@openwop/spec-artifacts 2.0.0-rc.0

package/spec/v1/extensions.json

@@ -0,0 +1,1273 @@
+{
+  "$comment": [
+    "RFC 0155 \u00a7C \u2014 versioned extension registry.",
+    "",
+    "Closed records for the normative extensions this corpus defines. `maturity` is",
+    "one of experimental|draft|stable|deprecated, and \u00a7C sets a hard bar for stable:",
+    "normative prose, schemas, non-vacuous conformance, SDK support where applicable,",
+    "and at least one Tier-3 implementation.",
+    "",
+    "BACKFILL 2026-08-16 (RFC 0155 UQ3 \u2014 grandfathering). Every optional capability",
+    "family in `schemas/capabilities.schema.json` now has a record; the derived",
+    "`coverage` block partitions the family set into core-predicate fields, discovery",
+    "METADATA (keys that describe the document/host rather than gate a feature \u2014",
+    "each with a stated rationale), covered, and uncovered, and `--check` fails if a",
+    "family arrives in none of them. Grandfathering rule: an extension whose owning",
+    "RFC is `Active`/`Accepted`, or whose home is a v1 base spec document, enters at",
+    "`draft`; one whose owning RFC is `Draft`/`Parked` enters at `experimental`.",
+    "Nothing enters at `stable` \u2014 see the ceiling below.",
+    "",
+    "Fields beyond the \u00a7C example: `owningDoc` (spec/v1/*.md) names the normative",
+    "home when the family predates the RFC process (`owningRfc: null` \u2014 six v1 base",
+    "advertisements: secrets, webhooks, i18n, aiProviders, envelopeContracts,",
+    "envelopeStrictness); `securityTier` is high|medium|low \u2014 high when the family",
+    "reaches credentials, tenant-isolated storage, egress, sandboxing, or",
+    "authorization; `minimumSuiteVersion` is DERIVED as the suite version at which",
+    "the named scenario witness first landed (`git log --diff-filter=A` on the file \u2192",
+    "conformance/package.json at that commit), null when no scenario reads the family",
+    "(a stated suite gap, not a pass); `note` names the witness and the RFC status.",
+    "",
+    "NOTE: every record here is at most `draft`. \u00a7C gates `stable` on a Tier-3",
+    "implementation, and no Tier-3 host exists \u2014 the `ROADMAP.md` tripwire has not",
+    "fired. That ceiling is a fact about adoption, not about the maturity of the work,",
+    "and the registry states it instead of quietly promoting anything. `evidenceTier`",
+    "is therefore null on every record; tier-1/tier-2 execution evidence lives in",
+    "INTEROP-MATRIX.md and the hosts' certification bundles, not here."
+  ],
+  "rfc": "0155 \u00a7C",
+  "coverage": {
+    "rule": "Derived by scripts/generate-extension-registry-coverage.mjs from the top-level keys of schemas/capabilities.schema.json. coreFields = the openwop-discovery-core predicate fields (profiles.md); metadataFields = keys that describe the document or host rather than gate an optional feature (each carries its rationale in metadataRationale; a key that gates behaviour may not be listed there); covered = extension families reached by some record capabilityPath; uncovered = every other family. Uncovered means no registry record exists \u2014 not that the family is non-compliant. Regenerate with --write; the gate runs --check.",
+    "familiesTotal": 92,
+    "coreFields": [
+      "limits",
+      "protocolVersion",
+      "schemaVersions",
+      "supportedEnvelopes"
+    ],
+    "metadataFields": [
+      "compliance",
+      "configurable",
+      "conformance",
+      "discovery",
+      "engineVersion",
+      "eventLogSchemaVersion",
+      "extensions",
+      "fixtures",
+      "implementation",
+      "minClientVersion",
+      "observability",
+      "protocolVersions",
+      "runtimeCapabilities",
+      "supportedTransports",
+      "testing"
+    ],
+    "metadataRationale": {
+      "compliance": "which masking mode is in effect (closes O5) \u2014 describes an operator setting so clients can read `[REDACTED]` correctly",
+      "configurable": "per-run `RunOptions.configurable` overlay keys the server honours; a schema hint",
+      "conformance": "conformance-only typeIds the host registered (RFC 0023) \u2014 evidence apparatus, not a feature",
+      "discovery": "discovery-change-detection advertisement (capabilities-change-detection.md) \u2014 describes the discovery document itself",
+      "engineVersion": "server engine version axis (version-negotiation.md); a number, not a feature",
+      "eventLogSchemaVersion": "per-run event-log schema axis (version-negotiation.md)",
+      "extensions": "per-canvas / per-workflow overrides (additional envelope types, override limits); an override slot, not a family",
+      "fixtures": "fixture workflow ids the host seeded \u2014 a hint to the suite about what it may drive",
+      "implementation": "server identity (name / version / vendor)",
+      "minClientVersion": "minimum SDK version the server interops with; a pin, not a feature",
+      "observability": "hints about emitted spans/metrics/logs (observability.md); descriptive",
+      "protocolVersions": "RFC 0165 \u00a7A \u2014 every protocol major.minor the host serves; a version advertisement beside `protocolVersion`, not a capability family.",
+      "runtimeCapabilities": "opaque ids NodeModules may `requires`; a vocabulary the host names, not a contract this corpus defines",
+      "supportedTransports": "transport list; REST is required regardless and gRPC has its own `grpc` family",
+      "testing": "testing-mode advertisement (mock providers, seams) \u2014 for suites and dev clients, not a production feature"
+    },
+    "covered": [
+      "a2a",
+      "a2uiSurface",
+      "agentRuntime",
+      "agents",
+      "aiEnvelope",
+      "aiProviders",
+      "anonymousActor",
+      "artifactTypes",
+      "auth",
+      "authorization",
+      "blobStorage",
+      "budget",
+      "cache",
+      "channelPresence",
+      "compensation",
+      "connections",
+      "content",
+      "contractProvenance",
+      "conversationPrimitive",
+      "conversationTurnModelProvenance",
+      "credentials",
+      "dataResidency",
+      "deadLetter",
+      "envelopeContracts",
+      "envelopeStrictness",
+      "envelopes",
+      "eventLog",
+      "feedback",
+      "forms",
+      "fs",
+      "grpc",
+      "heartbeat",
+      "httpClient",
+      "i18n",
+      "idempotency",
+      "interrupt",
+      "kvStorage",
+      "mcp",
+      "memory",
+      "modelCapabilities",
+      "multiAgent",
+      "multiPartyConversation",
+      "nodePackRuntimes",
+      "nondeterminismPolicy",
+      "nosql",
+      "oauth",
+      "packs",
+      "portability",
+      "production",
+      "promptLibrary",
+      "prompts",
+      "providerUsage",
+      "purposePropagation",
+      "queueBus",
+      "replay",
+      "restTransport",
+      "sandbox",
+      "scheduling",
+      "searchIndex",
+      "secrets",
+      "selfHostedRunner",
+      "sql",
+      "subWorkflow",
+      "tableStorage",
+      "toolCatalog",
+      "toolHooks",
+      "triggerBridge",
+      "uiPlugins",
+      "vectorStore",
+      "webhooks",
+      "workflowChainPacks",
+      "workspace"
+    ],
+    "uncovered": [
+      "preferredVersion"
+    ]
+  },
+  "extensions": [
+    {
+      "id": "openwop-compensation-v1",
+      "maturity": "draft",
+      "owningRfc": "0151",
+      "capabilityPath": "compensation.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "high",
+      "minimumSuiteVersion": "1.107.0",
+      "evidenceTier": null,
+      "note": "RFC 0151 `Accepted`; shape landed at suite 1.89.0 (`b4796755`), the six \u00a7D events (`76195069`), the capability-gated behavioral witness `compensation-behavior.test.ts` at 1.94.0 (`4bec9e07`), and `compensationStatus` on `RunSnapshot` + `spec/v1/compensation.md` (`Draft`, landed subset only) + seams \u00a721 at 1.107.0 (`5f1978f2`). `draft`, not `stable`: no host advertises `compensation.supported`, so every behavioral leg resolves to `blocked` (RFC 0148 \u00a7A); \u00a7C/\u00a7E prose and `compensation-policy.schema.json` remain carried. Witness review 2026-09-02: reclassified witnessable-gated \u2192 seam-gated \u2014 `compensation-behavior` / `-recovery` run through `/v1/host/sample/test/compensation/*` (`host-sample-test-seams.md` \u00a721) and record `blocked` without it. Advertiser status corrected 2026-09-03 (RFC 0173 G5): openwop-app advertises `compensation.supported: true` on the deployed wire since 2026-08-17 (INTEROP-MATRIX row `compensation`), so \"no host advertises\" is stale; the behavioral legs remain seam-gated until the RFC 0173 read projection lands.",
+      "witness": "seam-gated",
+      "witnessReview": "reviewed-2026-09-02"
+    },
+    {
+      "id": "openwop-a2a-1-0",
+      "maturity": "draft",
+      "owningRfc": "0152",
+      "capabilityPath": "a2a.protocolVersions",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "high",
+      "minimumSuiteVersion": "1.96.0",
+      "evidenceTier": null,
+      "note": "RFC 0152 `Accepted`; discovery shape (`3ce1c04b`), the \u00a7B negotiation witness `a2a-version-negotiation.test.ts` at 1.96.0 (`5f1a7112`), and \u2014 2026-08-16 \u2014 the 1.0 profile prose and field-by-field translation table in `spec/v1/a2a-integration.md` \u00a7\"A2A 1.0 versioned composition\" (`d77d259b`, pinned to A2A 1.0.0; JSON-RPC-at-1.0 floor; `a2a-0.3-legacy` named and time-bounded to 2027-03-12) landed; openwop-app's live origin advertises `a2a.protocolVersions` and passes the \u00a7A leg; it has not wired the invoke seam, so the \u00a7B legs are `blocked` there (corrected 2026-08-16). `draft`: the suite's fake peer is 0.3-shaped so \u00a7C/\u00a7D are unwitnessed at 1.0, and stable is additionally blocked on a real upstream A2A 1.0 peer, which is not a corpus deliverable. **`capabilityPath` corrected 2026-08-13** from `a2a.protocolVersion` \u2014 it did not resolve against `capabilities.schema.json`. Witness review 2026-09-02: reclassified witnessable-gated \u2192 seam-gated \u2014 `a2a-version-negotiation` needs the invoke seam to observe the negotiated version and records `blocked` without it (RFC 0148 \u00a7A).",
+      "witness": "seam-gated",
+      "witnessReview": "reviewed-2026-09-02"
+    },
+    {
+      "id": "openwop-mcp-2026-07-28",
+      "maturity": "draft",
+      "owningRfc": "0153",
+      "capabilityPath": "mcp.protocolVersions",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "high",
+      "minimumSuiteVersion": "1.97.0",
+      "evidenceTier": null,
+      "note": "RFC 0153 `Accepted`; discovery shape (`3ce1c04b`), the \u00a7A/\u00a7B revision-negotiation witness `mcp-version-negotiation.test.ts` at 1.97.0 (`7b09e9aa`), and \u2014 2026-08-16 \u2014 the profile prose and MRTR mapping in `spec/v1/mcp-integration.md` \u00a7\"MCP 2026-07-28 versioned composition\" (`65ebd53a`, pinned to the upstream 2026-07-28 revision; `mcp-2025-06-18-legacy` named and time-bounded to 2027-08-12) landed; openwop-app's live origin advertises `mcp.protocolVersions` and passes the \u00a7A legs; the \u00a7B legs are `blocked` there (no invoke seam). `draft`: the suite's fake server speaks the 2025-06-18 handshake so \u00a7B stateless rules, `server/discover`, MRTR, and cache hints are unwitnessed, and stable is additionally gated on a pinned upstream peer at the current revision. **`capabilityPath` corrected 2026-08-13** from `mcp.protocolVersion` \u2014 it did not resolve against `capabilities.schema.json`. Witness review 2026-09-02: reclassified witnessable-gated \u2192 seam-gated \u2014 `mcp-version-negotiation` needs the invoke seam to observe the negotiated revision and records `blocked` without it.",
+      "witness": "seam-gated",
+      "witnessReview": "reviewed-2026-09-02"
+    },
+    {
+      "id": "openwop-workload-identity-v1",
+      "maturity": "draft",
+      "owningRfc": "0154",
+      "capabilityPath": "auth.workloadIdentity.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "high",
+      "minimumSuiteVersion": "1.95.0",
+      "evidenceTier": null,
+      "note": "RFC 0154 `Accepted`; `workload-identity.schema.json` + `auth.workloadIdentity` (`8de95a14`), the behavioral witness `workload-identity-behavior.test.ts` + seam \u00a720 at 1.95.0 (`f27765cd`), per-section gating (`b7c52f75`), and \u2014 2026-08-16 \u2014 the auth prose (`spec/v1/auth.md` \u00a7\"Workload identity and delegated actor chain\"), the OTel mapping (`observability.md`, v0 experimental `gen_ai.*` projection), and `SECURITY/threat-model-workload-identity.md` (`31de3bbb`) landed. `draft`: no host advertises `auth.workloadIdentity` (legs resolve to `blocked`), six \u00a7F invariants are named-but-unregistered, and the provenance half spans `openwop-sdks` and `openwop-registry`, so it cannot reach stable from this repo alone. **`capabilityPath` corrected 2026-08-13** from `workloadIdentity.supported` \u2014 it did not resolve against `capabilities.schema.json`. Witness review 2026-09-02: reclassified claims-check \u2192 seam-gated \u2014 `workload-identity-behavior` / `-chain-bounds` resolve through the `host-sample-test-seams.md` \u00a720 seam and record `blocked` without it; the profile scenario alone is a shape check.",
+      "witness": "seam-gated",
+      "witnessReview": "reviewed-2026-09-02"
+    },
+    {
+      "id": "openwop-effect-identity-v2",
+      "maturity": "draft",
+      "owningRfc": "0150",
+      "capabilityPath": "idempotency.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "high",
+      "minimumSuiteVersion": "1.86.0",
+      "evidenceTier": null,
+      "note": "RFC 0150 \u00a7B/\u00a7C/\u00a7D landed with normative prose, conformance, invariants, and golden vectors \u2014 the richest evidence any extension here has. Still `draft`, not `stable`: \u00a7C requires at least one Tier-3 implementation for stable, and none exists. **No extension in this corpus can currently reach `stable` for that reason**, which is a fact about adoption rather than about the work, and is recorded here rather than worked around.",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-multi-region-fenced-effects",
+      "maturity": "draft",
+      "owningRfc": "0150",
+      "capabilityPath": "idempotency.crossRegion",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "high",
+      "minimumSuiteVersion": "1.78.0",
+      "evidenceTier": null,
+      "note": "RFC 0150 \u00a7D vocabulary landed; no host advertises `fenced-effects`, so the effect-fencing witness (gap G10) is still corpus-structural. Its runtime witness is now SPECIFIED (RFC 0150 acceptance box 4, resolved 2026-08-21): a fence-verdict observation over the \u00a7F counters (`stale_fence_rejections_total` OR `effect_suppressions_total`) plus a per-`logicalInvocationId` effect count of 1 \u2014 never an effect-content sink \u2014 capability-gated on `crossRegion: fenced-effects` and landing with the first advertising host.",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-a2ui-surface-transport",
+      "maturity": "draft",
+      "owningRfc": "0114",
+      "capabilityPath": "a2uiSurface",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "medium",
+      "minimumSuiteVersion": "1.42.0",
+      "evidenceTier": null,
+      "note": "RFC 0114 host-side transport features over the recorded `ui.a2ui-surface` envelope (RFC 0102). Owning RFC `0114` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `a2ui-surface-delta-transport.test.ts`.",
+      "witness": "claims-check",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-agent-runtime",
+      "maturity": "draft",
+      "owningRfc": "0144",
+      "capabilityPath": "agentRuntime.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "high",
+      "minimumSuiteVersion": "1.10.0",
+      "evidenceTier": null,
+      "note": "RFC 0144 host-capability declaration; the swarm/consensus superset of the agent surface. No scenario reads the family by name \u2014 the live-runtime shape leg is the nearest witness. Owning RFC `0144` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `agent-live-runtime-shape.test.ts`.",
+      "owningDoc": "spec/v1/host-capabilities.md",
+      "witness": "claims-check",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-multi-agent-shift",
+      "maturity": "draft",
+      "owningRfc": "0002",
+      "capabilityPath": "agents.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "high",
+      "minimumSuiteVersion": "1.9.0",
+      "evidenceTier": null,
+      "note": "Multi-Agent Shift block (RFCs 0002\u20130008 + 0070/0072 agent runtime); the family gates every agent surface. Owning RFC `0002` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `agent-manifest-runtime.test.ts`.",
+      "owningDoc": "spec/v1/agent-identity.md",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-ai-envelope-generate",
+      "maturity": "draft",
+      "owningRfc": "0144",
+      "capabilityPath": "aiEnvelope.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "medium",
+      "minimumSuiteVersion": "1.1.1",
+      "evidenceTier": null,
+      "note": "RFC 0144 host-capability declaration for `ctx.aiEnvelope.generate`. Owning RFC `0144` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `aiEnvelope.universalKinds.test.ts`.",
+      "owningDoc": "spec/v1/ai-envelope.md",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-ai-providers",
+      "maturity": "draft",
+      "owningRfc": null,
+      "capabilityPath": "aiProviders.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "high",
+      "minimumSuiteVersion": "1.21.0",
+      "evidenceTier": null,
+      "note": "v1 base advertisement (companion to `secrets`); later RFCs 0105/0106/0108 add modality/self-hosted sub-shapes. Pre-RFC v1 base advertisement; `owningDoc` names the normative home. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `aiproviders-input-shape.test.ts`.",
+      "owningDoc": "spec/v1/auth.md",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-anonymous-actor",
+      "maturity": "draft",
+      "owningRfc": "0132",
+      "capabilityPath": "anonymousActor.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "high",
+      "minimumSuiteVersion": "1.55.0",
+      "evidenceTier": null,
+      "note": "RFC 0132 anonymous-actor authorization; five protocol-tier MUST-NOTs graduated on the openwop-app witness. Owning RFC `0132` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `anonymous-actor-shape.test.ts`. Witness review 2026-09-02: reclassified witnessable-gated \u2192 seam-gated \u2014 every behavioral probe goes through `/v1/host/sample/anon-surface/*` and soft-skips on 404.",
+      "witness": "seam-gated",
+      "witnessReview": "reviewed-2026-09-02"
+    },
+    {
+      "id": "openwop-artifact-types",
+      "maturity": "draft",
+      "owningRfc": "0071",
+      "capabilityPath": "artifactTypes.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "medium",
+      "minimumSuiteVersion": "1.10.0",
+      "evidenceTier": null,
+      "note": "RFC 0071/0075 artifact + card packs; declared as a host advertisement by RFC 0144. Owning RFC `0071` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `chat-card-pack-manifest-validation.test.ts`.",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-rbac-authorization",
+      "maturity": "draft",
+      "owningRfc": "0049",
+      "capabilityPath": "authorization.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "high",
+      "minimumSuiteVersion": "1.5.0",
+      "evidenceTier": null,
+      "note": "RFC 0049 role\u2192scope mapping and `authorization.decided`. Owning RFC `0049` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `authorization-roles-shape.test.ts`.",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-blob-storage",
+      "maturity": "draft",
+      "owningRfc": "0019",
+      "capabilityPath": "blobStorage.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "high",
+      "minimumSuiteVersion": "1.1.1",
+      "evidenceTier": null,
+      "note": "RFC 0019 presigned-URL blob store; per-bucket tenant isolation. Owning RFC `0019` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `blob-roundtrip.test.ts`.",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-budget-governance",
+      "maturity": "draft",
+      "owningRfc": "0084",
+      "capabilityPath": "budget.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "medium",
+      "minimumSuiteVersion": "1.10.0",
+      "evidenceTier": null,
+      "note": "RFC 0084 per-run spend governance. Owning RFC `0084` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `budget-policy-shape.test.ts`.",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-ttl-cache",
+      "maturity": "draft",
+      "owningRfc": "0019",
+      "capabilityPath": "cache.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "high",
+      "minimumSuiteVersion": "1.1.1",
+      "evidenceTier": null,
+      "note": "RFC 0019 TTL cache; per-tenant scoping. Owning RFC `0019` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `cache-ttl-expiry.test.ts`.",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-channel-presence",
+      "maturity": "draft",
+      "owningRfc": "0110",
+      "capabilityPath": "channelPresence.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "low",
+      "minimumSuiteVersion": "1.37.0",
+      "evidenceTier": null,
+      "note": "RFC 0110 presence/typing events. Owning RFC `0110` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `channel-presence-shape.test.ts`.",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-connection-packs",
+      "maturity": "draft",
+      "owningRfc": "0095",
+      "capabilityPath": "connections.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "high",
+      "minimumSuiteVersion": "1.23.0",
+      "evidenceTier": null,
+      "note": "RFC 0095 connection packs (provider definitions; no credential material). Owning RFC `0095` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `connection-pack-manifest-valid.test.ts`.",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-localized-content",
+      "maturity": "draft",
+      "owningRfc": "0103",
+      "capabilityPath": "content.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "low",
+      "minimumSuiteVersion": "1.27.0",
+      "evidenceTier": null,
+      "note": "RFC 0103 localized authored content. Owning RFC `0103` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `localized-content-delivery.test.ts`.",
+      "owningDoc": "spec/v1/localized-content.md",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-contract-provenance",
+      "maturity": "draft",
+      "owningRfc": "0146",
+      "capabilityPath": "contractProvenance",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "medium",
+      "minimumSuiteVersion": "1.73.0",
+      "evidenceTier": null,
+      "note": "RFC 0146 corpus-revision provenance; first production advertiser 2026-08-15. Owning RFC `0146` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `contract-provenance.test.ts`.",
+      "witness": "claims-check",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-conversation-primitive",
+      "maturity": "draft",
+      "owningRfc": "0005",
+      "capabilityPath": "conversationPrimitive",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "medium",
+      "minimumSuiteVersion": "1.0.0",
+      "evidenceTier": null,
+      "note": "Multi-Agent Shift Phase 4 `core.conversationGate` + `conversation.*` interrupt kinds. Owning RFC `0005` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `conversationCapabilityNegotiation.test.ts`.",
+      "owningDoc": "spec/v1/conversation.md",
+      "witness": "claims-check",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-conversation-turn-model-provenance",
+      "maturity": "draft",
+      "owningRfc": "0109",
+      "capabilityPath": "conversationTurnModelProvenance.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "low",
+      "minimumSuiteVersion": "1.37.0",
+      "evidenceTier": null,
+      "note": "RFC 0109 `agent.model` stamp on conversation turns. Owning RFC `0109` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `conversation-turn-model-provenance-shape.test.ts`.",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-credentials",
+      "maturity": "draft",
+      "owningRfc": "0046",
+      "capabilityPath": "credentials.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "high",
+      "minimumSuiteVersion": "1.5.0",
+      "evidenceTier": null,
+      "note": "RFC 0046 portable credential resolution + lifecycle. Owning RFC `0046` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `credentials-capability-shape.test.ts`.",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-data-residency",
+      "maturity": "draft",
+      "owningRfc": "0129",
+      "capabilityPath": "dataResidency.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "high",
+      "minimumSuiteVersion": "1.54.0",
+      "evidenceTier": null,
+      "note": "RFC 0129 region pinning; honors-or-rejects admission. Owning RFC `0129` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `data-residency-admission.test.ts`.",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-dead-letter",
+      "maturity": "draft",
+      "owningRfc": "0053",
+      "capabilityPath": "deadLetter.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "medium",
+      "minimumSuiteVersion": "1.5.0",
+      "evidenceTier": null,
+      "note": "RFC 0053 run-level dead-letter sink. Owning RFC `0053` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `deadletter-capability-shape.test.ts`.",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-envelope-contract-gating",
+      "maturity": "draft",
+      "owningRfc": null,
+      "capabilityPath": "envelopeContracts",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "medium",
+      "minimumSuiteVersion": "1.1.1",
+      "evidenceTier": null,
+      "note": "AI-envelope contract gating (`ai-envelope.md` \u00a7\"Capability handshake integration\"). Pre-RFC v1 base advertisement; `owningDoc` names the normative home. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `aiEnvelope.contractRefusal.test.ts`.",
+      "owningDoc": "spec/v1/ai-envelope.md",
+      "witness": "claims-check",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-envelope-strictness",
+      "maturity": "draft",
+      "owningRfc": null,
+      "capabilityPath": "envelopeStrictness",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "medium",
+      "minimumSuiteVersion": "1.1.1",
+      "evidenceTier": null,
+      "note": "AI-envelope schema-version drift handling. Pre-RFC v1 base advertisement; `owningDoc` names the normative home. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `aiEnvelope.schemaDrift.test.ts`.",
+      "owningDoc": "spec/v1/ai-envelope.md",
+      "witness": "claims-check",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-envelope-hardening",
+      "maturity": "draft",
+      "owningRfc": "0030",
+      "capabilityPath": "envelopes",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "high",
+      "minimumSuiteVersion": "1.1.1",
+      "evidenceTier": null,
+      "note": "RFC 0030\u20130033 envelope-hardening track (reasoning redaction, refusal, retry, truncation, recovery). Owning RFC `0030` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `ai-envelope-shape.test.ts`.",
+      "witness": "claims-check",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-event-log-multi-engine",
+      "maturity": "draft",
+      "owningRfc": "0036",
+      "capabilityPath": "eventLog",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "medium",
+      "minimumSuiteVersion": "1.3.0",
+      "evidenceTier": null,
+      "note": "RFC 0036 \u00a7B cross-engine ordering advertisement. Owning RFC `0036` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `cross-engine-append-ordering.test.ts`.",
+      "witness": "claims-check",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-feedback",
+      "maturity": "draft",
+      "owningRfc": "0056",
+      "capabilityPath": "feedback.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "medium",
+      "minimumSuiteVersion": "1.6.0",
+      "evidenceTier": null,
+      "note": "RFC 0056 non-blocking quality signals. Owning RFC `0056` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `feedback-capability-shape.test.ts`.",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-form-content-packs",
+      "maturity": "draft",
+      "owningRfc": "0137",
+      "capabilityPath": "forms",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "medium",
+      "minimumSuiteVersion": "1.61.0",
+      "evidenceTier": null,
+      "note": "RFC 0137 form content packs; declared as a host advertisement by RFC 0144. Owning RFC `0137` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `form-content-instantiation.test.ts`.",
+      "witness": "claims-check",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-fs",
+      "maturity": "draft",
+      "owningRfc": "0014",
+      "capabilityPath": "fs.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "high",
+      "minimumSuiteVersion": "1.1.1",
+      "evidenceTier": null,
+      "note": "RFC 0014 sandboxed filesystem. Owning RFC `0014` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `fs-path-traversal.test.ts`.",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-grpc-transport",
+      "maturity": "draft",
+      "owningRfc": "0094",
+      "capabilityPath": "grpc.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "medium",
+      "minimumSuiteVersion": "1.22.0",
+      "evidenceTier": null,
+      "note": "RFC 0094 \u00a7H gRPC transport advertisement. Owning RFC `0094` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `grpc-transport.test.ts`.",
+      "owningDoc": "spec/v1/grpc-transport.md",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-heartbeat",
+      "maturity": "draft",
+      "owningRfc": "0060",
+      "capabilityPath": "heartbeat.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "medium",
+      "minimumSuiteVersion": "1.6.1",
+      "evidenceTier": null,
+      "note": "RFC 0060 predicate-gated polling. Owning RFC `0060` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `heartbeat-capability-shape.test.ts`.",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-http-client-egress",
+      "maturity": "draft",
+      "owningRfc": "0076",
+      "capabilityPath": "httpClient.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "high",
+      "minimumSuiteVersion": "1.0.0",
+      "evidenceTier": null,
+      "note": "Host outbound-HTTP surface; SSRF guard MUST be true (RFC 0076 safeFetch). Owning RFC `0076` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `http-client-ssrf.test.ts`.",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-i18n",
+      "maturity": "draft",
+      "owningRfc": null,
+      "capabilityPath": "i18n.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "low",
+      "minimumSuiteVersion": "1.22.0",
+      "evidenceTier": null,
+      "note": "Locale negotiation annex. Pre-RFC v1 base advertisement; `owningDoc` names the normative home. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `i18n-negotiation.test.ts`.",
+      "owningDoc": "spec/v1/i18n.md",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-interrupt-approver-routing",
+      "maturity": "draft",
+      "owningRfc": "0104",
+      "capabilityPath": "interrupt",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "medium",
+      "minimumSuiteVersion": "1.28.0",
+      "evidenceTier": null,
+      "note": "RFC 0104 portable HITL approver routing on `kind: \"approval\"`. Owning RFC `0104` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `interrupt-approver-routing.test.ts`.",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-kv-storage",
+      "maturity": "draft",
+      "owningRfc": "0015",
+      "capabilityPath": "kvStorage.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "high",
+      "minimumSuiteVersion": "1.1.1",
+      "evidenceTier": null,
+      "note": "RFC 0015 TTL-aware KV with CAS. Owning RFC `0015` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `kv-atomic-increment.test.ts`.",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-agent-memory",
+      "maturity": "draft",
+      "owningRfc": "0004",
+      "capabilityPath": "memory.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "high",
+      "minimumSuiteVersion": "1.0.0",
+      "evidenceTier": null,
+      "note": "RFC 0004 MemoryAdapter + RFC 0012 compaction; SR-1 / CTI-1 invariants live here. Owning RFC `0004` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `agentMemoryRoundTrip.test.ts`.",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-model-capabilities",
+      "maturity": "draft",
+      "owningRfc": "0031",
+      "capabilityPath": "modelCapabilities.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "medium",
+      "minimumSuiteVersion": "1.3.0",
+      "evidenceTier": null,
+      "note": "RFC 0031 model-capability gating + substitution. Owning RFC `0031` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `node-module-required-capabilities-shape.test.ts`.",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-multi-agent-execution-model",
+      "maturity": "draft",
+      "owningRfc": "0037",
+      "capabilityPath": "multiAgent",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "high",
+      "minimumSuiteVersion": "1.3.0",
+      "evidenceTier": null,
+      "note": "RFC 0037 execution model + handoff state machine (+ RFC 0040/0041 cross-host causation, replay determinism sub-blocks). Owning RFC `0037` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `multi-agent-handoff-state-machine.test.ts`.",
+      "witness": "claims-check",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-multi-party-conversation",
+      "maturity": "draft",
+      "owningRfc": "0101",
+      "capabilityPath": "multiPartyConversation.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "medium",
+      "minimumSuiteVersion": "1.29.0",
+      "evidenceTier": null,
+      "note": "RFC 0101 group conversation with speaker attribution. Owning RFC `0101` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `multi-party-conversation-shape.test.ts`.",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-node-pack-runtimes",
+      "maturity": "draft",
+      "owningRfc": "0008",
+      "capabilityPath": "nodePackRuntimes",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "high",
+      "minimumSuiteVersion": "1.0.0",
+      "evidenceTier": null,
+      "note": "Node-pack runtime formats (RFC 0008 WASM ABI). Owning RFC `0008` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `wasm-pack-load.test.ts`.",
+      "owningDoc": "spec/v1/node-packs.md",
+      "witness": "claims-check",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-nondeterminism-policy",
+      "maturity": "draft",
+      "owningRfc": "0085",
+      "capabilityPath": "nondeterminismPolicy",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "medium",
+      "minimumSuiteVersion": "1.10.0",
+      "evidenceTier": null,
+      "note": "RFC 0085 honest-nondeterminism declaration for hosts without replay/fork. Owning RFC `0085` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `agent-platform-profile.test.ts`.",
+      "witness": "claims-check",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-nosql-store",
+      "maturity": "draft",
+      "owningRfc": "0018",
+      "capabilityPath": "nosql.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "high",
+      "minimumSuiteVersion": null,
+      "evidenceTier": null,
+      "note": "RFC 0018 document-store adapter. NO scenario reads this family \u2014 the shape/behaviour witness is a suite gap (`minimumSuiteVersion: null` is that gap stated). Owning RFC `0018` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: none.",
+      "witness": "claims-check",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-oauth-connectors",
+      "maturity": "draft",
+      "owningRfc": "0047",
+      "capabilityPath": "oauth.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "high",
+      "minimumSuiteVersion": "1.5.0",
+      "evidenceTier": null,
+      "note": "RFC 0047 host-performed OAuth 2.0 grants. Owning RFC `0047` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `oauth-capability-shape.test.ts`.",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-pack-registry",
+      "maturity": "draft",
+      "owningRfc": "0025",
+      "capabilityPath": "packs",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "high",
+      "minimumSuiteVersion": "1.0.0",
+      "evidenceTier": null,
+      "note": "RFC 0025 pack-registry surface. Owning RFC `0025` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `pack-registry-publish.test.ts`.",
+      "witness": "claims-check",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-portability",
+      "maturity": "draft",
+      "owningRfc": "0098",
+      "capabilityPath": "portability",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "high",
+      "minimumSuiteVersion": "1.23.0",
+      "evidenceTier": null,
+      "note": "RFC 0098 tenant estate export/import. Owning RFC `0098` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `export-bundle-portability.test.ts`.",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-prompt-library",
+      "maturity": "draft",
+      "owningRfc": "0144",
+      "capabilityPath": "promptLibrary.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "medium",
+      "minimumSuiteVersion": null,
+      "evidenceTier": null,
+      "note": "RFC 0144 host-capability declaration for `ctx.promptLibrary.get`. NO scenario reads this family by name (the RFC 0027/0028 `prompts` scenarios cover the template surface) \u2014 stated as a gap. Owning RFC `0144` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: none.",
+      "owningDoc": "spec/v1/host-capabilities.md",
+      "witness": "claims-check",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-prompt-templates",
+      "maturity": "draft",
+      "owningRfc": "0027",
+      "capabilityPath": "prompts.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "medium",
+      "minimumSuiteVersion": "1.3.0",
+      "evidenceTier": null,
+      "note": "RFC 0027/0028 prompt templates + resolution chain (RFC 0029). Owning RFC `0027` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `prompt-template-shape.test.ts`.",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-provider-usage",
+      "maturity": "draft",
+      "owningRfc": "0026",
+      "capabilityPath": "providerUsage.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "medium",
+      "minimumSuiteVersion": "1.2.0",
+      "evidenceTier": null,
+      "note": "RFC 0026 `provider.usage` events. Owning RFC `0026` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `provider-usage.test.ts`.",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-purpose-propagation",
+      "maturity": "draft",
+      "owningRfc": "0128",
+      "capabilityPath": "purposePropagation.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "high",
+      "minimumSuiteVersion": "1.53.0",
+      "evidenceTier": null,
+      "note": "RFC 0128 `permittedPurposes` re-emission. Owning RFC `0128` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `purpose-propagation.test.ts`.",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-queue-bus",
+      "maturity": "draft",
+      "owningRfc": "0017",
+      "capabilityPath": "queueBus.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "high",
+      "minimumSuiteVersion": "1.1.1",
+      "evidenceTier": null,
+      "note": "RFC 0017 inbound queue + stream. Owning RFC `0017` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `queue-publish-consume-roundtrip.test.ts`.",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-replay-fork-advert",
+      "maturity": "draft",
+      "owningRfc": "0140",
+      "capabilityPath": "replay.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "high",
+      "minimumSuiteVersion": "1.0.0",
+      "evidenceTier": null,
+      "note": "Replay/fork advertisement (profile `openwop-replay-fork`), declared by RFC 0140; RFC 0150 \u00a7C effect suppression sub-shape. Owning RFC `0140` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `replay-fork.test.ts`.",
+      "owningDoc": "spec/v1/replay.md",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-rest-transport-economy",
+      "maturity": "draft",
+      "owningRfc": "0115",
+      "capabilityPath": "restTransport",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "low",
+      "minimumSuiteVersion": "1.38.0",
+      "evidenceTier": null,
+      "note": "RFC 0115 conditional GET + content encoding on run reads. Owning RFC `0115` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `run-transport-economy.test.ts`.",
+      "witness": "claims-check",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-sandbox",
+      "maturity": "draft",
+      "owningRfc": "0035",
+      "capabilityPath": "sandbox.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "high",
+      "minimumSuiteVersion": "1.3.0",
+      "evidenceTier": null,
+      "note": "RFC 0035 sandbox execution contract (`Active`; steward-parked pending a fencing host). Owning RFC `0035` is `Active`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `sandbox-capability-gate-respected.test.ts`.",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-scheduling",
+      "maturity": "draft",
+      "owningRfc": "0052",
+      "capabilityPath": "scheduling.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "medium",
+      "minimumSuiteVersion": "1.5.0",
+      "evidenceTier": null,
+      "note": "RFC 0052 `schedule` trigger. Owning RFC `0052` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `scheduling-capability-shape.test.ts`.",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-search-index",
+      "maturity": "draft",
+      "owningRfc": "0018",
+      "capabilityPath": "searchIndex.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "high",
+      "minimumSuiteVersion": "1.1.1",
+      "evidenceTier": null,
+      "note": "RFC 0018 full-text search adapter. Owning RFC `0018` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `search-bm25-roundtrip.test.ts`.",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-secrets-byok",
+      "maturity": "draft",
+      "owningRfc": null,
+      "capabilityPath": "secrets.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "high",
+      "minimumSuiteVersion": "1.0.0",
+      "evidenceTier": null,
+      "note": "v1 base BYOK secret/credential resolution advertisement (`auth.md`, `SECURITY/threat-model-secret-leakage.md`). Pre-RFC v1 base advertisement; `owningDoc` names the normative home. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `byok-roundtrip.test.ts`.",
+      "owningDoc": "spec/v1/auth.md",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-self-hosted-runner",
+      "maturity": "draft",
+      "owningRfc": "0122",
+      "capabilityPath": "selfHostedRunner.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "high",
+      "minimumSuiteVersion": "1.48.0",
+      "evidenceTier": null,
+      "note": "RFC 0122 user-controlled runner dial-out. Owning RFC `0122` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `self-hosted-runner.test.ts`.",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-sql-store",
+      "maturity": "draft",
+      "owningRfc": "0018",
+      "capabilityPath": "sql.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "high",
+      "minimumSuiteVersion": "1.1.1",
+      "evidenceTier": null,
+      "note": "RFC 0018 SQL adapter, parametric-only. Owning RFC `0018` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `sql-injection-rejection.test.ts`.",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-subworkflow-extensions",
+      "maturity": "draft",
+      "owningRfc": "0007",
+      "capabilityPath": "subWorkflow",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "medium",
+      "minimumSuiteVersion": "1.1.1",
+      "evidenceTier": null,
+      "note": "`core.subWorkflow` extension surface (RFC 0007 baseline). Owning RFC `0007` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `subworkflow-input-mapping.test.ts`.",
+      "owningDoc": "spec/v1/node-packs.md",
+      "witness": "claims-check",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-table-storage",
+      "maturity": "draft",
+      "owningRfc": "0016",
+      "capabilityPath": "tableStorage.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "high",
+      "minimumSuiteVersion": "1.1.1",
+      "evidenceTier": null,
+      "note": "RFC 0016 structured-record store. Owning RFC `0016` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `table-schema-enforcement.test.ts`.",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-tool-catalog",
+      "maturity": "draft",
+      "owningRfc": "0078",
+      "capabilityPath": "toolCatalog.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "medium",
+      "minimumSuiteVersion": "1.10.0",
+      "evidenceTier": null,
+      "note": "RFC 0078 read-only tool projection. Owning RFC `0078` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `tool-descriptor-shape.test.ts`.",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-tool-hooks",
+      "maturity": "draft",
+      "owningRfc": "0064",
+      "capabilityPath": "toolHooks.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "high",
+      "minimumSuiteVersion": "1.6.1",
+      "evidenceTier": null,
+      "note": "RFC 0064 per-tool authorization, rate limiting, content-free audit. Owning RFC `0064` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `tool-hooks-shape.test.ts`.",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-trigger-bridge",
+      "maturity": "draft",
+      "owningRfc": "0083",
+      "capabilityPath": "triggerBridge.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "medium",
+      "minimumSuiteVersion": "1.10.0",
+      "evidenceTier": null,
+      "note": "RFC 0083 trigger bridge composing scheduling / dead-letter / queue / webhook / cross-host. Owning RFC `0083` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `trigger-bridge-shape.test.ts`.",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-frontend-plugin-packs",
+      "maturity": "draft",
+      "owningRfc": "0117",
+      "capabilityPath": "uiPlugins.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "high",
+      "minimumSuiteVersion": "1.43.0",
+      "evidenceTier": null,
+      "note": "RFC 0117/0119 signed, sandboxed front-end plugin packs. Owning RFC `0117` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `frontend-plugin-packs.test.ts`.",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-vector-store",
+      "maturity": "draft",
+      "owningRfc": "0018",
+      "capabilityPath": "vectorStore.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "high",
+      "minimumSuiteVersion": "1.1.1",
+      "evidenceTier": null,
+      "note": "RFC 0018 vector-DB adapter. Owning RFC `0018` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `vector-knn-roundtrip.test.ts`.",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-webhooks",
+      "maturity": "draft",
+      "owningRfc": null,
+      "capabilityPath": "webhooks.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "high",
+      "minimumSuiteVersion": "1.0.0",
+      "evidenceTier": null,
+      "note": "v1 base webhook delivery (HMAC-signed, circuit breaker; RFC 0083 composes it). Pre-RFC v1 base advertisement; `owningDoc` names the normative home. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `webhook-signed-delivery.test.ts`.",
+      "owningDoc": "spec/v1/webhooks.md",
+      "witness": "witnessable-gated",
+      "witnessReview": "reviewed-2026-09-02"
+    },
+    {
+      "id": "openwop-workflow-chain-packs",
+      "maturity": "draft",
+      "owningRfc": "0013",
+      "capabilityPath": "workflowChainPacks.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "medium",
+      "minimumSuiteVersion": "1.1.1",
+      "evidenceTier": null,
+      "note": "RFC 0013 workflow-chain pack expansion. Owning RFC `0013` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `workflow-chain-expansion.test.ts`.",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-workspace",
+      "maturity": "draft",
+      "owningRfc": "0059",
+      "capabilityPath": "workspace.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "high",
+      "minimumSuiteVersion": "1.6.1",
+      "evidenceTier": null,
+      "note": "RFC 0059 versioned tenant\u00b7workspace file store. Owning RFC `0059` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `workspace-capability-shape.test.ts`.",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    },
+    {
+      "id": "openwop-production-profile-claim",
+      "maturity": "draft",
+      "owningRfc": "0009",
+      "capabilityPath": "production.supported",
+      "dependsOn": [
+        "openwop-core-standard"
+      ],
+      "securityTier": "medium",
+      "minimumSuiteVersion": "1.0.0",
+      "evidenceTier": null,
+      "note": "RFC 0009 production-profile claim (`production-profile.md`): `supported: true` claims every MUST there and makes the gated scenarios mandatory. Listed as a family, not metadata, because it gates behaviour \u2014 the coverage test forbids a metadata key that carries `supported`. Owning RFC `0009` is `Accepted`. Grandfathered 2026-08-16 (RFC 0155 UQ3); scenario witness: `production-backpressure.test.ts`, `production-retention-expiry.test.ts`.",
+      "owningDoc": "spec/v1/production-profile.md",
+      "witness": "witnessable-gated",
+      "witnessReview": "initial-mechanical-2026-09-02"
+    }
+  ]
+}