@openwop/openwop-conformance 2.46.1 → 2.46.3

package/CHANGELOG.md

@@ -1,5 +1,23 @@
 # `@openwop/openwop-conformance` Changelog
 
+## [2.46.3] — 2026-10-12 — discovery rules the schema cannot carry
+
+Four rules from openwop-app's v2 discovery review (#4676, ADR 0858, ADR 0812). Each is stated in prose or a schema description, and none can go into the schema within 2.x: a conditional `required` or a narrowed pattern is a major change (COMPATIBILITY.md §2.4). The suite carries them, following RFC 0210 §C; the schema changes are booked for 3.0 (TODO.md).
+
+- **New `v2-multi-agent-advertisement`** (claims-check, wave 4 of `family-advert-witness.ts`):
+  - `multiAgent.level3-cross-host-causation`: at `executionModel.version` >= 3 the host advertises `crossHostCausation` with a non-empty `hostId`. The levels are cumulative, so the description's "`version: 3`" now reads "3 or higher".
+  - `multiAgent.level4-replay-determinism`: at >= 4, `replayDeterminism` with `refusalDivergenceEmission: true`.
+  - `multiAgent.escalation-kind-canonical`: `confidenceEscalationInterruptKind` is `clarification` or `approval`. Level 2 fires one of the two, and the v2 interrupt `kind` is closed, so an `x-host-` value promises an interrupt the payload schema rejects. The description no longer points at `spec/v1/host-extensions.md` or an RFC 0044 §C kind-mapping document.
+- **New `v2-auth-subject-link-key`:** a host advertising both the `saml` and `scim` lanes advertises `auth.subjectLinkKey` (`identity.md` §3 now says MUST, as RFC 0164 §A.3 did at v1). Forbidding the key with one lane is a new rule and needs an RFC.
+- **Fan-out has no v2 seat.** The `dispatch-config` and `orchestrator-decision` descriptions named `capabilities.dispatch.*` and `POST /v1/workflows`. They now say plainly that a v2 host refuses `fanOutPolicy: "parallel"` and a non-empty `nextWorkerInputs` until a seat is added. That was already the rule, because the seat could not be advertised. `dispatch-config.schema.json` is hand-owned from here. Adding one needs an RFC.
+- **What a host's next bundle shows:** MyndHyve advertises `x-host-myndhyve-low-confidence` and will record `escalation-kind-canonical` `executed-fail`. Its committed bundles stay valid measurements at their suite versions (§2.3). openwop-app (level 5) and the v2 reference host pass or are `inapplicable`.
+
+## [2.46.2] — 2026-10-12 — the seams profile is derived from its advert
+
+- **`openwop-conformance-seams-v2` derives from `conformance.seamsProfile`, not from any `conformance` block.** The predicate was the bare `conformance` metadata key, which also carries `certificationBundleUrl` and `mockAgent`. A host that published only a bundle URL claimed the profile, so its claim flapped with whether the URL was set (openwop-app, 7 cuts on 2.45.30 with no host change), and four openwop-app bundles (`openwop-workflow-engine-2.35.1`, `-2.43.0`, `-2.44.0`, `-2.45.28-4683d9f89`) certified it with no seam mounted. A predicate `metadata` entry may now name one member, `key.member` (capabilities.md §7); `v2ProfileIds` and `v2-profiles-derived-only` share one `metadataPresent`.
+- **What a host's next bundle shows:** a host with a `conformance` block but no `seamsProfile` no longer lists the profile. `--verify` of the four bundles above now refuses their seams-v2 certification (`profile-not-derivable`, scoped to that profile); their other certifications stand. The v2 reference host and MyndHyve are unaffected.
+- **`check-declaration` rule 13:** every predicate entry resolves to a declared family, a kept metadata key, or `key.member` naming a property of that key's generated schema.
+
 ## [2.46.1] — 2026-10-11 — the modal webhook receiver closes through a tunnel
 
 - **`startModalReceiver().close()` no longer hangs on a keep-alive socket.** Through a public tunnel the tunnel client holds a keep-alive connection open, and a bare `server.close()` waits for it: the v2 reference host's certified public cut on 2.46.0 recorded `v2-webhook-message-id-stable` `executed-fail` with "Hook timed out in 30000ms" in its `afterEach`, while the host's deliveries were correct (the loopback rehearsal passed the same leg). `close()` now closes idle and then all connections, the idiom `scoped-receiver.ts` already used. No assertion changes.

package/README.md

@@ -137,7 +137,7 @@ Each scenario file records its disposition and assertion count in `<report-dir>/
 
 ## What's Covered
 
-The current suite has 653 scenario files under `src/scenarios/`. By target major ([`scenario-majors.json`](./scenario-majors.json)): 213 files run against a v2 host and 455 against a v1 host; 15 of them run at both.
+The current suite has 655 scenario files under `src/scenarios/`. By target major ([`scenario-majors.json`](./scenario-majors.json)): 215 files run against a v2 host and 455 against a v1 host; 15 of them run at both.
 
 The v2 scenarios (`src/scenarios/v2-*.test.ts`) cover, by area:
 
@@ -166,7 +166,7 @@ Three kinds of scenario share the tree:
 - **Host** checks drive a live host over HTTP.
 - **Gated** checks run only when the host advertises the family, profile or fixture they need, and otherwise record `inapplicable` or `blocked` with a reason. `--require-behavior` turns an advertised-but-unwitnessable behaviour into a failure.
 
-Current source tree: 653 scenario files. [`coverage.md`](./coverage.md) maps each spec document and every OpenAPI operation to its scenarios. [`CHANGELOG.md`](./CHANGELOG.md) records when each scenario landed.
+Current source tree: 655 scenario files. [`coverage.md`](./coverage.md) maps each spec document and every OpenAPI operation to its scenarios. [`CHANGELOG.md`](./CHANGELOG.md) records when each scenario landed.
 
 ## How the 2.x suite is built
 

package/dist/lib/v2-profiles.js

@@ -68,12 +68,30 @@ function readRegistry() {
 export function v2RegistryAvailable() {
     return readRegistry() !== null;
 }
+/**
+ * Is one predicate `metadata` entry present in `doc`? An entry is a metadata
+ * key, or `key.member` for one member of it (capabilities.md §7).
+ *
+ * The member form exists for the seams profile. Its advert is
+ * `conformance.seamsProfile` (conformance.md §The seams profile), but the
+ * `conformance` block also carries `certificationBundleUrl` and `mockAgent`.
+ * Until 2.46.2 the predicate was the bare key, so a host that published only a
+ * bundle URL claimed the profile, and four openwop-app bundles certified it
+ * with no seam mounted.
+ */
+export function metadataPresent(doc, entry) {
+    const dot = entry.indexOf('.');
+    if (dot < 0)
+        return doc[entry] !== undefined;
+    const v = doc[entry.slice(0, dot)];
+    return typeof v === 'object' && v !== null && !Array.isArray(v) && v[entry.slice(dot + 1)] !== undefined;
+}
 /**
  * Every profile the declaration derives at major 2, or `null` when the registry
  * is unavailable (see the module docblock — `null` is not `[]`).
  *
  * The predicate is the registry's own: every listed family present as a record,
- * every listed metadata key present at the root. Nothing here is hand-written
+ * every listed metadata entry present ({@link metadataPresent}). Nothing here is hand-written
  * per profile, so adding a v2 profile is a corpus edit and not a code edit.
  */
 export function v2ProfileIds(doc) {
@@ -91,7 +109,7 @@ export function v2ProfileIds(doc) {
             continue;
         const families = Array.isArray(p.predicate?.families) ? p.predicate.families.map(String) : [];
         const metadata = Array.isArray(p.predicate?.metadata) ? p.predicate.metadata.map(String) : [];
-        if (families.every(isRecord) && metadata.every((k) => root[k] !== undefined))
+        if (families.every(isRecord) && metadata.every((k) => metadataPresent(root, k)))
             out.push(p.id);
     }
     return out;

package/dist/spec-artifacts.lock.json

@@ -1,5 +1,5 @@
 {
   "package": "@openwop/spec-artifacts",
-  "version": "2.46.1",
-  "stampSha256": "292af71458912382d78a12adc1da1d6a913346d875096727354f909a35bab2b2"
+  "version": "2.46.3",
+  "stampSha256": "982ec02aa2b5d1d3ec6a64da49429f3361125a0a2bc02aa669c3efff64da1b01"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openwop/openwop-conformance",
-  "version": "2.46.1",
+  "version": "2.46.3",
   "description": "Black-box conformance suite for OpenWOP hosts (v2 current; v1 scenarios retained for the frozen v1 tree).",
   "repository": {
     "type": "git",
@@ -56,6 +56,6 @@
     "@openwop/spec-artifacts": "file:../spec-artifacts"
   },
   "peerDependencies": {
-    "@openwop/spec-artifacts": "2.46.1"
+    "@openwop/spec-artifacts": "2.46.3"
   }
 }

package/requirements.json

@@ -2,11 +2,11 @@
   "$comment": "GENERATED by conformance/scripts/generate-requirement-registry.mjs — do not edit. One record per it()/test() in src/scenarios. Ids: openwop.it.<file-stem>.<title-slug>[~n] (src/lib/requirement-ids.ts). A record with id null has an interpolated title; its run-time row is keyed by the rendered title and maps here by file+line only. Renamed ids need a row in requirement-aliases.json.",
   "generatedFrom": "src/scenarios/*.test.ts",
   "counts": {
-    "files": 741,
-    "tests": 2790,
-    "withStableId": 2790,
+    "files": 743,
+    "tests": 2794,
+    "withStableId": 2794,
     "interpolatedTitles": 0,
-    "explicitIds": 2646
+    "explicitIds": 2650
   },
   "records": [
     {
@@ -28670,6 +28670,20 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.v2-auth-subject-link-key.a-host-advertising-both-the-saml-and-scim-lanes-advertises-subjectlinkkey",
+      "file": "v2-auth-subject-link-key.test.ts",
+      "line": 34,
+      "title": "a host advertising both the saml and scim lanes advertises subjectLinkKey",
+      "explicitId": "openwop.requirement.auth.subject-link-key-advertised",
+      "citations": [
+        {
+          "section": null,
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
     {
       "id": "openwop.it.v2-authorization-advertisement.the-authorization-record-validates-against-its-capabilities-schema-seat",
       "file": "v2-authorization-advertisement.test.ts",
@@ -33493,6 +33507,48 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.v2-multi-agent-advertisement.executionmodel-version-3-advertises-crosshostcausation-with-a-hostid",
+      "file": "v2-multi-agent-advertisement.test.ts",
+      "line": 41,
+      "title": "executionModel.version >= 3 advertises crossHostCausation with a hostId",
+      "explicitId": "openwop.requirement.multiAgent.level3-cross-host-causation",
+      "citations": [
+        {
+          "section": null,
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-multi-agent-advertisement.executionmodel-version-4-advertises-replaydeterminism-with-refusaldivergenceemis",
+      "file": "v2-multi-agent-advertisement.test.ts",
+      "line": 50,
+      "title": "executionModel.version >= 4 advertises replayDeterminism with refusalDivergenceEmission",
+      "explicitId": "openwop.requirement.multiAgent.level4-replay-determinism",
+      "citations": [
+        {
+          "section": null,
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-multi-agent-advertisement.confidenceescalationinterruptkind-is-clarification-or-approval",
+      "file": "v2-multi-agent-advertisement.test.ts",
+      "line": 59,
+      "title": "confidenceEscalationInterruptKind is clarification or approval",
+      "explicitId": "openwop.requirement.multiAgent.escalation-kind-canonical",
+      "citations": [
+        {
+          "section": null,
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
     {
       "id": "openwop.it.v2-multi-party-conversation-advertisement.the-multipartyconversation-record-validates-against-its-capabilities-schema-seat",
       "file": "v2-multi-party-conversation-advertisement.test.ts",
@@ -34711,7 +34767,7 @@
     {
       "id": "openwop.it.v2-profiles-derived-only.the-v2-document-carries-no-root-profiles",
       "file": "v2-profiles-derived-only.test.ts",
-      "line": 48,
+      "line": 50,
       "title": "the v2 document carries no root `profiles[]`",
       "explicitId": "openwop.requirement.0169.profiles-derived-only.no-root-profiles",
       "citations": [
@@ -34724,7 +34780,7 @@
     {
       "id": "openwop.it.v2-profiles-derived-only.every-registry-profile-is-derivable-from-the-document-the-discovery-core-predica",
       "file": "v2-profiles-derived-only.test.ts",
-      "line": 54,
+      "line": 56,
       "title": "every registry profile is derivable from the document; the discovery-core predicate holds on a valid document",
       "explicitId": "openwop.requirement.0169.profiles-derived-only.derivable",
       "citations": [
@@ -44764,7 +44820,7 @@
     {
       "id": "openwop.it.seams-floor-legs-gated.every-leg-of-a-seams-profile-floor-file-reaches-a-seams-gate-before-its-first-as",
       "file": "seams-floor-legs-gated.test.ts",
-      "line": 84,
+      "line": 82,
       "title": "every leg of a seams-profile floor file reaches a seams gate before its first assertion",
       "explicitId": "openwop.it.seams-floor-legs-gated.every-leg-of-a-seams-profile-floor-file-reaches-a-seams-gate-before-its-first-a",
       "citations": [

package/scenario-majors.json

@@ -1,9 +1,9 @@
 {
   "$comment": "GENERATED by conformance/scripts/generate-scenario-majors.mjs (RFC 0168 §D.3). Do not edit; add a file to BOTH_MAJORS in the generator to target both majors.",
   "counts": {
-    "files": 653,
+    "files": 655,
     "v1": 455,
-    "v2": 213
+    "v2": 215
   },
   "majors": {
     "a2a-1-0-agent-card.test.ts": [
@@ -1329,6 +1329,9 @@
     "v2-auth-challenge.test.ts": [
       2
     ],
+    "v2-auth-subject-link-key.test.ts": [
+      2
+    ],
     "v2-authorization-advertisement.test.ts": [
       2
     ],
@@ -1569,6 +1572,9 @@
     "v2-mrtr-rounds-ceiling.test.ts": [
       2
     ],
+    "v2-multi-agent-advertisement.test.ts": [
+      2
+    ],
     "v2-multi-party-conversation-advertisement.test.ts": [
       2
     ],

package/schemas/CORPUS-STAMP.json

@@ -1,17 +1,17 @@
 {
   "_comment": "Provenance of @openwop/spec-artifacts (RFC 0168 §D.2). files: SHA-256 per file; the conformance suite compares the installed peer against dist/spec-artifacts.lock.json at start.",
   "package": "@openwop/spec-artifacts",
-  "version": "2.46.1",
-  "corpusTag": "v2.46.1",
+  "version": "2.46.3",
+  "corpusTag": "v2.46.3",
   "files": {
     "api/.redocly.lint-ignore.yaml": "bf5a8350b88a72fa43f59605ed8d903ed24b6cfccda5e45509c9f6ed9ee4e712",
     "api/asyncapi.yaml": "d5ecb9ee6114582be3b1f662c84bfac9ae96dae7bacb853e461168f70a8e1c7d",
     "api/grpc/openwop.proto": "c3e72bb17cba514ee98feb6434e6c9b6ea6795bfd086489ec69fd882dd1ad977",
     "api/openapi.yaml": "ac6de5303872664b78ff419c035915593e01599e02835e777a0123de1baeb398",
     "api/redocly.yaml": "b0604c89b2ca6d5076ec25725c539dad44a741a811fe524439ee6daef8baa09f",
-    "api/seams-v2.yaml": "698ff413d4ab103656f15f784ecde2b72191dd9c48d47a459c3fed9c6ac5d65a",
-    "api/v2/asyncapi.yaml": "31709ec59884ad87f2193ad5a855390ce05647a1ca507ab1aa31dd7b615e614a",
-    "api/v2/openapi.yaml": "f00d724b067ccbad46d7d9d103efc641ced8118533af2346465559b286f04f86",
+    "api/seams-v2.yaml": "cb175971637256b36144514f7dbda94281892a1de32afb4eb2bb2e515e8029a2",
+    "api/v2/asyncapi.yaml": "cb8c4a0ab6b398fd32f35d5ad496e6fbf115f4af1546533440f1827cc660aaba",
+    "api/v2/openapi.yaml": "f4fef925c3013db82449498de884da1ae38a19f802968a0adf2d7c49aa927a0b",
     "api/v2/redocly.yaml": "1e66b60e6118ad11a823bb620678be464d99dfe50a40e3e6f93ec9429b88b34c",
     "schemas/README.md": "276fc1d51eb08e14e9127b9fd27761d7046ee33c12000f3a64a801322db8bf58",
     "schemas/a2a-task-state.schema.json": "75d5049dea8bd873ff0e7546f1c60c8d36c219bec7084264360be54a8be30ae1",
@@ -117,7 +117,7 @@
     "schemas/v2/artifact.schema.json": "85b9dc284d39b99d2a66fa8cbf47f2dd3d8526d3bd6cc411ad315b372de38975",
     "schemas/v2/audit-verify-result.schema.json": "14af8e9283510f0a40e48a2059c929ee44e0fc9fa3cc66a95bfbe90b17c48297",
     "schemas/v2/budget-policy.schema.json": "1de68095db0beb5c7a4be629de26e79f62ebbe748a88d46f36e768edfd1f0d68",
-    "schemas/v2/capabilities.schema.json": "d859a413ff463ec39acc32a9cb76f2e8c7419e45683d6b7f886861765a9c36c7",
+    "schemas/v2/capabilities.schema.json": "6dc5d67585d6e9a18ab6a0b9b4c9b70b821517b401218fa855539636fb0b5974",
     "schemas/v2/certification-bundle.schema.json": "5cfa7fb5247160333e33a58b60d42bcd4e5269d8391d6a112d301e14828892ed",
     "schemas/v2/channel-presence-payload.schema.json": "fc03df0c20cc12a25f7ee6a47503a4c5931d79fe3d5ff24815e8fd7c1bcb9a87",
     "schemas/v2/channel-written-payload.schema.json": "ccecff3c71a3275ad8db035ac0e04db25e6f8d23cf091ddbcd5a60d1be1cbb6b",
@@ -133,7 +133,7 @@
     "schemas/v2/credential-provenance.schema.json": "f86b09e94b1c524dec7d1c6353965665ae8891e9517faef6e742d639c5578c99",
     "schemas/v2/credential-reference.schema.json": "ea699ce30f58fb2c32d4279158b3f730f70be7b2dc8c3037693a76e66eb3e001",
     "schemas/v2/debug-bundle.schema.json": "0ec1e0bca9c0a359cc6cf3448e5200a1c3d3d5b1e5efaa6605231477daaf3fee",
-    "schemas/v2/dispatch-config.schema.json": "5718c1ed7d95672e618bcb1f1da8e38180e144b12151307afc3aba1314dfcef0",
+    "schemas/v2/dispatch-config.schema.json": "c2da8c7075e120c6204499a48dbf1a95a54e30ab897331425ac37660a53ad216",
     "schemas/v2/effect-ledger-projection.schema.json": "0d118d385a43921118a76888449c5c3c5618eab1b80914b84a0a1b48d18822c1",
     "schemas/v2/effect-seam-manifest.schema.json": "197ef9944ab027a50d1b9352f317cbbc12c8ad955fdb14650fb90477052ffef0",
     "schemas/v2/envelopes/clarification.request.schema.json": "9e39d7b09f0b3ce7902d6aa19ca0eb52867b634efc78a881469c4d44fb3333e7",
@@ -161,7 +161,7 @@
     "schemas/v2/memory-entry.schema.json": "290576ae84f4fef4cdf975932b87963283b11c50ea3d2654b32cd96aa6537c3d",
     "schemas/v2/memory-list-options.schema.json": "01ceb7370c4eacd227d2c9b7e1951ee16650abe26a32dc9d6a8e46a07a39093f",
     "schemas/v2/node-pack-manifest.schema.json": "3eb2db1d84f0b8dbde917686c72c121788a4ce6e42cf13d497a3b68564546d0e",
-    "schemas/v2/orchestrator-decision.schema.json": "4d4b4c5fe73c22a1f42242b403650206ad58fd981f8fd45795894cebe3a514ae",
+    "schemas/v2/orchestrator-decision.schema.json": "1b8146b1d050dc48e3900928c5a0b89874433b3b7fa9ee59c037557b80bd0910",
     "schemas/v2/org-chart-responsibility-view.schema.json": "8a2565e4cdc6737a3946a70799f93642808b92f9c8d56dcdff3a0782053b89a1",
     "schemas/v2/pack-lockfile.schema.json": "2685417702c105146b780cd99154296a46578fbb10d81c8c713348ee26fea898",
     "schemas/v2/part.schema.json": "08b75eaec9a0b4a8cedca7bab732dd906b52b0749eaa444ec1ac015aa43519a5",
@@ -208,14 +208,14 @@
     "schemas/workspace-file.schema.json": "464de85c2a068243084ee9c1d969bc7cd5d8f7948574e58450d6493c38a0e1e4",
     "spec/v1/alias-detectors.json": "22444c22bb88c568339ef512553f9fc38146e22b566d11ab8608f655d688d19c",
     "spec/v1/capability-declaration-classes.json": "e7729aed5c4b4e1dd02abab0530f14cc95f5d4070fe51fb139e7f5cccefa00c6",
-    "spec/v1/core-standard-manifest.json": "cab62b59436a7b57339098abd99d90217b1ca310451dff63837ff27ab90e3a04",
+    "spec/v1/core-standard-manifest.json": "c65192dc000e6ad0f7b6eb641ddbf59a905fb09a702cb23d31b8cc807a85b81c",
     "spec/v1/deprecations.json": "e723bc11d7272c71789ad1303bb7f21809a8a024abf57594f9d5c35dc199ece9",
     "spec/v1/deprecations.schema.json": "3e393c405d2a41b467d8c5e3c468549078df1ce6a6d2588fc488097b95d9b55b",
     "spec/v1/end-of-support.json": "35f0bf3b70fe78b16e2a2fd81a153fc27e703f6c16376c6fe7cdf1f4f2c4e6d4",
     "spec/v1/event-codemap.json": "3da60d884157793a360da532a9fcbbfb5285636db325a74cec94b34622186d97",
     "spec/v1/event-codemap.schema.json": "d05933b2e88103aff51a2f774df97b9bda065e0fc88dbd9b114cc47a32189174",
     "spec/v1/extensions.json": "79a60754aa16cbdbdb604f8e5c00038af535a1690a4d07bd5ff7c38f0256a7bc",
-    "spec/v1/gaps.json": "132a59a97d6a9d1f5a5247062bdf69327256f7a3022b9590fd9481200001ab21",
+    "spec/v1/gaps.json": "2415b9a2152cb526fa7296b82a433d53ce19194a52389d44f43a81539ac26a1c",
     "spec/v1/gaps.schema.json": "8fd83259f556553c9df0f53e7a82ca8c2a4771d471197f69b4e2ae0ceeacfd66",
     "spec/v1/migrations.json": "4c50760be70cb644d02427bcaf5749606700edf4513f423903cf3b1d12f5c300",
     "spec/v1/migrations.schema.json": "886779aa6c22e646db097f5df210adb018a4dd14a7b815465a18c8a7056c8f72",
@@ -223,19 +223,19 @@
     "spec/v1/spec-gaps.json": "ea9612af55bea9dae3e82223d4f714243f8f590b0193f1188257b13491a38afc",
     "spec/v2/README.md": "c58acd84bb67c69043d9f777cbaa16d03e4f0f0a8158d2984526b69981067a14",
     "spec/v2/core/artifact-type-packs.md": "f734740cc3963f86c9f273a7dace26291bba2855161ddd3540618131a2c8d13e",
-    "spec/v2/core/capabilities.md": "8218c44f90782df9630dd276e004def162dad989464cba85e7fc42d987bb61f8",
+    "spec/v2/core/capabilities.md": "6b766bcc1ec8c8dd8054defd8a93d8f5ceb046f16d256aef24d1a98bd89a1f73",
     "spec/v2/core/conformance.md": "3ca291e63bc70a6ef829ae8759ad0ded3741ea7aa507bbbdffc57de443ab2ae2",
     "spec/v2/core/connection-packs.md": "c80f95bd6a03698f35c72cdb2b46bd973f49203bbd786c26760e35fa86e6f23d",
     "spec/v2/core/conversation.md": "8d6abedf6af408a74577753bfca24719d318e2632e10b45ff5d63bdcf31a8aaa",
     "spec/v2/core/errors.md": "e48838701b86bbfe0ffee77b18a8ffc4e5f04724b4318507d9771da653f8da0f",
     "spec/v2/core/events.md": "370621629c2439747f2e4ddab4780eea4345354f79e5098739d66823873f3105",
-    "spec/v2/core/execution.md": "8a0c9db1bbfb97c008ab9328b7333c1cc3318196e78bfbefb49e781bdf4f9d44",
+    "spec/v2/core/execution.md": "2cabb386aea55f70b6e4d10b2b637819589b6cf980325853024ee4b5a3f346d5",
     "spec/v2/core/form-content-packs.md": "02931227899676fd4581a27017be2a6c4953904717be9b81c29d12f87ab3917d",
     "spec/v2/core/headers.md": "f69fe81e4a3ad21879bb85948660c16860eb05bf152928c31aa4898f6d7d1887",
     "spec/v2/core/host-services.md": "168a40935a03867ee82461b5d83d05578be25ee3e5af4eb080587b891231e242",
     "spec/v2/core/i18n.md": "882904b7d59f992ab1e5f7346167161a54cf665b8fee47e64a3862cf9133a580",
     "spec/v2/core/idempotency.md": "adbd317a6ebb57c2759c076297b31f67def9e391576bccd0bbea787b13e85872",
-    "spec/v2/core/identity.md": "02656ffa413b5546342b8580ae928a74e621460746df74d7db50ff4df41d2310",
+    "spec/v2/core/identity.md": "3110138944189c378b0ca959ce1bfe5e808e6fdfc9481afeee128c899db05547",
     "spec/v2/core/interop.md": "6ec8259117bdb387b9323ca22c707b3b8571c00034e461c4ce79f4070c4d6b4a",
     "spec/v2/core/interrupt.md": "10f15dfe30baa0fc748aea0a067f9b271bea316fde6b598d78f77edc296f698a",
     "spec/v2/core/node-pack-runtimes.md": "e1088cb69b8c3c67256c494063328916c2980ab1aa97a7063de25bab82fdb1e5",
@@ -254,7 +254,7 @@
     "spec/v2/core/workflow-chain-packs.md": "fdce7a8477e269950a2bac05ee6eddbd66eb0b670b464d00054f7196ec05d29c",
     "spec/v2/corrections.json": "3a8d93e33865b692d26a3b6bfd3819766e206b2e0c2a69669baa4bf833d05a49",
     "spec/v2/corrections.schema.json": "46bbffb954d13bd9995aebc912ceeb2544f7064331abf25fd6ab85c81a5cec94",
-    "spec/v2/declaration.json": "22530d99c92b9e0d3ae0dce25507f4cc6350486d560ad8cc01acda054e9face3",
+    "spec/v2/declaration.json": "6fa19c3a68df5a951f9dabea13afbd4ee3b288a110002461f373b191b3eca99b",
     "spec/v2/declaration.schema.json": "ef951633e4070899f64828f5cf1b5f4870270a0360f81dbb49b5b4d6cd407550",
     "spec/v2/eos-override.json": "4c72d2f6a658943b01c1de1643cf294642091933af7832f38ee5495df684cb2d",
     "spec/v2/errors.json": "1f0e29455edbd22e28f67f221766209c3c55ac4987beb77993b5702dd7cae131",
@@ -312,10 +312,10 @@
     "spec/v2/migrations.schema.json": "b91ade6320ad1b1185c9495b9424f3aa63438ed8e412c45171c227d82c0afd86",
     "spec/v2/path-manifest.json": "7b5679a4dad98c80d855361d88a98c8a4e045af15e310862a05b285b815dc9fc",
     "spec/v2/peer-dependency-aliases.json": "d10299280abee08258502925bc327293ee413e0108cd6e6ec75ff6110653308d",
-    "spec/v2/profiles.json": "3d84d7712e93d1e823e362615d5f4aaba0789ea4e044b3774965876fbb8829a7",
-    "spec/v2/release.json": "4facb248b7147ef0568bf434973a8a116d8f39f293e5c23665257f94c97cb3fe",
+    "spec/v2/profiles.json": "b382b261c7844798575f7c1b37c934f0da19846016a2337d883d4f5ef6e05479",
+    "spec/v2/release.json": "86eefef2a95ae211e813e113b435bdefe8319f263ad43d005362a6ded3db4aaa",
     "spec/v2/retention-floors.json": "eaf3722d95c79947af1d4269ef85117e126518c588cfcf1a2b21b97269f51624",
-    "spec/v2/surface-baseline.json": "01a3e01c87e2b5fdbf4c6290e5730726acc195801c97b1f23c4297897b6d3979"
+    "spec/v2/surface-baseline.json": "046cfc5a89c711a4b06244389ba2131d89d933cc9c888c78b68f36779914228c"
   },
-  "corpusCommit": "010da68bf57d317c7faeeda29f26bedfb3406a49"
+  "corpusCommit": "4b2a2a43ddd40943ebf4c332592171c3587c6e15"
 }

package/src/lib/family-advert-witness.ts

@@ -9,6 +9,11 @@
  * facet legs; `conversationTurnModelProvenance`, `channelPresence`,
  * `nondeterminismPolicy`, `promptLibrary` and `envelopeContracts` carry no facet
  * a host-binding v2 rule gives meaning to, so they get the record leg only.
+ * Wave 4 (suite 2.46.3): the `multiAgent.executionModel` sub-blocks a version
+ * level requires and the escalation kind it may name, and `auth.subjectLinkKey`
+ * under the two linking lanes. These rules live in prose and schema
+ * descriptions, not in the schema itself: a conditional `required` or a narrowed
+ * enum is a major change (COMPATIBILITY.md §2.4), so the suite carries them.
  *
  * A claims-check family is witnessed by what the host says about itself, so
  * every leg here reads the discovery record alone. Each leg checks one facet
@@ -69,7 +74,8 @@ export type AdvertFamily =
   | 'scheduling' | 'artifactTypes' | 'aiEnvelope' | 'deadLetter' | 'portability'
   | 'dataResidency' | 'conversationTurnModelProvenance' | 'multiPartyConversation' | 'channelPresence'
   | 'nodePackRuntimes' | 'uiPlugins' | 'purposePropagation' | 'nondeterminismPolicy'
-  | 'agentRuntime' | 'promptLibrary' | 'envelopeContracts';
+  | 'agentRuntime' | 'promptLibrary' | 'envelopeContracts'
+  | 'multiAgent' | 'auth';
 
 export function recordSchemaLeg(profile: MajorProfile, discovery: unknown, family: AdvertFamily, doc: string): AdvertOutcome {
   return onFamily(profile, discovery, family, (rec) => observed([bySchema(`/properties/${family}`, rec, doc, `the ${family} record`)]));
@@ -409,3 +415,82 @@ export const agentRuntimeImpliesManifestRuntimeLeg = (p: MajorProfile, d: unknow
   const ok = agents !== null && isRecord(agents['manifestRuntime']);
   return observed([{ ok, doc: 'host-services.md §agentRuntime', message: `a host advertising agentRuntime MUST also advertise agents.manifestRuntime${ok ? '' : agents === null ? ' (agents is absent)' : ' (agents.manifestRuntime is absent)'}` }]);
 });
+
+// ---------------------------------------------------------------------------
+// Wave 4 — multiAgent.executionModel (execution.md §multiAgent) and auth (identity.md §3)
+// ---------------------------------------------------------------------------
+
+const MA_DOC = 'execution.md §multiAgent';
+
+/** The executionModel facet and its integer level, or a skip when either is absent. */
+function executionModel(rec: Record<string, unknown>, atLeast: number): { em: Record<string, unknown> } | AdvertOutcome {
+  const em = rec['executionModel'];
+  if (!isRecord(em)) return inapplicable('the host does not advertise multiAgent.executionModel');
+  const v = em['version'];
+  if (typeof v !== 'number' || !Number.isInteger(v)) return observed([{ ok: false, doc: MA_DOC, message: 'multiAgent.executionModel.version MUST be an integer' }]);
+  if (v < atLeast) return inapplicable(`multiAgent.executionModel.version is ${v} (< ${atLeast})`);
+  return { em };
+}
+const isOutcome = (x: unknown): x is AdvertOutcome => isRecord(x) && typeof x['kind'] === 'string';
+
+/**
+ * Level 3 (cumulative): "Hosts advertising `version: 3` MUST advertise this
+ * sub-block with a stable `hostId`" — the `causationHostId` rule reads that id.
+ */
+export const multiAgentCrossHostCausationLeg = (p: MajorProfile, d: unknown): AdvertOutcome => onFamily(p, d, 'multiAgent', (rec) => {
+  const got = executionModel(rec, 3);
+  if (isOutcome(got)) return got;
+  const chc = got.em['crossHostCausation'];
+  const hostId = isRecord(chc) ? chc['hostId'] : undefined;
+  return observed([
+    { ok: isRecord(chc), doc: MA_DOC, message: 'a host at executionModel.version >= 3 MUST advertise executionModel.crossHostCausation' },
+    { ok: typeof hostId === 'string' && hostId.length > 0, doc: MA_DOC, message: 'executionModel.crossHostCausation MUST carry a non-empty hostId (the causationHostId value)' },
+  ]);
+});
+
+/**
+ * Level 4 (cumulative): "Hosts advertising `version: 4` MUST advertise this
+ * sub-block" and "MUST set [`refusalDivergenceEmission`] to `true`".
+ */
+export const multiAgentReplayDeterminismLeg = (p: MajorProfile, d: unknown): AdvertOutcome => onFamily(p, d, 'multiAgent', (rec) => {
+  const got = executionModel(rec, 4);
+  if (isOutcome(got)) return got;
+  const rd = got.em['replayDeterminism'];
+  return observed([
+    { ok: isRecord(rd), doc: MA_DOC, message: 'a host at executionModel.version >= 4 MUST advertise executionModel.replayDeterminism' },
+    { ok: isRecord(rd) && rd['refusalDivergenceEmission'] === true, doc: MA_DOC, message: 'executionModel.replayDeterminism.refusalDivergenceEmission MUST be true at version >= 4' },
+  ]);
+});
+
+export const ESCALATION_KINDS = ['clarification', 'approval'] as const;
+
+/**
+ * `confidenceEscalationInterruptKind`: level 2 fires "a `clarification`
+ * interrupt (preferred) or an `approval` interrupt", and the host MUST emit the
+ * kind it advertises. The schema still admits `x-host-…` (removing it narrows a
+ * type); the v2 interrupt `kind` is closed, so such a value promises an interrupt
+ * the payload schema rejects. This leg enforces the prose.
+ */
+export const multiAgentEscalationKindLeg = (p: MajorProfile, d: unknown): AdvertOutcome => onFamily(p, d, 'multiAgent', (rec) => {
+  const em = rec['executionModel'];
+  if (!isRecord(em)) return inapplicable('the host does not advertise multiAgent.executionModel');
+  const k = em['confidenceEscalationInterruptKind'];
+  if (k === undefined) return inapplicable('the host does not advertise executionModel.confidenceEscalationInterruptKind (optional)');
+  const ok = (ESCALATION_KINDS as readonly unknown[]).includes(k);
+  return observed([{ ok, doc: MA_DOC, message: `executionModel.confidenceEscalationInterruptKind MUST be clarification or approval at v2${ok ? '' : ` (got ${JSON.stringify(k)})`}` }]);
+});
+
+export const SUBJECT_LINK_KEY_CLASSES = ['opaque-idp', 'configured-immutable'] as const;
+
+/**
+ * identity.md §3: "Advertising both `saml` and `scim` lanes implies the link
+ * contract. The `auth.subjectLinkKey` facet … names the key class the host forms
+ * links under." A host that forms links names their class.
+ */
+export const authSubjectLinkKeyLeg = (p: MajorProfile, d: unknown): AdvertOutcome => onFamily(p, d, 'auth', (rec) => {
+  const lanes = Array.isArray(rec['lanes']) ? (rec['lanes'] as unknown[]).map((l) => (isRecord(l) ? l['lane'] : undefined)) : [];
+  if (!(lanes.includes('saml') && lanes.includes('scim'))) return inapplicable('the host does not advertise both the saml and scim lanes');
+  const k = rec['subjectLinkKey'];
+  const ok = (SUBJECT_LINK_KEY_CLASSES as readonly unknown[]).includes(k);
+  return observed([{ ok, doc: 'identity.md §3', message: `a host advertising both the saml and scim lanes MUST advertise auth.subjectLinkKey (opaque-idp or configured-immutable)${ok ? '' : ` (got ${JSON.stringify(k)})`}` }]);
+});

package/src/lib/v2-profiles.ts

@@ -76,12 +76,30 @@ export function v2RegistryAvailable(): boolean {
   return readRegistry() !== null;
 }
 
+/**
+ * Is one predicate `metadata` entry present in `doc`? An entry is a metadata
+ * key, or `key.member` for one member of it (capabilities.md §7).
+ *
+ * The member form exists for the seams profile. Its advert is
+ * `conformance.seamsProfile` (conformance.md §The seams profile), but the
+ * `conformance` block also carries `certificationBundleUrl` and `mockAgent`.
+ * Until 2.46.2 the predicate was the bare key, so a host that published only a
+ * bundle URL claimed the profile, and four openwop-app bundles certified it
+ * with no seam mounted.
+ */
+export function metadataPresent(doc: Record<string, unknown>, entry: string): boolean {
+  const dot = entry.indexOf('.');
+  if (dot < 0) return doc[entry] !== undefined;
+  const v = doc[entry.slice(0, dot)];
+  return typeof v === 'object' && v !== null && !Array.isArray(v) && (v as Record<string, unknown>)[entry.slice(dot + 1)] !== undefined;
+}
+
 /**
  * Every profile the declaration derives at major 2, or `null` when the registry
  * is unavailable (see the module docblock — `null` is not `[]`).
  *
  * The predicate is the registry's own: every listed family present as a record,
- * every listed metadata key present at the root. Nothing here is hand-written
+ * every listed metadata entry present ({@link metadataPresent}). Nothing here is hand-written
  * per profile, so adding a v2 profile is a corpus edit and not a code edit.
  */
 export function v2ProfileIds(doc: DiscoveryPayload): readonly string[] | null {
@@ -97,7 +115,7 @@ export function v2ProfileIds(doc: DiscoveryPayload): readonly string[] | null {
     if (typeof p.id !== 'string') continue;
     const families = Array.isArray(p.predicate?.families) ? (p.predicate.families as unknown[]).map(String) : [];
     const metadata = Array.isArray(p.predicate?.metadata) ? (p.predicate.metadata as unknown[]).map(String) : [];
-    if (families.every(isRecord) && metadata.every((k) => root[k] !== undefined)) out.push(p.id);
+    if (families.every(isRecord) && metadata.every((k) => metadataPresent(root, k))) out.push(p.id);
   }
   return out;
 }

package/src/scenarios/v2-auth-subject-link-key.test.ts

@@ -0,0 +1,42 @@
+/**
+ * v2 — `auth.subjectLinkKey` under the two linking lanes (`spec/v2/core/identity.md`
+ * §3; RFC 0163 §A, RFC 0164 §A.3). The leg lives in
+ * `lib/family-advert-witness.ts` (wave 4).
+ *
+ * Advertising both the `saml` and `scim` lanes implies the link contract, and
+ * the host MUST name the key class it forms links under. The schema cannot
+ * say so: a conditional `required` is a major change (COMPATIBILITY.md §2.4),
+ * and would also re-judge committed bundles. The schema change waits for 3.0.
+ * The behavioural link legs are `v2-subject-link-record`.
+ *
+ * Dispositions: discovery unreadable ⇒ `blocked`; `auth` absent, or the two
+ * lanes not both advertised ⇒ `inapplicable`.
+ *
+ * @see spec/v2/core/identity.md §3
+ */
+
+import { describe, it, expect } from 'vitest';
+import { v2Discovery, familyAdvertised } from '../lib/v2.js';
+import { softSkip } from '../lib/soft-skip.js';
+import { req } from '../lib/requirement-ids.js';
+import { majorProfile } from '../lib/major-profile.js';
+import { authSubjectLinkKeyLeg } from '../lib/family-advert-witness.js';
+
+const PROFILE = majorProfile(2);
+const UNREADABLE = 'v2 discovery unreachable — /.well-known/openwop did not answer 200 JSON under OpenWOP-Version: 2.0';
+const ID_KEY = 'openwop.requirement.auth.subject-link-key-advertised';
+
+async function discovery(): Promise<Record<string, unknown> | null> {
+  try { return await v2Discovery(); } catch { return null; }
+}
+
+describe('v2 auth.subjectLinkKey (identity.md §3)', () => {
+  it('a host advertising both the saml and scim lanes advertises subjectLinkKey', async () => {
+    const doc = await discovery();
+    if (!doc) return softSkip('blocked', UNREADABLE);
+    if (!(await familyAdvertised('auth'))) return softSkip('inapplicable', 'the host does not advertise auth');
+    const out = authSubjectLinkKeyLeg(PROFILE, doc);
+    if (out.kind === 'skip') return softSkip(out.disposition, out.reason);
+    for (const x of out.findings) expect(x.ok, req(ID_KEY, x.doc, x.message)).toBe(true);
+  });
+});

package/src/scenarios/v2-multi-agent-advertisement.test.ts

@@ -0,0 +1,67 @@
+/**
+ * v2 — the `multiAgent.executionModel` advertisement (`spec/v2/core/execution.md`
+ * §multiAgent; RFCs 0039, 0040, 0041, 0044). The legs live in
+ * `lib/family-advert-witness.ts` (wave 4).
+ *
+ *   crossHostCausation   at `version` >= 3 the host advertises
+ *                        `crossHostCausation` with a non-empty `hostId`;
+ *   replayDeterminism    at `version` >= 4 the host advertises
+ *                        `replayDeterminism` with `refusalDivergenceEmission: true`;
+ *   escalationKind       `confidenceEscalationInterruptKind`, when present, is
+ *                        `clarification` or `approval`.
+ *
+ * The schema admits all three violations: a conditional `required` and a
+ * narrowed `x-host-…` pattern are major changes (COMPATIBILITY.md §2.4), so the
+ * rules are carried here and the schema change waits for 3.0 (TODO.md).
+ *
+ * Dispositions: discovery unreadable ⇒ `blocked`; `multiAgent`, its
+ * `executionModel`, or the level a leg needs absent ⇒ `inapplicable`.
+ *
+ * @see spec/v2/core/execution.md §multiAgent
+ */
+
+import { describe, it, expect } from 'vitest';
+import { v2Discovery, familyAdvertised } from '../lib/v2.js';
+import { softSkip } from '../lib/soft-skip.js';
+import { req } from '../lib/requirement-ids.js';
+import { majorProfile } from '../lib/major-profile.js';
+import { multiAgentCrossHostCausationLeg, multiAgentEscalationKindLeg, multiAgentReplayDeterminismLeg } from '../lib/family-advert-witness.js';
+
+const PROFILE = majorProfile(2);
+const UNREADABLE = 'v2 discovery unreachable — /.well-known/openwop did not answer 200 JSON under OpenWOP-Version: 2.0';
+const ID_CROSS_HOST = 'openwop.requirement.multiAgent.level3-cross-host-causation';
+const ID_REPLAY = 'openwop.requirement.multiAgent.level4-replay-determinism';
+const ID_KIND = 'openwop.requirement.multiAgent.escalation-kind-canonical';
+
+async function discovery(): Promise<Record<string, unknown> | null> {
+  try { return await v2Discovery(); } catch { return null; }
+}
+
+describe('v2 multiAgent advertisement (execution.md §multiAgent)', () => {
+  it('executionModel.version >= 3 advertises crossHostCausation with a hostId', async () => {
+    const doc = await discovery();
+    if (!doc) return softSkip('blocked', UNREADABLE);
+    if (!(await familyAdvertised('multiAgent'))) return softSkip('inapplicable', 'the host does not advertise multiAgent');
+    const out = multiAgentCrossHostCausationLeg(PROFILE, doc);
+    if (out.kind === 'skip') return softSkip(out.disposition, out.reason);
+    for (const x of out.findings) expect(x.ok, req(ID_CROSS_HOST, x.doc, x.message)).toBe(true);
+  });
+
+  it('executionModel.version >= 4 advertises replayDeterminism with refusalDivergenceEmission', async () => {
+    const doc = await discovery();
+    if (!doc) return softSkip('blocked', UNREADABLE);
+    if (!(await familyAdvertised('multiAgent'))) return softSkip('inapplicable', 'the host does not advertise multiAgent');
+    const out = multiAgentReplayDeterminismLeg(PROFILE, doc);
+    if (out.kind === 'skip') return softSkip(out.disposition, out.reason);
+    for (const x of out.findings) expect(x.ok, req(ID_REPLAY, x.doc, x.message)).toBe(true);
+  });
+
+  it('confidenceEscalationInterruptKind is clarification or approval', async () => {
+    const doc = await discovery();
+    if (!doc) return softSkip('blocked', UNREADABLE);
+    if (!(await familyAdvertised('multiAgent'))) return softSkip('inapplicable', 'the host does not advertise multiAgent');
+    const out = multiAgentEscalationKindLeg(PROFILE, doc);
+    if (out.kind === 'skip') return softSkip(out.disposition, out.reason);
+    for (const x of out.findings) expect(x.ok, req(ID_KIND, x.doc, x.message)).toBe(true);
+  });
+});

package/src/scenarios/v2-profiles-derived-only.test.ts

@@ -6,7 +6,8 @@
  * declaration file, published in `spec/v2/profiles.json`; it is never a wire
  * field. The host's v2 document MUST NOT carry a root `profiles[]`, and every
  * profile in the registry MUST be derivable from the document alone: every
- * listed family present as a record and every listed metadata key present.
+ * listed family present as a record and every listed metadata entry present
+ * (a key, or `key.member`).
  * `profiles.json` is read from the spec tree beside `SCHEMAS_DIR`; under a
  * layout that does not ship it the derivation leg records `blocked`.
  */
@@ -17,6 +18,7 @@ import { join } from 'node:path';
 import { v2Discovery } from '../lib/v2.js';
 import { SCHEMAS_DIR } from '../lib/paths.js';
 import { softSkip } from '../lib/soft-skip.js';
+import { metadataPresent } from '../lib/v2-profiles.js';
 import { req } from '../lib/requirement-ids.js';
 
 const DOC = 'spec/v2/core/capabilities.md §7';
@@ -41,7 +43,7 @@ function isRecord(v: unknown): v is Record<string, unknown> {
 function derive(doc: Record<string, unknown>, p: ProfileRow): boolean {
   const families = p.predicate.families ?? [];
   const metadata = p.predicate.metadata ?? [];
-  return families.every((f) => isRecord(doc[f])) && metadata.every((m) => doc[m] !== undefined);
+  return families.every((f) => isRecord(doc[f])) && metadata.every((m) => metadataPresent(doc, m));
 }
 
 describe('v2 profiles-derived-only (RFC 0169 §C.1, §C.3)', () => {