@openwop/openwop-conformance 2.46.43 → 2.47.0

package/requirements.json

@@ -2,11 +2,11 @@
   "$comment": "GENERATED by conformance/scripts/generate-requirement-registry.mjs — do not edit. One record per it()/test() in src/scenarios. Ids: openwop.it.<file-stem>.<title-slug>[~n] (src/lib/requirement-ids.ts). A record with id null has an interpolated title; its run-time row is keyed by the rendered title and maps here by file+line only. Renamed ids need a row in requirement-aliases.json.",
   "generatedFrom": "src/scenarios/*.test.ts",
   "counts": {
-    "files": 749,
-    "tests": 2874,
-    "withStableId": 2874,
+    "files": 754,
+    "tests": 2903,
+    "withStableId": 2903,
     "interpolatedTitles": 0,
-    "explicitIds": 2744
+    "explicitIds": 2747
   },
   "records": [
     {
@@ -13611,7 +13611,7 @@
     {
       "id": "openwop.it.fixtures-valid.finds-at-least-one-fixture-file",
       "file": "fixtures-valid.test.ts",
-      "line": 49,
+      "line": 56,
       "title": "finds at least one fixture file",
       "explicitId": "openwop.it.fixtures-valid.finds-at-least-one-fixture-file",
       "citations": [
@@ -13624,7 +13624,7 @@
     {
       "id": "openwop.it.fixtures-valid.validates-against-workflow-definition-schema-json",
       "file": "fixtures-valid.test.ts",
-      "line": 54,
+      "line": 61,
       "title": null,
       "explicitId": "openwop.it.fixtures-valid.validates-against-workflow-definition-schema-json",
       "citations": [
@@ -13638,7 +13638,7 @@
     {
       "id": "openwop.it.fixtures-valid.every-fixture-id-matches-its-filename",
       "file": "fixtures-valid.test.ts",
-      "line": 64,
+      "line": 76,
       "title": "every fixture id matches its filename",
       "explicitId": "openwop.it.fixtures-valid.every-fixture-id-matches-its-filename",
       "citations": [
@@ -13652,7 +13652,7 @@
     {
       "id": "openwop.it.fixtures-valid.every-fixture-has-a-manual-trigger-so-the-conformance-driver-can-start-it",
       "file": "fixtures-valid.test.ts",
-      "line": 75,
+      "line": 87,
       "title": "every fixture has a manual trigger so the conformance driver can start it",
       "explicitId": "openwop.it.fixtures-valid.every-fixture-has-a-manual-trigger-so-the-conformance-driver-can-start-it",
       "citations": [
@@ -13666,7 +13666,7 @@
     {
       "id": "openwop.it.fixtures-valid.finds-at-least-one-pack-manifest-fixture-private-scope-coverage",
       "file": "fixtures-valid.test.ts",
-      "line": 123,
+      "line": 135,
       "title": "finds at least one pack-manifest fixture (private-scope coverage)",
       "explicitId": "openwop.it.fixtures-valid.finds-at-least-one-pack-manifest-fixture-private-scope-coverage",
       "citations": [
@@ -13679,7 +13679,7 @@
     {
       "id": "openwop.it.fixtures-valid.pack-manifests-validates-against-its-kind-s-manifest-schema",
       "file": "fixtures-valid.test.ts",
-      "line": 128,
+      "line": 140,
       "title": null,
       "explicitId": "openwop.it.fixtures-valid.pack-manifests-validates-against-its-kind-s-manifest-schema",
       "citations": [
@@ -13693,7 +13693,7 @@
     {
       "id": "openwop.it.fixtures-valid.the-private-scope-fixture-exercises-the-v1-0-private-pack-pattern",
       "file": "fixtures-valid.test.ts",
-      "line": 148,
+      "line": 160,
       "title": "the private-scope fixture exercises the v1.0 private-pack pattern",
       "explicitId": "openwop.it.fixtures-valid.the-private-scope-fixture-exercises-the-v1-0-private-pack-pattern",
       "citations": [
@@ -13706,7 +13706,7 @@
     {
       "id": "openwop.it.fixtures-valid.finds-at-least-one-connection-pack-fixture-rfc-0095-coverage",
       "file": "fixtures-valid.test.ts",
-      "line": 182,
+      "line": 194,
       "title": "finds at least one connection-pack fixture (RFC 0095 coverage)",
       "explicitId": "openwop.it.fixtures-valid.finds-at-least-one-connection-pack-fixture-rfc-0095-coverage",
       "citations": [
@@ -13719,7 +13719,7 @@
     {
       "id": "openwop.it.fixtures-valid.connection-packs-validates-against-connection-pack-manifest-schema-json",
       "file": "fixtures-valid.test.ts",
-      "line": 187,
+      "line": 199,
       "title": null,
       "explicitId": "openwop.it.fixtures-valid.connection-packs-validates-against-connection-pack-manifest-schema-json",
       "citations": [
@@ -13733,7 +13733,7 @@
     {
       "id": "openwop.it.fixtures-valid.finds-at-least-one-trigger-event-fixture-rfc-0099-coverage",
       "file": "fixtures-valid.test.ts",
-      "line": 222,
+      "line": 234,
       "title": "finds at least one trigger-event fixture (RFC 0099 coverage)",
       "explicitId": "openwop.it.fixtures-valid.finds-at-least-one-trigger-event-fixture-rfc-0099-coverage",
       "citations": [
@@ -13746,7 +13746,7 @@
     {
       "id": "openwop.it.fixtures-valid.trigger-events-validates-against-its-schema",
       "file": "fixtures-valid.test.ts",
-      "line": 227,
+      "line": 239,
       "title": null,
       "explicitId": "openwop.it.fixtures-valid.trigger-events-validates-against-its-schema",
       "citations": [
@@ -13760,7 +13760,7 @@
     {
       "id": "openwop.it.fixtures-valid.finds-at-least-one-prompt-template-fixture",
       "file": "fixtures-valid.test.ts",
-      "line": 265,
+      "line": 277,
       "title": "finds at least one prompt-template fixture",
       "explicitId": "openwop.it.fixtures-valid.finds-at-least-one-prompt-template-fixture",
       "citations": [
@@ -13773,7 +13773,7 @@
     {
       "id": "openwop.it.fixtures-valid.prompt-templates-validates-against-prompt-template-schema-json",
       "file": "fixtures-valid.test.ts",
-      "line": 273,
+      "line": 285,
       "title": null,
       "explicitId": "openwop.it.fixtures-valid.prompt-templates-validates-against-prompt-template-schema-json",
       "citations": [
@@ -13787,7 +13787,7 @@
     {
       "id": "openwop.it.fixtures-valid.every-fixture-templateid-matches-its-filename",
       "file": "fixtures-valid.test.ts",
-      "line": 288,
+      "line": 300,
       "title": "every fixture templateId matches its filename",
       "explicitId": "openwop.it.fixtures-valid.every-fixture-templateid-matches-its-filename",
       "citations": [
@@ -13801,7 +13801,7 @@
     {
       "id": "openwop.it.fixtures-valid.every-secret-source-variable-lives-in-a-fixture-tagged-for-the-secret-redaction",
       "file": "fixtures-valid.test.ts",
-      "line": 307,
+      "line": 319,
       "title": "every secret-source variable lives in a fixture tagged for the secret-redaction scenario",
       "explicitId": "openwop.it.fixtures-valid.every-secret-source-variable-lives-in-a-fixture-tagged-for-the-secret-redaction",
       "citations": [
@@ -13815,7 +13815,7 @@
     {
       "id": "openwop.it.fixtures-valid.v1-v2-one-positive-per-kind-and-every-one-validates-including-the-minimal-conver",
       "file": "fixtures-valid.test.ts",
-      "line": 373,
+      "line": 385,
       "title": "v1 + v2: one positive per kind, and every one validates — including the minimal conversation.start / conversation.close",
       "explicitId": "openwop.it.fixtures-valid.interrupt-payloads-positive-per-kind-validates",
       "citations": [
@@ -13833,7 +13833,7 @@
     {
       "id": "openwop.it.fixtures-valid.v1-v2-every-mismatched-kind-data-negative-is-refused-and-only-because-of-the-bin",
       "file": "fixtures-valid.test.ts",
-      "line": 387,
+      "line": 399,
       "title": "v1 + v2: every mismatched kind/data negative is refused, and only because of the binding",
       "explicitId": "openwop.it.fixtures-valid.interrupt-payloads-mismatched-kind-data-refused",
       "citations": [
@@ -28789,6 +28789,149 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.v2-bounded-loopback.edgeloopback-the-marker-approvaldata-loopback-the-cap-kind-and-the-facet-validat",
+      "file": "v2-bounded-loopback.test.ts",
+      "line": 128,
+      "title": "EdgeLoopback, the marker, ApprovalData.loopback, the cap kind and the facet validate as declared",
+      "explicitId": null,
+      "citations": [
+        {
+          "section": "workflow-definition.schema.json $defs/EdgeLoopback; run-event-payloads.schema.json $defs/nodeCompleted.loopback (RFC 0258)",
+          "requirement": "a loopback edge MUST validate"
+        },
+        {
+          "section": "workflow-definition.schema.json $defs/EdgeLoopback; run-event-payloads.schema.json $defs/nodeCompleted.loopback (RFC 0258)",
+          "requirement": "maxIterations is required"
+        },
+        {
+          "section": "workflow-definition.schema.json $defs/EdgeLoopback; run-event-payloads.schema.json $defs/nodeCompleted.loopback (RFC 0258)",
+          "requirement": "maxIterations has minimum 1"
+        },
+        {
+          "section": "workflow-definition.schema.json $defs/EdgeLoopback; run-event-payloads.schema.json $defs/nodeCompleted.loopback (RFC 0258)",
+          "requirement": "on admits only refine"
+        },
+        {
+          "section": "workflow-definition.schema.json $defs/EdgeLoopback; run-event-payloads.schema.json $defs/nodeCompleted.loopback (RFC 0258)",
+          "requirement": "onExhausted is withdraw or fail"
+        },
+        {
+          "section": "workflow-definition.schema.json $defs/EdgeLoopback; run-event-payloads.schema.json $defs/nodeCompleted.loopback (RFC 0258)",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "workflow-definition.schema.json $defs/EdgeLoopback; run-event-payloads.schema.json $defs/nodeCompleted.loopback (RFC 0258)",
+          "requirement": "a plain edge with a condition still validates"
+        },
+        {
+          "section": "workflow-definition.schema.json $defs/EdgeLoopback; run-event-payloads.schema.json $defs/nodeCompleted.loopback (RFC 0258)",
+          "requirement": "the marker MUST validate"
+        },
+        {
+          "section": "workflow-definition.schema.json $defs/EdgeLoopback; run-event-payloads.schema.json $defs/nodeCompleted.loopback (RFC 0258)",
+          "requirement": "round has minimum 1"
+        },
+        {
+          "section": "workflow-definition.schema.json $defs/EdgeLoopback; run-event-payloads.schema.json $defs/nodeCompleted.loopback (RFC 0258)",
+          "requirement": "rearmed holds at least the target and the gate"
+        },
+        {
+          "section": "workflow-definition.schema.json $defs/EdgeLoopback; run-event-payloads.schema.json $defs/nodeCompleted.loopback (RFC 0258)",
+          "requirement": "ApprovalData.loopback MUST validate"
+        },
+        {
+          "section": "workflow-definition.schema.json $defs/EdgeLoopback; run-event-payloads.schema.json $defs/nodeCompleted.loopback (RFC 0258)",
+          "requirement": "exhausted is required"
+        },
+        {
+          "section": "workflow-definition.schema.json $defs/EdgeLoopback; run-event-payloads.schema.json $defs/nodeCompleted.loopback (RFC 0258)",
+          "requirement": "cap.breached admits kind loopback-iterations"
+        },
+        {
+          "section": "workflow-definition.schema.json $defs/EdgeLoopback; run-event-payloads.schema.json $defs/nodeCompleted.loopback (RFC 0258)",
+          "requirement": "the loopback record MUST validate"
+        },
+        {
+          "section": "workflow-definition.schema.json $defs/EdgeLoopback; run-event-payloads.schema.json $defs/nodeCompleted.loopback (RFC 0258)",
+          "requirement": "maxHistoryEntryBytes has minimum 4096"
+        },
+        {
+          "section": "workflow-definition.schema.json $defs/EdgeLoopback; run-event-payloads.schema.json $defs/nodeCompleted.loopback (RFC 0258)",
+          "requirement": "maxHistoryEntryBytes is required"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-bounded-loopback.a-refine-re-arms-the-region-the-marker-a-new-visit-of-the-target-a-new-key-nothi",
+      "file": "v2-bounded-loopback.test.ts",
+      "line": 159,
+      "title": "a refine re-arms the region: the marker, a new visit of the target, a new key, nothing released forward",
+      "explicitId": null,
+      "citations": []
+    },
+    {
+      "id": "openwop.it.v2-bounded-loopback.the-target-receives-the-round-history-rebuilt-from-the-log-with-no-run-scoped-by",
+      "file": "v2-bounded-loopback.test.ts",
+      "line": 167,
+      "title": "the target receives the round history rebuilt from the log, with no run-scoped bytes",
+      "explicitId": null,
+      "citations": []
+    },
+    {
+      "id": "openwop.it.v2-bounded-loopback.each-visit-of-the-gate-carries-approvaldata-loopback-round-maxiterations-exhaust",
+      "file": "v2-bounded-loopback.test.ts",
+      "line": 175,
+      "title": "each visit of the gate carries ApprovalData.loopback {round, maxIterations, exhausted}",
+      "explicitId": null,
+      "citations": []
+    },
+    {
+      "id": "openwop.it.v2-bounded-loopback.the-exhausted-visit-withdraws-refine-refuses-a-refine-resume-and-accept-complete",
+      "file": "v2-bounded-loopback.test.ts",
+      "line": 185,
+      "title": "the exhausted visit withdraws refine, refuses a refine resume, and accept completes the run",
+      "explicitId": null,
+      "citations": [
+        {
+          "section": "workflow-definition.schema.json $defs/EdgeLoopback; run-event-payloads.schema.json $defs/nodeCompleted.loopback (RFC 0258)",
+          "requirement": "a refine resume on the exhausted visit MUST answer 400"
+        },
+        {
+          "section": "workflow-definition.schema.json $defs/EdgeLoopback; run-event-payloads.schema.json $defs/nodeCompleted.loopback (RFC 0258)",
+          "requirement": "the refusal MUST carry validation_error"
+        },
+        {
+          "section": "workflow-definition.schema.json $defs/EdgeLoopback; run-event-payloads.schema.json $defs/nodeCompleted.loopback (RFC 0258)",
+          "requirement": "the refused refine MUST leave the run waiting-approval"
+        },
+        {
+          "section": "workflow-definition.schema.json $defs/EdgeLoopback; run-event-payloads.schema.json $defs/nodeCompleted.loopback (RFC 0258)",
+          "requirement": "accept MUST complete the run"
+        },
+        {
+          "section": "workflow-definition.schema.json $defs/EdgeLoopback; run-event-payloads.schema.json $defs/nodeCompleted.loopback (RFC 0258)",
+          "requirement": "apply MUST run exactly once, after accept"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-bounded-loopback.under-onexhausted-fail-a-refine-on-the-exhausted-visit-fails-the-run-with-loop-l",
+      "file": "v2-bounded-loopback.test.ts",
+      "line": 198,
+      "title": "under onExhausted: fail, a refine on the exhausted visit fails the run with loop_limit_exceeded",
+      "explicitId": null,
+      "citations": []
+    },
+    {
+      "id": "openwop.it.v2-bounded-loopback.a-replay-fork-at-round-1-s-marked-completion-re-arms-and-asks-the-gate-again",
+      "file": "v2-bounded-loopback.test.ts",
+      "line": 214,
+      "title": "a replay fork at round 1's marked completion re-arms and asks the gate again",
+      "explicitId": null,
+      "citations": []
+    },
     {
       "id": "openwop.it.v2-budget-enforcement.a-budgeted-run-emits-budget-reserved-budget-threshold-crossed-and-budget-exhaust",
       "file": "v2-budget-enforcement.test.ts",
@@ -32603,6 +32746,157 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.v2-interrupt-resolved-via.resolvedvia-is-a-closed-object-with-a-registered-scheme-boundto-is-a-non-legacy",
+      "file": "v2-interrupt-resolved-via.test.ts",
+      "line": 159,
+      "title": "resolvedVia is a closed object with a registered scheme; boundTo is a non-legacy user or agent Subject",
+      "explicitId": null,
+      "citations": [
+        {
+          "section": "run-event-payloads.schema.json $defs/interruptResolved.resolvedBy + .resolvedVia (RFC 0259)",
+          "requirement": "interrupt.resolved without resolvedVia MUST validate"
+        },
+        {
+          "section": "run-event-payloads.schema.json $defs/interruptResolved.resolvedBy + .resolvedVia (RFC 0259)",
+          "requirement": "a bare token resolution (no resolvedBy) with resolvedVia MUST validate"
+        },
+        {
+          "section": "run-event-payloads.schema.json $defs/interruptResolved.resolvedBy + .resolvedVia (RFC 0259)",
+          "requirement": "tokenRef and a user boundTo MUST validate"
+        },
+        {
+          "section": "run-event-payloads.schema.json $defs/interruptResolved.resolvedBy + .resolvedVia (RFC 0259)",
+          "requirement": "scheme is REQUIRED"
+        },
+        {
+          "section": "run-event-payloads.schema.json $defs/interruptResolved.resolvedBy + .resolvedVia (RFC 0259)",
+          "requirement": "an unregistered scheme MUST fail"
+        },
+        {
+          "section": "run-event-payloads.schema.json $defs/interruptResolved.resolvedBy + .resolvedVia (RFC 0259)",
+          "requirement": "resolvedVia is closed: a token member MUST fail"
+        },
+        {
+          "section": "run-event-payloads.schema.json $defs/interruptResolved.resolvedBy + .resolvedVia (RFC 0259)",
+          "requirement": "tokenRef is opaque: a dotted token-shaped value MUST fail the grammar"
+        },
+        {
+          "section": "run-event-payloads.schema.json $defs/interruptResolved.resolvedBy + .resolvedVia (RFC 0259)",
+          "requirement": "boundTo of kind anonymous MUST fail"
+        },
+        {
+          "section": "run-event-payloads.schema.json $defs/interruptResolved.resolvedBy + .resolvedVia (RFC 0259)",
+          "requirement": "boundTo of kind workload MUST fail"
+        },
+        {
+          "section": "run-event-payloads.schema.json $defs/interruptResolved.resolvedBy + .resolvedVia (RFC 0259)",
+          "requirement": "boundTo with the legacy issuer MUST fail"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-interrupt-resolved-via.an-unauthenticated-token-resolution-records-no-resolvedby",
+      "file": "v2-interrupt-resolved-via.test.ts",
+      "line": 177,
+      "title": "an unauthenticated token resolution records no resolvedBy",
+      "explicitId": null,
+      "citations": [
+        {
+          "section": "run-event-payloads.schema.json $defs/interruptResolved.resolvedBy + .resolvedVia (RFC 0259)",
+          "requirement": "the token resolution logged no interrupt.resolved for the gate"
+        },
+        {
+          "section": "run-event-payloads.schema.json $defs/interruptResolved.resolvedBy + .resolvedVia (RFC 0259)",
+          "requirement": "a resolution whose request authenticated nothing MUST NOT record resolvedBy (§A.1)"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-interrupt-resolved-via.a-host-advertising-interrupt-resolvedvia-records-scheme-interrupt-token-and-no-b",
+      "file": "v2-interrupt-resolved-via.test.ts",
+      "line": 188,
+      "title": "a host advertising interrupt.resolvedVia records scheme interrupt-token and no boundTo on an unbound token resolution",
+      "explicitId": null,
+      "citations": [
+        {
+          "section": "run-event-payloads.schema.json $defs/interruptResolved.resolvedBy + .resolvedVia (RFC 0259)",
+          "requirement": "a host advertising interrupt.resolvedVia MUST record resolvedVia.scheme \"interrupt-token\" on a token resolution"
+        },
+        {
+          "section": "run-event-payloads.schema.json $defs/interruptResolved.resolvedBy + .resolvedVia (RFC 0259)",
+          "requirement": "boundTo MUST be absent when the host bound the presentation to no one"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-interrupt-resolved-via.tokenref-when-present-is-not-the-token-and-not-computable-from-it",
+      "file": "v2-interrupt-resolved-via.test.ts",
+      "line": 201,
+      "title": "tokenRef, when present, is not the token and not computable from it",
+      "explicitId": null,
+      "citations": [
+        {
+          "section": "run-event-payloads.schema.json $defs/interruptResolved.resolvedBy + .resolvedVia (RFC 0259)",
+          "requirement": "tokenRef MUST NOT equal, contain or be a bare digest of the token or its segments (§A.3)"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-interrupt-resolved-via.a-run-scoped-resolution-records-no-resolvedvia",
+      "file": "v2-interrupt-resolved-via.test.ts",
+      "line": 214,
+      "title": "a run-scoped resolution records no resolvedVia",
+      "explicitId": null,
+      "citations": [
+        {
+          "section": "run-event-payloads.schema.json $defs/interruptResolved.resolvedBy + .resolvedVia (RFC 0259)",
+          "requirement": "the run-scoped resolution logged no interrupt.resolved for the gate"
+        },
+        {
+          "section": "run-event-payloads.schema.json $defs/interruptResolved.resolvedBy + .resolvedVia (RFC 0259)",
+          "requirement": "resolvedVia MUST NOT be recorded on a resolution that presented no token"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-interrupt-resolved-via.a-binding-the-host-made-to-the-caller-is-recorded-as-boundto-equal-to-the-caller",
+      "file": "v2-interrupt-resolved-via.test.ts",
+      "line": 228,
+      "title": "a binding the host made to the caller is recorded as boundTo, equal to the caller's owner subject",
+      "explicitId": null,
+      "citations": [
+        {
+          "section": "run-event-payloads.schema.json $defs/interruptResolved.resolvedBy + .resolvedVia (RFC 0259)",
+          "requirement": "boundTo MUST be the Subject the host bound the presentation to, built with the owner.subject mapping (§A.4)"
+        },
+        {
+          "section": "run-event-payloads.schema.json $defs/interruptResolved.resolvedBy + .resolvedVia (RFC 0259)",
+          "requirement": "a bound but unauthenticated presentation still MUST NOT record resolvedBy (§A.1)"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-interrupt-resolved-via.a-binding-altered-to-claim-someone-else-binds-no-one",
+      "file": "v2-interrupt-resolved-via.test.ts",
+      "line": 242,
+      "title": "a binding altered to claim someone else binds no one",
+      "explicitId": null,
+      "citations": [
+        {
+          "section": "run-event-payloads.schema.json $defs/interruptResolved.resolvedBy + .resolvedVia (RFC 0259)",
+          "requirement": "refusing a presentation whose binding does not verify satisfies §A.4"
+        },
+        {
+          "section": "run-event-payloads.schema.json $defs/interruptResolved.resolvedBy + .resolvedVia (RFC 0259)",
+          "requirement": "a host MUST NOT set boundTo from a binding it did not make (§A.4)"
+        },
+        {
+          "section": "run-event-payloads.schema.json $defs/interruptResolved.resolvedBy + .resolvedVia (RFC 0259)",
+          "requirement": "and MUST NOT record the claimed name in resolvedBy (§A.1)"
+        }
+      ]
+    },
     {
       "id": "openwop.it.v2-interrupt-token-scheme.a-token-without-the-ow2-prefix-is-refused",
       "file": "v2-interrupt-token-scheme.test.ts",
@@ -36758,6 +37052,84 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.v2-replay-llm-cache-key.the-effect-ledger-record-admits-cachekey-recipe-digest-and-refuses-anything-else",
+      "file": "v2-replay-llm-cache-key.test.ts",
+      "line": 102,
+      "title": "the effect-ledger record admits cacheKey {recipe, digest} and refuses anything else",
+      "explicitId": null,
+      "citations": [
+        {
+          "section": "replay facet llmCacheKeyRecipe + effect-ledger-projection cacheKey (RFC 0260)",
+          "requirement": "a record without cacheKey MUST validate (the facet is opt-in)"
+        },
+        {
+          "section": "replay facet llmCacheKeyRecipe + effect-ledger-projection cacheKey (RFC 0260)",
+          "requirement": "cacheKey {recipe: openwop-llm-key-2, digest: 64 hex} MUST validate"
+        },
+        {
+          "section": "replay facet llmCacheKeyRecipe + effect-ledger-projection cacheKey (RFC 0260)",
+          "requirement": "an unregistered recipe MUST fail"
+        },
+        {
+          "section": "replay facet llmCacheKeyRecipe + effect-ledger-projection cacheKey (RFC 0260)",
+          "requirement": "an uppercase or short digest MUST fail"
+        },
+        {
+          "section": "replay facet llmCacheKeyRecipe + effect-ledger-projection cacheKey (RFC 0260)",
+          "requirement": "digest is REQUIRED"
+        },
+        {
+          "section": "replay facet llmCacheKeyRecipe + effect-ledger-projection cacheKey (RFC 0260)",
+          "requirement": "cacheKey is closed: a preimage member MUST fail"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-replay-llm-cache-key.a-host-advertising-replay-llmcachekeyrecipe-also-advertises-idempotency",
+      "file": "v2-replay-llm-cache-key.test.ts",
+      "line": 117,
+      "title": "a host advertising replay.llmCacheKeyRecipe also advertises idempotency",
+      "explicitId": null,
+      "citations": [
+        {
+          "section": "replay facet llmCacheKeyRecipe + effect-ledger-projection cacheKey (RFC 0260)",
+          "requirement": "a host advertising replay.llmCacheKeyRecipe MUST advertise idempotency: the effect ledger is where the key is recorded"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-replay-llm-cache-key.the-provider-call-record-carries-cachekey-with-recipe-openwop-llm-key-2",
+      "file": "v2-replay-llm-cache-key.test.ts",
+      "line": 125,
+      "title": "the provider-call record carries cacheKey with recipe openwop-llm-key-2",
+      "explicitId": null,
+      "citations": []
+    },
+    {
+      "id": "openwop.it.v2-replay-llm-cache-key.two-runs-that-differ-only-in-maxtokens-have-different-keys",
+      "file": "v2-replay-llm-cache-key.test.ts",
+      "line": 133,
+      "title": "two runs that differ only in maxTokens have different keys",
+      "explicitId": null,
+      "citations": []
+    },
+    {
+      "id": "openwop.it.v2-replay-llm-cache-key.two-identical-runs-have-the-same-key",
+      "file": "v2-replay-llm-cache-key.test.ts",
+      "line": 143,
+      "title": "two identical runs have the same key",
+      "explicitId": null,
+      "citations": []
+    },
+    {
+      "id": "openwop.it.v2-replay-llm-cache-key.the-key-equals-recipe-2-recomputed-over-the-inputs-the-fixture-pins",
+      "file": "v2-replay-llm-cache-key.test.ts",
+      "line": 153,
+      "title": "the key equals recipe 2 recomputed over the inputs the fixture pins",
+      "explicitId": null,
+      "citations": []
+    },
     {
       "id": "openwop.it.v2-replay-suppression-ordinal.a-replay-fork-resolves-each-execution-of-a-looped-side-effecting-node-by-its-own",
       "file": "v2-replay-suppression-ordinal.test.ts",
@@ -38416,6 +38788,133 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.v2-telemetry-export.the-telemetry-record-requires-otlp-protocols-from-the-closed-transports-genaisem",
+      "file": "v2-telemetry-export.test.ts",
+      "line": 102,
+      "title": "the telemetry record requires otlp.protocols from the closed transports; genAiSemconv is semver",
+      "explicitId": null,
+      "citations": [
+        {
+          "section": "spec/v2/core/telemetry.md (RFC 0262)",
+          "requirement": "a record with otlp.protocols MUST validate"
+        },
+        {
+          "section": "spec/v2/core/telemetry.md (RFC 0262)",
+          "requirement": "genAiSemconv as semver MUST validate"
+        },
+        {
+          "section": "spec/v2/core/telemetry.md (RFC 0262)",
+          "requirement": "otlp is REQUIRED"
+        },
+        {
+          "section": "spec/v2/core/telemetry.md (RFC 0262)",
+          "requirement": "protocols MUST be non-empty"
+        },
+        {
+          "section": "spec/v2/core/telemetry.md (RFC 0262)",
+          "requirement": "an unknown transport MUST fail"
+        },
+        {
+          "section": "spec/v2/core/telemetry.md (RFC 0262)",
+          "requirement": "a non-semver genAiSemconv MUST fail"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-telemetry-export.a-run-exports-an-openwop-run-span-with-its-run-and-workflow-ids",
+      "file": "v2-telemetry-export.test.ts",
+      "line": 115,
+      "title": "a run exports an openwop.run span with its run and workflow ids",
+      "explicitId": null,
+      "citations": [
+        {
+          "section": "spec/v2/core/telemetry.md (RFC 0262)",
+          "requirement": "every run MUST produce a span named openwop.run carrying openwop.run_id"
+        },
+        {
+          "section": "spec/v2/core/telemetry.md (RFC 0262)",
+          "requirement": "the run span MUST carry openwop.workflow_id"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-telemetry-export.each-node-execution-exports-an-openwop-node-typeid-span-with-its-node-attributes",
+      "file": "v2-telemetry-export.test.ts",
+      "line": 125,
+      "title": "each node execution exports an openwop.node.<typeId> span with its node attributes",
+      "explicitId": null,
+      "citations": [
+        {
+          "section": "spec/v2/core/telemetry.md (RFC 0262)",
+          "requirement": "every node execution MUST produce a span named openwop.node.<typeId>"
+        },
+        {
+          "section": "spec/v2/core/telemetry.md (RFC 0262)",
+          "requirement": "the node span MUST carry openwop.node_id"
+        },
+        {
+          "section": "spec/v2/core/telemetry.md (RFC 0262)",
+          "requirement": "the node span MUST carry openwop.node_type, and its name MUST be openwop.node.<typeId>"
+        },
+        {
+          "section": "spec/v2/core/telemetry.md (RFC 0262)",
+          "requirement": "openwop.node_attempt MUST be a non-negative integer"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-telemetry-export.a-run-created-with-a-traceparent-exports-its-spans-in-that-trace",
+      "file": "v2-telemetry-export.test.ts",
+      "line": 139,
+      "title": "a run created with a traceparent exports its spans in that trace",
+      "explicitId": null,
+      "citations": [
+        {
+          "section": "spec/v2/core/telemetry.md (RFC 0262)",
+          "requirement": "a run created with a valid W3C traceparent MUST emit its spans in that trace"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-telemetry-export.no-exported-span-carries-the-resolved-store-secret",
+      "file": "v2-telemetry-export.test.ts",
+      "line": 149,
+      "title": "no exported span carries the resolved store secret",
+      "explicitId": null,
+      "citations": [
+        {
+          "section": "spec/v2/core/telemetry.md (RFC 0262)",
+          "requirement": "a span name, attribute, event or resource attribute MUST NOT carry a resolved secret"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-telemetry-export.a-host-advertising-genaisemconv-puts-the-gen-ai-attributes-on-the-model-call-spa",
+      "file": "v2-telemetry-export.test.ts",
+      "line": 167,
+      "title": "a host advertising genAiSemconv puts the gen_ai attributes on the model-call span",
+      "explicitId": null,
+      "citations": [
+        {
+          "section": "spec/v2/core/telemetry.md (RFC 0262)",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "spec/v2/core/telemetry.md (RFC 0262)",
+          "requirement": "the model-call span MUST carry the provider attribute its version names"
+        },
+        {
+          "section": "spec/v2/core/telemetry.md (RFC 0262)",
+          "requirement": "the model-call span MUST carry gen_ai.request.model"
+        },
+        {
+          "section": "spec/v2/core/telemetry.md (RFC 0262)",
+          "requirement": "the model-call span MUST carry input and output token usage"
+        }
+      ]
+    },
     {
       "id": "openwop.it.v2-terminal-event-once.every-run-observed-to-a-terminal-state-has-exactly-one-terminal-event-and-no-for",
       "file": "v2-terminal-event-once.test.ts",
@@ -48348,7 +48847,7 @@
     {
       "id": "openwop.it.v2-front-door-counts.every-stated-count-of-spec-v2-core-documents-equals-the-tree",
       "file": "v2-front-door-counts.test.ts",
-      "line": 51,
+      "line": 52,
       "title": "every stated count of spec/v2/core/ documents equals the tree",
       "explicitId": "openwop.requirement.front-door.core-doc-count",
       "citations": [
@@ -48362,7 +48861,7 @@
     {
       "id": "openwop.it.v2-front-door-counts.capabilities-md-5-names-as-many-core-families-as-the-declaration-declares",
       "file": "v2-front-door-counts.test.ts",
-      "line": 74,
+      "line": 75,
       "title": "capabilities.md §5 names as many core families as the declaration declares",
       "explicitId": "openwop.requirement.front-door.core-family-count",
       "citations": [
@@ -49134,6 +49633,130 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.v2-sabotage-ledger.a-every-witnessable-falsifiability-row-names-an-id-or-says-planned",
+      "file": "v2-sabotage-ledger.test.ts",
+      "line": 85,
+      "title": "§A every witnessable Falsifiability row names an id or says planned",
+      "explicitId": "openwop.requirement.0263.falsifiability-names-ids",
+      "citations": [
+        {
+          "section": "RFC 0263 · scripts/check-accepted-predicate.mjs rules 5 and 6",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "RFC 0263 · scripts/check-accepted-predicate.mjs rules 5 and 6",
+          "requirement": "a table naming an id, a planned row and a claims-check row MUST pass at Active"
+        },
+        {
+          "section": "RFC 0263 · scripts/check-accepted-predicate.mjs rules 5 and 6",
+          "requirement": "a witnessable row with no id and no `planned` MUST fail"
+        },
+        {
+          "section": "RFC 0263 · scripts/check-accepted-predicate.mjs rules 5 and 6",
+          "requirement": "the refusal MUST name §A"
+        },
+        {
+          "section": "RFC 0263 · scripts/check-accepted-predicate.mjs rules 5 and 6",
+          "requirement": "an RFC before 0258 is not in scope"
+        },
+        {
+          "section": "RFC 0263 · scripts/check-accepted-predicate.mjs rules 5 and 6",
+          "requirement": "a Draft RFC is not in scope"
+        },
+        {
+          "section": "RFC 0263 · scripts/check-accepted-predicate.mjs rules 5 and 6",
+          "requirement": "from RFC 0260 a planned row MUST block Accepted"
+        },
+        {
+          "section": "RFC 0263 · scripts/check-accepted-predicate.mjs rules 5 and 6",
+          "requirement": "the refusal MUST name the planned row"
+        },
+        {
+          "section": "RFC 0263 · scripts/check-accepted-predicate.mjs rules 5 and 6",
+          "requirement": "before RFC 0260 a planned row does not block Accepted"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-sabotage-ledger.c-an-accepted-rfc-from-0260-has-a-red-ledger-row-for-every-id-it-cites",
+      "file": "v2-sabotage-ledger.test.ts",
+      "line": 101,
+      "title": "§C an Accepted RFC from 0260 has a red ledger row for every id it cites",
+      "explicitId": "openwop.requirement.0263.sabotage-recorded-before-accepted",
+      "citations": [
+        {
+          "section": "RFC 0263 · scripts/check-accepted-predicate.mjs rules 5 and 6",
+          "requirement": "an executed-fail row for the cited id MUST satisfy §C"
+        },
+        {
+          "section": "RFC 0263 · scripts/check-accepted-predicate.mjs rules 5 and 6",
+          "requirement": "a red row on a leg under the cited id MUST satisfy §C"
+        },
+        {
+          "section": "RFC 0263 · scripts/check-accepted-predicate.mjs rules 5 and 6",
+          "requirement": "with no ledger row the flip MUST fail"
+        },
+        {
+          "section": "RFC 0263 · scripts/check-accepted-predicate.mjs rules 5 and 6",
+          "requirement": "the refusal MUST name the id"
+        },
+        {
+          "section": "RFC 0263 · scripts/check-accepted-predicate.mjs rules 5 and 6",
+          "requirement": "a red row for a different id MUST NOT satisfy §C"
+        },
+        {
+          "section": "RFC 0263 · scripts/check-accepted-predicate.mjs rules 5 and 6",
+          "requirement": "§C binds the Accepted flip, not Active"
+        },
+        {
+          "section": "RFC 0263 · scripts/check-accepted-predicate.mjs rules 5 and 6",
+          "requirement": "an RFC before 0260 is not retroactively invalidated"
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-sabotage-ledger.b-the-ledger-records-red-runs-in-a-closed-shape-never-on-a-certified-bundle",
+      "file": "v2-sabotage-ledger.test.ts",
+      "line": 114,
+      "title": "§B the ledger records red runs, in a closed shape, never on a certified bundle",
+      "explicitId": "openwop.requirement.0263.ledger-shape",
+      "citations": [
+        {
+          "section": "RFC 0263 · scripts/check-accepted-predicate.mjs rules 5 and 6",
+          "requirement": "well-formed rows, one with a red digest, MUST pass"
+        },
+        {
+          "section": "RFC 0263 · scripts/check-accepted-predicate.mjs rules 5 and 6",
+          "requirement": "a sabotage that passed MUST fail the shape"
+        },
+        {
+          "section": "RFC 0263 · scripts/check-accepted-predicate.mjs rules 5 and 6",
+          "requirement": "the refusal MUST say why"
+        },
+        {
+          "section": "RFC 0263 · scripts/check-accepted-predicate.mjs rules 5 and 6",
+          "requirement": "an unknown member MUST fail"
+        },
+        {
+          "section": "RFC 0263 · scripts/check-accepted-predicate.mjs rules 5 and 6",
+          "requirement": "a sabotage that does not say what was broken MUST fail"
+        },
+        {
+          "section": "RFC 0263 · scripts/check-accepted-predicate.mjs rules 5 and 6",
+          "requirement": "a subject without a build MUST fail"
+        },
+        {
+          "section": "RFC 0263 · scripts/check-accepted-predicate.mjs rules 5 and 6",
+          "requirement": "a row naming a certified bundle's digest MUST fail — that bundle recorded the pass"
+        },
+        {
+          "section": "RFC 0263 · scripts/check-accepted-predicate.mjs rules 5 and 6",
+          "requirement": "the refusal MUST name the certified bundle"
+        }
+      ]
+    },
     {
       "id": "openwop.it.v2-seams-not-in-canonical.the-corpus-gate-script-exits-0",
       "file": "v2-seams-not-in-canonical.test.ts",