@openwop/spec-artifacts 2.0.0-rc.0 → 2.0.0-rc.10

package/schemas/v2/capabilities.schema.json

@@ -180,6 +180,10 @@
           "type": "string",
           "format": "uri",
           "description": "OPTIONAL (RFC 0089). URL of the host's most recent conformance certification bundle (`conformance-certification-bundle.schema.json`) — a machine-readable attestation binding this host's claimed profiles to the reproducible run that substantiates them. Omitting it is fully conformant; clients MUST tolerate its absence."
+        },
+        "seamsProfile": {
+          "const": "openwop-conformance-seams-v2",
+          "description": "RFC 0168 §C.1 — the host serves the conformance seams profile (api/seams-v2.yaml) at /conformance/seams/…. Absent means the seam-driven scenarios record `blocked`, never a pass."
         }
       },
       "additionalProperties": false,
@@ -228,6 +232,45 @@
       "additionalProperties": true,
       "x-openwop-seeded-from": "v1"
     },
+    "signingKeys": {
+      "type": "array",
+      "description": "RFC 0168 §E.2 — the public keys this host signs certification bundles with. A bundle signature names a keyId; a verifier resolves it HERE, in the discovery document of the host the bundle is about, and checks the Ed25519 signature with the matching publicKey. Without this array a signature attests integrity only: it proves the bundle was not altered after signing and says nothing about who signed it, because a signer can mint a keypair and a keyId at will. RFC 0168 disposed of \"an Ed25519 attestation without a key registry is a signature nobody can check\" by naming this surface; this is that surface.",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": [
+          "keyId",
+          "alg",
+          "publicKey"
+        ],
+        "properties": {
+          "keyId": {
+            "$ref": "ids.schema.json#/$defs/keyId",
+            "description": "The identifier a bundle signature carries in signature.keyId. Unique within this array."
+          },
+          "alg": {
+            "const": "ed25519",
+            "description": "RFC 0168 §E.2 fixes the attestation algorithm; no other value is defined."
+          },
+          "publicKey": {
+            "type": "string",
+            "pattern": "^[A-Za-z0-9_-]{43}$",
+            "description": "The Ed25519 public key, base64url, unpadded (32 bytes) — the half that verifies, never the half that signs."
+          },
+          "use": {
+            "enum": [
+              "certification-bundle"
+            ],
+            "description": "What the key signs. Closed, so a future use is an explicit addition rather than a reinterpretation of a key already published for something else."
+          },
+          "retiredAt": {
+            "type": "string",
+            "format": "date-time",
+            "description": "When the key stopped signing. A retired key stays listed so bundles it already signed remain verifiable; dropping it would silently invalidate historical evidence, which is the opposite of what an evidence trail is for."
+          }
+        }
+      }
+    },
     "discovery": {
       "type": "object",
       "description": "Discovery advertisement (capabilities-change-detection.md). Optional in v1; absence means the host serves only the public unauthenticated payload at /.well-known/openwop. Landed by RFC 0011.",
@@ -5034,6 +5077,29 @@
               "v1"
             ]
           }
+        },
+        "retryPolicy": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "maxAttempts",
+            "backoff"
+          ],
+          "properties": {
+            "maxAttempts": {
+              "type": "integer",
+              "minimum": 1
+            },
+            "backoff": {
+              "type": "string",
+              "enum": [
+                "none",
+                "fixed",
+                "exponential"
+              ]
+            }
+          },
+          "description": "spec/v2/core/webhooks.md §Delivery — the policy a host retries a failed attempt under. The webhooks family carries it at v2; `triggerBridge.retryPolicy` is the v1 carrier and stays through the overlap."
         }
       },
       "allOf": [

package/schemas/v2/certification-bundle.schema.json

@@ -100,7 +100,8 @@
           }
         },
         "signingKeyId": {
-          "$ref": "ids.schema.json#/$defs/keyId"
+          "$ref": "ids.schema.json#/$defs/keyId",
+          "description": "The host key the signature was made with (the same keyId as signature.keyId)."
         },
         "relaxations": {
           "type": "array",
@@ -253,7 +254,8 @@
             "properties": {
               "id": {
                 "type": "string",
-                "pattern": "^openwop\\.requirement\\."
+                "pattern": "^openwop\\.(?!it\\.(?:artifact-schema-compile-bounded|artifact-type-legacy-ids|capability-example-root-layout|certification-floor-enforcement|chain-subchain-unsupported-refused|compensation-profile|core-manifest-and-extension-registry|discovery-canonical-family-no-shadow|edge-condition-truthy-falsy|effect-identity-composition|effect-identity-cross-scope|error-envelope-canonical-shape|event-codemap-complete|form-content-packs|multi-region-effect-vocabulary|normative-example-extraction|openapi-asyncapi-sdk-parity|pack-manifest-extensions|protocol-version-grammar|registry-declarative-kinds|rfc-0147-self-audit|rfc-lifecycle-coherence|semantic-digest-v2|spec-corpus-validity|spec-section-citations|tool-result-trust-monotone|v2-alias-covers-reword|v2-corpus-tag-pinned|v2-declaration-parity|v2-error-registry-prose-parity|v2-event-naming-rule|v2-events-channel-parity|v2-externally-gated-never-stable|v2-bundle-signature-attributable|v2-one-signing-scheme|v2-path-parity|v2-release-identity|v2-req-only-assertions|v2-seams-not-in-canonical|v2-security-defaults-table|v2-spec-artifacts-digest|v2-threat-model-template|v2-witness-required|versioned-composition-profiles|workflow-chain-internal-flag|workload-identity-profile)\\.)(requirement|it|scenario|floor|profile|family)\\.[a-z0-9]",
+                "description": "RFC 0168 §A.1 — `openwop.<area>.<slug>`. The suite mints six areas: `requirement` (an explicit `req()` id), `it` (a per-test id from the scenario file and title), `scenario` and `floor` (per-file rows), `profile` (a claimed-profile row) and `family` (a capability gate). The lookahead refuses every id minted from a corpus-coherence file: those run in the spec repo’s CI and MUST NOT appear in a host bundle (conformance.md §\"Two products, two ledgers\"; RFC 0168 §D.1). `scripts/check-req-only.mjs` fails when the list drifts from `conformance/src/coherence/`."
               },
               "scenario": {
                 "type": "string"
@@ -349,11 +351,30 @@
             "suite.version",
             "discovery.sha256"
           ]
+        }
+      }
+    },
+    "verifierSignature": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "alg",
+        "keyId",
+        "sig"
+      ],
+      "properties": {
+        "alg": {
+          "const": "ed25519"
         },
-        "verifierKeyId": {
+        "keyId": {
           "$ref": "ids.schema.json#/$defs/keyId"
+        },
+        "sig": {
+          "type": "string",
+          "pattern": "^[A-Za-z0-9_-]{86}$"
         }
-      }
+      },
+      "description": "RFC 0168 §E.2 — required when any claimed profile is evidenceTier independent; the key MUST differ from the host's."
     }
   },
   "allOf": [
@@ -396,6 +417,26 @@
           "detail"
         ]
       }
+    },
+    {
+      "if": {
+        "properties": {
+          "claimedProfiles": {
+            "contains": {
+              "properties": {
+                "evidenceTier": {
+                  "const": "independent"
+                }
+              }
+            }
+          }
+        }
+      },
+      "then": {
+        "required": [
+          "verifierSignature"
+        ]
+      }
     }
   ]
 }

package/schemas/v2/error-envelope.schema.json

@@ -2,7 +2,7 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://openwop.dev/spec/v2/error-envelope.schema.json",
   "title": "ErrorEnvelope (v2)",
-  "description": "GENERATED from spec/v2/errors.json by scripts/generate-error-envelope.mjs (RFC 0171 §B.1). 92 registered codes; vendor codes match ^(?!openwop\\.)[a-z][a-z0-9]*(-[a-z0-9]+)*\\.[a-z][a-z0-9_]*$. Consumers MUST accept an unknown registered member and MUST NOT act on it (RFC 0171 §A.5).",
+  "description": "GENERATED from spec/v2/errors.json by scripts/generate-error-envelope.mjs (RFC 0171 §B.1). 94 registered codes; vendor codes match ^(?!openwop\\.)[a-z][a-z0-9]*(-[a-z0-9]+)*\\.[a-z][a-z0-9_]*$. Consumers MUST accept an unknown registered member and MUST NOT act on it (RFC 0171 §A.5).",
   "type": "object",
   "additionalProperties": false,
   "required": [
@@ -40,6 +40,7 @@
             "event_type_unmapped",
             "forbidden",
             "force_engine_version_forbidden",
+            "fork_point_invalid",
             "id_tenant_mismatch",
             "idempotency_in_flight",
             "idempotency_key_invalid",
@@ -104,6 +105,7 @@
             "until_in_past",
             "validation_error",
             "version_conflict",
+            "webhook_url_rejected",
             "workspace_conflict",
             "workspace_membership_required",
             "workspace_too_large"
@@ -151,6 +153,7 @@
     "event_type_unmapped": 500,
     "forbidden": 403,
     "force_engine_version_forbidden": 403,
+    "fork_point_invalid": 422,
     "id_tenant_mismatch": 403,
     "idempotency_in_flight": 409,
     "idempotency_key_invalid": 400,
@@ -215,6 +218,7 @@
     "until_in_past": 400,
     "validation_error": 400,
     "version_conflict": 409,
+    "webhook_url_rejected": 400,
     "workspace_conflict": 409,
     "workspace_membership_required": 403,
     "workspace_too_large": 413

package/schemas/v2/ids.schema.json

@@ -6,26 +6,123 @@
   "type": "object",
   "additionalProperties": false,
   "$defs": {
-    "opaque": { "type": "string", "pattern": "^[A-Za-z0-9._~-]{16,128}$", "description": "Host-minted opaque token: no `@`, no whitespace, no `/`; 16–128 characters." },
-    "tenantId": { "type": "string", "pattern": "^[A-Za-z0-9._~-]{1,128}$", "x-openwop-minted": "host" },
-    "workspaceId": { "type": "string", "pattern": "^[A-Za-z0-9._~-]{1,128}$", "x-openwop-minted": "host" },
-    "subjectId": { "type": "string", "pattern": "^[^\\s/]{1,256}$", "description": "Issuer-scoped, stable, opaque (RFC 0170 §A); the issuer's grammar, never PII.", "x-openwop-minted": "host" },
-    "runId": { "type": "string", "pattern": "^[A-Za-z0-9._~-]{1,128}/[A-Za-z0-9._~-]{16,128}$", "description": "Tenant-bound: `<tenantId>/<opaque>`.", "x-openwop-minted": "host", "x-openwop-tenant-bound": true },
-    "interruptId": { "type": "string", "pattern": "^[A-Za-z0-9._~-]{1,128}/[A-Za-z0-9._~-]{16,128}$", "x-openwop-minted": "host", "x-openwop-tenant-bound": true },
-    "subscriptionId": { "type": "string", "pattern": "^[A-Za-z0-9._~-]{1,128}/[A-Za-z0-9._~-]{16,128}$", "x-openwop-minted": "host", "x-openwop-tenant-bound": true },
-    "deliveryId": { "type": "string", "pattern": "^[A-Za-z0-9._~-]{1,128}/[A-Za-z0-9._~-]{16,128}$", "x-openwop-minted": "host", "x-openwop-tenant-bound": true },
-    "effectId": { "type": "string", "pattern": "^[A-Za-z0-9._~-]{1,128}/[A-Za-z0-9._~-]{16,128}$", "x-openwop-minted": "host", "x-openwop-tenant-bound": true },
-    "eventId": { "type": "string", "pattern": "^[A-Za-z0-9._~-]{16,128}$", "x-openwop-minted": "host" },
-    "traceId": { "type": "string", "pattern": "^[0-9a-f]{32}$", "description": "W3C trace-context trace-id.", "x-openwop-minted": "host" },
-    "spanId": { "type": "string", "pattern": "^[0-9a-f]{16}$", "description": "W3C trace-context parent-id.", "x-openwop-minted": "host" },
-    "keyId": { "type": "string", "pattern": "^[A-Za-z0-9._~-]{1,128}$", "description": "A signing-key identifier (registry `signingKeys[].keyId`, resume-token `kid`, bundle signature `keyId`).", "x-openwop-minted": "registry" },
-    "nodeId": { "type": "string", "pattern": "^[A-Za-z0-9._~:-]{1,128}$", "description": "Author-chosen within a workflow definition.", "x-openwop-minted": "author" },
-    "workflowId": { "type": "string", "pattern": "^[A-Za-z0-9._~:-]{1,128}$", "x-openwop-minted": "author" },
-    "agentId": { "type": "string", "pattern": "^[A-Za-z0-9._~:-]{1,128}$", "x-openwop-minted": "author" },
-    "chainId": { "type": "string", "pattern": "^[A-Za-z0-9._~:-]{1,128}$", "x-openwop-minted": "author" },
-    "pluginId": { "type": "string", "pattern": "^[A-Za-z0-9._~:-]{1,128}$", "x-openwop-minted": "author" },
-    "templateId": { "type": "string", "pattern": "^[A-Za-z0-9._~:-]{1,128}$", "x-openwop-minted": "author" },
-    "libraryId": { "type": "string", "pattern": "^[A-Za-z0-9._~:-]{1,128}$", "x-openwop-minted": "author" },
-    "typeId": { "type": "string", "pattern": "^[a-z][a-z0-9-]*(\\.[a-z][a-zA-Z0-9-]*)+$", "description": "A node type id (`core.ai.callPrompt`); the RFC 0107 grammar.", "x-openwop-minted": "author" }
+    "opaque": {
+      "type": "string",
+      "pattern": "^[A-Za-z0-9._~-]{16,128}$",
+      "description": "Host-minted opaque token: no `@`, no whitespace, no `/`; 16–128 characters."
+    },
+    "tenantId": {
+      "type": "string",
+      "pattern": "^(anon:)?[A-Za-z0-9._~-]{1,128}$",
+      "x-openwop-minted": "host",
+      "description": "A tenant identifier. The optional `anon:` prefix is the ONLY colon admitted, and it exists because RFC 0132 anonymous tenants are `anon:<hash>` while RFC 0170 §A.5 makes the anonymous surface first-class — without it a conforming host can serve an anonymous run with neither a valid `owner.tenant` nor a valid tenant-bound `runId`. `:` is a legal path character (RFC 3986 pchar), so this stays safe inside the `<tenantId>/<opaque>` run-id form. The alternative — renaming anonymous tenants at the cut — was rejected: it is a write to historical identity, which is the one thing the v2 migration does not do."
+    },
+    "workspaceId": {
+      "type": "string",
+      "pattern": "^[A-Za-z0-9._~-]{1,128}$",
+      "x-openwop-minted": "host"
+    },
+    "subjectId": {
+      "type": "string",
+      "pattern": "^[^\\s/]{1,256}$",
+      "description": "Issuer-scoped, stable, opaque (RFC 0170 §A); the issuer's grammar, never PII.",
+      "x-openwop-minted": "host"
+    },
+    "runId": {
+      "type": "string",
+      "pattern": "^[A-Za-z0-9._~-]{1,128}/[A-Za-z0-9._~-]{16,128}$",
+      "description": "Tenant-bound: `<tenantId>/<opaque>`.",
+      "x-openwop-minted": "host",
+      "x-openwop-tenant-bound": true
+    },
+    "interruptId": {
+      "type": "string",
+      "pattern": "^[A-Za-z0-9._~-]{1,128}/[A-Za-z0-9._~-]{16,128}$",
+      "x-openwop-minted": "host",
+      "x-openwop-tenant-bound": true
+    },
+    "subscriptionId": {
+      "type": "string",
+      "pattern": "^[A-Za-z0-9._~-]{1,128}/[A-Za-z0-9._~-]{16,128}$",
+      "x-openwop-minted": "host",
+      "x-openwop-tenant-bound": true
+    },
+    "deliveryId": {
+      "type": "string",
+      "pattern": "^[A-Za-z0-9._~-]{1,128}/[A-Za-z0-9._~-]{16,128}$",
+      "x-openwop-minted": "host",
+      "x-openwop-tenant-bound": true
+    },
+    "effectId": {
+      "type": "string",
+      "pattern": "^[A-Za-z0-9._~-]{1,128}/[A-Za-z0-9._~-]{16,128}$",
+      "x-openwop-minted": "host",
+      "x-openwop-tenant-bound": true
+    },
+    "eventId": {
+      "type": "string",
+      "pattern": "^[A-Za-z0-9._~-]{16,128}$",
+      "x-openwop-minted": "host"
+    },
+    "traceId": {
+      "type": "string",
+      "pattern": "^[0-9a-f]{32}$",
+      "description": "W3C trace-context trace-id.",
+      "x-openwop-minted": "host"
+    },
+    "spanId": {
+      "type": "string",
+      "pattern": "^[0-9a-f]{16}$",
+      "description": "W3C trace-context parent-id.",
+      "x-openwop-minted": "host"
+    },
+    "keyId": {
+      "type": "string",
+      "pattern": "^[A-Za-z0-9._~-]{1,128}$",
+      "description": "A signing-key identifier (registry `signingKeys[].keyId`, resume-token `kid`, bundle signature `keyId`).",
+      "x-openwop-minted": "registry"
+    },
+    "nodeId": {
+      "type": "string",
+      "pattern": "^[A-Za-z0-9._~:-]{1,128}$",
+      "description": "Author-chosen within a workflow definition.",
+      "x-openwop-minted": "author"
+    },
+    "workflowId": {
+      "type": "string",
+      "pattern": "^[A-Za-z0-9._~:-]{1,128}$",
+      "x-openwop-minted": "author"
+    },
+    "agentId": {
+      "type": "string",
+      "pattern": "^[A-Za-z0-9._~:-]{1,128}$",
+      "x-openwop-minted": "author"
+    },
+    "chainId": {
+      "type": "string",
+      "pattern": "^[A-Za-z0-9._~:-]{1,128}$",
+      "x-openwop-minted": "author"
+    },
+    "pluginId": {
+      "type": "string",
+      "pattern": "^[A-Za-z0-9._~:-]{1,128}$",
+      "x-openwop-minted": "author"
+    },
+    "templateId": {
+      "type": "string",
+      "pattern": "^[A-Za-z0-9._~:-]{1,128}$",
+      "x-openwop-minted": "author"
+    },
+    "libraryId": {
+      "type": "string",
+      "pattern": "^[A-Za-z0-9._~:-]{1,128}$",
+      "x-openwop-minted": "author"
+    },
+    "typeId": {
+      "type": "string",
+      "pattern": "^[a-z][a-z0-9-]*(\\.[a-z][a-zA-Z0-9-]*)+$",
+      "description": "A node type id (`core.ai.callPrompt`); the RFC 0107 grammar.",
+      "x-openwop-minted": "author"
+    }
   }
 }

package/schemas/v2/node-pack-manifest.schema.json

@@ -119,6 +119,16 @@
             "type": "boolean",
             "default": false,
             "description": "When true, an unmet peer dependency degrades (inert + surfaced in `degraded[]`) rather than failing install."
+          },
+          "facets": {
+            "type": "array",
+            "minItems": 1,
+            "uniqueItems": true,
+            "items": {
+              "type": "string",
+              "pattern": "^[a-z][A-Za-z0-9]*$"
+            },
+            "description": "Facets of the peer family the pack needs (packs.md §Peer dependencies; RFC 0177 §B.1). Each MUST be a facet the declaration file lists for that family; the family key alone means the family's presence."
           }
         }
       }

package/schemas/v2/registry-version-manifest.schema.json

@@ -158,29 +158,8 @@
       }
     },
     "runtime": {
-      "type": "object",
-      "required": [
-        "language"
-      ],
-      "properties": {
-        "language": {
-          "type": "string",
-          "enum": [
-            "javascript",
-            "typescript",
-            "wasm",
-            "remote"
-          ],
-          "description": "Pack runtime. `javascript`/`typescript` for in-process Node executors; `wasm` for sandboxed WASM (RFC 0008 ABI); `remote` for agent-only packs that dispatch via remote LLM providers + don't ship local executor bytecode."
-        },
-        "entry": {
-          "type": "string"
-        },
-        "abiVersion": {
-          "type": "string"
-        }
-      },
-      "additionalProperties": false
+      "$ref": "node-pack-manifest.schema.json#/$defs/Runtime",
+      "description": "The pack runtime block, byte-for-byte the node-pack manifest's (`format`, `minRuntimeVersion`, `requires` included)."
     },
     "peerDependencies": {
       "type": "object",
@@ -189,6 +168,9 @@
         "type": "string"
       }
     },
+    "peerDependenciesMeta": {
+      "$ref": "node-pack-manifest.schema.json#/properties/peerDependenciesMeta"
+    },
     "dependencies": {
       "type": "object",
       "description": "Pack dependencies (other packs). Wire-locked at install time per `pack-lockfile.schema.json`.",
@@ -246,13 +228,13 @@
     },
     "tarballUrl": {
       "type": "string",
-      "description": "Registry-relative URL for the signed tarball. Always `/v1/packs/{name}/-/{version}.tgz`.",
-      "pattern": "^/v1/packs/[^/]+/-/[^/]+\\.tgz$"
+      "description": "Registry-relative URL for the signed tarball. Always `/v2/packs/{name}/-/{version}.tgz` (RFC 0177 §A.3 full-path templates).",
+      "pattern": "^/v2/packs/[^/]+/-/[^/]+\\.tgz$"
     },
     "signatureUrl": {
       "type": "string",
-      "description": "Registry-relative URL for the detached Ed25519 signature. Always `/v1/packs/{name}/-/{version}.sig`.",
-      "pattern": "^/v1/packs/[^/]+/-/[^/]+\\.sig$"
+      "description": "Registry-relative URL for the detached signature. Always `/v2/packs/{name}/-/{version}.sig`.",
+      "pattern": "^/v2/packs/[^/]+/-/[^/]+\\.sig$"
     },
     "yanked": {
       "type": "boolean",

package/schemas/v2/run-event-payloads.schema.json

@@ -2,7 +2,7 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://openwop.dev/spec/v2/run-event-payloads.schema.json",
   "title": "RunEventPayloads",
-  "description": "Per-RunEventType payload schemas. The base RunEventDoc shape (run-event.schema.json) leaves `payload` permissive for forward-compat. This schema defines the canonical payload contract for each known RunEventType. Consumers MAY pin strict payload validation via `$defs.<typeId>` and `ajv.validate(schema.$defs[event.type], event.payload)`. Unknown event types MUST be tolerated (no $defs match → fold best-effort).\n\n117 variants from `run-event.schema.json#$defs.RunEventType` are covered, grouped into ~20 shape families with shared $defs. Naming convention: camelCase keys mirror dotted RunEventType names (e.g., `run.started` → `runStarted`). v2: every definition closed; _typeIndex normative; the legacy interrupt payloads (approval*/clarification*) removed per deprecation row legacy-interrupt-payloads.",
+  "description": "Per-RunEventType payload schemas. The base RunEventDoc shape (run-event.schema.json) leaves `payload` permissive for forward-compat. This schema defines the canonical payload contract for each known RunEventType. Consumers MAY pin strict payload validation via `$defs.<typeId>` and `ajv.validate(schema.$defs[event.type], event.payload)`. Unknown event types MUST be tolerated (no $defs match → fold best-effort).\n\n118 variants from the generated `type` branch of `run-event.schema.json` are covered (the v2 vocabulary is `spec/v2/event-codemap.json`; the old `$defs.RunEventType` twin is deleted — it held 36 retired v1 spellings and nothing referenced it), grouped into ~20 shape families with shared $defs. Naming convention: camelCase keys mirror dotted RunEventType names (e.g., `run.started` → `runStarted`). v2: every definition closed; _typeIndex normative; the legacy interrupt payloads (approval*/clarification*) removed per deprecation row legacy-interrupt-payloads.",
   "type": "object",
   "$defs": {
     "_typeIndex": {

package/schemas/v2/run-event.schema.json

@@ -153,7 +153,8 @@
         },
         {
           "type": "string",
-          "pattern": "^(?!openwop\\.)[a-z][a-z0-9]*(-[a-z0-9]+)*\\.[a-z][a-z0-9]*(-[a-z0-9]+)*(\\.[a-z][a-z0-9]*(-[a-z0-9]+)*)?$"
+          "pattern": "^(?!openwop\\.)(?!(?:agent|approval|artifact|authorization|budget|cap|channel|clarification|commitment|compensation|connector|context|conversation|deployment|dispatch|egress|envelope|eval|goal|import|interrupt|lease|log|memory|model|negotiation|node|orchestrator|output|prompt|proposal|provider|replay|roster|run|tool|trigger|variable|version|voice|workflow|workflow-chain|workspace)\\.)[a-z][a-z0-9]*(-[a-z0-9]+)*\\.[a-z][a-z0-9]*(-[a-z0-9]+)*(\\.[a-z][a-z0-9]*(-[a-z0-9]+)*)?$",
+          "description": "RFC 0171 §A.1 — the positive vendor branch `<org>.<domain-or-name>`. The lookahead bans `openwop.` and every first segment the closed enum registers (agent, approval, artifact, authorization, budget, cap, channel, clarification, commitment, compensation, connector, context, conversation, deployment, dispatch, egress, envelope, eval, goal, import, interrupt, lease, log, memory, model, negotiation, node, orchestrator, output, prompt, proposal, provider, replay, roster, run, tool, trigger, variable, version, voice, workflow, workflow-chain, workspace), so the two branches are disjoint (a registered type matches exactly one) and a typo of a registered domain (`run.startd`) is refused instead of validating as a vendor type — the v1 defect this rule replaces. Regenerate the segment list with scripts/check-v2-schemas.mjs when the enum grows; the corpus wrapper v2-event-naming-rule asserts it."
         }
       ],
       "description": "RFC 0171 §A.1 — a registered protocol type (closed enum generated from spec/v2/event-codemap.json) or a vendor event under <org>.<name>; openwop. is the only reserved prefix. Consumers MUST accept an unknown registered member and MUST NOT act on it (§A.5)."
@@ -194,131 +195,7 @@
       "description": "Optional ID of the event that caused this one (e.g., node.completed caused by approval.received). Lets projections build causal chains without inferring from timing."
     }
   },
-  "$comment": "RFC 0094 §G + COMPATIBILITY.md §\"Schema closure\": RunEventDoc is a SERVER-EMITTED shape, so it is open (`additionalProperties: true`) — v1.x hosts may add optional fields additively without breaking schema-validating clients. Client-submitted shapes stay closed at their outermost composition.",
+  "$comment": "RFC 0171 §A / `events.md` §\"The envelope\": in v2 RunEventDoc is CLOSED (`additionalProperties: false`). This reverses the v1 rule, which left the envelope open so v1.x hosts could add optional fields additively. The v2 envelope carries host-specific data in the registered vendor branch, not at the root. Do not restore the v1 sentence: a host that follows it emits root-level extension fields and fails `v2-event-type-closed`, and the schema keyword is the contract while a comment is only a claim about it.",
   "additionalProperties": false,
-  "$defs": {
-    "RunEventType": {
-      "type": "string",
-      "description": "Discriminator for event payload shape. Dotted naming convention. New variants extend the union — readers MUST NOT throw on unknown types (forward-compat: fold best-effort, ignore unknowns). RFC 0151 §D adds the six content-free `compensation.*` events. They are added to this CLOSED enum because without them a conforming host cannot emit them at all: the RFC named the events, the enum did not contain them, and any host following §D would have produced run events that fail schema validation. Payloads carry opaque node/effect IDs, attempt, ordering model, and closed reason codes — never provider bodies or credentials (§D/§G).",
-      "enum": [
-        "run.started",
-        "run.completed",
-        "run.failed",
-        "run.cancelled",
-        "run.resuming",
-        "run.paused",
-        "run.resumed",
-        "run.restored-from-snapshot",
-        "run.dead_lettered",
-        "node.started",
-        "node.completed",
-        "node.failed",
-        "node.suspended",
-        "node.suspend-failed",
-        "node.resumed",
-        "node.retried",
-        "node.skipped",
-        "node.cancelled",
-        "approval.requested",
-        "approval.received",
-        "approval.granted",
-        "approval.rejected",
-        "approval.overridden",
-        "clarification.requested",
-        "clarification.resolved",
-        "interrupt.requested",
-        "interrupt.resolved",
-        "channel.written",
-        "channel.presence",
-        "context.summarized",
-        "artifact.created",
-        "output.chunk",
-        "variable.changed",
-        "log.appended",
-        "version.pinned",
-        "workflow.restored",
-        "workflow.loopback-limit",
-        "workflow.stalled",
-        "cap.breached",
-        "lease.acquired",
-        "lease.renewed",
-        "lease.lost",
-        "lease.handed-off",
-        "replay.diverged",
-        "replay.divergedAtRefusal",
-        "agent.reasoned",
-        "agent.reasoning.delta",
-        "provider.usage",
-        "prompt.composed",
-        "agent.promptResolved",
-        "model.capability.substituted",
-        "model.capability.insufficient",
-        "envelope.retry.attempted",
-        "envelope.retry.exhausted",
-        "envelope.refusal",
-        "envelope.truncated",
-        "envelope.nlToFormat.engaged",
-        "envelope.recovery.applied",
-        "agent.toolCalled",
-        "agent.toolReturned",
-        "agent.handoff",
-        "agent.decided",
-        "agent.verified",
-        "agent.invocation.started",
-        "agent.invocation.completed",
-        "eval.started",
-        "eval.scored",
-        "eval.completed",
-        "deployment.promoted",
-        "deployment.rolled-back",
-        "deployment.canary.adjusted",
-        "deployment.state.changed",
-        "roster.run.initiated",
-        "tool.session.opened",
-        "tool.session.closed",
-        "egress.decided",
-        "trigger.subscription.state.changed",
-        "trigger.delivery.attempted",
-        "budget.reserved",
-        "budget.consumed",
-        "budget.threshold.crossed",
-        "budget.exhausted",
-        "runOrchestrator.decided",
-        "node.dispatched",
-        "core.dispatch.fanOut",
-        "core.dispatch.join",
-        "conversation.opened",
-        "conversation.exchanged",
-        "conversation.closed",
-        "memory.compacted",
-        "memory.written",
-        "agent.memory.consolidated",
-        "commitment.fired",
-        "workspace.updated",
-        "core.workflowChain.event",
-        "core.workflowChain.confidence-escalated",
-        "connector.authorized",
-        "connector.auth_expired",
-        "authorization.decided",
-        "proposal.created",
-        "proposal.activated",
-        "goal.evaluated",
-        "goal.closed",
-        "import.applied",
-        "voice.speech_start",
-        "voice.transcript",
-        "voice.endpoint_candidate",
-        "voice.turn_commit",
-        "voice.synthesis_chunk",
-        "voice.barge_in",
-        "voice.cancelled",
-        "compensation.requested",
-        "compensation.started",
-        "compensation.completed",
-        "compensation.failed",
-        "compensation.paused",
-        "compensation.manual_intervention_required"
-      ]
-    }
-  }
+  "$defs": {}
 }

package/schemas/v2/run-snapshot.schema.json

@@ -2,7 +2,7 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://openwop.dev/spec/v2/run-snapshot.schema.json",
   "title": "RunSnapshot",
-  "description": "Projected run state returned by `GET /v1/runs/{runId}`. Source is the run's append-only event log (run-event.schema.json) folded through the `RunProjection`. Forward-compat tolerant: readers MUST ignore unknown fields rather than reject.",
+  "description": "Projected run state returned by `GET /runs/{runId}`. Source is the run’s append-only event log (run-event.schema.json) folded through the `RunProjection`. CLOSED in v2 (`additionalProperties: false`): a reader MUST NOT expect to ignore unknown root fields, because there are none to ignore — host-specific state goes in `extensions`. The v1 schema was open and therefore never had to declare what hosts actually served; closing the object is what made that visible.",
   "type": "object",
   "required": [
     "eventLogSchemaVersion",
@@ -201,6 +201,27 @@
         }
       },
       "additionalProperties": false
+    },
+    "parentRunId": {
+      "$ref": "ids.schema.json#/$defs/runId",
+      "description": "RFC 0022 / `runs.md` §forkRun — the run this one was forked from, absent on a root run. Declared because the object is closed: a fork’s lineage is real protocol state, and an undeclared field on a closed object is deleted rather than ignored."
+    },
+    "inputs": {
+      "type": "object",
+      "description": "RFC 0022 §A — the inputs the run was created with. Declared for the same reason as parentRunId: the v1 wire carried it under an open schema, and closing the object without a seat would force every host to drop it.",
+      "additionalProperties": true
+    },
+    "extensions": {
+      "type": "object",
+      "additionalProperties": false,
+      "patternProperties": {
+        "^[a-z][a-z0-9]*(-[a-z0-9]+)*\\.[a-z][a-z0-9]*(-[a-z0-9]+)*$": {
+          "type": "object",
+          "additionalProperties": true,
+          "description": "A vendor/host extension record; its shape is the org’s, declared open on purpose."
+        }
+      },
+      "description": "RFC 0169 §A.4 — the seat for host-specific snapshot state, keyed `<org>.<name>`. Closing an object without an extension seat does not make hosts stop having extra state; it makes them delete it or serve an invalid document. Every other closed v2 surface has this seat and the snapshot was the omission."
     }
   },
   "additionalProperties": false

package/spec/v1/core-standard-manifest.json

@@ -4,7 +4,7 @@
   "provenance": {
     "suite": {
       "package": "@openwop/openwop-conformance",
-      "version": "2.0.0-rc.0"
+      "version": "2.0.0-rc.10"
     },
     "note": "Derived from the corpus at generation time. Regenerate with --write; verify with --check."
   },
@@ -419,5 +419,5 @@
       "$id": "https://openwop.dev/spec/v1/workspace-file.schema.json"
     }
   ],
-  "digest": "b4fec837a0301ce9015b610bd3ec6ff055cf6ae716049dac18b5fd8184a1ff7c"
+  "digest": "2f27e94651be9988594694e4ccc5c71f521fa1bd5d404c671958485aecb8adf8"
 }