@openwop/openwop-conformance 2.45.29 → 2.46.0

package/CHANGELOG.md

@@ -1,5 +1,26 @@
 # `@openwop/openwop-conformance` Changelog
 
+## [2.46.0] — 2026-10-10 — RFC 0242: a negotiation record says what was asked for, and an inbound negotiation has a home
+
+A minor, not a patch: `host-event.schema.json` gains a cross-file `$ref` to `run-event-payloads.schema.json#/$defs/negotiationDecided` (COMPATIBILITY.md §2.1). A validator that pre-registers a fixed list of peer schemas must register `run-event-payloads.schema.json` before compiling `host-event.schema.json`.
+
+- **`requested` on `negotiation.decided` (RFC 0242 §A).** `v2-negotiation-decided-emitted` gains two legs, `0242.requested.outbound` and `.mcp`: the record's `requested` equals the version the host's client named to the suite's peer, read from what the peer received. A downgrade is now visible as an `accepted` record whose `version` differs from `requested`.
+- **New `v2-negotiation-decided-inbound` (RFC 0242 §B).** Gated on an inbound A2A or MCP surface (`a2a.agentCardUrl`, `mcp.serverUrls`, `mcp.serverMount`), with no seam:
+  - `0242.inbound.listed`: such a host lists `negotiation.decided` as a durable `hostEvents` type.
+  - `0242.inbound.recorded` / `.refused` (and `.mcp`): with `/host/events` open, an authenticated inbound exchange naming `preferredVersion`, then one naming a version below the floor, each leaves a durable, runless `negotiation.decided` host event with the right `outcome` and `requested`.
+  - Proven against the v2 reference host with the §B implementation: every leg passes, and every record leg fails when the host drops `requested`. On a host that serves A2A or MCP inbound without listing the type, `listed` fails and the record legs are `inapplicable`, naming it.
+- **New lib `negotiation-record.ts`** with self-tests: `askedVersion`, `judgeRequested`, `judgeListed`, `judgeInboundRecord`.
+- **What a host's next bundle shows:** a host that serves A2A or MCP inbound records `0242.inbound.listed` `executed-fail` until it lists the type; the v2 reference host and openwop-app follow (RFC 0242 G1). A host that advertises neither surface is unaffected.
+
+## [2.45.30] — 2026-10-09 — the seams profile floor is seam-driven
+
+- **`openwop-conformance-seams-v2` no longer certifies on a host that mounts no seams.** Its predicate is a `conformance` block at the discovery root, deliberately necessary and not sufficient: on a host that does not advertise `conformance.seamsProfile`, every floor leg records `inapplicable`, so the profile is claimed with `witnessCount 0` and not certified. But a floor row is recorded per scenario file, and two floor files had a leg that runs without a seam. openwop-app's production bundle `4683d9f89` (suite 2.45.28) carries a `conformance` block holding only `certificationBundleUrl`, and certified the profile on the facet leg alone.
+  - **The facet leg** of `v2-v1-signed-webhook-accepted` (`0176.v1-signed-webhook-accepted.facet`) moves to `v2-webhooks-v1-scheme-listed`.
+  - **The ledger-read leg** of `v2-effect-identity-business-key` (`0173.effect-identity-business-key`) moves to `v2-effect-ledger-keying`.
+  - Requirement ids are unchanged, and so are the profile's floor files. The floor files keep only their seam-driven legs.
+  - **New coherence check** `seams-floor-legs-gated`: every leg of a seams-profile floor file reaches `seamsProfileAdvertised(` or `era2Gate(` before its first assertion. Proven against both files as they were: each fails, naming its seam-free leg.
+  - **What a host's next bundle shows:** a host that doesn't advertise the seams profile but ran these legs sees `openwop.floor.v2-effect-identity-business-key` and `openwop.floor.v2-v1-signed-webhook-accepted` go `executed-pass` to `inapplicable`, while both requirement ids keep passing under the new files. On MyndHyve that costs no certification, since it doesn't claim the profile. On openwop-app the profile is claimed and not certified, which is the correct outcome. A seams host is unaffected. Bundles already published verify as before.
+
 ## [2.45.29] — 2026-10-08 — purpose labels witnessed without a seam; RFC 0241 Accepted
 
 - **`v2-purpose-propagation-onward` witnesses purpose labels through normative operations.** New fixture `conformance-purpose-relay`: routed as the only skill of one agent's A2A card, it relays an inbound A2A message's text to the suite's fake peer through `core.conformance.a2a-invoke`. The suite labels the inbound message with `metadata.openwop.permittedPurposes`, finds the agent through `GET /agents` and `GetExtendedAgentCard`, and reads the onward label at its peer; a nonce matches each onward message to its inbound one. The §22 seam stays as the fallback, and each note names the path. A host with the fixture advertised but no card routing it, or with the suite's peer not running, records `blocked`. Self-test double: a widened label, a dropped label and a call made under `[]` each fail their leg (`lib/purpose-relay-witness.test.ts`). Proven on a seams-off v2 reference host (openwop-examples #166): both rows `executed-pass`, and each defect `executed-fail`. This replaces the planned RFC 0240: the label already arrives on a real carrier.

package/README.md

@@ -137,7 +137,7 @@ Each scenario file records its disposition and assertion count in `<report-dir>/
 
 ## What's Covered
 
-The current suite has 650 scenario files under `src/scenarios/`. By target major ([`scenario-majors.json`](./scenario-majors.json)): 210 files run against a v2 host and 455 against a v1 host; 15 of them run at both.
+The current suite has 653 scenario files under `src/scenarios/`. By target major ([`scenario-majors.json`](./scenario-majors.json)): 213 files run against a v2 host and 455 against a v1 host; 15 of them run at both.
 
 The v2 scenarios (`src/scenarios/v2-*.test.ts`) cover, by area:
 
@@ -147,7 +147,7 @@ The v2 scenarios (`src/scenarios/v2-*.test.ts`) cover, by area:
 | Runs | Create, read, list, cancel, bulk cancel, pause/resume, run options and limits, outputs on completion, snapshots | `v2-created-run-readable`, `v2-run-cancel`, `v2-run-pause-resume`, `v2-run-options-limits`, `v2-run-completed-outputs` |
 | Events and streaming | Closed event types, SSE projection, `Last-Event-ID` resumption, poll cursors, terminal-event-once | `v2-stream-sse-projection`, `v2-sse-last-event-id-cursor`, `v2-poll-cursor-v2`, `v2-terminal-event-once` |
 | Errors and headers | The error registry and envelope, malformed bodies, CORS preflight, header scheme | `v2-error-registry`, `v2-malformed-body-envelope`, `v2-cors-preflight`, `v2-header-scheme` |
-| Idempotency | Key grammar, in-flight concurrency, effect identity | `v2-idempotency-key-grammar`, `v2-idempotency-in-flight`, `v2-effect-identity-business-key` |
+| Idempotency | Key grammar, in-flight concurrency, effect identity | `v2-idempotency-key-grammar`, `v2-idempotency-in-flight`, `v2-effect-identity-business-key`, `v2-effect-ledger-keying` |
 | Interrupts and approvals | Resolve after terminal, token scheme, approver enforcement, reject disposition, credential interrupts | `v2-interrupt-resolve-terminal`, `v2-approver-enforced`, `v2-credential-interrupt` |
 | Replay and fork | Fork prefix and ancestry, refusals, replay side-effect suppression, forking a v1 run | `v2-run-fork-prefix`, `v2-run-fork-refusals`, `v2-replay-suppression-ordinal` |
 | Identity, auth and OAuth | Auth challenges, bound ids, workspace scope from identity, OIDC audience, protected-resource metadata, PKCE | `v2-auth-challenge`, `v2-bound-id-kinds`, `v2-oidc-id-token-audience`, `v2-oauth-client-pkce-state-iss` |
@@ -166,7 +166,7 @@ Three kinds of scenario share the tree:
 - **Host** checks drive a live host over HTTP.
 - **Gated** checks run only when the host advertises the family, profile or fixture they need, and otherwise record `inapplicable` or `blocked` with a reason. `--require-behavior` turns an advertised-but-unwitnessable behaviour into a failure.
 
-Current source tree: 650 scenario files. [`coverage.md`](./coverage.md) maps each spec document and every OpenAPI operation to its scenarios. [`CHANGELOG.md`](./CHANGELOG.md) records when each scenario landed.
+Current source tree: 653 scenario files. [`coverage.md`](./coverage.md) maps each spec document and every OpenAPI operation to its scenarios. [`CHANGELOG.md`](./CHANGELOG.md) records when each scenario landed.
 
 ## How the 2.x suite is built
 

package/coverage.md

@@ -30,7 +30,7 @@ Each scenario that targets major 2 is listed once, under the [`spec/v2/core/`](.
 | [`i18n.md`](../spec/v2/core/i18n.md) | `v2-content-locale-keys.test.ts`, `v2-i18n-negotiation.test.ts`, `v2-localized-content-delivery.test.ts` |
 | [`idempotency.md`](../spec/v2/core/idempotency.md) | `v2-durability-recovery.test.ts`, `v2-idempotency-in-flight.test.ts`, `v2-idempotency-key-grammar.test.ts` |
 | [`identity.md`](../spec/v2/core/identity.md) | `auth-challenge-no-oracle.test.ts`, `v2-assurance-downgrade-audited.test.ts`, `v2-auth-challenge.test.ts`, `v2-authorization-advertisement.test.ts`, `v2-bound-id-kinds.test.ts`, `v2-bound-id-path-projection.test.ts`, `v2-id-grammar.test.ts`, `v2-interrupt-token-scheme.test.ts`, `v2-lane-exp-only-bound.test.ts`, `v2-lane-issuer-advertised.test.ts`, `v2-oidc-id-token-audience.test.ts`, `v2-owner-subject-required.test.ts`, `v2-protected-resource-metadata.test.ts`, `v2-revocation-honored.test.ts`, `v2-subject-link-record.test.ts` |
-| [`interop.md`](../spec/v2/core/interop.md) | `otel-mcp-semconv-projection.test.ts`, `v2-a2a-agent-cards.test.ts`, `v2-a2a-client-error-details.test.ts`, `v2-a2a-operation-map.test.ts`, `v2-a2a-push-delivery.test.ts`, `v2-interop-trace-context.test.ts`, `v2-legacy-profiles-absent.test.ts`, `v2-mcp-mount-map.test.ts`, `v2-mcp-tasks.test.ts`, `v2-minimum-version-refused.test.ts`, `v2-mrtr-rounds-ceiling.test.ts`, `v2-negotiation-authenticated.test.ts`, `v2-negotiation-decided-emitted.test.ts`, `v2-no-transport-advertisement.test.ts`, `v2-refresh-sla.test.ts` |
+| [`interop.md`](../spec/v2/core/interop.md) | `otel-mcp-semconv-projection.test.ts`, `v2-a2a-agent-cards.test.ts`, `v2-a2a-client-error-details.test.ts`, `v2-a2a-operation-map.test.ts`, `v2-a2a-push-delivery.test.ts`, `v2-interop-trace-context.test.ts`, `v2-legacy-profiles-absent.test.ts`, `v2-mcp-mount-map.test.ts`, `v2-mcp-tasks.test.ts`, `v2-minimum-version-refused.test.ts`, `v2-mrtr-rounds-ceiling.test.ts`, `v2-negotiation-authenticated.test.ts`, `v2-negotiation-decided-emitted.test.ts`, `v2-negotiation-decided-inbound.test.ts`, `v2-no-transport-advertisement.test.ts`, `v2-refresh-sla.test.ts` |
 | [`interrupt.md`](../spec/v2/core/interrupt.md) | `v2-approval-reject-disposition.test.ts`, `v2-approver-enforced.test.ts`, `v2-callback-url-guarded.test.ts` |
 | [`node-pack-runtimes.md`](../spec/v2/core/node-pack-runtimes.md) | `v2-node-pack-runtimes-advertisement.test.ts`, `v2-wasm-memory-cap.test.ts`, `v2-wasm-abi-reject.test.ts` |
 | [`oauth.md`](../spec/v2/core/oauth.md) | `v2-credential-interrupt.test.ts`, `v2-credentials-advertisement.test.ts`, `v2-oauth-client-pkce-state-iss.test.ts`, `v2-oauth-mcp-reach-discovery.test.ts` |
@@ -39,11 +39,11 @@ Each scenario that targets major 2 is listed once, under the [`spec/v2/core/`](.
 | [`portability.md`](../spec/v2/core/portability.md) | `v2-portability-advertisement.test.ts` |
 | [`replay.md`](../spec/v2/core/replay.md) | `context-summarization-replay.test.ts`, `memory-attribution-replay-stable.test.ts`, `v2-effect-seam-manifest.test.ts`, `v2-effect-seam-no-refire.test.ts`, `v2-fork-a-v1-run.test.ts`, `v2-nondeterminism-policy-advertisement.test.ts`, `v2-nondeterminism-sources.test.ts`, `v2-replay-suppression-ordinal.test.ts`, `v2-run-fork-prefix.test.ts` |
 | [`runs.md`](../spec/v2/core/runs.md) | `v2-artifact-a2a-shape.test.ts`, `v2-budget-enforcement.test.ts`, `v2-budget-exhaustion-facet.test.ts`, `v2-configurable-closed.test.ts`, `v2-conversation-turn-parts.test.ts`, `v2-created-run-readable.test.ts`, `v2-data-residency-admission.test.ts`, `v2-data-residency-advertisement.test.ts`, `v2-dead-letter-advertisement.test.ts`, `v2-eval-mode-unadvertised-refused.test.ts`, `v2-limits-envelope-caps-advertisement.test.ts`, `v2-run-annotation-not-event.test.ts`, `v2-run-bulk-cancel.test.ts`, `v2-run-cancel.test.ts`, `v2-run-diff-identical.test.ts`, `v2-run-execution-bounds.test.ts`, `v2-run-fork-ancestry.test.ts`, `v2-run-fork-refusals.test.ts`, `v2-run-list.test.ts`, `v2-run-options-limits.test.ts`, `v2-run-pause-resume.test.ts`, `v2-run-snapshot-etag.test.ts` |
-| [`security-defaults.md`](../spec/v2/core/security-defaults.md) | `audit-anomaly-shape.test.ts`, `audit-checkpoint-signature.test.ts`, `audit-checkpoint-vectors.test.ts`, `audit-log-integrity.test.ts`, `inbound-credential-no-passthrough.test.ts`, `v2-compensation-read-projection.test.ts`, `v2-effect-identity-business-key.test.ts`, `v2-pack-isolation.test.ts`, `v2-purpose-propagation-advertisement.test.ts`, `v2-purpose-propagation-onward.test.ts`, `v2-relaxation-recorded.test.ts` |
+| [`security-defaults.md`](../spec/v2/core/security-defaults.md) | `audit-anomaly-shape.test.ts`, `audit-checkpoint-signature.test.ts`, `audit-checkpoint-vectors.test.ts`, `audit-log-integrity.test.ts`, `inbound-credential-no-passthrough.test.ts`, `v2-compensation-read-projection.test.ts`, `v2-effect-identity-business-key.test.ts`, `v2-effect-ledger-keying.test.ts`, `v2-pack-isolation.test.ts`, `v2-purpose-propagation-advertisement.test.ts`, `v2-purpose-propagation-onward.test.ts`, `v2-relaxation-recorded.test.ts` |
 | [`storage.md`](../spec/v2/core/storage.md) | `v2-fs-sandbox-escape-refused.test.ts`, `v2-storage-cross-tenant-isolation.test.ts`, `v2-table-schema-enforcement.test.ts` |
 | [`tool-catalog.md`](../spec/v2/core/tool-catalog.md) | `tool-catalog-compact-projection.test.ts`, `tool-catalog-projection.test.ts`, `tool-descriptor-shape.test.ts`, `v2-tool-catalog-annotations.test.ts` |
 | [`versioning.md`](../spec/v2/core/versioning.md) | `v2-advertised-path-space-served.test.ts`, `v2-client-version-header.test.ts`, `v2-dual-stack-negotiation.test.ts`, `v2-malformed-body-envelope.test.ts`, `v2-min-client-version.test.ts`, `v2-preferred-version-default.test.ts`, `v2-version-header-honored.test.ts`, `v2-well-known-one-resource.test.ts` |
-| [`webhooks.md`](../spec/v2/core/webhooks.md) | `v2-trigger-bridge-delivery.test.ts`, `v2-trigger-dead-letter-read.test.ts`, `v2-v1-signed-webhook-accepted.test.ts`, `v2-webhook-delivery-isolation.test.ts`, `v2-webhook-delivery-shape.test.ts`, `v2-webhook-durable-delivery.test.ts`, `v2-webhook-egress-refusal.test.ts`, `v2-webhook-endpoint-verification.test.ts`, `v2-webhook-generated-secret.test.ts`, `v2-webhook-message-id-stable.test.ts`, `v2-webhook-secret-rotation.test.ts`, `v2-webhook-standard-webhooks-delivery.test.ts`, `v2-webhook-unregister-stops-delivery.test.ts` |
+| [`webhooks.md`](../spec/v2/core/webhooks.md) | `v2-trigger-bridge-delivery.test.ts`, `v2-trigger-dead-letter-read.test.ts`, `v2-v1-signed-webhook-accepted.test.ts`, `v2-webhooks-v1-scheme-listed.test.ts`, `v2-webhook-delivery-isolation.test.ts`, `v2-webhook-delivery-shape.test.ts`, `v2-webhook-durable-delivery.test.ts`, `v2-webhook-egress-refusal.test.ts`, `v2-webhook-endpoint-verification.test.ts`, `v2-webhook-generated-secret.test.ts`, `v2-webhook-message-id-stable.test.ts`, `v2-webhook-secret-rotation.test.ts`, `v2-webhook-standard-webhooks-delivery.test.ts`, `v2-webhook-unregister-stops-delivery.test.ts` |
 | [`workflow-chain-packs.md`](../spec/v2/core/workflow-chain-packs.md) | `v2-chain-pin-exact.test.ts` |
 
 `overview.md`, the introduction to the other documents, has no scenario filed under it.

package/dist/spec-artifacts.lock.json

@@ -1,5 +1,5 @@
 {
   "package": "@openwop/spec-artifacts",
-  "version": "2.45.29",
-  "stampSha256": "3ae08679281573bed1e595dd8abaff668d4ccb267cbe7bef4b3d4a86933552f9"
+  "version": "2.46.0",
+  "stampSha256": "70bf58cf8fa96a28ef6cf5004d231a34d7be813c61faed31fc33c1b2fde9d0c8"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openwop/openwop-conformance",
-  "version": "2.45.29",
+  "version": "2.46.0",
   "description": "Black-box conformance suite for OpenWOP hosts (v2 current; v1 scenarios retained for the frozen v1 tree).",
   "repository": {
     "type": "git",
@@ -56,6 +56,6 @@
     "@openwop/spec-artifacts": "file:../spec-artifacts"
   },
   "peerDependencies": {
-    "@openwop/spec-artifacts": "2.45.29"
+    "@openwop/spec-artifacts": "2.46.0"
   }
 }

package/requirements.json

@@ -2,11 +2,11 @@
   "$comment": "GENERATED by conformance/scripts/generate-requirement-registry.mjs — do not edit. One record per it()/test() in src/scenarios. Ids: openwop.it.<file-stem>.<title-slug>[~n] (src/lib/requirement-ids.ts). A record with id null has an interpolated title; its run-time row is keyed by the rendered title and maps here by file+line only. Renamed ids need a row in requirement-aliases.json.",
   "generatedFrom": "src/scenarios/*.test.ts",
   "counts": {
-    "files": 737,
-    "tests": 2782,
-    "withStableId": 2782,
+    "files": 741,
+    "tests": 2790,
+    "withStableId": 2790,
     "interpolatedTitles": 0,
-    "explicitIds": 2644
+    "explicitIds": 2646
   },
   "records": [
     {
@@ -30331,85 +30331,85 @@
       ]
     },
     {
-      "id": "openwop.it.v2-effect-identity-business-key.get-runs-runid-effects-validates-and-every-row-is-keyed-on-business-identity-or",
+      "id": "openwop.it.v2-effect-identity-business-key.the-same-provider-key-is-presented-across-two-transport-retries",
       "file": "v2-effect-identity-business-key.test.ts",
-      "line": 59,
-      "title": "GET /runs/{runId}/effects validates and every row is keyed on business identity or the activity recipe",
-      "explicitId": "openwop.requirement.0173.effect-identity-business-key",
+      "line": 48,
+      "title": "the same provider key is presented across two transport retries",
+      "explicitId": "openwop.requirement.0173.effect-identity-business-key.retry",
       "citations": [
         {
-          "section": "runs.md §Create",
-          "requirement": "POST /runs MUST answer 201 for the noop fixture"
+          "section": "spec/v2/core/idempotency.md §Layer 2: effect identity",
+          "requirement": null,
+          "interpolated": true
         },
         {
-          "section": "security-defaults.md §Layer-2 effect identity",
-          "requirement": "a host advertising `idempotency` MUST serve GET /runs/{runId}/effects with 200 (RFC 0173 §B)"
+          "section": "spec/v2/core/idempotency.md §Layer 2: effect identity",
+          "requirement": null,
+          "interpolated": true
         },
         {
-          "section": "effect-ledger-projection.schema.json",
+          "section": "spec/v2/core/idempotency.md §Layer 2: effect identity",
           "requirement": null,
           "interpolated": true
         },
         {
-          "section": "effect-ledger-projection.schema.json runId",
-          "requirement": "runId MUST echo the run read"
+          "section": "spec/v2/core/idempotency.md §Layer 2: effect identity",
+          "requirement": null,
+          "interpolated": true
         },
         {
-          "section": "security-defaults.md §Layer-2 effect identity",
+          "section": "spec/v2/core/idempotency.md §Layer 2: effect identity",
           "requirement": null,
           "interpolated": true
         },
         {
-          "section": "RFC 0150 §B",
+          "section": "spec/v2/core/idempotency.md §Layer 2: effect identity",
           "requirement": null,
           "interpolated": true
         },
         {
-          "section": "effect-ledger-projection.schema.json providerKey",
-          "requirement": "providerKey is a redaction-safe identity, never credential material"
+          "section": "spec/v2/core/idempotency.md §Layer 2: effect identity",
+          "requirement": "the key the ledger records MUST be the key the provider received — a ledger that disagrees with the wire is not a witness"
         }
       ]
     },
     {
-      "id": "openwop.it.v2-effect-identity-business-key.the-same-provider-key-is-presented-across-two-transport-retries",
-      "file": "v2-effect-identity-business-key.test.ts",
-      "line": 120,
-      "title": "the same provider key is presented across two transport retries",
-      "explicitId": "openwop.requirement.0173.effect-identity-business-key.retry",
+      "id": "openwop.it.v2-effect-ledger-keying.get-runs-runid-effects-validates-and-every-row-is-keyed-on-business-identity-or",
+      "file": "v2-effect-ledger-keying.test.ts",
+      "line": 42,
+      "title": "GET /runs/{runId}/effects validates and every row is keyed on business identity or the activity recipe",
+      "explicitId": "openwop.requirement.0173.effect-identity-business-key",
       "citations": [
         {
-          "section": "spec/v2/core/idempotency.md §Layer 2: effect identity",
-          "requirement": null,
-          "interpolated": true
+          "section": "runs.md §Create",
+          "requirement": "POST /runs MUST answer 201 for the noop fixture"
         },
         {
-          "section": "spec/v2/core/idempotency.md §Layer 2: effect identity",
-          "requirement": null,
-          "interpolated": true
+          "section": "security-defaults.md §Layer-2 effect identity",
+          "requirement": "a host advertising `idempotency` MUST serve GET /runs/{runId}/effects with 200 (RFC 0173 §B)"
         },
         {
-          "section": "spec/v2/core/idempotency.md §Layer 2: effect identity",
+          "section": "effect-ledger-projection.schema.json",
           "requirement": null,
           "interpolated": true
         },
         {
-          "section": "spec/v2/core/idempotency.md §Layer 2: effect identity",
-          "requirement": null,
-          "interpolated": true
+          "section": "effect-ledger-projection.schema.json runId",
+          "requirement": "runId MUST echo the run read"
         },
         {
-          "section": "spec/v2/core/idempotency.md §Layer 2: effect identity",
+          "section": "security-defaults.md §Layer-2 effect identity",
           "requirement": null,
           "interpolated": true
         },
         {
-          "section": "spec/v2/core/idempotency.md §Layer 2: effect identity",
+          "section": "RFC 0150 §B",
           "requirement": null,
           "interpolated": true
         },
         {
-          "section": "spec/v2/core/idempotency.md §Layer 2: effect identity",
-          "requirement": "the key the ledger records MUST be the key the provider received — a ledger that disagrees with the wire is not a witness"
+          "section": "effect-ledger-projection.schema.json providerKey",
+          "requirement": "providerKey is a redaction-safe identity, never credential material"
         }
       ]
     },
@@ -33579,7 +33579,7 @@
     {
       "id": "openwop.it.v2-negotiation-decided-emitted.an-a2a-exchange-leaves-negotiation-decided-on-the-host-log",
       "file": "v2-negotiation-decided-emitted.test.ts",
-      "line": 143,
+      "line": 166,
       "title": "an A2A exchange leaves negotiation.decided on the host log",
       "explicitId": null,
       "citations": []
@@ -33587,11 +33587,73 @@
     {
       "id": "openwop.it.v2-negotiation-decided-emitted.an-mcp-exchange-leaves-negotiation-decided-on-the-host-log",
       "file": "v2-negotiation-decided-emitted.test.ts",
-      "line": 146,
+      "line": 169,
       "title": "an MCP exchange leaves negotiation.decided on the host log",
       "explicitId": null,
       "citations": []
     },
+    {
+      "id": "openwop.it.v2-negotiation-decided-emitted.an-a2a-record-names-the-version-the-host-asked-for-rfc-0242-a-2",
+      "file": "v2-negotiation-decided-emitted.test.ts",
+      "line": 172,
+      "title": "an A2A record names the version the host asked for (RFC 0242 §A.2)",
+      "explicitId": null,
+      "citations": []
+    },
+    {
+      "id": "openwop.it.v2-negotiation-decided-emitted.an-mcp-record-names-the-revision-the-host-asked-for-rfc-0242-a-2",
+      "file": "v2-negotiation-decided-emitted.test.ts",
+      "line": 175,
+      "title": "an MCP record names the revision the host asked for (RFC 0242 §A.2)",
+      "explicitId": null,
+      "citations": []
+    },
+    {
+      "id": "openwop.it.v2-negotiation-decided-inbound.a-host-serving-a2a-or-mcp-inbound-lists-negotiation-decided-as-a-durable-host-ev",
+      "file": "v2-negotiation-decided-inbound.test.ts",
+      "line": 134,
+      "title": "a host serving A2A or MCP inbound lists negotiation.decided as a durable host-event type",
+      "explicitId": "openwop.requirement.0242.inbound.listed",
+      "citations": [
+        {
+          "section": "interop.md §The audit event",
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-negotiation-decided-inbound.an-inbound-a2a-exchange-at-preferredversion-is-recorded-accepted-with-requested",
+      "file": "v2-negotiation-decided-inbound.test.ts",
+      "line": 143,
+      "title": "an inbound A2A exchange at preferredVersion is recorded accepted, with requested",
+      "explicitId": null,
+      "citations": []
+    },
+    {
+      "id": "openwop.it.v2-negotiation-decided-inbound.an-inbound-a2a-exchange-below-minimumversion-is-recorded-refused-with-requested",
+      "file": "v2-negotiation-decided-inbound.test.ts",
+      "line": 146,
+      "title": "an inbound A2A exchange below minimumVersion is recorded refused, with requested",
+      "explicitId": null,
+      "citations": []
+    },
+    {
+      "id": "openwop.it.v2-negotiation-decided-inbound.an-inbound-mcp-exchange-at-preferredversion-is-recorded-accepted-with-requested",
+      "file": "v2-negotiation-decided-inbound.test.ts",
+      "line": 149,
+      "title": "an inbound MCP exchange at preferredVersion is recorded accepted, with requested",
+      "explicitId": null,
+      "citations": []
+    },
+    {
+      "id": "openwop.it.v2-negotiation-decided-inbound.an-inbound-mcp-exchange-below-minimumrevision-is-recorded-refused-with-requested",
+      "file": "v2-negotiation-decided-inbound.test.ts",
+      "line": 152,
+      "title": "an inbound MCP exchange below minimumRevision is recorded refused, with requested",
+      "explicitId": null,
+      "citations": []
+    },
     {
       "id": "openwop.it.v2-no-transport-advertisement.the-v2-root-carries-no-supportedtransports-and-no-grpc-block",
       "file": "v2-no-transport-advertisement.test.ts",
@@ -37849,27 +37911,10 @@
         }
       ]
     },
-    {
-      "id": "openwop.it.v2-v1-signed-webhook-accepted.the-webhooks-facet-lists-scheme-v1-the-scheme-a-v1-signed-delivery-is-verified-u",
-      "file": "v2-v1-signed-webhook-accepted.test.ts",
-      "line": 79,
-      "title": "the webhooks facet lists scheme \"v1\" — the scheme a v1-signed delivery is verified under",
-      "explicitId": "openwop.requirement.0176.v1-signed-webhook-accepted.facet",
-      "citations": [
-        {
-          "section": "spec/v2/core/webhooks.md §Surfaces",
-          "requirement": "the webhooks facet is { signatureAlgorithms[] }"
-        },
-        {
-          "section": "spec/v2/core/webhooks.md §Surfaces",
-          "requirement": "signatureAlgorithms MUST list \"v1\" — the cut adds no signature scheme (RFC 0176 §D.2)"
-        }
-      ]
-    },
     {
       "id": "openwop.it.v2-v1-signed-webhook-accepted.the-host-s-v2-receiver-path-accepts-an-x-openwop-only-scheme-v1-delivery-and-ref",
       "file": "v2-v1-signed-webhook-accepted.test.ts",
-      "line": 89,
+      "line": 81,
       "title": "the host's v2 receiver path accepts an X-openwop-*-only scheme-v1 delivery and refuses a tampered one",
       "explicitId": "openwop.requirement.0176.v1-signed-webhook-accepted",
       "citations": [
@@ -38622,6 +38667,23 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.v2-webhooks-v1-scheme-listed.the-webhooks-facet-lists-scheme-v1-the-scheme-a-v1-signed-delivery-is-verified-u",
+      "file": "v2-webhooks-v1-scheme-listed.test.ts",
+      "line": 24,
+      "title": "the webhooks facet lists scheme \"v1\" — the scheme a v1-signed delivery is verified under",
+      "explicitId": "openwop.requirement.0176.v1-signed-webhook-accepted.facet",
+      "citations": [
+        {
+          "section": "spec/v2/core/webhooks.md §Surfaces",
+          "requirement": "the webhooks facet is { signatureAlgorithms[] }"
+        },
+        {
+          "section": "spec/v2/core/webhooks.md §Surfaces",
+          "requirement": "signatureAlgorithms MUST list \"v1\" — the cut adds no signature scheme (RFC 0176 §D.2)"
+        }
+      ]
+    },
     {
       "id": "openwop.it.v2-well-known-one-resource.a-header-less-get-and-an-openwop-version-2-0-get-are-two-representations-of-one",
       "file": "v2-well-known-one-resource.test.ts",
@@ -44699,6 +44761,30 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.seams-floor-legs-gated.every-leg-of-a-seams-profile-floor-file-reaches-a-seams-gate-before-its-first-as",
+      "file": "seams-floor-legs-gated.test.ts",
+      "line": 84,
+      "title": "every leg of a seams-profile floor file reaches a seams gate before its first assertion",
+      "explicitId": "openwop.it.seams-floor-legs-gated.every-leg-of-a-seams-profile-floor-file-reaches-a-seams-gate-before-its-first-a",
+      "citations": [
+        {
+          "section": "spec/v2/profiles.json",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "spec/v2/profiles.json",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "spec/v2/profiles.json",
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
     {
       "id": "openwop.it.semantic-digest-v2.the-digest-recipe-section-is-found-at-all",
       "file": "semantic-digest-v2.test.ts",

package/scenario-majors.json

@@ -1,9 +1,9 @@
 {
   "$comment": "GENERATED by conformance/scripts/generate-scenario-majors.mjs (RFC 0168 §D.3). Do not edit; add a file to BOTH_MAJORS in the generator to target both majors.",
   "counts": {
-    "files": 650,
+    "files": 653,
     "v1": 455,
-    "v2": 210
+    "v2": 213
   },
   "majors": {
     "a2a-1-0-agent-card.test.ts": [
@@ -1431,6 +1431,9 @@
     "v2-effect-identity-business-key.test.ts": [
       2
     ],
+    "v2-effect-ledger-keying.test.ts": [
+      2
+    ],
     "v2-effect-seam-manifest.test.ts": [
       2
     ],
@@ -1578,6 +1581,9 @@
     "v2-negotiation-decided-emitted.test.ts": [
       2
     ],
+    "v2-negotiation-decided-inbound.test.ts": [
+      2
+    ],
     "v2-no-transport-advertisement.test.ts": [
       2
     ],
@@ -1854,6 +1860,9 @@
     "v2-webhook-unregister-stops-delivery.test.ts": [
       2
     ],
+    "v2-webhooks-v1-scheme-listed.test.ts": [
+      2
+    ],
     "v2-well-known-one-resource.test.ts": [
       2
     ],

package/schemas/CORPUS-STAMP.json

@@ -1,17 +1,17 @@
 {
   "_comment": "Provenance of @openwop/spec-artifacts (RFC 0168 §D.2). files: SHA-256 per file; the conformance suite compares the installed peer against dist/spec-artifacts.lock.json at start.",
   "package": "@openwop/spec-artifacts",
-  "version": "2.45.29",
-  "corpusTag": "v2.45.29",
+  "version": "2.46.0",
+  "corpusTag": "v2.46.0",
   "files": {
     "api/.redocly.lint-ignore.yaml": "bf5a8350b88a72fa43f59605ed8d903ed24b6cfccda5e45509c9f6ed9ee4e712",
     "api/asyncapi.yaml": "d5ecb9ee6114582be3b1f662c84bfac9ae96dae7bacb853e461168f70a8e1c7d",
     "api/grpc/openwop.proto": "c3e72bb17cba514ee98feb6434e6c9b6ea6795bfd086489ec69fd882dd1ad977",
     "api/openapi.yaml": "ac6de5303872664b78ff419c035915593e01599e02835e777a0123de1baeb398",
     "api/redocly.yaml": "b0604c89b2ca6d5076ec25725c539dad44a741a811fe524439ee6daef8baa09f",
-    "api/seams-v2.yaml": "13a3eb746eb57dad9ffc605ea4e1e0877a0a9064d44294d0d7df892b042de1b5",
-    "api/v2/asyncapi.yaml": "f34721690c724c94a974fdd9e9972e76694900c7a9005d33ec921d3f4e2ff8bf",
-    "api/v2/openapi.yaml": "d5e63eafe148c73173da3f5b5668fa44f81bc74682818c57009a5f9c8821912e",
+    "api/seams-v2.yaml": "d9a148a5136c34759cf8b92330e3a5f82dba06b25ce7ca22330e94b2c616bdde",
+    "api/v2/asyncapi.yaml": "c742c8d76aac957c9f508f15145e6440e195b13130a8ee2669d0d37f8dd4eaae",
+    "api/v2/openapi.yaml": "ea5ada57301b530f95f7410280e85fe96e32b91b96031fdae22df5e1d6c6e65f",
     "api/v2/redocly.yaml": "1e66b60e6118ad11a823bb620678be464d99dfe50a40e3e6f93ec9429b88b34c",
     "schemas/README.md": "276fc1d51eb08e14e9127b9fd27761d7046ee33c12000f3a64a801322db8bf58",
     "schemas/a2a-task-state.schema.json": "75d5049dea8bd873ff0e7546f1c60c8d36c219bec7084264360be54a8be30ae1",
@@ -118,7 +118,7 @@
     "schemas/v2/audit-verify-result.schema.json": "14af8e9283510f0a40e48a2059c929ee44e0fc9fa3cc66a95bfbe90b17c48297",
     "schemas/v2/budget-policy.schema.json": "1de68095db0beb5c7a4be629de26e79f62ebbe748a88d46f36e768edfd1f0d68",
     "schemas/v2/capabilities.schema.json": "d859a413ff463ec39acc32a9cb76f2e8c7419e45683d6b7f886861765a9c36c7",
-    "schemas/v2/certification-bundle.schema.json": "93fcdfe54b1db168b702bfaf632b60c7a8a602be92c3fe48c81cf25408c2332b",
+    "schemas/v2/certification-bundle.schema.json": "5cfa7fb5247160333e33a58b60d42bcd4e5269d8391d6a112d301e14828892ed",
     "schemas/v2/channel-presence-payload.schema.json": "fc03df0c20cc12a25f7ee6a47503a4c5931d79fe3d5ff24815e8fd7c1bcb9a87",
     "schemas/v2/channel-written-payload.schema.json": "ccecff3c71a3275ad8db035ac0e04db25e6f8d23cf091ddbcd5a60d1be1cbb6b",
     "schemas/v2/chat-card-pack-manifest.schema.json": "92a57db2fd4b2463f14ef155fef8e3f18afc78960b646459dcf32efc79ff6bf5",
@@ -152,7 +152,7 @@
     "schemas/v2/goal.schema.json": "ad104ed5a3866736b8fed9d7c0b23dc82af526b5bef4afe848f01fc3af2161e9",
     "schemas/v2/heartbeat-evaluated.schema.json": "c897b0792fd518d6e12879851027252af1529f5e420c3eaf434ad7af284ecc05",
     "schemas/v2/heartbeat-state-changed.schema.json": "eb68d0082aa996650e3a6b8ccf32457f959cebc7e6728cc7c331b9d171a4bef6",
-    "schemas/v2/host-event.schema.json": "655b5475b1aeb41c8fc4ff7b6fc7e31a0fcc18fd59f368336ccbc138e6ba395e",
+    "schemas/v2/host-event.schema.json": "8ecb5ae218ea6ba71b2aa52905c7851d125d6ca3c5108718739e84b3d6041d02",
     "schemas/v2/ids.schema.json": "65cfaa193be0ca9cf48af39c18c553979e3ec1f7fc04509aaa513b322d7b7e4a",
     "schemas/v2/localized-content-language-settings.schema.json": "3c8350a178037a460f5d87466ccaf9ed5fe3d41497786d2504cc66e42152c8cc",
     "schemas/v2/localized-content-page-response.schema.json": "ef48329749758afb21e4d3cbc3f017abb911f75726819457f35b9f1390332c75",
@@ -174,7 +174,7 @@
     "schemas/v2/residency.schema.json": "3fd23c9732beb140504e81560fc426eb6764d547e56da5fb92c5a5c7bf04db3a",
     "schemas/v2/run-ancestry-response.schema.json": "334c17f2062dea62726ca1d07b8be3f169cdc422af843c1def5fb317039814c9",
     "schemas/v2/run-diff-response.schema.json": "8bdb2045c274580038bd74781f7d062f5049839797c164a89de4ed89edc53a74",
-    "schemas/v2/run-event-payloads.schema.json": "cb331e0b5adf8374124426a77a4f5c915df62b944e97cdaf3107cfe44733a629",
+    "schemas/v2/run-event-payloads.schema.json": "ff80204f4a9a55da482d8c7d54d6dbb8682e13fff155d4fc26fa5b7fa0790b83",
     "schemas/v2/run-event.schema.json": "2f0d7416bd376c56affe97b6b2b49981532e8e9ff45c0a162cf806c78b3e7fb7",
     "schemas/v2/run-list-response.schema.json": "c2dbc34768dcf64528914a213aa3cb55952e8e3e90a64b04a9423b2a19749d38",
     "schemas/v2/run-options.schema.json": "f0e9f494d80086c2ed2cf9fe87df54e5b4e66601699c4a1089f4edbc7ba58867",
@@ -208,14 +208,14 @@
     "schemas/workspace-file.schema.json": "464de85c2a068243084ee9c1d969bc7cd5d8f7948574e58450d6493c38a0e1e4",
     "spec/v1/alias-detectors.json": "22444c22bb88c568339ef512553f9fc38146e22b566d11ab8608f655d688d19c",
     "spec/v1/capability-declaration-classes.json": "e7729aed5c4b4e1dd02abab0530f14cc95f5d4070fe51fb139e7f5cccefa00c6",
-    "spec/v1/core-standard-manifest.json": "fcfef02287da21d0337db64fa9f5ddef5a940dac8ae0ce1f92b4bb925af59237",
+    "spec/v1/core-standard-manifest.json": "1ecf2f7820fe47528c5c77bbe0d44ede95ef27cb1a8de209bb5104a4186c3722",
     "spec/v1/deprecations.json": "e723bc11d7272c71789ad1303bb7f21809a8a024abf57594f9d5c35dc199ece9",
     "spec/v1/deprecations.schema.json": "3e393c405d2a41b467d8c5e3c468549078df1ce6a6d2588fc488097b95d9b55b",
     "spec/v1/end-of-support.json": "35f0bf3b70fe78b16e2a2fd81a153fc27e703f6c16376c6fe7cdf1f4f2c4e6d4",
     "spec/v1/event-codemap.json": "3da60d884157793a360da532a9fcbbfb5285636db325a74cec94b34622186d97",
     "spec/v1/event-codemap.schema.json": "d05933b2e88103aff51a2f774df97b9bda065e0fc88dbd9b114cc47a32189174",
     "spec/v1/extensions.json": "79a60754aa16cbdbdb604f8e5c00038af535a1690a4d07bd5ff7c38f0256a7bc",
-    "spec/v1/gaps.json": "d7d2d1ecf668bc5b8ae84b947cc4449f9409d5a5169be97c3740457ee0672dcf",
+    "spec/v1/gaps.json": "7f26aee1bbae95945d29f4e2ecabb672c6833bc42f6f45f71e4880b7d09c130a",
     "spec/v1/gaps.schema.json": "8fd83259f556553c9df0f53e7a82ca8c2a4771d471197f69b4e2ae0ceeacfd66",
     "spec/v1/migrations.json": "4c50760be70cb644d02427bcaf5749606700edf4513f423903cf3b1d12f5c300",
     "spec/v1/migrations.schema.json": "886779aa6c22e646db097f5df210adb018a4dd14a7b815465a18c8a7056c8f72",
@@ -228,7 +228,7 @@
     "spec/v2/core/connection-packs.md": "c80f95bd6a03698f35c72cdb2b46bd973f49203bbd786c26760e35fa86e6f23d",
     "spec/v2/core/conversation.md": "8d6abedf6af408a74577753bfca24719d318e2632e10b45ff5d63bdcf31a8aaa",
     "spec/v2/core/errors.md": "e48838701b86bbfe0ffee77b18a8ffc4e5f04724b4318507d9771da653f8da0f",
-    "spec/v2/core/events.md": "d0f902edc080e9789e4fd05850a1264d905ebe5b06045b6a7a22486e22ef3091",
+    "spec/v2/core/events.md": "370621629c2439747f2e4ddab4780eea4345354f79e5098739d66823873f3105",
     "spec/v2/core/execution.md": "8a0c9db1bbfb97c008ab9328b7333c1cc3318196e78bfbefb49e781bdf4f9d44",
     "spec/v2/core/form-content-packs.md": "02931227899676fd4581a27017be2a6c4953904717be9b81c29d12f87ab3917d",
     "spec/v2/core/headers.md": "f69fe81e4a3ad21879bb85948660c16860eb05bf152928c31aa4898f6d7d1887",
@@ -236,7 +236,7 @@
     "spec/v2/core/i18n.md": "882904b7d59f992ab1e5f7346167161a54cf665b8fee47e64a3862cf9133a580",
     "spec/v2/core/idempotency.md": "adbd317a6ebb57c2759c076297b31f67def9e391576bccd0bbea787b13e85872",
     "spec/v2/core/identity.md": "02656ffa413b5546342b8580ae928a74e621460746df74d7db50ff4df41d2310",
-    "spec/v2/core/interop.md": "fb1d72bb76afda1c2b4394daf019982c207dbb490087ab141daf6eb2446e2eef",
+    "spec/v2/core/interop.md": "6ec8259117bdb387b9323ca22c707b3b8571c00034e461c4ce79f4070c4d6b4a",
     "spec/v2/core/interrupt.md": "10f15dfe30baa0fc748aea0a067f9b271bea316fde6b598d78f77edc296f698a",
     "spec/v2/core/node-pack-runtimes.md": "e1088cb69b8c3c67256c494063328916c2980ab1aa97a7063de25bab82fdb1e5",
     "spec/v2/core/oauth.md": "c069ae4f9aae2eafe14c07c0bf709aa7ade0dcc821973d740400d49d901f7061",
@@ -254,7 +254,7 @@
     "spec/v2/core/workflow-chain-packs.md": "fdce7a8477e269950a2bac05ee6eddbd66eb0b670b464d00054f7196ec05d29c",
     "spec/v2/corrections.json": "3a8d93e33865b692d26a3b6bfd3819766e206b2e0c2a69669baa4bf833d05a49",
     "spec/v2/corrections.schema.json": "46bbffb954d13bd9995aebc912ceeb2544f7064331abf25fd6ab85c81a5cec94",
-    "spec/v2/declaration.json": "396ac924068f25d4a178062a54e244f870c556c3db9fe7a98fcc933fb318ed30",
+    "spec/v2/declaration.json": "22530d99c92b9e0d3ae0dce25507f4cc6350486d560ad8cc01acda054e9face3",
     "spec/v2/declaration.schema.json": "ef951633e4070899f64828f5cf1b5f4870270a0360f81dbb49b5b4d6cd407550",
     "spec/v2/eos-override.json": "4c72d2f6a658943b01c1de1643cf294642091933af7832f38ee5495df684cb2d",
     "spec/v2/errors.json": "1f0e29455edbd22e28f67f221766209c3c55ac4987beb77993b5702dd7cae131",
@@ -312,10 +312,10 @@
     "spec/v2/migrations.schema.json": "b91ade6320ad1b1185c9495b9424f3aa63438ed8e412c45171c227d82c0afd86",
     "spec/v2/path-manifest.json": "7b5679a4dad98c80d855361d88a98c8a4e045af15e310862a05b285b815dc9fc",
     "spec/v2/peer-dependency-aliases.json": "d10299280abee08258502925bc327293ee413e0108cd6e6ec75ff6110653308d",
-    "spec/v2/profiles.json": "180beb9ef2d161766fa23b2987e7e829851e3d316273147cf6a4a3f324befd6b",
-    "spec/v2/release.json": "d14466e510b339345c3f2be3ceaecb2b85725823e33f71d08a7262c4d0cf47bf",
+    "spec/v2/profiles.json": "3d84d7712e93d1e823e362615d5f4aaba0789ea4e044b3774965876fbb8829a7",
+    "spec/v2/release.json": "418d1ab00135f629e6e6e4b0dae213dc85dfc5418bdf3177f91d8508ad4f90cb",
     "spec/v2/retention-floors.json": "eaf3722d95c79947af1d4269ef85117e126518c588cfcf1a2b21b97269f51624",
-    "spec/v2/surface-baseline.json": "5bbf069900b52dd544cae741fef714f4107567eb4b21c4e32a032864feec8a46"
+    "spec/v2/surface-baseline.json": "d17b41008a6572efd3b6d1178aa630be645b6cd135032814bcd4b618ad980811"
   },
-  "corpusCommit": "ada50d896fc1edad8046f5d75ae7a5c621d689cd"
+  "corpusCommit": "5d0b99eeb2f8d2682516c73bc7dda9c18a0f1aee"
 }

package/src/lib/negotiation-record.ts

@@ -0,0 +1,108 @@
+/**
+ * RFC 0242 — judging a `negotiation.decided` record (`spec/v2/core/interop.md`
+ * §The audit event).
+ *
+ * Two facts the record must carry beyond RFC 0175 §D.3:
+ *   - `requested`: the version the requesting side named (§A.2). Outbound the
+ *     host is the requester, and the suite's fake peer saw what it asked for;
+ *     inbound the suite is the requester and knows what it named.
+ *   - where it lands: a negotiation with no run is a durable host event (§B.2),
+ *     listed in `hostEvents.types[]` whenever an inbound surface is advertised
+ *     (§B.3).
+ *
+ * Pure functions only, so `negotiation-record.test.ts` can prove each judge
+ * fails on the defect it exists to catch.
+ */
+
+export interface Finding { readonly ok: boolean; readonly message: string }
+
+export const EVENT = 'negotiation.decided';
+
+interface Invocation { readonly headers: Readonly<Record<string, string>>; readonly params?: unknown }
+
+const META_V = 'io.modelcontextprotocol/protocolVersion';
+
+/**
+ * The version the host asked a suite peer for, read from what the peer
+ * received: A2A's `A2A-Version` header; MCP's `MCP-Protocol-Version` header,
+ * else the `_meta` protocol version, else legacy `initialize`'s
+ * `protocolVersion`. `null` when the host named none, in which case §A.2 does
+ * not require `requested`.
+ */
+export function askedVersion(protocol: 'a2a' | 'mcp', invocations: readonly Invocation[]): string | null {
+  for (const inv of invocations) {
+    if (protocol === 'a2a') {
+      const v = inv.headers['a2a-version'];
+      if (typeof v === 'string' && v.length > 0) return v;
+      continue;
+    }
+    const h = inv.headers['mcp-protocol-version'];
+    if (typeof h === 'string' && h.length > 0) return h;
+    const p = (inv.params ?? {}) as Record<string, unknown>;
+    const meta = (p['_meta'] ?? {}) as Record<string, unknown>;
+    if (typeof meta[META_V] === 'string') return meta[META_V] as string;
+    if (typeof p['protocolVersion'] === 'string') return p['protocolVersion'] as string;
+  }
+  return null;
+}
+
+/** §A.2: `requested` is present and equals what was named. */
+export function judgeRequested(payload: Readonly<Record<string, unknown>>, named: string): Finding {
+  const got = payload['requested'];
+  if (typeof got !== 'string') return { ok: false, message: `${EVENT} MUST carry requested when a version was named (named ${named}; the record has none) — RFC 0242 §A.2` };
+  return got === named
+    ? { ok: true, message: 'requested matches the named version' }
+    : { ok: false, message: `${EVENT}.requested MUST equal the version the requesting side named: named ${named}, recorded ${got} — RFC 0242 §A.2` };
+}
+
+/** Whether discovery advertises an inbound A2A or MCP surface (§B.3's condition). */
+export function inboundServed(doc: Readonly<Record<string, unknown>>): { a2a: boolean; mcp: boolean } {
+  const a2a = doc['a2a'] as Record<string, unknown> | undefined;
+  const mcp = doc['mcp'] as Record<string, unknown> | undefined;
+  const urls = Array.isArray(mcp?.['serverUrls']) ? (mcp!['serverUrls'] as unknown[]) : [];
+  return {
+    a2a: typeof a2a?.['agentCardUrl'] === 'string',
+    mcp: mcp !== undefined && (urls.length > 0 || mcp['serverMount'] !== undefined),
+  };
+}
+
+/** §B.3: an inbound surface implies `{ type: negotiation.decided, delivery: durable }` in `hostEvents.types[]`. */
+export function judgeListed(doc: Readonly<Record<string, unknown>>): Finding {
+  const served = inboundServed(doc);
+  const which = [served.a2a ? 'a2a.agentCardUrl' : null, served.mcp ? 'mcp.serverUrls/serverMount' : null].filter(Boolean).join(' and ');
+  const he = doc['hostEvents'] as Record<string, unknown> | undefined;
+  if (he === undefined) return { ok: false, message: `the host serves ${which} inbound, so it MUST advertise hostEvents listing ${EVENT} (durable) — RFC 0242 §B.3` };
+  const types = Array.isArray(he['types']) ? (he['types'] as Array<Record<string, unknown>>) : [];
+  const row = types.find((t) => t?.['type'] === EVENT);
+  if (!row) return { ok: false, message: `the host serves ${which} inbound, so hostEvents.types[] MUST list ${EVENT} — RFC 0242 §B.3` };
+  return row['delivery'] === 'durable'
+    ? { ok: true, message: `${EVENT} listed durable` }
+    : { ok: false, message: `${EVENT} MUST be listed with delivery durable, not ${String(row['delivery'])} — RFC 0242 §B.2` };
+}
+
+/**
+ * §B.2: the host event recording one inbound exchange. `envelopes` are the
+ * parsed `data:` of every `negotiation.decided` frame seen while the exchange
+ * ran; the judge picks the one whose `requested` is the version the suite
+ * named, so a concurrent exchange cannot satisfy it.
+ */
+export function judgeInboundRecord(
+  envelopes: readonly Record<string, unknown>[],
+  expect: { protocol: 'a2a' | 'mcp'; named: string; outcome: 'accepted' | 'refused' },
+): Finding[] {
+  const mine = envelopes.filter((e) => ((e['payload'] ?? {}) as Record<string, unknown>)['requested'] === expect.named
+    && ((e['payload'] ?? {}) as Record<string, unknown>)['protocol'] === expect.protocol);
+  if (mine.length === 0) {
+    return [{ ok: false, message: `an inbound ${expect.protocol} exchange naming ${expect.named} MUST leave a ${EVENT} host event on /host/events with requested ${expect.named}; ${envelopes.length} ${EVENT} frame(s) seen, none matching — RFC 0242 §B.2, §A.2` }];
+  }
+  const e = mine[mine.length - 1]!;
+  const p = (e['payload'] ?? {}) as Record<string, unknown>;
+  const out: Finding[] = [];
+  out.push(e['delivery'] === 'durable' ? { ok: true, message: 'durable' } : { ok: false, message: `the host event MUST be durable, got ${String(e['delivery'])} — RFC 0242 §B.2` });
+  out.push(!('runId' in e) && !('sequence' in e) ? { ok: true, message: 'runless' } : { ok: false, message: 'a host event carries no runId or sequence — events.md §Host events' });
+  out.push(p['outcome'] === expect.outcome ? { ok: true, message: 'outcome' } : { ok: false, message: `the exchange was ${expect.outcome === 'accepted' ? 'served' : 'refused'}, so the recorded outcome MUST be ${expect.outcome}, got ${String(p['outcome'])}` });
+  if (expect.outcome === 'accepted') {
+    out.push(typeof p['version'] === 'string' ? { ok: true, message: 'version' } : { ok: false, message: 'an accepted record names the version used — interop.md §The audit event' });
+  }
+  return out;
+}

package/src/scenarios/v2-effect-identity-business-key.test.ts

@@ -10,20 +10,19 @@
  * state, at }`, content-free of provider payloads (RFC 0150 §B; RFC 0173 §B row
  * C6.7; `spec/v2/core/security-defaults.md` §Layer-2 effect identity).
  *
- * Legs:
- *   1. the ledger read validates on a run of the noop fixture and every row's
- *      `keying` is one of the two documented modes;
- *   2. the "same provider key across two transport retries" leg needs the
- *      suite's fixture provider (RFC 0173 §D.2 G4 — a provider that rejects a
- *      changed key) driven through the seams profile; no such seam is
- *      catalogued, so that leg records `blocked` naming it.
+ * One leg: the "same provider key across two transport retries" leg, driven
+ * through the seams profile (`forceEffectTransportRetry`, RFC 0173 §D.2 G4).
+ * This file is a floor of `openwop-conformance-seams-v2`, so every leg in it
+ * MUST be seam-driven (`coherence/seams-floor-legs-gated.test.ts`). The
+ * seam-free ledger-read leg lives in `v2-effect-ledger-keying.test.ts` since
+ * 2.45.30: here it passed the floor on hosts that mount no seams.
  *
  * @see spec/v2/core/security-defaults.md §Layer-2 effect identity
  */
 
 import { describe, it, expect } from 'vitest';
 import { driver } from '../lib/driver.js';
-import { v2Discovery, gateFamily, v2Validator } from '../lib/v2.js';
+import { v2Discovery, gateFamily } from '../lib/v2.js';
 import { seamsProfileAdvertised, SEAMS_PREFIX } from '../lib/seams.js';
 import { softSkip, blockedDespiteAssertions } from '../lib/soft-skip.js';
 import { startEffectReceiver } from '../lib/effect-receiver.js';
@@ -38,85 +37,14 @@ import { req } from '../lib/requirement-ids.js';
  */
 export const REQUIRES_HOST_CALLBACK = 'the host makes the retried outbound effect call to the suite-owned effect receiver (OPENWOP_WEBHOOK_RECEIVER_PORT)';
 
-const FIXTURE = 'conformance-noop';
 const KEYING = ['business-identity', 'activity-recipe'];
-const TERMINAL = new Set(['completed', 'failed', 'cancelled']);
 
 async function discovery(): Promise<Record<string, unknown> | null> {
   try { return await v2Discovery(); } catch { return null; }
 }
 
-async function waitTerminal(runId: string, timeoutMs: number): Promise<void> {
-  const deadline = Date.now() + timeoutMs;
-  while (Date.now() < deadline) {
-    const res = await driver.get(`/runs/${encodeURIComponent(runId)}`);
-    if (res.status === 200 && TERMINAL.has(String((res.json as { status?: unknown } | null)?.status))) return;
-    await new Promise((r) => setTimeout(r, 250));
-  }
-}
 
 describe('RFC 0173 §B — effect-identity-business-key (gated on idempotency)', () => {
-  it('GET /runs/{runId}/effects validates and every row is keyed on business identity or the activity recipe', async () => {
-    const doc = await discovery();
-    if (!doc) return softSkip('blocked', 'discovery unreachable');
-    if (!(await gateFamily('idempotency'))) return softSkip('inapplicable', 'idempotency family not advertised — no Layer-2 obligation (gate recorded under openwop.family.idempotency)');
-    const fixtures = Array.isArray(doc['fixtures']) ? (doc['fixtures'] as unknown[]) : [];
-    if (!fixtures.includes(FIXTURE)) return softSkip('inapplicable', `${FIXTURE} fixture not advertised — no run to read`);
-
-    // Unfailable-leg audit (2026-09-26): the noop fixture issues no effects, so
-    // the per-row loop asserted nothing on any host, and the trailing
-    // `softSkip('inapplicable')` (called without `return`, after four passing
-    // setup asserts) recorded `executed-pass` with a `partial-witness:` detail —
-    // a host that mis-keyed every effect passed this row. Now no expect passes
-    // before the empty-ledger check: a failing setup read still fails, and an
-    // empty but well-formed ledger returns `inapplicable` with zero assertions.
-    const create = await driver.post('/runs', { workflowId: FIXTURE });
-    if (create.status !== 201) {
-      expect(create.status, req('openwop.requirement.0173.effect-identity-business-key', 'runs.md §Create', 'POST /runs MUST answer 201 for the noop fixture')).toBe(201);
-    }
-    const runId = (create.json as { runId: string }).runId;
-    await waitTerminal(runId, 10_000);
-
-    const res = await driver.get(`/runs/${encodeURIComponent(runId)}/effects`);
-    const check = v2Validator('effect-ledger-projection')(res.json);
-    const body = res.json as { runId?: unknown; effects?: Array<{ effectId?: unknown; keying?: unknown; providerKey?: unknown }> } | null;
-    const effects = body?.effects ?? [];
-    if (res.status === 200 && check.ok && body?.runId === runId && effects.length === 0) {
-      // partial-witness-ok: no assertion has passed at runtime. The only earlier
-      // expect runs solely when the create is not 201, and then it throws, so this
-      // skip is a zero-assertion `inapplicable` (the gate reads source order).
-      return softSkip('inapplicable', 'the noop fixture issued no external effect — the ledger read is well-formed but the per-row keying leg had no rows (an effect-issuing fixture would exercise it)');
-    }
-    expect(
-      res.status,
-      req('openwop.requirement.0173.effect-identity-business-key', 'security-defaults.md §Layer-2 effect identity', 'a host advertising `idempotency` MUST serve GET /runs/{runId}/effects with 200 (RFC 0173 §B)'),
-    ).toBe(200);
-    expect(
-      check.ok,
-      req('openwop.requirement.0173.effect-identity-business-key', 'effect-ledger-projection.schema.json', `the ledger projection MUST validate: ${check.errors}`),
-    ).toBe(true);
-    expect(body?.runId, req('openwop.requirement.0173.effect-identity-business-key', 'effect-ledger-projection.schema.json runId', 'runId MUST echo the run read')).toBe(runId);
-    const ids = new Set<string>();
-    for (const e of effects) {
-      expect(
-        KEYING,
-        req('openwop.requirement.0173.effect-identity-business-key', 'security-defaults.md §Layer-2 effect identity', `keying MUST be business-identity or activity-recipe (the documented fallback) — effect ${String(e.effectId)} declares ${String(e.keying)}`),
-      ).toContain(e.keying);
-      // One logical effect id per effect: a duplicate row is a re-assignment.
-      expect(
-        ids.has(String(e.effectId)),
-        req('openwop.requirement.0173.effect-identity-business-key', 'RFC 0150 §B', `effectId ${String(e.effectId)} MUST be assigned once per effect (duplicate ledger row)`),
-      ).toBe(false);
-      ids.add(String(e.effectId));
-      if (typeof e.providerKey === 'string') {
-        expect(
-          /(secret|bearer |sk-[a-z0-9]{8,})/i.test(e.providerKey),
-          req('openwop.requirement.0173.effect-identity-business-key', 'effect-ledger-projection.schema.json providerKey', 'providerKey is a redaction-safe identity, never credential material'),
-        ).toBe(false);
-      }
-    }
-  });
-
   it('the same provider key is presented across two transport retries', async () => {
     const doc = await discovery();
     if (!doc) return softSkip('blocked', 'discovery unreachable');

package/src/scenarios/v2-effect-ledger-keying.test.ts

@@ -0,0 +1,102 @@
+/**
+ * RFC 0173 §B — the effect ledger read and its keying (suite 2.45.30, target
+ * major 2; gated on `idempotency` and the `conformance-noop` fixture).
+ *
+ * A host that advertises `idempotency` serves `GET /runs/{runId}/effects`
+ * (`schemas/v2/effect-ledger-projection.schema.json`); every row's `keying` is
+ * `business-identity` or the documented fallback `activity-recipe`, each
+ * effect id is assigned once, and `providerKey` is never credential material
+ * (RFC 0150 §B; `spec/v2/core/security-defaults.md` §Layer-2 effect identity).
+ *
+ * This leg needs no seam. Until 2.45.30 it was the first leg of
+ * `v2-effect-identity-business-key`, a floor of `openwop-conformance-seams-v2`,
+ * and its pass certified that profile on hosts that mount no seams.
+ *
+ * @see spec/v2/core/security-defaults.md §Layer-2 effect identity
+ */
+
+import { describe, it, expect } from 'vitest';
+import { driver } from '../lib/driver.js';
+import { v2Discovery, gateFamily, v2Validator } from '../lib/v2.js';
+import { softSkip } from '../lib/soft-skip.js';
+import { req } from '../lib/requirement-ids.js';
+
+const FIXTURE = 'conformance-noop';
+const KEYING = ['business-identity', 'activity-recipe'];
+const TERMINAL = new Set(['completed', 'failed', 'cancelled']);
+
+async function discovery(): Promise<Record<string, unknown> | null> {
+  try { return await v2Discovery(); } catch { return null; }
+}
+
+async function waitTerminal(runId: string, timeoutMs: number): Promise<void> {
+  const deadline = Date.now() + timeoutMs;
+  while (Date.now() < deadline) {
+    const res = await driver.get(`/runs/${encodeURIComponent(runId)}`);
+    if (res.status === 200 && TERMINAL.has(String((res.json as { status?: unknown } | null)?.status))) return;
+    await new Promise((r) => setTimeout(r, 250));
+  }
+}
+
+describe('RFC 0173 §B — effect ledger keying (gated on idempotency)', () => {
+  it('GET /runs/{runId}/effects validates and every row is keyed on business identity or the activity recipe', async () => {
+    const doc = await discovery();
+    if (!doc) return softSkip('blocked', 'discovery unreachable');
+    if (!(await gateFamily('idempotency'))) return softSkip('inapplicable', 'idempotency family not advertised — no Layer-2 obligation (gate recorded under openwop.family.idempotency)');
+    const fixtures = Array.isArray(doc['fixtures']) ? (doc['fixtures'] as unknown[]) : [];
+    if (!fixtures.includes(FIXTURE)) return softSkip('inapplicable', `${FIXTURE} fixture not advertised — no run to read`);
+
+    // Unfailable-leg audit (2026-09-26): the noop fixture issues no effects, so
+    // the per-row loop asserted nothing on any host, and the trailing
+    // `softSkip('inapplicable')` (called without `return`, after four passing
+    // setup asserts) recorded `executed-pass` with a `partial-witness:` detail —
+    // a host that mis-keyed every effect passed this row. Now no expect passes
+    // before the empty-ledger check: a failing setup read still fails, and an
+    // empty but well-formed ledger returns `inapplicable` with zero assertions.
+    const create = await driver.post('/runs', { workflowId: FIXTURE });
+    if (create.status !== 201) {
+      expect(create.status, req('openwop.requirement.0173.effect-identity-business-key', 'runs.md §Create', 'POST /runs MUST answer 201 for the noop fixture')).toBe(201);
+    }
+    const runId = (create.json as { runId: string }).runId;
+    await waitTerminal(runId, 10_000);
+
+    const res = await driver.get(`/runs/${encodeURIComponent(runId)}/effects`);
+    const check = v2Validator('effect-ledger-projection')(res.json);
+    const body = res.json as { runId?: unknown; effects?: Array<{ effectId?: unknown; keying?: unknown; providerKey?: unknown }> } | null;
+    const effects = body?.effects ?? [];
+    if (res.status === 200 && check.ok && body?.runId === runId && effects.length === 0) {
+      // partial-witness-ok: no assertion has passed at runtime. The only earlier
+      // expect runs solely when the create is not 201, and then it throws, so this
+      // skip is a zero-assertion `inapplicable` (the gate reads source order).
+      return softSkip('inapplicable', 'the noop fixture issued no external effect — the ledger read is well-formed but the per-row keying leg had no rows (an effect-issuing fixture would exercise it)');
+    }
+    expect(
+      res.status,
+      req('openwop.requirement.0173.effect-identity-business-key', 'security-defaults.md §Layer-2 effect identity', 'a host advertising `idempotency` MUST serve GET /runs/{runId}/effects with 200 (RFC 0173 §B)'),
+    ).toBe(200);
+    expect(
+      check.ok,
+      req('openwop.requirement.0173.effect-identity-business-key', 'effect-ledger-projection.schema.json', `the ledger projection MUST validate: ${check.errors}`),
+    ).toBe(true);
+    expect(body?.runId, req('openwop.requirement.0173.effect-identity-business-key', 'effect-ledger-projection.schema.json runId', 'runId MUST echo the run read')).toBe(runId);
+    const ids = new Set<string>();
+    for (const e of effects) {
+      expect(
+        KEYING,
+        req('openwop.requirement.0173.effect-identity-business-key', 'security-defaults.md §Layer-2 effect identity', `keying MUST be business-identity or activity-recipe (the documented fallback) — effect ${String(e.effectId)} declares ${String(e.keying)}`),
+      ).toContain(e.keying);
+      // One logical effect id per effect: a duplicate row is a re-assignment.
+      expect(
+        ids.has(String(e.effectId)),
+        req('openwop.requirement.0173.effect-identity-business-key', 'RFC 0150 §B', `effectId ${String(e.effectId)} MUST be assigned once per effect (duplicate ledger row)`),
+      ).toBe(false);
+      ids.add(String(e.effectId));
+      if (typeof e.providerKey === 'string') {
+        expect(
+          /(secret|bearer |sk-[a-z0-9]{8,})/i.test(e.providerKey),
+          req('openwop.requirement.0173.effect-identity-business-key', 'effect-ledger-projection.schema.json providerKey', 'providerKey is a redaction-safe identity, never credential material'),
+        ).toBe(false);
+      }
+    }
+  });
+});

package/src/scenarios/v2-negotiation-decided-emitted.test.ts

@@ -22,6 +22,9 @@
  * Callback-shaped (the host calls the suite's peer): unwitnessable when the
  * host is in a separate network namespace — `../lib/host-callback.ts`.
  *
+ * RFC 0242 §A.2 adds two legs: the record's `requested` equals the version the
+ * host's client named to the suite's peer (read from what the peer received).
+ *
  * @see spec/v2/core/interop.md §Negotiation is a protocol
  */
 
@@ -39,6 +42,7 @@ import { getA2AFakePeer } from '../lib/a2a-fake-peer.js';
 import { getMcpFakeServer } from '../lib/mcp-fake-server.js';
 import { softSkip, seamAbsent } from '../lib/soft-skip.js';
 import { req } from '../lib/requirement-ids.js';
+import { askedVersion, judgeRequested } from '../lib/negotiation-record.js';
 
 export const REQUIRES_HOST_CALLBACK = "the host's A2A/MCP client calls the suite's fake peer/server through the invoke seams; the negotiation.decided event is then read on the host's own log";
 
@@ -83,7 +87,10 @@ function originDigest(url: string): string {
   return createHash('sha256').update(new URL(url).origin, 'utf8').digest('hex');
 }
 
-async function leg(protocol: 'a2a' | 'mcp', id: string): Promise<void> {
+type Exchange = { driven: { status: number; body: Record<string, unknown> }; runId: string; decided: EventRow[]; peer: NonNullable<ReturnType<typeof getA2AFakePeer>> | NonNullable<ReturnType<typeof getMcpFakeServer>>; validate: NonNullable<ReturnType<typeof payloadValidator>> };
+
+/** Gate, drive one exchange through the seam, and read the run's records; `undefined` once a skip is recorded. */
+async function exchange(protocol: 'a2a' | 'mcp'): Promise<Exchange | undefined> {
   const doc = await discovery();
   if (!doc) return softSkip('blocked', 'discovery unreachable');
   const facet = await familyAdvertised(protocol);
@@ -94,15 +101,31 @@ async function leg(protocol: 'a2a' | 'mcp', id: string): Promise<void> {
   peer.reset();
   const validate = payloadValidator();
   if (!validate) return softSkip('blocked', 'run-event-payloads.schema.json#/$defs/negotiationDecided not readable from SCHEMAS_DIR');
-
   const driven = await drive(protocol, peer.hostFacingEndpoint());
   if (!driven) return softSkip('blocked', 'invoke seam unavailable (reason recorded above)');
   const runId = driven.body['runId'];
   if (typeof runId !== 'string') {
     return softSkip('blocked', `the ${protocol} invoke seam answered ${driven.status} without a runId — the host log that carries ${EVENT} is not addressable from the suite (the seam MUST name the run whose log recorded the decision)`);
   }
-  const events = await eventsOf(runId);
-  const decided = events.filter((e) => e.type === EVENT);
+  const decided = (await eventsOf(runId)).filter((e) => e.type === EVENT);
+  return { driven, runId, decided, peer, validate };
+}
+
+/** RFC 0242 §A.2: the record names the version the host asked the peer for. */
+async function requestedLeg(protocol: 'a2a' | 'mcp', id: string): Promise<void> {
+  const x = await exchange(protocol);
+  if (!x) return;
+  const named = askedVersion(protocol, x.peer.invocations());
+  if (named === null) return softSkip('inapplicable', `the host's ${protocol} client named no version to the suite's peer, so RFC 0242 §A.2 does not require requested`);
+  expect(x.decided.length, req(id, 'interop.md §The audit event', `the exchange MUST leave ${EVENT} on run ${x.runId} (RFC 0175 §D.3)`)).toBeGreaterThan(0);
+  const f = judgeRequested(x.decided[x.decided.length - 1]!.payload ?? {}, named);
+  expect(f.ok, req(id, 'interop.md §The audit event', f.message)).toBe(true);
+}
+
+async function leg(protocol: 'a2a' | 'mcp', id: string): Promise<void> {
+  const x = await exchange(protocol);
+  if (!x) return;
+  const { driven, runId, decided, peer, validate } = x;
   expect(
     decided.length,
     req(id, 'interop.md §The audit event', `every ${protocol} negotiation outcome MUST emit ${EVENT} on the host's own event log (RFC 0175 §D.3) — none found on run ${runId}`),
@@ -146,4 +169,10 @@ describe('RFC 0175 §D.3 — negotiation-decided-emitted (gated on a2a/mcp + sea
   it('an MCP exchange leaves negotiation.decided on the host log', async () => {
     await leg('mcp', 'openwop.requirement.0175.negotiation-decided-emitted.mcp');
   });
+  it('an A2A record names the version the host asked for (RFC 0242 §A.2)', async () => {
+    await requestedLeg('a2a', 'openwop.requirement.0242.requested.outbound');
+  });
+  it('an MCP record names the revision the host asked for (RFC 0242 §A.2)', async () => {
+    await requestedLeg('mcp', 'openwop.requirement.0242.requested.outbound.mcp');
+  });
 });

package/src/scenarios/v2-negotiation-decided-inbound.test.ts

@@ -0,0 +1,155 @@
+/**
+ * RFC 0242 §B — an inbound negotiation is recorded as a durable host event
+ * (suite 2.46.0, target major 2; gated on an inbound a2a/mcp surface).
+ *
+ * `spec/v2/core/interop.md` §The audit event: every negotiation outcome MUST
+ * emit a `negotiation.decided` record — on its run's log, or, with no run, as
+ * the caller's durable host event (`schemas/v2/host-event.schema.json`,
+ * `payload` = `run-event-payloads.schema.json#/$defs/negotiationDecided`). A
+ * host serving either protocol inbound (`a2a.agentCardUrl`, `mcp.serverUrls`,
+ * `mcp.serverMount`) MUST list the type as durable in `hostEvents.types[]`,
+ * and `requested` MUST carry the version the caller named.
+ *
+ * How it is witnessed, with no seam: the suite reads discovery for §B.3, then
+ * acts as an authenticated inbound client. With `/host/events` open it makes
+ * one exchange naming `preferredVersion` (expected `accepted`) and one naming
+ * a version below the floor (expected `refused`), and finds each record by its
+ * `requested`. A2A names the version in `A2A-Version` on a JSON-RPC `GetTask`
+ * for a task that does not exist; MCP names it in `MCP-Protocol-Version` and
+ * `_meta` on `tools/list`. Neither call changes host state.
+ *
+ * @see RFCS/0242-negotiation-decided-requested-and-inbound.md
+ * @see spec/v2/core/interop.md §Negotiation is a protocol
+ * @see spec/v2/core/events.md §Host events
+ */
+
+import { describe, it, expect } from 'vitest';
+import { randomBytes } from 'node:crypto';
+import { v2Discovery, familyAdvertised, v2Validator } from '../lib/v2.js';
+import { loadEnv } from '../lib/env.js';
+import { subscribe } from '../lib/sse.js';
+import { softSkip } from '../lib/soft-skip.js';
+import { req } from '../lib/requirement-ids.js';
+import { EVENT, inboundServed, judgeInboundRecord, judgeListed } from '../lib/negotiation-record.js';
+
+const DOC = 'interop.md §The audit event';
+const ID_LISTED = 'openwop.requirement.0242.inbound.listed';
+const ID_A2A = 'openwop.requirement.0242.inbound.recorded';
+const ID_A2A_REFUSED = 'openwop.requirement.0242.inbound.refused';
+const ID_MCP = 'openwop.requirement.0242.inbound.recorded.mcp';
+const ID_MCP_REFUSED = 'openwop.requirement.0242.inbound.refused.mcp';
+const A2A_BELOW = '0.3';
+const MCP_BELOW = '2025-06-18';
+const META_V = 'io.modelcontextprotocol/protocolVersion';
+const STREAM_MS = 3_000;
+
+const hostEvent = v2Validator('host-event');
+const sleep = (ms: number): Promise<void> => new Promise((r) => setTimeout(r, ms));
+const absolute = (u: string): string => (/^https?:\/\//i.test(u) ? u : `${loadEnv().baseUrl}${u.startsWith('/') ? '' : '/'}${u}`);
+
+/** `a.b` versions and ISO-date revisions both order correctly as compared here. */
+function below(candidate: string, floor: string): boolean {
+  if (/^\d+\.\d+$/.test(candidate) && /^\d+\.\d+$/.test(floor)) {
+    const [cm, cn] = candidate.split('.').map(Number);
+    const [fm, fn] = floor.split('.').map(Number);
+    return cm! < fm! || (cm === fm && cn! < fn!);
+  }
+  return candidate < floor;
+}
+
+type Surface = { url: string; preferred: string; floor: string };
+type Gate = { ok: true; doc: Record<string, unknown>; surface: Surface } | { ok: false; kind: 'blocked' | 'inapplicable'; reason: string };
+
+async function gate(protocol: 'a2a' | 'mcp'): Promise<Gate> {
+  let doc: Record<string, unknown> | null;
+  try { doc = await v2Discovery(); } catch { doc = null; }
+  if (!doc) return { ok: false, kind: 'blocked', reason: 'v2 discovery unreachable' };
+  const facet = await familyAdvertised(protocol);
+  if (!facet || !inboundServed(doc)[protocol]) return { ok: false, kind: 'inapplicable', reason: `the host serves no inbound ${protocol} surface (${protocol === 'a2a' ? 'a2a.agentCardUrl' : 'mcp.serverUrls / mcp.serverMount'} absent)` };
+  if (!judgeListed(doc).ok) return { ok: false, kind: 'inapplicable', reason: `hostEvents.types[] does not list ${EVENT}, so the host emits no such host event; ${ID_LISTED} records that failure` };
+  const preferred = facet['preferredVersion'];
+  const floor = protocol === 'a2a' ? facet['minimumVersion'] : facet['minimumRevision'];
+  if (typeof preferred !== 'string' || typeof floor !== 'string') return { ok: false, kind: 'blocked', reason: `the ${protocol} facet lacks preferredVersion or its floor` };
+  if (protocol === 'mcp') {
+    const urls = Array.isArray(facet['serverUrls']) ? (facet['serverUrls'] as unknown[]).filter((u): u is string => typeof u === 'string' && u.length > 0) : [];
+    if (urls.length === 0) return { ok: false, kind: 'blocked', reason: 'mcp is served inbound with no mcp.serverUrls[0] — the mount is unaddressable' };
+    return { ok: true, doc, surface: { url: absolute(urls[0]!), preferred, floor } };
+  }
+  const res = await fetch(String(facet['agentCardUrl']), { headers: { accept: 'application/json', 'A2A-Version': preferred } }).catch(() => null);
+  if (!res || res.status !== 200) return { ok: false, kind: 'blocked', reason: `the advertised agentCardUrl answered ${res?.status ?? 'nothing'}` };
+  const card = (await res.json().catch(() => ({}))) as { supportedInterfaces?: Array<{ url?: string; protocolBinding?: string }> };
+  const iface = (card.supportedInterfaces ?? []).find((i) => i.protocolBinding === 'JSONRPC' && typeof i.url === 'string');
+  if (!iface) return { ok: false, kind: 'blocked', reason: 'the public agent card lists no JSONRPC interface to send an inbound request to' };
+  return { ok: true, doc, surface: { url: absolute(iface.url!), preferred, floor } };
+}
+
+/** One inbound exchange naming `version`; the caller's bearer authenticates it (`interop.md` §Authentication). */
+async function exchange(protocol: 'a2a' | 'mcp', url: string, version: string): Promise<void> {
+  const headers: Record<string, string> = { 'content-type': 'application/json', accept: 'application/json, text/event-stream', authorization: `Bearer ${loadEnv().apiKey}` };
+  const id = randomBytes(4).readUInt32BE(0);
+  let body: Record<string, unknown>;
+  if (protocol === 'a2a') {
+    headers['A2A-Version'] = version;
+    body = { jsonrpc: '2.0', id, method: 'GetTask', params: { id: `conf-0242-${randomBytes(8).toString('hex')}` } };
+  } else {
+    headers['MCP-Protocol-Version'] = version;
+    headers['Mcp-Method'] = 'tools/list';
+    body = { jsonrpc: '2.0', id, method: 'tools/list', params: { _meta: { [META_V]: version } } };
+  }
+  await fetch(url, { method: 'POST', headers, body: JSON.stringify(body) }).then((r) => r.text()).catch(() => undefined);
+}
+
+/** Open `/host/events`, make the exchange, and return the parsed envelope of every `negotiation.decided` frame. */
+async function recordsOf(protocol: 'a2a' | 'mcp', url: string, version: string): Promise<{ envelopes: Record<string, unknown>[]; invalid: string[] }> {
+  const sub = subscribe('/host/events', { timeoutMs: STREAM_MS, extraHeaders: { 'OpenWOP-Version': '2.0' } });
+  await sleep(400);
+  await exchange(protocol, url, version);
+  const frames = (await sub).events.filter((f) => f.event === EVENT);
+  const envelopes: Record<string, unknown>[] = [];
+  const invalid: string[] = [];
+  for (const f of frames) {
+    let env: unknown;
+    try { env = JSON.parse(f.data); } catch { invalid.push('non-JSON data'); continue; }
+    const v = hostEvent(env);
+    if (!v.ok) invalid.push(v.errors);
+    if (env && typeof env === 'object') envelopes.push(env as Record<string, unknown>);
+  }
+  return { envelopes, invalid };
+}
+
+async function inboundLeg(protocol: 'a2a' | 'mcp', id: string, which: 'accepted' | 'refused'): Promise<void> {
+  const g = await gate(protocol);
+  if (!g.ok) return softSkip(g.kind, g.reason);
+  const candidate = protocol === 'a2a' ? A2A_BELOW : MCP_BELOW;
+  if (which === 'refused' && !below(candidate, g.surface.floor)) {
+    return softSkip('inapplicable', `the ${protocol} floor ${g.surface.floor} is at or below ${candidate}, the lowest version the suite can name — nothing below the floor to ask for`);
+  }
+  const named = which === 'accepted' ? g.surface.preferred : candidate;
+  const { envelopes, invalid } = await recordsOf(protocol, g.surface.url, named);
+  expect(invalid, req(id, 'events.md §Host events', `every ${EVENT} host event MUST validate against host-event.schema.json: ${invalid.join('; ')}`)).toEqual([]);
+  for (const f of judgeInboundRecord(envelopes, { protocol, named, outcome: which })) expect(f.ok, req(id, DOC, f.message)).toBe(true);
+}
+
+describe('RFC 0242 §B — an inbound negotiation is a durable host event (gated on an inbound a2a/mcp surface)', () => {
+  it('a host serving A2A or MCP inbound lists negotiation.decided as a durable host-event type', async () => {
+    let doc: Record<string, unknown> | null;
+    try { doc = await v2Discovery(); } catch { doc = null; }
+    if (!doc) return softSkip('blocked', 'v2 discovery unreachable');
+    const served = inboundServed(doc);
+    if (!served.a2a && !served.mcp) return softSkip('inapplicable', 'the host advertises no inbound A2A or MCP surface (a2a.agentCardUrl, mcp.serverUrls, mcp.serverMount)');
+    const f = judgeListed(doc);
+    expect(f.ok, req(ID_LISTED, DOC, f.message)).toBe(true);
+  });
+  it('an inbound A2A exchange at preferredVersion is recorded accepted, with requested', async () => {
+    await inboundLeg('a2a', ID_A2A, 'accepted');
+  });
+  it('an inbound A2A exchange below minimumVersion is recorded refused, with requested', async () => {
+    await inboundLeg('a2a', ID_A2A_REFUSED, 'refused');
+  });
+  it('an inbound MCP exchange at preferredVersion is recorded accepted, with requested', async () => {
+    await inboundLeg('mcp', ID_MCP, 'accepted');
+  });
+  it('an inbound MCP exchange below minimumRevision is recorded refused, with requested', async () => {
+    await inboundLeg('mcp', ID_MCP_REFUSED, 'refused');
+  });
+});

package/src/scenarios/v2-v1-signed-webhook-accepted.test.ts

@@ -7,8 +7,10 @@
  * HMAC-SHA256 with the subscription secret); this adds no signature scheme and
  * per-subscription secrets are unchanged across the cut (`spec/v2/core/webhooks.md`
  * §Dual emission through the overlap; persistence.md §Everything else a v1 host
- * persisted; migration row C9.9). The facet's `signatureAlgorithms[]` MUST list
- * `"v1"` (webhooks.md §Surfaces).
+ * persisted; migration row C9.9). The facet check (`signatureAlgorithms[]` lists
+ * `"v1"`) needs no seam and lives in `v2-webhooks-v1-scheme-listed.test.ts`
+ * since 2.45.30: this file is a floor of `openwop-conformance-seams-v2`, so
+ * every leg in it MUST be seam-driven (`coherence/seams-floor-legs-gated.test.ts`).
  *
  * The receiver under test is the HOST's inbound receiver path — the v2 host as
  * a subscriber (its trigger bridge, its A2A/MCP peer callbacks) — which the
@@ -76,16 +78,6 @@ async function deliver(secret: string, delivery: { headers: Record<string, strin
 }
 
 describe('RFC 0176 §D.2 — v1-signed-webhook-accepted (gated on webhooks + seams)', () => {
-  it('the webhooks facet lists scheme "v1" — the scheme a v1-signed delivery is verified under', async () => {
-    const doc = await discovery();
-    if (!doc) return softSkip('blocked', 'discovery unreachable');
-    const webhooks = await gateFamily('webhooks');
-    if (!webhooks) return softSkip('inapplicable', 'webhooks family not advertised (gate recorded under openwop.family.webhooks)');
-    const algorithms = webhooks['signatureAlgorithms'];
-    expect(Array.isArray(algorithms), req('openwop.requirement.0176.v1-signed-webhook-accepted.facet', 'spec/v2/core/webhooks.md §Surfaces', 'the webhooks facet is { signatureAlgorithms[] }')).toBe(true);
-    expect(algorithms, req('openwop.requirement.0176.v1-signed-webhook-accepted.facet', 'spec/v2/core/webhooks.md §Surfaces', 'signatureAlgorithms MUST list "v1" — the cut adds no signature scheme (RFC 0176 §D.2)')).toContain('v1');
-  });
-
   it('the host\'s v2 receiver path accepts an X-openwop-*-only scheme-v1 delivery and refuses a tampered one', async () => {
     const doc = await discovery();
     if (!doc) return softSkip('blocked', 'discovery unreachable');

package/src/scenarios/v2-webhooks-v1-scheme-listed.test.ts

@@ -0,0 +1,33 @@
+/**
+ * RFC 0176 §D.2 — the webhooks facet lists scheme `v1` (suite 2.45.30, target
+ * major 2; gated on `webhooks`).
+ *
+ * The facet's `signatureAlgorithms[]` MUST list `"v1"`: the cut adds no
+ * signature scheme, so a v1-signed delivery is verified under it
+ * (`spec/v2/core/webhooks.md` §Surfaces). Until 2.45.30 this was the first leg
+ * of `v2-v1-signed-webhook-accepted`, a floor of `openwop-conformance-seams-v2`,
+ * and its pass certified that profile on hosts that mount no seams.
+ *
+ * @see spec/v2/core/webhooks.md §Surfaces
+ */
+
+import { describe, it, expect } from 'vitest';
+import { v2Discovery, gateFamily } from '../lib/v2.js';
+import { softSkip } from '../lib/soft-skip.js';
+import { req } from '../lib/requirement-ids.js';
+
+async function discovery(): Promise<Record<string, unknown> | null> {
+  try { return await v2Discovery(); } catch { return null; }
+}
+
+describe('RFC 0176 §D.2 — the webhooks facet lists scheme v1 (gated on webhooks)', () => {
+  it('the webhooks facet lists scheme "v1" — the scheme a v1-signed delivery is verified under', async () => {
+    const doc = await discovery();
+    if (!doc) return softSkip('blocked', 'discovery unreachable');
+    const webhooks = await gateFamily('webhooks');
+    if (!webhooks) return softSkip('inapplicable', 'webhooks family not advertised (gate recorded under openwop.family.webhooks)');
+    const algorithms = webhooks['signatureAlgorithms'];
+    expect(Array.isArray(algorithms), req('openwop.requirement.0176.v1-signed-webhook-accepted.facet', 'spec/v2/core/webhooks.md §Surfaces', 'the webhooks facet is { signatureAlgorithms[] }')).toBe(true);
+    expect(algorithms, req('openwop.requirement.0176.v1-signed-webhook-accepted.facet', 'spec/v2/core/webhooks.md §Surfaces', 'signatureAlgorithms MUST list "v1" — the cut adds no signature scheme (RFC 0176 §D.2)')).toContain('v1');
+  });
+});