assertAll(ID_ENVELOPE, DOC, judgeEnvelope(frames, eventId, d, hostEvent));
     if (await familyAdvertised('channelPresence')) {
@@ -145,13 +174,13 @@ describe('v2 host events (RFC 0236 — seam-gated)', () => {
   it('an ephemeral host event has no id: and is not redelivered after Last-Event-ID', async () => {
     const g = await gate();
     if ('kind' in g) return skip(g);
-    const d = pick(g.types, 'durable');
-    const e = pick(g.types, 'ephemeral');
+    const d = pick(g, 'durable');
+    const e = pick(g, 'ephemeral');
     if ('kind' in d) return skip(d);
     if ('kind' in e) return skip(e);
     let durableId: string | Skip = '';
     let ephemeralId: string | Skip = '';
-    const frames = await streamWhile(async () => { durableId = await emit(d.type); await sleep(150); ephemeralId = await emit(e.type); });
+    const frames = await streamWhile(async () => { durableId = await emit(g.trigger, d); await sleep(150); ephemeralId = await emit(g.trigger, e); });
     if (typeof durableId !== 'string') return skip(durableId);
     if (typeof ephemeralId !== 'string') return skip(ephemeralId);
     assertAll(ID_NO_RESUME, DOC, judgeEnvelope(frames, ephemeralId, e, hostEvent));
@@ -160,10 +189,13 @@ describe('v2 host events (RFC 0236 — seam-gated)', () => {
   }, 20_000);
 
   it('registerWebhook refuses an ephemeral host-event type with 400 validation_error', async () => {
-    const g = await gate();
+    // Causes no event, so it needs no §G seam: any advertised ephemeral type will do (a
+    // production host with `channel.presence` witnesses it).
+    const g = await familyGate();
     if ('kind' in g) return skip(g);
-    const e = pick(g.types, 'ephemeral');
-    if ('kind' in e) return skip(e);
+    const type = advertisedTypeOf(g.types, 'ephemeral');
+    if (type === null) return softSkip('inapplicable', 'hostEvents.types lists no ephemeral type, so there is none to refuse');
+    const e = { type, delivery: 'ephemeral' as const };
     const res = await http(() => driver.post('/webhooks', { url: 'https://example.com/openwop-conformance-0236', events: [e.type], secret: SECRET }));
     if (res === null) return softSkip('blocked', 'POST /webhooks unreachable (fetch failed)');
     const id = (res.json as { webhookId?: unknown } | null)?.webhookId;
@@ -177,8 +209,8 @@ describe('v2 host events (RFC 0236 — seam-gated)', () => {
     const g = await gate();
     if ('kind' in g) return skip(g);
     if ((await familyAdvertised('webhooks')) === null) return softSkip('inapplicable', 'the host does not advertise webhooks');
-    const d = pick(g.types, 'durable');
-    const e = pick(g.types, 'ephemeral');
+    const d = pick(g, 'durable');
+    const e = pick(g, 'ephemeral');
     if ('kind' in d) return skip(d);
     if ('kind' in e) return skip(e);
     const hits: ScopedHit[] = [];
@@ -192,9 +224,9 @@ describe('v2 host events (RFC 0236 — seam-gated)', () => {
     const webhookId = (reg.json as { webhookId?: unknown } | null)?.webhookId;
     expect(reg.status, req(ID_HOST_BODY, 'spec/v2/core/webhooks.md §Surfaces', `events[] naming the advertised durable host-event type ${d.type} MUST be accepted; got ${reg.status} ${readErrorCode(reg.json) ?? ''}`)).toBe(201);
     if (typeof webhookId === 'string') registered.push(webhookId);
-    const ephemeralId = await emit(e.type);
+    const ephemeralId = await emit(g.trigger, e);
     if (typeof ephemeralId !== 'string') return skip(ephemeralId);
-    const durableId = await emit(d.type);
+    const durableId = await emit(g.trigger, d);
     if (typeof durableId !== 'string') return skip(durableId);
     for (let waited = 0; waited < 15_000 && !hits.some((h) => h.body.includes(durableId)); waited += 250) await sleep(250);
     const hit = hits.find((h) => h.body.includes(durableId));
@@ -213,25 +245,39 @@ describe('v2 host events (RFC 0236 — seam-gated)', () => {
     const g = await gate();
     if ('kind' in g) return skip(g);
     if ((await familyAdvertised('webhooks')) === null) return softSkip('inapplicable', 'the host does not advertise webhooks');
-    const d = pick(g.types, 'durable');
-    const e = pick(g.types, 'ephemeral');
+    const d = pick(g, 'durable');
+    const e = pick(g, 'ephemeral');
     if ('kind' in d) return skip(d);
     if ('kind' in e) return skip(e);
     if ('skipped' in fanOut) return softSkip('blocked', `no-fan-out reads the deliveries the host-variant leg observed, and ${fanOut.skipped}`);
     assertAll(ID_NO_FAN_OUT, DOC, [judgeNoFanOut(fanOut.bodies, fanOut.ephemeralId)]);
   });
 
+  it('emitTestHostEvent is served exactly for the listed host-test classes', async () => {
+    // RFC 0241 §B.1–§B.2: listing a host-test type binds the trigger for that class, and only it.
+    const g = await familyGate();
+    if ('kind' in g) return skip(g);
+    const findings: Finding[] = [];
+    for (const delivery of ['durable', 'ephemeral'] as const) {
+      // Each class: a listed one is accepted with its reserved type, an unlisted one refused.
+      const res = await http(() => driver.post(TRIGGER, { delivery }));
+      if (res === null) return softSkip('blocked', `${TRIGGER} unreachable (fetch failed)`);
+      findings.push(...judgeTriggerBinding(g.types, delivery, res.status, readErrorCode(res.json) ?? undefined, (res.json as { type?: unknown } | null)?.type));
+    }
+    assertAll(ID_BINDING, 'spec/v2/core/events.md §Host events', findings);
+  }, 20_000);
+
   it('a second tenant receives nothing for the first tenant’s host event', async () => {
     const g = await gate();
     if ('kind' in g) return skip(g);
-    const d = pick(g.types, 'durable');
+    const d = pick(g, 'durable');
     if ('kind' in d) return skip(d);
     const other = process.env['OPENWOP_TEST_TENANT_B_API_KEY']?.trim();
     if (!other) return softSkip('inapplicable', 'OPENWOP_TEST_TENANT_B_API_KEY (a credential bound to a second tenant) is not set — the cross-tenant check needs it');
     if (other === process.env['OPENWOP_API_KEY']?.trim()) return softSkip('blocked', 'OPENWOP_TEST_TENANT_B_API_KEY equals OPENWOP_API_KEY — the second credential must resolve to a different tenant');
     let eventId: string | Skip = '';
     const otherStream = streamWhile(async () => undefined, { bearer: other });
-    const own = await streamWhile(async () => { eventId = await emit(d.type); });
+    const own = await streamWhile(async () => { eventId = await emit(g.trigger, d); });
     const theirs = await otherStream;
     if (typeof eventId !== 'string') return skip(eventId);
     assertAll(ID_TENANT, DOC, judgeTenantScope(own, theirs, eventId));

package/src/scenarios/v2-minimum-version-refused.test.ts

@@ -116,7 +116,7 @@ describe('RFC 0175 §D.2 — minimum-version-refused (gated on a2a/mcp + seams)'
     if (!doc) return softSkip('blocked', 'discovery unreachable');
     const facet = await familyAdvertised('mcp');
     if (!facet) return softSkip('inapplicable', 'mcp facet not advertised — no floor to enforce');
-    if (!seamsProfileAdvertised(doc)) return softSkip('blocked', 'the below-floor exchange is driven through the seams profile — conformance.seamsProfile is not openwop-conformance-seams-v2');
+    if (!seamsProfileAdvertised(doc)) return softSkip('inapplicable', 'the below-floor exchange is driven through the seams profile — conformance.seamsProfile is not openwop-conformance-seams-v2');
     const floor = String(facet['minimumRevision']);
     if (!(MCP_LOWEST < floor)) {
       return softSkip('blocked', `the advertised mcp.minimumRevision (${floor}) is at or below the lowest revision the suite server can offer (${MCP_LOWEST}) — nothing below the floor can be offered`);

package/src/scenarios/v2-negotiation-authenticated.test.ts

@@ -119,7 +119,7 @@ describe('RFC 0175 §D.1 — negotiation-authenticated (gated on a2a/mcp + seams
     if (!doc) return softSkip('blocked', 'discovery unreachable');
     const facet = await familyAdvertised('mcp');
     if (!facet) return softSkip('inapplicable', 'mcp facet not advertised — no negotiation to authenticate');
-    if (!seamsProfileAdvertised(doc)) return softSkip('blocked', 'the unauthenticated exchange is driven through the seams profile — conformance.seamsProfile is not openwop-conformance-seams-v2');
+    if (!seamsProfileAdvertised(doc)) return softSkip('inapplicable', 'the unauthenticated exchange is driven through the seams profile — conformance.seamsProfile is not openwop-conformance-seams-v2');
     const preferred = String(facet['preferredVersion']);
     if (!(MCP_LOWER < preferred)) return softSkip('blocked', `mcp.preferredVersion is ${preferred}, at or below the lowest revision the suite server can offer (${MCP_LOWER}) — no lower revision can be offered`);
     const server = new McpFakeServer({ protocolVersions: ['2025-06-18'] });

package/src/scenarios/v2-pack-isolation.test.ts

@@ -33,7 +33,7 @@ import { describe, it, expect } from 'vitest';
 import { driver } from '../lib/driver.js';
 import { v2Discovery, gateFamily } from '../lib/v2.js';
 import { seamsProfileAdvertised, SEAMS_PREFIX } from '../lib/seams.js';
-import { softSkip, seamAbsent } from '../lib/soft-skip.js';
+import { softSkip, seamAbsent, type SoftSkipKind } from '../lib/soft-skip.js';
 import { req } from '../lib/requirement-ids.js';
 
 const ISOLATION_MODELS = ['wasm', 'process', 'container', 'vm'];
@@ -55,12 +55,19 @@ async function gated(): Promise<Record<string, unknown> | null> {
   return sandbox;
 }
 
-/** Drive one misbehaving typeId through the sandbox seam; null (reason recorded) when the seam is absent. */
+/**
+ * The kind `invoke` recorded when it returned null. A leg returns this kind, not
+ * a fixed `blocked`: a seam-free host records `inapplicable` here, and a second
+ * `blocked` on top of it outranked that and denied the bundle certification.
+ */
+let invokeSkip: SoftSkipKind = 'blocked';
+
+/** Drive one misbehaving typeId through the sandbox seam; null (reason recorded, kind in `invokeSkip`) when the seam is absent. */
 async function invoke(typeId: string, extra: Record<string, unknown> = {}): Promise<InvokeResult | null> {
   const doc = await discovery();
-  if (!doc || !seamsProfileAdvertised(doc)) { softSkip('inapplicable', `the ${typeId} leg is seam-driven — seams profile (conformance.seamsProfile = openwop-conformance-seams-v2) not advertised`); return null; }
+  if (!doc || !seamsProfileAdvertised(doc)) { invokeSkip = 'inapplicable'; softSkip('inapplicable', `the ${typeId} leg is seam-driven — seams profile (conformance.seamsProfile = openwop-conformance-seams-v2) not advertised`); return null; }
   const res = await driver.post(INVOKE, { typeId, ...extra });
-  if (res.status === 404 || res.status === 403 || res.status === 405) { seamAbsent(`host advertises sandbox but ${INVOKE} answered ${res.status} — the ${typeId} leg is unobservable (host-sample-test-seams.md §8)`); return null; }
+  if (res.status === 404 || res.status === 403 || res.status === 405) { invokeSkip = 'blocked'; seamAbsent(`host advertises sandbox but ${INVOKE} answered ${res.status} — the ${typeId} leg is unobservable (host-sample-test-seams.md §8)`); return null; }
   // The same id is ALSO asserted by its own `it` above, and that is the copy the
   // registry can see: `generate-requirement-registry.mjs` harvests `req(…)` only
   // within an `it`, so this helper-level call alone left the id out of
@@ -108,58 +115,58 @@ describe('RFC 0173 §B — pack-isolation (gated on sandbox)', () => {
   it('node-pack-sandbox-fs-gated: a host filesystem read is refused', async () => {
     if (!(await gated())) return softSkip('inapplicable', 'gate not met (reason recorded above)');
     const r = await invoke('misbehave.fs-escape-read');
-    if (!r) return softSkip('blocked', 'seam unavailable (reason recorded above)');
+    if (!r) return softSkip(invokeSkip, 'seam leg not driven (reason recorded above)');
     expectEscape('openwop.requirement.0173.pack-isolation.fs-read', r, 'host-fs-escape', 'node-pack-sandbox-fs-gated');
   });
 
   it('node-pack-sandbox-fs-gated: a host filesystem write is refused', async () => {
     if (!(await gated())) return softSkip('inapplicable', 'gate not met (reason recorded above)');
     const r = await invoke('misbehave.fs-escape-write');
-    if (!r) return softSkip('blocked', 'seam unavailable (reason recorded above)');
+    if (!r) return softSkip(invokeSkip, 'seam leg not driven (reason recorded above)');
     expectEscape('openwop.requirement.0173.pack-isolation.fs-write', r, 'host-fs-escape', 'node-pack-sandbox-fs-gated');
   });
 
   it('node-pack-sandbox-no-env: the host environment does not leak', async () => {
     if (!(await gated())) return softSkip('inapplicable', 'gate not met (reason recorded above)');
     const r = await invoke('misbehave.env-leak');
-    if (!r) return softSkip('blocked', 'seam unavailable (reason recorded above)');
+    if (!r) return softSkip(invokeSkip, 'seam leg not driven (reason recorded above)');
     expectEscape('openwop.requirement.0173.pack-isolation.no-env', r, 'host-env-leak', 'node-pack-sandbox-no-env');
   });
 
   it('node-pack-sandbox-network-gated: ungated network egress is refused', async () => {
     if (!(await gated())) return softSkip('inapplicable', 'gate not met (reason recorded above)');
     const r = await invoke('misbehave.network-escape');
-    if (!r) return softSkip('blocked', 'seam unavailable (reason recorded above)');
+    if (!r) return softSkip(invokeSkip, 'seam leg not driven (reason recorded above)');
     expectEscape('openwop.requirement.0173.pack-isolation.network', r, 'network-escape', 'node-pack-sandbox-network-gated');
   });
 
   it('node-pack-sandbox-no-process: host process access is refused', async () => {
     if (!(await gated())) return softSkip('inapplicable', 'gate not met (reason recorded above)');
     const r = await invoke('misbehave.process-escape');
-    if (!r) return softSkip('blocked', 'seam unavailable (reason recorded above)');
+    if (!r) return softSkip(invokeSkip, 'seam leg not driven (reason recorded above)');
     expectEscape('openwop.requirement.0173.pack-isolation.no-process', r, 'host-process-escape', 'node-pack-sandbox-no-process');
   });
 
   it('node-pack-sandbox-timeout: exceeding wallClockLimitMs fails with sandbox_timeout', async () => {
     if (!(await gated())) return softSkip('inapplicable', 'gate not met (reason recorded above)');
     const r = await invoke('misbehave.timeout');
-    if (!r) return softSkip('blocked', 'seam unavailable (reason recorded above)');
+    if (!r) return softSkip(invokeSkip, 'seam leg not driven (reason recorded above)');
     expect(r.error?.code, req('openwop.requirement.0173.pack-isolation.timeout', 'security-defaults.md §Sandbox isolation', 'node-pack-sandbox-timeout: a wall-clock overrun MUST fail with sandbox_timeout')).toBe('sandbox_timeout');
   });
 
   it('node-pack-sandbox-memory-cap: exceeding memoryLimitBytes fails with sandbox_memory_exceeded', async () => {
     if (!(await gated())) return softSkip('inapplicable', 'gate not met (reason recorded above)');
     const r = await invoke('misbehave.memory-bomb');
-    if (!r) return softSkip('blocked', 'seam unavailable (reason recorded above)');
+    if (!r) return softSkip(invokeSkip, 'seam leg not driven (reason recorded above)');
     expect(r.error?.code, req('openwop.requirement.0173.pack-isolation.memory-cap', 'security-defaults.md §Sandbox isolation', 'node-pack-sandbox-memory-cap: a memory overrun MUST fail with sandbox_memory_exceeded')).toBe('sandbox_memory_exceeded');
   });
 
   it('node-pack-sandbox-isolated-context: a pack cannot mutate state another invocation sees', async () => {
     if (!(await gated())) return softSkip('inapplicable', 'gate not met (reason recorded above)');
     const first = await invoke('misbehave.cross-pack-mutate');
-    if (!first) return softSkip('blocked', 'seam unavailable (reason recorded above)');
+    if (!first) return softSkip(invokeSkip, 'seam leg not driven (reason recorded above)');
     const second = await invoke('misbehave.cross-pack-mutate');
-    if (!second) return softSkip('blocked', 'seam unavailable (reason recorded above)');
+    if (!second) return softSkip(invokeSkip, 'seam leg not driven (reason recorded above)');
     for (const r of [first, second]) {
       expect(r.error, req('openwop.requirement.0173.pack-isolation.isolated-context', 'host-sample-test-seams.md §8', 'misbehave.cross-pack-mutate is not a failure mode — it MUST return a result')).toBeUndefined();
       expect(