@openwop/spec-artifacts 2.0.0-rc.0 → 2.0.0-rc.2

package/CORPUS-STAMP.json

@@ -1,7 +1,7 @@
 {
   "_comment": "Provenance of @openwop/spec-artifacts (RFC 0168 §D.2). files: SHA-256 per file; the conformance suite compares the installed peer against dist/spec-artifacts.lock.json at start.",
   "package": "@openwop/spec-artifacts",
-  "version": "2.0.0-rc.0",
+  "version": "2.0.0-rc.2",
   "corpusTag": null,
   "files": {
     "api/.redocly.lint-ignore.yaml": "bf5a8350b88a72fa43f59605ed8d903ed24b6cfccda5e45509c9f6ed9ee4e712",
@@ -9,9 +9,9 @@
     "api/grpc/openwop.proto": "c3e72bb17cba514ee98feb6434e6c9b6ea6795bfd086489ec69fd882dd1ad977",
     "api/openapi.yaml": "39081c59fb696159806b0f2f9a42e7e9ff830d622fcf2ad4159b21357580a955",
     "api/redocly.yaml": "b0604c89b2ca6d5076ec25725c539dad44a741a811fe524439ee6daef8baa09f",
-    "api/seams-v2.yaml": "b54c5a6ebd08577854d8f3f55e20ebf5aae0e57e457779e1de0937648aef4ef8",
-    "api/v2/asyncapi.yaml": "bb5468d6a2c00fbeab030ec365df2ba47c362b464b6d91162ded81064074d926",
-    "api/v2/openapi.yaml": "78b3f5a41ef1839f7628696465d3180ad2681616046918f6880575836bd20b57",
+    "api/seams-v2.yaml": "7997be82785d963789a452f76455dd91f51a03c227e83706325a8b67d3d16aeb",
+    "api/v2/asyncapi.yaml": "aeed4cbeb832cfcd4de46639a2b5a8981406d307b73e3a9d11a645eb0726caff",
+    "api/v2/openapi.yaml": "cbbf5df16473902c3c36b5b048ba80b5b35336c06fd48c8ba32f4b1858dd1807",
     "api/v2/redocly.yaml": "1e66b60e6118ad11a823bb620678be464d99dfe50a40e3e6f93ec9429b88b34c",
     "schemas/README.md": "0c0b737ffcf8f30e7d2809cec8a498232de710f41443212922ad8337cdde0b51",
     "schemas/a2a-task-state.schema.json": "c9365918f993f943b4b619d42551eb066a1ed33a08d895d51b395432a5b1f1bc",
@@ -115,8 +115,8 @@
     "schemas/v2/artifact-type-pack-manifest.schema.json": "c911757562e521cb4f31a47c097f562573b64087efe60c8acb81fd352367d300",
     "schemas/v2/audit-verify-result.schema.json": "cb54c4d89ba5dfb73f49aa8959a980be65c2dc2a87a12f71ba36d3e836fe85da",
     "schemas/v2/budget-policy.schema.json": "c7449daeb6e1d95e7a047b8c2814d3d54748697c27046972834874867d9b5f4c",
-    "schemas/v2/capabilities.schema.json": "87048be5c04cd88df0bc21938f371a31f9f28a1df8560f6f811d99276fca83a4",
-    "schemas/v2/certification-bundle.schema.json": "06d450510b87fcfe22e4f3ba9dceef5f3ca9031ef65832d7b9d2f22b89028964",
+    "schemas/v2/capabilities.schema.json": "b6191deddf6bee19470eee9a45bb520de0d17385c195de6e3b8c5cb6d9520238",
+    "schemas/v2/certification-bundle.schema.json": "02aa15f17644d902a9df06a99cfdaf51273b0a9cca0d0ef515d5da03be01fb09",
     "schemas/v2/channel-presence-payload.schema.json": "9475d46f358d21c19126e78204987a5633979917a2293653354ef5c5e044d54e",
     "schemas/v2/channel-written-payload.schema.json": "ccecff3c71a3275ad8db035ac0e04db25e6f8d23cf091ddbcd5a60d1be1cbb6b",
     "schemas/v2/chat-card-pack-manifest.schema.json": "566982ce509a96d1619d58a72e383eff0773fe43fc65e4bfc85a4fe158f4eaff",
@@ -141,7 +141,7 @@
     "schemas/v2/envelopes/schema.request.schema.json": "be2c5f7aa881cdd252ccff47ac02193659e1393633a1541f4297383205d384a2",
     "schemas/v2/envelopes/schema.response.schema.json": "d049a081267c06c28879c331b147f3ed821b14ccfd93005c67aff64db0a8c68e",
     "schemas/v2/envelopes/ui.a2ui-surface.schema.json": "0a06fbbdc8ba797a6818c79336a98e211ac5ba5747945b4e4098072cd3974d79",
-    "schemas/v2/error-envelope.schema.json": "6fd825be2dc71559487ea7f68c42b1503f0606dddce764ea2d14f66533b9319c",
+    "schemas/v2/error-envelope.schema.json": "d550beeab958b528c8734fd32e74c438006b99172c5c586f9e0af20ef4b2bee7",
     "schemas/v2/eval-summary.schema.json": "dfc995c8481ed212e6f3d83de982547898a7938be8c891ddb0d3efe84352908d",
     "schemas/v2/export-bundle.schema.json": "bd28905a7729437ab7f2ad8bb33e13a371b2bf5605a7eb2962a0d246de312d69",
     "schemas/v2/form-content-pack-manifest.schema.json": "307884e57946703b6f86ec283034bf56beb68bea4a000743ebbc9eebeed31b07",
@@ -156,7 +156,7 @@
     "schemas/v2/localized-content-section.schema.json": "29c7bad0ad9ebc6c45211282e8afb3fdb35a4ca075ce0404b6e2c29f35fa5313",
     "schemas/v2/memory-entry.schema.json": "290576ae84f4fef4cdf975932b87963283b11c50ea3d2654b32cd96aa6537c3d",
     "schemas/v2/memory-list-options.schema.json": "f66703bccb68efb28391c273abb66aa117ee5b5ce475c477846ed700c336afcd",
-    "schemas/v2/node-pack-manifest.schema.json": "3b7343dffbbaa4a539760e14714968ab9855d55a226f62bcb110f78a2ee47b56",
+    "schemas/v2/node-pack-manifest.schema.json": "771328fa73691e7f08fca3c628c4e8ba68fa4e43529faaf1a6358aecf26b13f2",
     "schemas/v2/orchestrator-decision.schema.json": "2da17538e84cfbe70151eb118f1ccf670cff58b8697148e394074d32ac4af6b4",
     "schemas/v2/org-chart-responsibility-view.schema.json": "ebac7d2889bfd659bcf30311efb0d6eb0c7e940b972b6b62da69c7351b5bb586",
     "schemas/v2/pack-lockfile.schema.json": "2685417702c105146b780cd99154296a46578fbb10d81c8c713348ee26fea898",
@@ -165,12 +165,12 @@
     "schemas/v2/prompt-ref.schema.json": "11538fa36a7a652c93100cac4f1857eb4130137b546e3d94890618636d44b729",
     "schemas/v2/prompt-template.schema.json": "494fc83028cb3af5dbb8a943d0e83b2348f7775e9fa02369162bcb58a6f81559",
     "schemas/v2/proposal.schema.json": "72623553611f00e87b4c7972d69ebeba73c2222b01ead75a44a0c2114b679fea",
-    "schemas/v2/registry-version-manifest.schema.json": "e704e08b11be9a5c7dc7237c8cb8b99b079d7c29615909320c2bb9bad285b8c1",
+    "schemas/v2/registry-version-manifest.schema.json": "270704ebc6bae63be949efbf9503578938b103733db9da3cb8fcbee1cd7684dd",
     "schemas/v2/residency.schema.json": "af2658a7104cbcacd0e20a91226271c4a77f91ef46ae97612768fe743e6091d8",
     "schemas/v2/run-ancestry-response.schema.json": "907e36341ba83a2147a5d76963950b6dcd47506b663ecbccae9dfa553f3724d3",
     "schemas/v2/run-diff-response.schema.json": "6ab6cd265dc7e0a2086c6659c46aa0e7b43e6302949f0adac5d7deb1c7c0ecd3",
     "schemas/v2/run-event-payloads.schema.json": "8eb0e05e1bd3399b0e2654a1ec5a13198ac4ec8459a1fcbfd800ab2d0a0ae8c6",
-    "schemas/v2/run-event.schema.json": "6be6c366af34eea1606b92a17ebae40d3d3390f4d54c38d9fce293ab820ea118",
+    "schemas/v2/run-event.schema.json": "4ec8eb048a79ca1343e00aa018acbf86814b5eda6768add6b17e8d7b83638fdf",
     "schemas/v2/run-options.schema.json": "6d6052596ab0f17acfb00fdfc89907da7724f952e5ffbe1f81d94ba23d4c77cd",
     "schemas/v2/run-orchestrator-decided-event.schema.json": "bb76e15ff72e669f12938684033b55dc567470e1a378e19ffc3fa0e4034ab5a7",
     "schemas/v2/run-snapshot.schema.json": "e77bf491d11c1414e62ed84cbf0c1d7149279b133a2101dc8f5eec89d3e45204",
@@ -198,21 +198,21 @@
     "schemas/workspace-file.schema.json": "464de85c2a068243084ee9c1d969bc7cd5d8f7948574e58450d6493c38a0e1e4",
     "spec/v1/alias-detectors.json": "fee4594ef49953953ffcd0b3813300067d16b3e65ebff2aac722034ac9b3f545",
     "spec/v1/capability-declaration-classes.json": "e7729aed5c4b4e1dd02abab0530f14cc95f5d4070fe51fb139e7f5cccefa00c6",
-    "spec/v1/core-standard-manifest.json": "1d20ac568c5fc3e1e4d30bc0e4cd7e450118a447150912338f0fc3d3cf205a47",
+    "spec/v1/core-standard-manifest.json": "6d0dd7cec8085554565060d2b5ed3abdcd3d13d9940404de33cac17633f3c23a",
     "spec/v1/deprecations.json": "520d79927a8ed43ccf62c207a7cf6cf7b19b16e00bbbbdf0410667e939c19d85",
     "spec/v1/deprecations.schema.json": "4cdbbb8eb9c0092913a5704c943880f0c8581bcf0f640a7df5a84105d53c8aee",
     "spec/v1/event-codemap.json": "3da60d884157793a360da532a9fcbbfb5285636db325a74cec94b34622186d97",
     "spec/v1/event-codemap.schema.json": "d52caf29071e3784d4c20259cdbd5a7b533986548a440bb632a80b82cadd7ea5",
     "spec/v1/extensions.json": "4d7ba68bae7c7f50cc655b94646ad25945a5dd63b703d43c1d015470141cd668",
-    "spec/v1/gaps.json": "1986d648cd1ade06823f33edd20bd00d3ccf09781aa0a9992bb5f4117687b484",
+    "spec/v1/gaps.json": "96ca051cb20f1a669b355d67a89421c56fef28aa5e6710c9519f592f26af33a3",
     "spec/v1/gaps.schema.json": "8fd83259f556553c9df0f53e7a82ca8c2a4771d471197f69b4e2ae0ceeacfd66",
     "spec/v1/migrations.json": "8839497d6a4830b53fa7867014a8336f0d725ef2346352e54fb580b7947897af",
     "spec/v1/migrations.schema.json": "886779aa6c22e646db097f5df210adb018a4dd14a7b815465a18c8a7056c8f72",
     "spec/v1/operation-path-manifest.json": "5f5f4e3842669371730ebbd1aace3fb794192615f0018dc144f484ba5db82ac3",
     "spec/v1/spec-gaps.json": "6cc9962c6b969f632e07a78b52a4f61447ff579e2990cbae989866f584a86042",
-    "spec/v2/declaration.json": "91409933c089d2415254b32ade698549ed9b4caf16877fbfa7c9b578df6aaf12",
+    "spec/v2/declaration.json": "892b6fae1e87f279ff75451f67ffab2a63ef883203f8066886bd60f165469348",
     "spec/v2/declaration.schema.json": "b0881a76228dfbd1b85a2ec7b7259a60197f768344535cdb475db6ff719b0e54",
-    "spec/v2/errors.json": "204b2ae8029cd37becd9bf65e70a78b27fa7637818adfdd0d97677167c7d3405",
+    "spec/v2/errors.json": "ad1725dc7c11002450e8abc682858eb5c11952a0718ea8ef6bdb2fb5ae6e7e21",
     "spec/v2/event-codemap.json": "37869a03cdfd8758b57e6f350641a6ebbd383231cebda51f5473ad85f94ab74c",
     "spec/v2/event-codemap.schema.json": "ce2d0ca085d7668d7ef745d2560b385ec6881d24a6d4b47c49931986b2ba642d",
     "spec/v2/ext/provider-idempotency/registry.json": "5b5fecad604fb4ab38da39f5abe697a4e57b05406c398f8afeb377331b2bd965",
@@ -224,11 +224,11 @@
     "spec/v2/facets/mcp.schema.json": "f56609fe24ba6160ad29ae31aa16043354ff005e5cb6a0f3871c4d226087cc08",
     "spec/v2/facets/replay.schema.json": "0a5aefb0108c708c6794fadd533cf256709704c4f16dbf44cd63fa8980c78018",
     "spec/v2/facets/sandbox.schema.json": "e75f54486d387b2d089791aa93b5093cd1450f1920753a0f97fc23acdfe978ed",
-    "spec/v2/facets/webhooks.schema.json": "9b40d658af3ac7d8c26edcef275b01080607e10124a871b6adde05df686a69f1",
+    "spec/v2/facets/webhooks.schema.json": "0b766033ef4b4c6c2ac6f9979a19843ba024d3a1d1576972dcb55aaba52f1b9a",
     "spec/v2/path-manifest.json": "034152e09b1458c66810d4050e20a273b2b9b8fe2d92b66e8b819477de58a1be",
     "spec/v2/peer-dependency-aliases.json": "d10299280abee08258502925bc327293ee413e0108cd6e6ec75ff6110653308d",
     "spec/v2/profiles.json": "1f0ee40491131cf561ef19a0394c47ba476b4567514fe16befb6cada4a10a5a4",
-    "spec/v2/release.json": "324675b23d36fd84e5ae0daecfc1aeacea53d12377cd40283ba2442bf57836c3"
+    "spec/v2/release.json": "ef05b0ec4ef4296dfbbacf37e97612b3c1f8d11b701890caa7b9c8462eab8359"
   },
-  "corpusCommit": "7c81ace8312cd2e6a059a8d383534d67dccfaca7"
+  "corpusCommit": "18c32663eb8acfe76d9b5906f69c82ed214987e0"
 }

package/api/seams-v2.yaml

@@ -1,12 +1,12 @@
 openapi: 3.1.0
 info:
   title: OpenWOP conformance seams profile (openwop-conformance-seams-v2)
-  version: 2.0.0-rc.0
+  version: 2.0.0-rc.2
   description: 'GENERATED by scripts/derive-v2-api.py. RFC 0168 §C: the seams are a versioned conformance profile with their
     own document and path space (/conformance/seams/…), validated against the canonical v2 schemas with no tolerance path,
     forbidden from the capability namespace (a host advertises the profile, never a testSeams flag). This document carries
-    the nine operations the v1 canonical document used to carry; the remaining host-sample-test-seams.md paths enter with
-    the 2.0.0 suite driver (P3-E).'
+    the nine operations the v1 canonical document used to carry; the 2.0.0 suite driver (P3-E2) rewrites the remaining host-sample-test-seams.md
+    paths into this space, and P3-E3 adds the two RFC 0176 seams (event-log seed, inbound webhook receiver).'
 servers:
 - url: https://{host}
   description: openwop-compliant server
@@ -514,6 +514,219 @@ paths:
             application/json:
               schema:
                 $ref: ../schemas/v2/error-envelope.schema.json
+  /conformance/seams/sample/event-log/seed:
+    post:
+      tags:
+      - Seams
+      operationId: seedEra2EventLog
+      summary: Persist a run whose event log is in v1 vocabulary (era 2) — RFC 0176 §A/§B/§C witnesses
+      description: 'The host MUST persist the rows verbatim (v1 `type` strings, the given `sequence` space, no era stamp:
+        the run reads as era `2` by the absent-⇒-`2` rule of persistence.md) and MUST NOT translate at write time; the read
+        projection is what the scenarios `v2-v1-events-translated`, `v2-unmapped-type-refused`, `v2-fork-a-v1-run` and `v2-pinned-run-disposition`
+        witness. `status` is the snapshot status the seeded run holds.'
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              additionalProperties: false
+              required:
+              - eventLogSchemaVersion
+              - status
+              - events
+              properties:
+                eventLogSchemaVersion:
+                  const: 2
+                status:
+                  type: string
+                  enum:
+                  - running
+                  - completed
+                  - failed
+                  - cancelled
+                events:
+                  type: array
+                  minItems: 1
+                  items:
+                    type: object
+                    additionalProperties: false
+                    required:
+                    - type
+                    - sequence
+                    - payload
+                    properties:
+                      type:
+                        type: string
+                      sequence:
+                        type: integer
+                        minimum: 0
+                      payload:
+                        type: object
+                      timestamp:
+                        type: string
+                        format: date-time
+                      causationId:
+                        type: string
+      responses:
+        '201':
+          description: The seeded run.
+          content:
+            application/json:
+              schema:
+                type: object
+                additionalProperties: false
+                required:
+                - runId
+                properties:
+                  runId:
+                    $ref: ../schemas/v2/ids.schema.json#/$defs/runId
+        '400':
+          $ref: '#/components/responses/ValidationError'
+        '401':
+          $ref: '#/components/responses/Unauthenticated'
+  /conformance/seams/sample/effect-seams/fire:
+    post:
+      tags:
+      - Seams
+      operationId: fireEffectSeam
+      summary: Fire one named effect-seam manifest row inside a run — RFC 0173 §C no-re-fire witness
+      description: 'The host runs a workflow that drives the named seam once. The scenario then forks the run in `replay`
+        mode and reads `GET /runs/{runId}/effects` on the fork: a seam whose manifest row says `branchReFires: false` MUST
+        NOT produce a new effect attempt there. The witness is the host own Layer-2 ledger, so the leg needs no externally
+        reachable receiver. Without this seam the replay-suppression obligation is only claims-checkable.'
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              additionalProperties: false
+              required:
+              - seam
+              properties:
+                seam:
+                  type: string
+                  minLength: 1
+                  description: The `seam` value of a row in GET /host/effect-seams.
+                receiverUrl:
+                  type: string
+                  format: uri
+                  description: Optional destination for seams whose kind needs one. Omitted, the host uses its own unreachable
+                    fixture destination — the witness is the effect ledger, not delivery.
+      responses:
+        '201':
+          description: The run that fired the seam.
+          content:
+            application/json:
+              schema:
+                type: object
+                additionalProperties: false
+                required:
+                - runId
+                properties:
+                  runId:
+                    $ref: ../schemas/v2/ids.schema.json#/$defs/runId
+        '400':
+          $ref: '#/components/responses/ValidationError'
+        '401':
+          $ref: '#/components/responses/Unauthenticated'
+        '404':
+          $ref: '#/components/responses/NotFound'
+  /conformance/seams/sample/test/idempotency/effect-retry:
+    post:
+      tags:
+      - Seams
+      operationId: forceEffectTransportRetry
+      summary: Drive one effect through the suite fixture provider with a forced transport retry — RFC 0173 §D.2 G4 witness
+      description: 'The host issues one outbound effect to `providerUrl` and retries it at the transport layer. The suite
+        fixture provider records the idempotency key of each attempt: a Layer-2 host MUST present the SAME business-identity
+        key across both attempts, so a provider that sees a changed key fails the leg. Without this seam the effect-identity
+        obligation is only claims-checkable.'
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              additionalProperties: false
+              required:
+              - providerUrl
+              properties:
+                providerUrl:
+                  type: string
+                  format: uri
+                  description: The suite's fixture provider; it records each attempt's idempotency key.
+      responses:
+        '201':
+          description: The run and effect that were retried.
+          content:
+            application/json:
+              schema:
+                type: object
+                additionalProperties: false
+                required:
+                - runId
+                - effectId
+                properties:
+                  runId:
+                    $ref: ../schemas/v2/ids.schema.json#/$defs/runId
+                  effectId:
+                    type: string
+                    minLength: 1
+        '400':
+          $ref: '#/components/responses/ValidationError'
+        '401':
+          $ref: '#/components/responses/Unauthenticated'
+  /conformance/seams/sample/webhooks/receive:
+    post:
+      tags:
+      - Seams
+      operationId: receiveWebhookDelivery
+      summary: Run a webhook delivery through the host's inbound receiver — RFC 0176 §D.2 witness
+      description: The v2 host as a subscriber. The host verifies `headers` + `body` with its production verifier using `secret`
+        as the subscription secret and reports the verdict; an `X-openwop-*`-only scheme-`v1` delivery over `{timestamp}.{rawBody}`
+        MUST be accepted (`v2-v1-signed-webhook-accepted`), and a tampered signature MUST be refused.
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              additionalProperties: false
+              required:
+              - secret
+              - headers
+              - body
+              properties:
+                secret:
+                  type: string
+                  minLength: 1
+                headers:
+                  type: object
+                  additionalProperties:
+                    type: string
+                body:
+                  type: string
+      responses:
+        '200':
+          description: The verifier verdict.
+          content:
+            application/json:
+              schema:
+                type: object
+                additionalProperties: false
+                required:
+                - accepted
+                properties:
+                  accepted:
+                    type: boolean
+                  reason:
+                    type: string
+        '400':
+          $ref: '#/components/responses/ValidationError'
+        '401':
+          $ref: '#/components/responses/Unauthenticated'
 components:
   securitySchemes:
     ApiKeyAuth:

package/api/v2/asyncapi.yaml

@@ -1,7 +1,7 @@
 asyncapi: 3.1.0
 info:
   title: OpenWOP v2 event streams
-  version: 2.0.0-rc.0
+  version: 2.0.0-rc.2
   description: GENERATED by scripts/derive-v2-api.py (RFC 0171 §E.1, RFC 0172 §C.2). One run-events channel whose address
     is the OpenAPI path key; the server pathname is empty (bare origin). streamMode is a pattern over the closed set and its
     comma-separated combinations (`values` never combines). hostEvents has a real address (RFC 0171 §E.1) — the documented

package/api/v2/openapi.yaml

@@ -1,7 +1,7 @@
 openapi: 3.1.0
 info:
   title: OpenWOP v2 API
-  version: 2.0.0-rc.0
+  version: 2.0.0-rc.2
   summary: REST surface for declaring, executing, suspending, resuming, and observing multi-step workflows.
   description: GENERATED by scripts/derive-v2-api.py from api/openapi.yaml and the RFC 0167 children (v2 charter Phase 3,
     P3-C). Bare origin, unversioned path keys, negotiation by `OpenWOP-Version` + `protocolVersions[]` (RFC 0172 §A). No seam

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openwop/spec-artifacts",
-  "version": "2.0.0-rc.0",
+  "version": "2.0.0-rc.2",
   "description": "The OpenWOP machine-readable contract: api/ (OpenAPI, AsyncAPI, the seams profile), schemas/ (v1 and v2 JSON Schemas), the spec/v1 and spec/v2 registries (errors, event codemap, declaration, deprecations, migrations, gaps) and CORPUS-STAMP.json — published from the openwop/openwop corpus tag; the peer dependency @openwop/openwop-conformance digest-checks at start (RFC 0168 §D.2).",
   "license": "Apache-2.0",
   "repository": { "type": "git", "url": "git+https://github.com/openwop/openwop.git", "directory": "spec-artifacts" },

package/schemas/v2/capabilities.schema.json

@@ -180,6 +180,10 @@
           "type": "string",
           "format": "uri",
           "description": "OPTIONAL (RFC 0089). URL of the host's most recent conformance certification bundle (`conformance-certification-bundle.schema.json`) — a machine-readable attestation binding this host's claimed profiles to the reproducible run that substantiates them. Omitting it is fully conformant; clients MUST tolerate its absence."
+        },
+        "seamsProfile": {
+          "const": "openwop-conformance-seams-v2",
+          "description": "RFC 0168 §C.1 — the host serves the conformance seams profile (api/seams-v2.yaml) at /conformance/seams/…. Absent means the seam-driven scenarios record `blocked`, never a pass."
         }
       },
       "additionalProperties": false,
@@ -5034,6 +5038,29 @@
               "v1"
             ]
           }
+        },
+        "retryPolicy": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "maxAttempts",
+            "backoff"
+          ],
+          "properties": {
+            "maxAttempts": {
+              "type": "integer",
+              "minimum": 1
+            },
+            "backoff": {
+              "type": "string",
+              "enum": [
+                "none",
+                "fixed",
+                "exponential"
+              ]
+            }
+          },
+          "description": "spec/v2/core/webhooks.md §Delivery — the policy a host retries a failed attempt under. The webhooks family carries it at v2; `triggerBridge.retryPolicy` is the v1 carrier and stays through the overlap."
         }
       },
       "allOf": [

package/schemas/v2/certification-bundle.schema.json

@@ -100,7 +100,8 @@
           }
         },
         "signingKeyId": {
-          "$ref": "ids.schema.json#/$defs/keyId"
+          "$ref": "ids.schema.json#/$defs/keyId",
+          "description": "The host key the signature was made with (the same keyId as signature.keyId)."
         },
         "relaxations": {
           "type": "array",
@@ -253,7 +254,8 @@
             "properties": {
               "id": {
                 "type": "string",
-                "pattern": "^openwop\\.requirement\\."
+                "pattern": "^openwop\\.(?!it\\.(?:artifact-schema-compile-bounded|artifact-type-legacy-ids|capability-example-root-layout|certification-floor-enforcement|chain-subchain-unsupported-refused|compensation-profile|core-manifest-and-extension-registry|discovery-canonical-family-no-shadow|edge-condition-truthy-falsy|effect-identity-composition|effect-identity-cross-scope|error-envelope-canonical-shape|event-codemap-complete|form-content-packs|multi-region-effect-vocabulary|normative-example-extraction|openapi-asyncapi-sdk-parity|pack-manifest-extensions|protocol-version-grammar|registry-declarative-kinds|rfc-0147-self-audit|rfc-lifecycle-coherence|semantic-digest-v2|spec-corpus-validity|spec-section-citations|tool-result-trust-monotone|v2-alias-covers-reword|v2-corpus-tag-pinned|v2-declaration-parity|v2-event-naming-rule|v2-events-channel-parity|v2-externally-gated-never-stable|v2-one-signing-scheme|v2-path-parity|v2-release-identity|v2-req-only-assertions|v2-seams-not-in-canonical|v2-security-defaults-table|v2-spec-artifacts-digest|v2-threat-model-template|v2-witness-required|versioned-composition-profiles|workflow-chain-internal-flag|workload-identity-profile)\\.)(requirement|it|scenario|floor|profile|family)\\.[a-z0-9]",
+                "description": "RFC 0168 §A.1 — `openwop.<area>.<slug>`. The suite mints six areas: `requirement` (an explicit `req()` id), `it` (a per-test id from the scenario file and title), `scenario` and `floor` (per-file rows), `profile` (a claimed-profile row) and `family` (a capability gate). The lookahead refuses every id minted from a corpus-coherence file: those run in the spec repo’s CI and MUST NOT appear in a host bundle (conformance.md §\"Two products, two ledgers\"; RFC 0168 §D.1). `scripts/check-req-only.mjs` fails when the list drifts from `conformance/src/coherence/`."
               },
               "scenario": {
                 "type": "string"
@@ -349,11 +351,30 @@
             "suite.version",
             "discovery.sha256"
           ]
+        }
+      }
+    },
+    "verifierSignature": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "alg",
+        "keyId",
+        "sig"
+      ],
+      "properties": {
+        "alg": {
+          "const": "ed25519"
         },
-        "verifierKeyId": {
+        "keyId": {
           "$ref": "ids.schema.json#/$defs/keyId"
+        },
+        "sig": {
+          "type": "string",
+          "pattern": "^[A-Za-z0-9_-]{86}$"
         }
-      }
+      },
+      "description": "RFC 0168 §E.2 — required when any claimed profile is evidenceTier independent; the key MUST differ from the host's."
     }
   },
   "allOf": [
@@ -396,6 +417,26 @@
           "detail"
         ]
       }
+    },
+    {
+      "if": {
+        "properties": {
+          "claimedProfiles": {
+            "contains": {
+              "properties": {
+                "evidenceTier": {
+                  "const": "independent"
+                }
+              }
+            }
+          }
+        }
+      },
+      "then": {
+        "required": [
+          "verifierSignature"
+        ]
+      }
     }
   ]
 }

package/schemas/v2/error-envelope.schema.json

@@ -2,7 +2,7 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://openwop.dev/spec/v2/error-envelope.schema.json",
   "title": "ErrorEnvelope (v2)",
-  "description": "GENERATED from spec/v2/errors.json by scripts/generate-error-envelope.mjs (RFC 0171 §B.1). 92 registered codes; vendor codes match ^(?!openwop\\.)[a-z][a-z0-9]*(-[a-z0-9]+)*\\.[a-z][a-z0-9_]*$. Consumers MUST accept an unknown registered member and MUST NOT act on it (RFC 0171 §A.5).",
+  "description": "GENERATED from spec/v2/errors.json by scripts/generate-error-envelope.mjs (RFC 0171 §B.1). 94 registered codes; vendor codes match ^(?!openwop\\.)[a-z][a-z0-9]*(-[a-z0-9]+)*\\.[a-z][a-z0-9_]*$. Consumers MUST accept an unknown registered member and MUST NOT act on it (RFC 0171 §A.5).",
   "type": "object",
   "additionalProperties": false,
   "required": [
@@ -40,6 +40,7 @@
             "event_type_unmapped",
             "forbidden",
             "force_engine_version_forbidden",
+            "fork_point_invalid",
             "id_tenant_mismatch",
             "idempotency_in_flight",
             "idempotency_key_invalid",
@@ -104,6 +105,7 @@
             "until_in_past",
             "validation_error",
             "version_conflict",
+            "webhook_url_rejected",
             "workspace_conflict",
             "workspace_membership_required",
             "workspace_too_large"
@@ -151,6 +153,7 @@
     "event_type_unmapped": 500,
     "forbidden": 403,
     "force_engine_version_forbidden": 403,
+    "fork_point_invalid": 422,
     "id_tenant_mismatch": 403,
     "idempotency_in_flight": 409,
     "idempotency_key_invalid": 400,
@@ -215,6 +218,7 @@
     "until_in_past": 400,
     "validation_error": 400,
     "version_conflict": 409,
+    "webhook_url_rejected": 400,
     "workspace_conflict": 409,
     "workspace_membership_required": 403,
     "workspace_too_large": 413

package/schemas/v2/node-pack-manifest.schema.json

@@ -119,6 +119,16 @@
             "type": "boolean",
             "default": false,
             "description": "When true, an unmet peer dependency degrades (inert + surfaced in `degraded[]`) rather than failing install."
+          },
+          "facets": {
+            "type": "array",
+            "minItems": 1,
+            "uniqueItems": true,
+            "items": {
+              "type": "string",
+              "pattern": "^[a-z][A-Za-z0-9]*$"
+            },
+            "description": "Facets of the peer family the pack needs (packs.md §Peer dependencies; RFC 0177 §B.1). Each MUST be a facet the declaration file lists for that family; the family key alone means the family's presence."
           }
         }
       }

package/schemas/v2/registry-version-manifest.schema.json

@@ -158,29 +158,8 @@
       }
     },
     "runtime": {
-      "type": "object",
-      "required": [
-        "language"
-      ],
-      "properties": {
-        "language": {
-          "type": "string",
-          "enum": [
-            "javascript",
-            "typescript",
-            "wasm",
-            "remote"
-          ],
-          "description": "Pack runtime. `javascript`/`typescript` for in-process Node executors; `wasm` for sandboxed WASM (RFC 0008 ABI); `remote` for agent-only packs that dispatch via remote LLM providers + don't ship local executor bytecode."
-        },
-        "entry": {
-          "type": "string"
-        },
-        "abiVersion": {
-          "type": "string"
-        }
-      },
-      "additionalProperties": false
+      "$ref": "node-pack-manifest.schema.json#/$defs/Runtime",
+      "description": "The pack runtime block, byte-for-byte the node-pack manifest's (`format`, `minRuntimeVersion`, `requires` included)."
     },
     "peerDependencies": {
       "type": "object",
@@ -189,6 +168,9 @@
         "type": "string"
       }
     },
+    "peerDependenciesMeta": {
+      "$ref": "node-pack-manifest.schema.json#/properties/peerDependenciesMeta"
+    },
     "dependencies": {
       "type": "object",
       "description": "Pack dependencies (other packs). Wire-locked at install time per `pack-lockfile.schema.json`.",
@@ -246,13 +228,13 @@
     },
     "tarballUrl": {
       "type": "string",
-      "description": "Registry-relative URL for the signed tarball. Always `/v1/packs/{name}/-/{version}.tgz`.",
-      "pattern": "^/v1/packs/[^/]+/-/[^/]+\\.tgz$"
+      "description": "Registry-relative URL for the signed tarball. Always `/v2/packs/{name}/-/{version}.tgz` (RFC 0177 §A.3 full-path templates).",
+      "pattern": "^/v2/packs/[^/]+/-/[^/]+\\.tgz$"
     },
     "signatureUrl": {
       "type": "string",
-      "description": "Registry-relative URL for the detached Ed25519 signature. Always `/v1/packs/{name}/-/{version}.sig`.",
-      "pattern": "^/v1/packs/[^/]+/-/[^/]+\\.sig$"
+      "description": "Registry-relative URL for the detached signature. Always `/v2/packs/{name}/-/{version}.sig`.",
+      "pattern": "^/v2/packs/[^/]+/-/[^/]+\\.sig$"
     },
     "yanked": {
       "type": "boolean",

package/schemas/v2/run-event.schema.json

@@ -153,7 +153,8 @@
         },
         {
           "type": "string",
-          "pattern": "^(?!openwop\\.)[a-z][a-z0-9]*(-[a-z0-9]+)*\\.[a-z][a-z0-9]*(-[a-z0-9]+)*(\\.[a-z][a-z0-9]*(-[a-z0-9]+)*)?$"
+          "pattern": "^(?!openwop\\.)(?!(?:agent|approval|artifact|authorization|budget|cap|channel|clarification|commitment|compensation|connector|context|conversation|deployment|dispatch|egress|envelope|eval|goal|import|interrupt|lease|log|memory|model|negotiation|node|orchestrator|output|prompt|proposal|provider|replay|roster|run|tool|trigger|variable|version|voice|workflow|workflow-chain|workspace)\\.)[a-z][a-z0-9]*(-[a-z0-9]+)*\\.[a-z][a-z0-9]*(-[a-z0-9]+)*(\\.[a-z][a-z0-9]*(-[a-z0-9]+)*)?$",
+          "description": "RFC 0171 §A.1 — the positive vendor branch `<org>.<domain-or-name>`. The lookahead bans `openwop.` and every first segment the closed enum registers (agent, approval, artifact, authorization, budget, cap, channel, clarification, commitment, compensation, connector, context, conversation, deployment, dispatch, egress, envelope, eval, goal, import, interrupt, lease, log, memory, model, negotiation, node, orchestrator, output, prompt, proposal, provider, replay, roster, run, tool, trigger, variable, version, voice, workflow, workflow-chain, workspace), so the two branches are disjoint (a registered type matches exactly one) and a typo of a registered domain (`run.startd`) is refused instead of validating as a vendor type — the v1 defect this rule replaces. Regenerate the segment list with scripts/check-v2-schemas.mjs when the enum grows; the corpus wrapper v2-event-naming-rule asserts it."
         }
       ],
       "description": "RFC 0171 §A.1 — a registered protocol type (closed enum generated from spec/v2/event-codemap.json) or a vendor event under <org>.<name>; openwop. is the only reserved prefix. Consumers MUST accept an unknown registered member and MUST NOT act on it (§A.5)."

package/spec/v1/core-standard-manifest.json

@@ -4,7 +4,7 @@
   "provenance": {
     "suite": {
       "package": "@openwop/openwop-conformance",
-      "version": "2.0.0-rc.0"
+      "version": "2.0.0-rc.2"
     },
     "note": "Derived from the corpus at generation time. Regenerate with --write; verify with --check."
   },
@@ -419,5 +419,5 @@
       "$id": "https://openwop.dev/spec/v1/workspace-file.schema.json"
     }
   ],
-  "digest": "b4fec837a0301ce9015b610bd3ec6ff055cf6ae716049dac18b5fd8184a1ff7c"
+  "digest": "031b99da4e427eb75371fc90d02b921d075549aa18e3a51e39dca3b058531f1d"
 }

package/spec/v1/gaps.json

@@ -1,7 +1,7 @@
 {
   "$schema": "./gaps.schema.json",
   "version": 1,
-  "updated": "2026-09-03",
+  "updated": "2026-09-04",
   "witnessClasses": [
     "witnessable-unaided",
     "witnessable-gated",
@@ -9523,7 +9523,7 @@
       "surface": "The `extensions.<org>.<name>` org form (short vs reverse-DNS).",
       "witness": "claims-check",
       "requirementId": null,
-      "disposition": "open",
+      "disposition": "closed",
       "target": null,
       "sources": [
         {
@@ -9540,8 +9540,8 @@
       "surface": "`host-capabilities.md:2186` says a host MUST NOT advertise `host.workspace`; `agent-workspace.md:27` and `capabilities.schema.json:2979` make advertising it the gate for an Accepted surface (RFC 0059). A v1.x prose contradiction, out of this RFC's v2 scope.",
       "witness": "witnessable-unaided",
       "requirementId": null,
-      "disposition": "open",
-      "target": null,
+      "disposition": "carried",
+      "target": "openwop.gap.spec.agent-workspace.r6",
       "sources": [
         {
           "file": "RFCS/registers/0169-v2-discovery-and-capabilities.gaps.md",
@@ -9557,7 +9557,7 @@
       "surface": "`imageGeneration` / `videoGeneration` are prose-only under `aiProviders` (RFC 0105 G5); the gap's premise (`additionalProperties: false` on `aiProviders`) has drifted — the block is open at `capabilities.schema.json:1536`. Declared facets or deleted?",
       "witness": "claims-check",
       "requirementId": null,
-      "disposition": "open",
+      "disposition": "closed",
       "target": null,
       "sources": [
         {
@@ -9574,8 +9574,8 @@
       "surface": "The adoption-axis triage of RFCs 0112–0116 depends on Phase 4 bundle evidence that does not exist yet.",
       "witness": "witnessable-gated",
       "requirementId": null,
-      "disposition": "open",
-      "target": null,
+      "disposition": "externally-gated",
+      "target": "phase-4-host-bundles",
       "sources": [
         {
           "file": "RFCS/registers/0169-v2-discovery-and-capabilities.gaps.md",
@@ -9591,8 +9591,8 @@
       "surface": "`agent-platform-aggregate-evidence.test.ts:37` reads a root `profiles[]` that no schema declares (the RFC 0085 annex claim). The v2 suite reads the generated profile registry; the v1 scenario keeps reading the field until the v1 suite is archived.",
       "witness": "witnessable-unaided",
       "requirementId": null,
-      "disposition": "open",
-      "target": null,
+      "disposition": "carried",
+      "target": "openwop.gap.spec.agent-platform-profile.r1",
       "sources": [
         {
           "file": "RFCS/registers/0169-v2-discovery-and-capabilities.gaps.md",
@@ -9931,7 +9931,7 @@
       "surface": "Numbers 0160–0162 were never authored (RFC 0158's renumber note). Filing `Withdrawn` stubs after the fact would be a paper trail for nothing.",
       "witness": "negative-existence",
       "requirementId": null,
-      "disposition": "open",
+      "disposition": "closed",
       "target": null,
       "sources": [
         {
@@ -9948,8 +9948,8 @@
       "surface": "388 `carried:<self>` rows on terminal RFCs at filing (the RFC 0166 backfill default); 45 whose prose said CLOSED re-tokened here; 343 remain under the `selfCarried` ratchet.",
       "witness": "witnessable-unaided",
       "requirementId": null,
-      "disposition": "open",
-      "target": null,
+      "disposition": "carried",
+      "target": "openwop.gap.0166.3",
       "sources": [
         {
           "file": "RFCS/registers/0174-v2-governance.gaps.md",
@@ -9965,7 +9965,7 @@
       "surface": "`check-accepted-predicate.mjs` needs `gaps.json` rows bound to requirement ids, which none are today (RFC 0178 §B.1 owns the binding).",
       "witness": "witnessable-unaided",
       "requirementId": null,
-      "disposition": "open",
+      "disposition": "closed",
       "target": null,
       "sources": [
         {
@@ -9982,7 +9982,7 @@
       "surface": "The 43 prose gap tables have two row shapes; the adapter into `gaps.json` must map both without inventing ids.",
       "witness": "witnessable-unaided",
       "requirementId": null,
-      "disposition": "open",
+      "disposition": "closed",
       "target": null,
       "sources": [
         {
@@ -10237,8 +10237,8 @@
       "surface": "558 of 558 `gaps.json` rows were `witness: unclassified` and `requirementId: null` at filing. This PR classifies the RFC 0167 family's rows; the rest is the RFC 0166 G2 ratchet.",
       "witness": "witnessable-unaided",
       "requirementId": null,
-      "disposition": "open",
-      "target": null,
+      "disposition": "carried",
+      "target": "openwop.gap.0166.2",
       "sources": [
         {
           "file": "RFCS/registers/0178-v2-assurance-registers-and-deprecation-machinery.gaps.md",
@@ -10254,7 +10254,7 @@
       "surface": "Nine of 164 RFCs carry a falsifiability table; the parser is a gate for the RFC 0167 family and advisory elsewhere.",
       "witness": "witnessable-unaided",
       "requirementId": null,
-      "disposition": "open",
+      "disposition": "closed",
       "target": null,
       "sources": [
         {
@@ -10271,8 +10271,8 @@
       "surface": "`check-gap-contradictions.mjs` resolves scenario files and OpenAPI paths only; a gap naming any other artifact is reported unchecked.",
       "witness": "witnessable-unaided",
       "requirementId": null,
-      "disposition": "open",
-      "target": null,
+      "disposition": "carried",
+      "target": "openwop.gap.0166.4",
       "sources": [
         {
           "file": "RFCS/registers/0178-v2-assurance-registers-and-deprecation-machinery.gaps.md",
@@ -10288,7 +10288,7 @@
       "surface": "Whether AsyncAPI 3.x carries a standard `deprecated` on channels and messages.",
       "witness": "claims-check",
       "requirementId": null,
-      "disposition": "open",
+      "disposition": "closed",
       "target": null,
       "sources": [
         {

package/spec/v2/declaration.json

@@ -1062,6 +1062,7 @@
         "adoption": "none"
       },
       "facets": [
+        "retryPolicy",
         "signatureAlgorithms"
       ],
       "floorScenarios": [],

package/spec/v2/errors.json

@@ -230,6 +230,15 @@
       "since": "1.0",
       "source": "spec/v1/run-options.md / version-negotiation.md (OpenWOP-Force-Engine-Version outside test keys)"
     },
+    {
+      "code": "fork_point_invalid",
+      "httpStatus": 422,
+      "statusSource": "v2 decision",
+      "retriable": false,
+      "details": null,
+      "since": "2.0",
+      "source": "spec/v2/core/runs.md §Fork"
+    },
     {
       "code": "id_tenant_mismatch",
       "httpStatus": 403,
@@ -806,6 +815,15 @@
       "since": "1.0",
       "source": "api/openapi.yaml"
     },
+    {
+      "code": "webhook_url_rejected",
+      "httpStatus": 400,
+      "statusSource": "v2 decision",
+      "retriable": false,
+      "details": null,
+      "since": "2.0",
+      "source": "spec/v2/core/webhooks.md §Egress"
+    },
     {
       "code": "workspace_conflict",
       "httpStatus": 409,

package/spec/v2/facets/webhooks.schema.json

@@ -1,5 +1,5 @@
 {
-  "$comment": "RFC 0173 §B — durable delivery binds with webhooks; no durable flag",
+  "$comment": "RFC 0173 §B — durable delivery binds with webhooks; no durable flag; retryPolicy is the v2 carrier of the delivery obligation (was triggerBridge.retryPolicy at v1)",
   "properties": {
     "signatureAlgorithms": {
       "type": "array",
@@ -10,6 +10,29 @@
           "v1"
         ]
       }
+    },
+    "retryPolicy": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "maxAttempts",
+        "backoff"
+      ],
+      "properties": {
+        "maxAttempts": {
+          "type": "integer",
+          "minimum": 1
+        },
+        "backoff": {
+          "type": "string",
+          "enum": [
+            "none",
+            "fixed",
+            "exponential"
+          ]
+        }
+      },
+      "description": "spec/v2/core/webhooks.md §Delivery — the policy a host retries a failed attempt under. The webhooks family carries it at v2; `triggerBridge.retryPolicy` is the v1 carrier and stays through the overlap."
     }
   },
   "required": [

package/spec/v2/release.json

@@ -1,6 +1,6 @@
 {
   "$comment": "RFC 0172 §D.1 — the one release identity the v2 artifacts derive from. `version` is the next corpus tag `v<version>` (the publish workflow's coordinated-release tag pattern `v*`; RFC 0172's `openwop/v2.<minor>.<patch>` spelling is amended to this at its flip). api/v2/*.yaml info.version, the suite's 2.x version and @openwop/spec-artifacts read it. Bumped by the release PR that cuts the tag, never by hand elsewhere.",
-  "version": "2.0.0-rc.0",
+  "version": "2.0.0-rc.2",
   "corpusTag": null,
   "updated": "2026-09-03"
 }