@openwop/openwop-conformance 2.45.5 → 2.45.7

package/CHANGELOG.md

@@ -1,5 +1,27 @@
 # `@openwop/openwop-conformance` Changelog
 
+## [2.45.7] — 2026-10-02 — a strict-mode host that does not advertise `workspace` is not failed; RFC 0231 Accepted
+
+- **Fix: `v2-workspace-scope-from-identity` no longer fails a strict-mode host that does not advertise `workspace`.** The file gated with `gateFamily('workspace')`, which under `--require-behavior` fails an unadvertised family unless the operator opts it out. Its own header says an unadvertised family is `inapplicable`, and its sibling isolation scenarios (`v2-storage-`, `v2-queue-cross-tenant-isolation`) read with `familyAdvertised` and recorded `inapplicable` in the same run. It now reads with `familyAdvertised`.
+  - **Found by** MyndHyve's 2.45.5 cut: both `0059.workspace-scope-*` rows `executed-fail` on a host that does not serve `workspace`.
+  - **Proof.** Against a scratch host that does not advertise the family, in strict mode: both legs failed before the change; the three rows are `inapplicable` after it. A host that advertises `workspace` is unchanged (the v2 reference host passes both rows on its certified 2.45.6 cut).
+  - **Workaround on 2.45.3–2.45.6:** `OPENWOP_OPTED_OUT_PROFILES=family.workspace`, which records the rows `skipped`.
+- **The 2.45.7 cycle opens.** RFC 0231's gap register changes the packed `spec/v1/gaps.json`: G3 and G4 close, and G2 and G7 are `externally-gated`. No scenario changes.
+
+## [2.45.6] — 2026-10-02 — RFC 0231 (Active): a host says which budget exhaustion behaviours it serves
+
+- **The 2.45.6 cycle opens.** RFC 0231's gap register changes the packed `spec/v1/gaps.json`.
+- **New scenario `v2-budget-exhaustion-facet`** (major 2, unaided; RFC 0231). Logic in `lib/exhaustion-facet-witness.ts`.
+  - `openwop.requirement.runs.budget-exhaustion-facet-contains-fail`: an advertised `budget.onExhaustion` is a non-empty list of `fail` and `interrupt` that contains `fail`.
+  - `openwop.requirement.runs.budget-unserved-exhaustion-refused`: where the list leaves out `interrupt`, a create asking for it answers `422 capability_not_provided`. The suite sends one create and cancels any run a non-conforming host starts.
+
+  **Dispositions.** No `budget`, no list, or `enforce` not `hard`: `inapplicable`. A list that includes `interrupt`: the refusal row is `inapplicable`, and the served path has no witness (RFC 0231 gap G2). No advertised fixture: the refusal row is `inapplicable`.
+
+  **Sabotage.** `lib/exhaustion-facet-witness.test.ts`, nine cases against the scratch host. The refusal row fails on a host that accepts the run, answers `400 validation_error`, or answers `422` with another code. The first row fails on a list without `fail`, an empty list and a bare string.
+
+  **Host impact: none today.** No host advertises `budget.onExhaustion`, so both rows record `inapplicable` everywhere.
+- **`lib/scratch-host.ts` can refuse a create by its body** (`createRefusal`). Unset, every create is admitted as before.
+
 ## [2.45.5] — 2026-10-01 — a prefix floor row is written only for a claimed profile
 
 - **The 2.45.5 cycle opens.** A runner change alters the packed content.

package/README.md

@@ -135,7 +135,7 @@ Exit code is non-zero on any failed assertion. `--certify` distinguishes: `0`
 
 ## What's Covered
 
-The current suite has 589 scenario files under `src/scenarios/`.
+The current suite has 590 scenario files under `src/scenarios/`.
 - 2026-09-29 (suite 2.45.0, openwop#1763): NEW `v2-cors-preflight.test.ts` — `headers.md` §Cross-origin preflight. For every operation it preflights with `Origin`, the method, and the operation's declared request headers (plus `authorization` / `content-type` where they apply, from `spec/v2/path-manifest.json`), and reads the answer as the Fetch standard's CORS-preflight check does. Self-gated: `inapplicable` when no operation's preflight grants `OPENWOP_CORS_ORIGIN` (default `https://conformance.invalid`).
 - 2026-09-23 (suite 2.37.0 cycle, RFC 0213): NEW `v2-sse-last-event-id-cursor.test.ts` (a `Last-Event-ID` past the log is an exclusive cursor; a malformed id, when refused, is `400 validation_error`; the cursor never changes the answer for an unknown or foreign-tenant run — public test of `event-cursor-after-authorization`), `v2-idempotency-in-flight.test.ts` (five concurrent same-key creates yield one run; each loser is a marked replay or `409 idempotency_in_flight` with no retry timing in `details`; `partial-witness` when no loser was refused in flight) and `v2-interrupt-resolve-terminal.test.ts` (a run-scoped resolve after cancel or completion is `409 interrupt_already_resolved`, never `interrupt_cancelled`). All three sit off the core-standard floor until measured on the three bundle hosts.
 - 2026-09-03 (suite `1.157.0 -> 1.158.0`, gap G17): NEW `idempotency-concurrent-claim.test.ts` — drives the new `host-sample-test-seams.md` §25 concurrent duplicate-delivery seam for the RFC 0150 §B / `idempotency.md` §"Concurrent duplicates (Layer 2)" atomic-claim MUST, which is unconditional and had no witness of any kind. Asserts every executor mints the SAME `logicalInvocationId` **before** asserting `delivered === 1` — without the identity check a host passes by minting different ids and never colliding, one effect because nothing raced. Not profile-gated and so not opt-out-able (the obligation is unconditional); an unmounted seam records `blocked`, which is not certifiable. Graduates `layer2-invocation-claim-atomic` reference-impl -> protocol.
@@ -482,7 +482,7 @@ Server-required (added in 1.7.0):
 | ------------- | ----------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
 | **Redaction** | [`capabilities.md`](../spec/v1/capabilities.md) §"Secrets" + NFR-7 + §"aiProviders" | Vendor-neutral assertions that the server doesn't leak secret material. Three scenario groups: (a) discovery shape contract — `secrets` + `aiProviders` advertisements are well-formed regardless of `secrets.supported`; when `supported === true`, scopes MUST be non-empty + `resolution === 'host-managed'`; `byok ⊆ supported`. (b) bearer-token redaction — invalid Bearer canary in `Authorization` header is not echoed in the 401 response body. (c) credentialRef echo control — gated on `secrets.supported === true`; canary planted in `configurable.ai.credentialRef` MUST NOT appear in any RunEvent payload (poll-based capture; transport-agnostic). Uses runtime-built canary fixtures (`lib/canaries.ts`) that defeat static secret scanners. 6 scenarios. |
 
-Current source tree: 589 scenario files. Use [`coverage.md`](./coverage.md) for current grade/gap tracking.
+Current source tree: 590 scenario files. Use [`coverage.md`](./coverage.md) for current grade/gap tracking.
 
 ## Remaining Gaps
 

package/dist/spec-artifacts.lock.json

@@ -1,5 +1,5 @@
 {
   "package": "@openwop/spec-artifacts",
-  "version": "2.45.5",
-  "stampSha256": "cdc1ddd3b7638a291b2179ef220c96c8d8e67179e005c7650ac9d913f73dd179"
+  "version": "2.45.7",
+  "stampSha256": "23ca7bff43af86c11279cbf51fbd7cfe67ced0171b808fb24cb33c03cf50e0d1"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openwop/openwop-conformance",
-  "version": "2.45.5",
+  "version": "2.45.7",
   "description": "Production-ready black-box conformance suite for OpenWOP v1.0 compliant servers.",
   "repository": {
     "type": "git",
@@ -56,6 +56,6 @@
     "@openwop/spec-artifacts": "file:../spec-artifacts"
   },
   "peerDependencies": {
-    "@openwop/spec-artifacts": "2.45.5"
+    "@openwop/spec-artifacts": "2.45.7"
   }
 }

package/requirements.json

@@ -2,11 +2,11 @@
   "$comment": "GENERATED by conformance/scripts/generate-requirement-registry.mjs — do not edit. One record per it()/test() in src/scenarios. Ids: openwop.it.<file-stem>.<title-slug>[~n] (src/lib/requirement-ids.ts). A record with id null has an interpolated title; its run-time row is keyed by the rendered title and maps here by file+line only. Renamed ids need a row in requirement-aliases.json.",
   "generatedFrom": "src/scenarios/*.test.ts",
   "counts": {
-    "files": 664,
-    "tests": 2540,
-    "withStableId": 2540,
+    "files": 665,
+    "tests": 2542,
+    "withStableId": 2542,
     "interpolatedTitles": 0,
-    "explicitIds": 2416
+    "explicitIds": 2418
   },
   "records": [
     {
@@ -28660,6 +28660,34 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.v2-budget-exhaustion-facet.an-advertised-budget-onexhaustion-contains-fail",
+      "file": "v2-budget-exhaustion-facet.test.ts",
+      "line": 61,
+      "title": "an advertised budget.onExhaustion contains fail",
+      "explicitId": "openwop.requirement.runs.budget-exhaustion-facet-contains-fail",
+      "citations": [
+        {
+          "section": null,
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-budget-exhaustion-facet.an-onexhaustion-value-the-host-does-not-list-is-refused-422-capability-not-provi",
+      "file": "v2-budget-exhaustion-facet.test.ts",
+      "line": 67,
+      "title": "an onExhaustion value the host does not list is refused 422 capability_not_provided",
+      "explicitId": "openwop.requirement.runs.budget-unserved-exhaustion-refused",
+      "citations": [
+        {
+          "section": null,
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
     {
       "id": "openwop.it.v2-bundle-v3-signed.a-signed-v3-bundle-validates-against-the-closed-root-schema-an-extra-root-key-is",
       "file": "v2-bundle-v3-signed.test.ts",
@@ -36037,7 +36065,7 @@
     {
       "id": "openwop.it.v2-workspace-scope-from-identity.a-second-tenant-cannot-read-or-list-a-file-the-first-tenant-wrote",
       "file": "v2-workspace-scope-from-identity.test.ts",
-      "line": 100,
+      "line": 107,
       "title": "a second tenant cannot read or list a file the first tenant wrote",
       "explicitId": "openwop.requirement.0059.workspace-scope-from-identity",
       "citations": [
@@ -36071,7 +36099,7 @@
     {
       "id": "openwop.it.v2-workspace-scope-from-identity.naming-the-first-tenant-s-scope-in-the-request-does-not-widen-the-second-tenant",
       "file": "v2-workspace-scope-from-identity.test.ts",
-      "line": 122,
+      "line": 129,
       "title": "naming the first tenant's scope in the request does not widen the second tenant's scope",
       "explicitId": "openwop.requirement.0059.workspace-scope-not-request-named",
       "citations": [

package/scenario-majors.json

@@ -1,9 +1,9 @@
 {
   "$comment": "GENERATED by conformance/scripts/generate-scenario-majors.mjs (RFC 0168 §D.3). Do not edit; add a file to BOTH_MAJORS in the generator to target both majors.",
   "counts": {
-    "files": 589,
+    "files": 590,
     "v1": 454,
-    "v2": 150
+    "v2": 151
   },
   "majors": {
     "a2a-1-0-agent-card.test.ts": [
@@ -1320,6 +1320,9 @@
     "v2-budget-enforcement.test.ts": [
       2
     ],
+    "v2-budget-exhaustion-facet.test.ts": [
+      2
+    ],
     "v2-bundle-v3-signed.test.ts": [
       2
     ],

package/schemas/CORPUS-STAMP.json

@@ -1,17 +1,17 @@
 {
   "_comment": "Provenance of @openwop/spec-artifacts (RFC 0168 §D.2). files: SHA-256 per file; the conformance suite compares the installed peer against dist/spec-artifacts.lock.json at start.",
   "package": "@openwop/spec-artifacts",
-  "version": "2.45.5",
-  "corpusTag": "v2.45.5",
+  "version": "2.45.7",
+  "corpusTag": "v2.45.7",
   "files": {
     "api/.redocly.lint-ignore.yaml": "bf5a8350b88a72fa43f59605ed8d903ed24b6cfccda5e45509c9f6ed9ee4e712",
     "api/asyncapi.yaml": "d5ecb9ee6114582be3b1f662c84bfac9ae96dae7bacb853e461168f70a8e1c7d",
     "api/grpc/openwop.proto": "c3e72bb17cba514ee98feb6434e6c9b6ea6795bfd086489ec69fd882dd1ad977",
     "api/openapi.yaml": "ad37a5a5c732ad46100fc03c3f4243fdd4f2976e330f02a8791b6b5b10a8a0c1",
     "api/redocly.yaml": "b0604c89b2ca6d5076ec25725c539dad44a741a811fe524439ee6daef8baa09f",
-    "api/seams-v2.yaml": "8ecb968c18b03fde88e807855cfbe761db387e9a51550f8a9c525348c224fef1",
-    "api/v2/asyncapi.yaml": "0f2fd3ea79ca0c3964d7e81881c371bde8006ca0e23a32aaf37f4c201ab0ebbe",
-    "api/v2/openapi.yaml": "910a3e2cc53ae10251cf6b3e82317adc76923aa94c13438cbb50c7197a2f5487",
+    "api/seams-v2.yaml": "c248954e6382322c769fd44e6888f739644bcee2becfacabff3de173a9f40d71",
+    "api/v2/asyncapi.yaml": "63f837b7f56a5b5d17b1c34ffb47337ceb72e0027f8682c2f082c4df3e9dd856",
+    "api/v2/openapi.yaml": "d3c23e3c30db36ebe2ace9273f0262f927a4a44dc0ea4807ea9e94f607b661d3",
     "api/v2/redocly.yaml": "1e66b60e6118ad11a823bb620678be464d99dfe50a40e3e6f93ec9429b88b34c",
     "schemas/README.md": "0c0b737ffcf8f30e7d2809cec8a498232de710f41443212922ad8337cdde0b51",
     "schemas/a2a-task-state.schema.json": "75d5049dea8bd873ff0e7546f1c60c8d36c219bec7084264360be54a8be30ae1",
@@ -31,7 +31,7 @@
     "schemas/artifact-type-pack-manifest.schema.json": "60342fcb15eb7f3ab46271f0641409a30d3a4a8f318b1020c53070886b191252",
     "schemas/audit-verify-result.schema.json": "0d3a3088ac1c32f9df66d346c33d7adbd8037940dba040e14ea847565a1a14bd",
     "schemas/budget-policy.schema.json": "3d4fe30ae129fe136ab9ece395f2a2a42a76360786b1b9a1d5f1cbc753eb5b39",
-    "schemas/capabilities.schema.json": "d1d491248930e9b50ac6aca93a33cb1155eb997c4fbb2af0a940e8e889c76807",
+    "schemas/capabilities.schema.json": "a7e5910bf10e6d8238e909fee5b81e405846f91688cccf1bb0d13fb081336a33",
     "schemas/certification-bundle-v2.schema.json": "2f85530dd04824a15810c94e96869362dee1e78396eca21fdd18e5501416bb7d",
     "schemas/channel-presence-payload.schema.json": "f9d0ef4219814c2b765baf3e68cbe5eea2cb42379f516a93a0459dcd5f7db47e",
     "schemas/channel-written-payload.schema.json": "54723a56bc5a35232f64544ca686ac1ac959a5fb05b32b2401facca6b3ef51a3",
@@ -116,7 +116,7 @@
     "schemas/v2/artifact.schema.json": "85b9dc284d39b99d2a66fa8cbf47f2dd3d8526d3bd6cc411ad315b372de38975",
     "schemas/v2/audit-verify-result.schema.json": "14af8e9283510f0a40e48a2059c929ee44e0fc9fa3cc66a95bfbe90b17c48297",
     "schemas/v2/budget-policy.schema.json": "1de68095db0beb5c7a4be629de26e79f62ebbe748a88d46f36e768edfd1f0d68",
-    "schemas/v2/capabilities.schema.json": "3792aa9d292229cf9b82c7306600a5dfdb63b3274523e0ed5dd4f952a04cb833",
+    "schemas/v2/capabilities.schema.json": "8d151a098a3cf7285fcadec8c1f192bed963ed6da3146e62d25155eb18afba9a",
     "schemas/v2/certification-bundle.schema.json": "82ce31a1ed6c7e21b0ba88ff62a7b8b768fc3b176b1d06fce023203830b94725",
     "schemas/v2/channel-presence-payload.schema.json": "4eeb224910e6f7eee3ab5e7c3899559c25c83a26d0022e0ad195c4672611977a",
     "schemas/v2/channel-written-payload.schema.json": "ccecff3c71a3275ad8db035ac0e04db25e6f8d23cf091ddbcd5a60d1be1cbb6b",
@@ -204,13 +204,13 @@
     "schemas/workspace-file.schema.json": "464de85c2a068243084ee9c1d969bc7cd5d8f7948574e58450d6493c38a0e1e4",
     "spec/v1/alias-detectors.json": "0b2f28808ffe0b9d98a187775038c3406bb70919747a788a6e4f866e293ae6d3",
     "spec/v1/capability-declaration-classes.json": "e7729aed5c4b4e1dd02abab0530f14cc95f5d4070fe51fb139e7f5cccefa00c6",
-    "spec/v1/core-standard-manifest.json": "ca151601427c2887b0c3ecc9498f5f0de1c4f6d1724b7e06eb7043be20eef1b1",
+    "spec/v1/core-standard-manifest.json": "592b87877bb6f713f77e6f4f64d671a63a119a71372405370d8a426cfab4113a",
     "spec/v1/deprecations.json": "a3293072ea951857395d05f0437264e88965f1e9019ff61c55bacfa9c1aaa17c",
     "spec/v1/deprecations.schema.json": "3e393c405d2a41b467d8c5e3c468549078df1ce6a6d2588fc488097b95d9b55b",
     "spec/v1/event-codemap.json": "3da60d884157793a360da532a9fcbbfb5285636db325a74cec94b34622186d97",
     "spec/v1/event-codemap.schema.json": "d05933b2e88103aff51a2f774df97b9bda065e0fc88dbd9b114cc47a32189174",
     "spec/v1/extensions.json": "79a60754aa16cbdbdb604f8e5c00038af535a1690a4d07bd5ff7c38f0256a7bc",
-    "spec/v1/gaps.json": "2705bd6f7be31392ba09da318e99d55905dd08aa80e76e1226cf8f1a85132d18",
+    "spec/v1/gaps.json": "95c1c9242a97fafd75d5ca040c2ca07e146dbfa6d9be1fcee9ba882da0efd8ed",
     "spec/v1/gaps.schema.json": "8fd83259f556553c9df0f53e7a82ca8c2a4771d471197f69b4e2ae0ceeacfd66",
     "spec/v1/migrations.json": "4c50760be70cb644d02427bcaf5749606700edf4513f423903cf3b1d12f5c300",
     "spec/v1/migrations.schema.json": "886779aa6c22e646db097f5df210adb018a4dd14a7b815465a18c8a7056c8f72",
@@ -240,7 +240,7 @@
     "spec/v2/core/persistence.md": "249a1de353f421cdf92b9006a13a10afdb002f4029eb6a13520cc95252edb2ec",
     "spec/v2/core/portability.md": "ab13a6ca43544b9a6a91edfb377ec680c768d14be841c84fb79125b231426891",
     "spec/v2/core/replay.md": "4a8b53325e18aa53400ece81168c76b4402b932e5e304a391754f293b126eabf",
-    "spec/v2/core/runs.md": "991757ded9b3645bafad2344f4ccb75c7d79993bd80269f9dd3489193841d71b",
+    "spec/v2/core/runs.md": "bee5da861b31a583257f3d6020fbd245c36ba5ec40340d54ae6741f0c6f50ede",
     "spec/v2/core/security-defaults.md": "887d8c4bc592094e3b931c23f1c2175c18ebbd47528b074016f9d2091bc513b2",
     "spec/v2/core/storage.md": "dc94b985847c1341c7a064f04a6010f0fdbe6c3ab3e555d4362878c81d764c18",
     "spec/v2/core/tool-catalog.md": "d16a9004418719c48301804aefa4d7ab6f41112a4ed83727f552aa1b92b418b0",
@@ -249,7 +249,7 @@
     "spec/v2/core/workflow-chain-packs.md": "fdce7a8477e269950a2bac05ee6eddbd66eb0b670b464d00054f7196ec05d29c",
     "spec/v2/corrections.json": "3a8d93e33865b692d26a3b6bfd3819766e206b2e0c2a69669baa4bf833d05a49",
     "spec/v2/corrections.schema.json": "46bbffb954d13bd9995aebc912ceeb2544f7064331abf25fd6ab85c81a5cec94",
-    "spec/v2/declaration.json": "967f6db929fd7c4000d41a12d8b6d9f77bad90348de0dbc792b02f33e7026385",
+    "spec/v2/declaration.json": "45ca70a0d74fdade13192565cb3b35e446ffab537f2caaf23da73a4050b3c6ac",
     "spec/v2/declaration.schema.json": "ef951633e4070899f64828f5cf1b5f4870270a0360f81dbb49b5b4d6cd407550",
     "spec/v2/errors.json": "83f048b0a06952b4af6f125fb66c4212acab51056b411390f1010acd6ab9cdc0",
     "spec/v2/errors.schema.json": "47404ad53e6147cf9017b813483712466573e419fb33e6c4b6c12d3e7deba1bc",
@@ -303,9 +303,9 @@
     "spec/v2/path-manifest.json": "27c2307b84376b2f22bea4e2213fc7e33ef3bf8fd1d18039f7955edb00dc9c9a",
     "spec/v2/peer-dependency-aliases.json": "d10299280abee08258502925bc327293ee413e0108cd6e6ec75ff6110653308d",
     "spec/v2/profiles.json": "180beb9ef2d161766fa23b2987e7e829851e3d316273147cf6a4a3f324befd6b",
-    "spec/v2/release.json": "5eb3b4b185365381f4bbe0443bf08c231af3001ebc5393b8fcc28f1d93b01a8f",
+    "spec/v2/release.json": "4cc5a5efe139e3ef205ccba16dcc52a684cc65d682a24c195af7ad8a236896ad",
     "spec/v2/retention-floors.json": "eaf3722d95c79947af1d4269ef85117e126518c588cfcf1a2b21b97269f51624",
-    "spec/v2/surface-baseline.json": "20fa0652d150e712e5403d2635d4ff5b53c0123d5af25e45c060582835f7cb35"
+    "spec/v2/surface-baseline.json": "b7b01715d4b07dcefd055a937e8f865896e35017ff89f99a3b1aa1a801bbdb87"
   },
-  "corpusCommit": "b18ad74419ad18353685a28306424865a5d09f90"
+  "corpusCommit": "501121df013767d1adfcc3a342d82737d6fbd054"
 }

package/src/lib/exhaustion-facet-witness.ts

@@ -0,0 +1,104 @@
+/**
+ * The budget exhaustion-facet witness (RFC 0231), shared by every major that
+ * gives a budget a run wire surface (`major-profile.ts` `runBudget`).
+ *
+ * A host that lists `budget.onExhaustion` serves exactly those values. The
+ * suite reads the list, and where it leaves out `interrupt` posts one create
+ * that asks for it. The answer must be `422 capability_not_provided`.
+ *
+ * Unaided: one discovery read and one create. Nothing is spent, because a
+ * conforming host creates no run.
+ *
+ * Two halves, as in `budget-witness.ts`: {@link drive} observes and asserts
+ * nothing; {@link judge} is pure.
+ *
+ * Not witnessed here: a host that lists `interrupt` and serves it. The resume
+ * that extends a budget has no specified shape (RFC 0231 gap G2), so no suite
+ * can drive it.
+ */
+
+import { driver, type OpenWOPResponse } from './driver.js';
+import { readErrorCode } from './error-envelope.js';
+import { getAdvertisedFixtures, isFixtureAdvertised } from './fixtures.js';
+import { BUDGET_FIXTURE } from './budget-witness.js';
+import type { MajorProfile } from './major-profile.js';
+
+/** A valid policy whose only unserved part is the exhaustion behaviour. */
+export const UNSERVED_POLICY = { maxToolCalls: 2, onExhaustion: 'interrupt' } as const;
+const SERVED = new Set(['fail', 'interrupt']);
+
+export interface FacetObservation {
+  /** The advertised list, as the host sent it. */
+  readonly facet: unknown;
+  /** The answer to a create asking for `interrupt`, or `undefined` when the list serves it and none was sent. */
+  readonly create: { readonly status: number; readonly code: string | undefined } | undefined;
+}
+export type FacetRun =
+  | { readonly kind: 'skip'; readonly disposition: 'inapplicable' | 'blocked'; readonly reason: string }
+  | { readonly kind: 'observed'; readonly observation: FacetObservation };
+
+export interface FacetFinding {
+  readonly rule: 'contains-fail' | 'refused';
+  readonly ok: boolean;
+  readonly doc: string;
+  readonly message: string;
+}
+
+async function http(fn: () => Promise<OpenWOPResponse>): Promise<OpenWOPResponse | null> {
+  try { return await fn(); } catch { return null; }
+}
+
+/** A workflow the host says it has, so the create is valid apart from the exhaustion behaviour. */
+function advertisedWorkflow(): string | undefined {
+  if (isFixtureAdvertised(BUDGET_FIXTURE)) return BUDGET_FIXTURE;
+  return [...(getAdvertisedFixtures() ?? [])].sort()[0];
+}
+
+/** Read the facet and, where it leaves out `interrupt`, ask for it once. Asserts nothing. */
+export async function drive(profile: MajorProfile, doc: unknown): Promise<FacetRun> {
+  const family = profile.family(doc, 'budget');
+  if (family === null) return { kind: 'skip', disposition: 'inapplicable', reason: 'the host does not advertise budget' };
+  const facet = family['onExhaustion'];
+  if (facet === undefined) return { kind: 'skip', disposition: 'inapplicable', reason: 'budget.onExhaustion is not advertised — the host is taken to serve both values' };
+  if (family['enforce'] !== 'hard') return { kind: 'skip', disposition: 'inapplicable', reason: 'budget.enforce is not hard — no exhaustion behaviour applies, and a consumer ignores the list' };
+
+  if (!Array.isArray(facet) || facet.includes('interrupt')) return { kind: 'observed', observation: { facet, create: undefined } };
+
+  const fragment = profile.runBudget(UNSERVED_POLICY);
+  if (fragment === null) return { kind: 'skip', disposition: 'inapplicable', reason: `major ${profile.major} gives a run budget no createRun surface` };
+  const workflowId = advertisedWorkflow();
+  if (workflowId === undefined) return { kind: 'skip', disposition: 'inapplicable', reason: 'no fixture is advertised — the suite has no workflow to name in an otherwise valid create' };
+
+  const res = await http(() => driver.post(profile.runsPath, { workflowId, ...fragment }));
+  if (res === null) return { kind: 'skip', disposition: 'blocked', reason: `POST ${profile.runsPath} unreachable (fetch failed)` };
+  if (res.status === 429) return { kind: 'skip', disposition: 'blocked', reason: `POST ${profile.runsPath} answered 429 — the run budget of the host, not the wire` };
+
+  // A host that accepted the create started a run. Stop it, so a failing row leaves none behind.
+  const runId = (res.json as { runId?: unknown } | undefined)?.runId;
+  if (typeof runId === 'string') await http(() => driver.post(`${profile.runsPath}/${encodeURIComponent(runId)}/cancel`, {}));
+
+  return { kind: 'observed', observation: { facet, create: { status: res.status, code: readErrorCode(res.json) ?? undefined } } };
+}
+
+/** What the list and the answer must show. Pure. */
+export function judge(profile: MajorProfile, o: FacetObservation): FacetFinding[] {
+  const home = profile.major === 1 ? 'spec/v1/budget-policy.md §D' : `${profile.specRoot}/runs.md §Refusals`;
+  const out: FacetFinding[] = [];
+  const list = Array.isArray(o.facet) ? o.facet : null;
+  const wellFormed = list !== null && list.length > 0 && list.every((v) => typeof v === 'string' && SERVED.has(v));
+  out.push({
+    rule: 'contains-fail',
+    ok: wellFormed && list.includes('fail'),
+    doc: 'schemas/capabilities.schema.json §budget.onExhaustion',
+    message: `an advertised budget.onExhaustion MUST be a non-empty list of fail and interrupt that contains fail (got ${JSON.stringify(o.facet)})`,
+  });
+  if (o.create !== undefined) {
+    out.push({
+      rule: 'refused',
+      ok: o.create.status === 422 && o.create.code === 'capability_not_provided',
+      doc: home,
+      message: `a host whose budget.onExhaustion does not list interrupt MUST reject a create asking for it with 422 capability_not_provided and create no run (got ${o.create.status} ${o.create.code ?? ''})`.trim(),
+    });
+  }
+  return out;
+}

package/src/lib/scratch-host.ts

@@ -37,6 +37,8 @@ export interface ScratchOptions {
   /** Concurrent in-flight requests admitted before {@link refusal} answers. Unset: no cap. */
   readonly inflightCap?: number | undefined;
   readonly refusal?: ScratchRefusal | undefined;
+  /** Refuse a create by its body. `undefined` admits it. Unset: every create is admitted. */
+  readonly createRefusal?: ((workflowId: string, body: Readonly<Record<string, unknown>>) => ScratchRefusal | undefined) | undefined;
 }
 
 interface StoredRun { readonly id: string; run: ScriptedRun }
@@ -101,6 +103,8 @@ export class ScratchHost {
     if (req.method === 'POST' && path === runs) {
       const body = await this.body(req);
       const workflowId = String(body['workflowId'] ?? '');
+      const refused = this.opts.createRefusal?.(workflowId, body);
+      if (refused !== undefined) return this.send(res, refused.status, refused.body, refused.headers);
       const id = `scratch/run-${++this.seq}`;
       this.runs.set(id, { id, run: this.opts.script?.(workflowId, body) ?? { status: 'running', events: [] } });
       return this.send(res, 201, { runId: id, status: 'running' });

package/src/scenarios/v2-budget-exhaustion-facet.test.ts

@@ -0,0 +1,72 @@
+/**
+ * v2 — a host that lists `budget.onExhaustion` serves exactly those values
+ * (RFC 0231; `spec/v2/core/runs.md` §Refusals). The logic is
+ * `lib/exhaustion-facet-witness.ts`.
+ *
+ *   contains-fail   the advertised list is a non-empty list of `fail` and
+ *                   `interrupt`, and contains `fail`.
+ *   refused         where the list leaves out `interrupt`, a create with
+ *                   `budget.onExhaustion: "interrupt"` answers
+ *                   `422 capability_not_provided`. Unaided: one create, and a
+ *                   conforming host starts no run.
+ *
+ * Dispositions: no `budget`, no `onExhaustion` list, or `enforce` not `hard`
+ * ⇒ `inapplicable`. A list that includes `interrupt` ⇒ the refusal leg is
+ * `inapplicable`; the served path is not witnessed (RFC 0231 gap G2). No
+ * advertised fixture ⇒ the refusal leg is `inapplicable`, since the suite has
+ * no workflow to name.
+ *
+ * No major-1 twin: `lib/major-profile.ts` gives a major-1 run budget no
+ * `createRun` surface the suite drives.
+ *
+ * Proven both ways against the scratch host in
+ * `lib/exhaustion-facet-witness.test.ts`.
+ *
+ * @see spec/v2/core/runs.md §Refusals
+ * @see RFCS/0231-budget-exhaustion-facet.md
+ */
+
+import { describe, it, expect } from 'vitest';
+import { v2Discovery } from '../lib/v2.js';
+import { softSkip } from '../lib/soft-skip.js';
+import { req } from '../lib/requirement-ids.js';
+import { majorProfile } from '../lib/major-profile.js';
+import { drive, judge, type FacetFinding, type FacetRun } from '../lib/exhaustion-facet-witness.js';
+
+const PROFILE = majorProfile(2);
+const ID_CONTAINS_FAIL = 'openwop.requirement.runs.budget-exhaustion-facet-contains-fail';
+const ID_REFUSED = 'openwop.requirement.runs.budget-unserved-exhaustion-refused';
+
+/** One observation per file: both legs read it. */
+let once: Promise<FacetRun> | undefined;
+function facetRun(): Promise<FacetRun> {
+  once ??= (async (): Promise<FacetRun> => {
+    let doc: Record<string, unknown> | null;
+    try { doc = await v2Discovery(); } catch { doc = null; }
+    if (!doc) return { kind: 'skip', disposition: 'blocked', reason: 'v2 discovery unreachable — /.well-known/openwop did not answer 200 with a JSON body under OpenWOP-Version: 2.0' };
+    return drive(PROFILE, doc);
+  })();
+  return once;
+}
+
+type Leg = { readonly skip: readonly ['inapplicable' | 'blocked', string] } | { readonly findings: FacetFinding[] };
+async function leg(rule: FacetFinding['rule'], absent: string): Promise<Leg> {
+  const r = await facetRun();
+  if (r.kind === 'skip') return { skip: [r.disposition, r.reason] };
+  const findings = judge(PROFILE, r.observation).filter((f) => f.rule === rule);
+  return findings.length === 0 ? { skip: ['inapplicable', absent] } : { findings };
+}
+
+describe('v2 budget exhaustion facet (RFC 0231; runs.md §Refusals)', () => {
+  it('an advertised budget.onExhaustion contains fail', async () => {
+    const l = await leg('contains-fail', 'budget.onExhaustion is not advertised');
+    if ('skip' in l) return softSkip(...l.skip);
+    for (const f of l.findings) expect(f.ok, req(ID_CONTAINS_FAIL, f.doc, f.message)).toBe(true);
+  });
+
+  it('an onExhaustion value the host does not list is refused 422 capability_not_provided', async () => {
+    const l = await leg('refused', 'budget.onExhaustion lists interrupt — the host serves it, and the served path has no witness (RFC 0231 gap G2)');
+    if ('skip' in l) return softSkip(...l.skip);
+    for (const f of l.findings) expect(f.ok, req(ID_REFUSED, f.doc, f.message)).toBe(true);
+  });
+});

package/src/scenarios/v2-workspace-scope-from-identity.test.ts

@@ -24,7 +24,9 @@
  *      request instead of the credential serves A's file here.
  *
  * Dispositions: family or seams profile not advertised ⇒ `inapplicable`
- * (lib/seams.ts: the host has not claimed the instrument). Advertised, but the
+ * (lib/seams.ts: the host has not claimed the instrument). That holds in
+ * strict mode too: the family is read with `familyAdvertised`, so no
+ * `family.workspace` opt-out is needed from a host that does not serve it. Advertised, but the
  * seam answers 404/405/501, the second-tenant key is absent / identical /
  * refused, or (leg 2) A's scope cannot be read from a run ⇒ `blocked` — the host
  * took the obligation on and the suite could not measure it.
@@ -33,7 +35,7 @@ import { describe, it, expect } from 'vitest';
 import { randomUUID } from 'node:crypto';
 import { driver, type OpenWOPResponse } from '../lib/driver.js';
 import { loadEnv } from '../lib/env.js';
-import { v2Discovery, gateFamily } from '../lib/v2.js';
+import { v2Discovery, familyAdvertised } from '../lib/v2.js';
 import { seamsProfileAdvertised, SEAMS_PREFIX } from '../lib/seams.js';
 import { isFixtureAdvertised } from '../lib/fixtures.js';
 import { softSkip, seamAbsent } from '../lib/soft-skip.js';
@@ -55,7 +57,12 @@ async function http(fn: () => Promise<OpenWOPResponse>): Promise<OpenWOPResponse
 async function gate(): Promise<Gate> {
   const doc = await v2Discovery();
   if (!doc) return { ok: false, kind: 'blocked', reason: 'v2 discovery unreachable — /.well-known/openwop did not answer 200 JSON under OpenWOP-Version: 2.0' };
-  if (!(await gateFamily('workspace'))) return { ok: false, kind: 'inapplicable', reason: 'workspace family not advertised (gate recorded under openwop.family.workspace)' };
+  // `familyAdvertised`, not `gateFamily`: `workspace` is optional, and a host that does not advertise it has
+  // taken on no obligation here. Until 2.45.7 this was `gateFamily`, which in strict mode
+  // (`--require-behavior`) FAILS an unadvertised family unless the operator opts it out — so this file
+  // recorded `executed-fail` on a host its own header calls `inapplicable` (MyndHyve, 2.45.5), while
+  // its sibling isolation scenarios recorded `inapplicable` in the same run.
+  if (!(await familyAdvertised('workspace'))) return { ok: false, kind: 'inapplicable', reason: 'workspace family not advertised — no obligation' };
   if (!seamsProfileAdvertised(doc)) return { ok: false, kind: 'inapplicable', reason: 'workspace files have no protocol path; the only observation surface is the seams profile (conformance.seamsProfile = openwop-conformance-seams-v2), which is not advertised' };
   const probe = await http(() => driver.get(FILES));
   if (probe === null) return { ok: false, kind: 'blocked', reason: `GET ${FILES} unreachable (fetch failed)` };