@openwop/spec-artifacts 2.0.0-rc.3 → 2.0.0-rc.32

package/schemas/v2/run-event-payloads.schema.json

@@ -2,11 +2,11 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://openwop.dev/spec/v2/run-event-payloads.schema.json",
   "title": "RunEventPayloads",
-  "description": "Per-RunEventType payload schemas. The base RunEventDoc shape (run-event.schema.json) leaves `payload` permissive for forward-compat. This schema defines the canonical payload contract for each known RunEventType. Consumers MAY pin strict payload validation via `$defs.<typeId>` and `ajv.validate(schema.$defs[event.type], event.payload)`. Unknown event types MUST be tolerated (no $defs match → fold best-effort).\n\n117 variants from `run-event.schema.json#$defs.RunEventType` are covered, grouped into ~20 shape families with shared $defs. Naming convention: camelCase keys mirror dotted RunEventType names (e.g., `run.started` → `runStarted`). v2: every definition closed; _typeIndex normative; the legacy interrupt payloads (approval*/clarification*) removed per deprecation row legacy-interrupt-payloads.",
+  "description": "Per-RunEventType payload schemas. The base RunEventDoc shape (run-event.schema.json) leaves `payload` permissive for forward-compat. This schema defines the canonical payload contract for each known RunEventType. Consumers MAY pin strict payload validation via `$defs.<typeId>` and `ajv.validate(schema.$defs[event.type], event.payload)`. Unknown event types MUST be tolerated (no $defs match \u2192 fold best-effort).\n\n118 variants from the generated `type` branch of `run-event.schema.json` are covered (the v2 vocabulary is `spec/v2/event-codemap.json`; the old `$defs.RunEventType` twin is deleted \u2014 it held 36 retired v1 spellings and nothing referenced it), grouped into ~20 shape families with shared $defs. Naming convention: camelCase keys mirror dotted RunEventType names (e.g., `run.started` \u2192 `runStarted`). v2: every definition closed; _typeIndex normative; the legacy interrupt payloads (approval*/clarification*) removed per deprecation row legacy-interrupt-payloads.",
   "type": "object",
   "$defs": {
     "_typeIndex": {
-      "description": "Lookup map: RunEventType → $defs key. Informative — consumers can derive this themselves but having it explicit aids tooling.",
+      "description": "Lookup map: RunEventType \u2192 $defs key. Informative \u2014 consumers can derive this themselves but having it explicit aids tooling.",
       "type": "object",
       "additionalProperties": false,
       "properties": {
@@ -364,7 +364,7 @@
       }
     },
     "voiceSpeechStart": {
-      "description": "RFC 0106 §D. Emitted when inbound user speech onset is detected in a live voice session. Content-free (a timestamp only). MUST NOT be emitted unless `aiProviders.realtimeVoice.transcription: \"streaming\"` is advertised.",
+      "description": "RFC 0106 \u00a7D. Emitted when inbound user speech onset is detected in a live voice session. Content-free (a timestamp only). MUST NOT be emitted unless `aiProviders.realtimeVoice.transcription: \"streaming\"` is advertised.",
       "type": "object",
       "additionalProperties": false,
       "required": [
@@ -379,7 +379,7 @@
       }
     },
     "voiceTranscript": {
-      "description": "RFC 0106 §B/§D. A settled or provisional transcript part for the current turn, emitted on the durable event log as the single canonical record (the `ctx.callTranscriber` Promise resolves separately at `turn_commit`). `text` is the recognized speech — UNTRUSTED input (anyone in acoustic range is an unauthenticated writer): it MUST carry `contentTrust: \"untrusted\"` and MUST NOT be promoted to system/developer authority (SECURITY invariant `voice-transcript-untrusted`). A part with `isFinal: false` is provisional and MUST NOT be persisted to durable memory / the replay log / RAG or drive a side-effecting tool call before it finalizes (`voice-interim-not-durable`).",
+      "description": "RFC 0106 \u00a7B/\u00a7D. A settled or provisional transcript part for the current turn, emitted on the durable event log as the single canonical record (the `ctx.callTranscriber` Promise resolves separately at `turn_commit`). `text` is the recognized speech \u2014 UNTRUSTED input (anyone in acoustic range is an unauthenticated writer): it MUST carry `contentTrust: \"untrusted\"` and MUST NOT be promoted to system/developer authority (SECURITY invariant `voice-transcript-untrusted`). A part with `isFinal: false` is provisional and MUST NOT be persisted to durable memory / the replay log / RAG or drive a side-effecting tool call before it finalizes (`voice-interim-not-durable`).",
       "type": "object",
       "additionalProperties": false,
       "required": [
@@ -395,7 +395,7 @@
         },
         "isFinal": {
           "type": "boolean",
-          "description": "true ⇒ this segment's text is settled and will not change."
+          "description": "true \u21d2 this segment's text is settled and will not change."
         },
         "committedPrefix": {
           "type": "string",
@@ -409,7 +409,7 @@
         },
         "formatted": {
           "type": "boolean",
-          "description": "Punctuation/casing/ITN applied; absent ⇒ raw."
+          "description": "Punctuation/casing/ITN applied; absent \u21d2 raw."
         },
         "atMs": {
           "type": "integer",
@@ -417,12 +417,12 @@
         },
         "contentTrust": {
           "const": "untrusted",
-          "description": "MUST be `\"untrusted\"` — live transcript is untrusted ingress (`voice-transcript-untrusted`); never promote to higher authority."
+          "description": "MUST be `\"untrusted\"` \u2014 live transcript is untrusted ingress (`voice-transcript-untrusted`); never promote to higher authority."
         }
       }
     },
     "voiceEndpointCandidate": {
-      "description": "RFC 0106 §B/§D. A silence boundary / likely end-of-turn appeared (only when `turnDetection: \"semantic\"`), DISTINCT from `voice.turn_commit` (Deepgram `UtteranceEnd` vs `speech_final`). Content-free.",
+      "description": "RFC 0106 \u00a7B/\u00a7D. A silence boundary / likely end-of-turn appeared (only when `turnDetection: \"semantic\"`), DISTINCT from `voice.turn_commit` (Deepgram `UtteranceEnd` vs `speech_final`). Content-free.",
       "type": "object",
       "additionalProperties": false,
       "required": [
@@ -442,7 +442,7 @@
       }
     },
     "voiceTurnCommit": {
-      "description": "RFC 0106 §B/§D. The user yielded the floor (turn boundary). This is where the `ctx.callTranscriber` Promise resolves. `finalText` is the settled transcript and is UNTRUSTED (it inherits the `voice.transcript` boundary).",
+      "description": "RFC 0106 \u00a7B/\u00a7D. The user yielded the floor (turn boundary). This is where the `ctx.callTranscriber` Promise resolves. `finalText` is the settled transcript and is UNTRUSTED (it inherits the `voice.transcript` boundary).",
       "type": "object",
       "additionalProperties": false,
       "required": [
@@ -461,7 +461,7 @@
       }
     },
     "voiceSynthesisChunk": {
-      "description": "RFC 0106 §C. Announces a clause-boundary streaming-synthesis chunk. METADATA ONLY — the audio bytes are referenced by a session-scoped `streamRef`/`url`, NOT inlined on the event log past the host's inline cap (RFC 0055 256 KiB precedent; spill to a tenant-scoped `url`), so replay/`:fork` stays bounded over long sessions. MUST NOT be emitted unless `aiProviders.realtimeVoice.synthesis: \"streaming\"` is advertised.",
+      "description": "RFC 0106 \u00a7C. Announces a clause-boundary streaming-synthesis chunk. METADATA ONLY \u2014 the audio bytes are referenced by a session-scoped `streamRef`/`url`, NOT inlined on the event log past the host's inline cap (RFC 0055 256 KiB precedent; spill to a tenant-scoped `url`), so replay/`:fork` stays bounded over long sessions. MUST NOT be emitted unless `aiProviders.realtimeVoice.synthesis: \"streaming\"` is advertised.",
       "type": "object",
       "additionalProperties": false,
       "required": [
@@ -503,7 +503,7 @@
       }
     },
     "voiceBargeIn": {
-      "description": "RFC 0106 §D. User speech overlapped active assistant playback (probable cut-in). A host advertising `realtimeVoice.bargeIn: \"supported\"` MUST emit this on detected overlap. Content-free. Distinct from `voice.cancelled` (a backchannel \"uh-huh\" MAY produce `barge_in` with no `cancelled`).",
+      "description": "RFC 0106 \u00a7D. User speech overlapped active assistant playback (probable cut-in). A host advertising `realtimeVoice.bargeIn: \"supported\"` MUST emit this on detected overlap. Content-free. Distinct from `voice.cancelled` (a backchannel \"uh-huh\" MAY produce `barge_in` with no `cancelled`).",
       "type": "object",
       "additionalProperties": false,
       "required": [
@@ -517,7 +517,7 @@
       }
     },
     "voiceCancelled": {
-      "description": "RFC 0106 §D. Downstream LLM/TTS work was cancelled (barge-in or explicit). A cancellation MUST NOT emit partial tool outputs or partial un-guardrailed model output and MUST roll back or fully complete an in-flight side effect (SECURITY invariant `voice-bargein-no-partial-leak`). Content-free.",
+      "description": "RFC 0106 \u00a7D. Downstream LLM/TTS work was cancelled (barge-in or explicit). A cancellation MUST NOT emit partial tool outputs or partial un-guardrailed model output and MUST roll back or fully complete an in-flight side effect (SECURITY invariant `voice-bargein-no-partial-leak`). Content-free.",
       "type": "object",
       "additionalProperties": false,
       "required": [
@@ -539,7 +539,7 @@
       }
     },
     "authorizationDecided": {
-      "description": "RFC 0049 — emitted on a role-based authorization decision (allow or deny). Redaction-safe: `principal` is an opaque RFC 0048 id; `reason` carries no credential material. Every deny SHOULD be emitted and SHOULD feed the audit log (RFC 0009/0010). MUST NOT be emitted unless `capabilities.authorization.supported: true`.",
+      "description": "RFC 0049 \u2014 emitted on a role-based authorization decision (allow or deny). Redaction-safe: `principal` is an opaque RFC 0048 id; `reason` carries no credential material. Every deny SHOULD be emitted and SHOULD feed the audit log (RFC 0009/0010). MUST NOT be emitted unless `capabilities.authorization.supported: true`.",
       "type": "object",
       "additionalProperties": false,
       "required": [
@@ -552,7 +552,7 @@
         "principal": {
           "type": "string",
           "minLength": 1,
-          "description": "Opaque RFC 0048 principal id — never PII."
+          "description": "Opaque RFC 0048 principal id \u2014 never PII."
         },
         "action": {
           "type": "string",
@@ -569,12 +569,12 @@
         },
         "reason": {
           "type": "string",
-          "description": "Human-readable, redaction-safe — no credential material."
+          "description": "Human-readable, redaction-safe \u2014 no credential material."
         }
       }
     },
     "proposalCreated": {
-      "description": "RFC 0096 §D. Emitted when the host synthesizes a reviewable-learning draft. Content-free: ids / kind / content-free references only — NEVER the artifact body or the rationale text (those live behind the authed read). Redaction-safe (SECURITY invariant `proposal-inert-until-applied` covers the behavior; SR-1 covers the payload). MUST NOT be emitted unless `capabilities.agents.proposals` is advertised.",
+      "description": "RFC 0096 \u00a7D. Emitted when the host synthesizes a reviewable-learning draft. Content-free: ids / kind / content-free references only \u2014 NEVER the artifact body or the rationale text (those live behind the authed read). Redaction-safe (SECURITY invariant `proposal-inert-until-applied` covers the behavior; SR-1 covers the payload). MUST NOT be emitted unless `capabilities.agents.proposals` is advertised.",
       "type": "object",
       "additionalProperties": false,
       "required": [
@@ -600,9 +600,9 @@
         "sourceRunIds": {
           "type": "array",
           "items": {
-            "type": "string"
+            "$ref": "ids.schema.json#/$defs/runId"
           },
-          "description": "Runs whose traces produced the draft (RFC 0040 causation-compatible). Ids only — no trace content."
+          "description": "Runs whose traces produced the draft (RFC 0040 causation-compatible). Ids only \u2014 no trace content."
         },
         "duplicateOf": {
           "type": [
@@ -614,7 +614,7 @@
       }
     },
     "proposalActivated": {
-      "description": "RFC 0096 §D. Emitted on a successful `apply`. Content-free: ids / content-free references only — NEVER the installed artifact body. MUST NOT be emitted unless `capabilities.agents.proposals` is advertised.",
+      "description": "RFC 0096 \u00a7D. Emitted on a successful `apply`. Content-free: ids / content-free references only \u2014 NEVER the installed artifact body. MUST NOT be emitted unless `capabilities.agents.proposals` is advertised.",
       "type": "object",
       "additionalProperties": false,
       "required": [
@@ -651,7 +651,7 @@
       }
     },
     "goalEvaluated": {
-      "description": "RFC 0097 §D. Emitted after each judge check on a standing goal. Content-free: NO objective text. The verdict (`satisfied`/`confidence`) is non-deterministic judge output — it is RECORDED here and MUST NOT be recomputed on replay/fork (`replay.md`). MUST NOT be emitted unless `capabilities.agents.goals` is advertised.",
+      "description": "RFC 0097 \u00a7D. Emitted after each judge check on a standing goal. Content-free: NO objective text. The verdict (`satisfied`/`confidence`) is non-deterministic judge output \u2014 it is RECORDED here and MUST NOT be recomputed on replay/fork (`replay.md`). MUST NOT be emitted unless `capabilities.agents.goals` is advertised.",
       "type": "object",
       "additionalProperties": false,
       "required": [
@@ -687,7 +687,7 @@
       }
     },
     "goalClosed": {
-      "description": "RFC 0097 §D. Emitted when a standing goal stops continuation. Content-free. MUST NOT be emitted unless `capabilities.agents.goals` is advertised.",
+      "description": "RFC 0097 \u00a7D. Emitted when a standing goal stops continuation. Content-free. MUST NOT be emitted unless `capabilities.agents.goals` is advertised.",
       "type": "object",
       "additionalProperties": false,
       "required": [
@@ -712,7 +712,7 @@
       }
     },
     "importApplied": {
-      "description": "RFC 0098 §D. Emitted when an estate import is applied. Content-free: counts + ref-only — NO item payloads, NO secret values (SECURITY invariant `export-bundle-no-credential-material`). MUST NOT be emitted unless `capabilities.portability` is advertised.",
+      "description": "RFC 0098 \u00a7D. Emitted when an estate import is applied. Content-free: counts + ref-only \u2014 NO item payloads, NO secret values (SECURITY invariant `export-bundle-no-credential-material`). MUST NOT be emitted unless `capabilities.portability` is advertised.",
       "type": "object",
       "additionalProperties": false,
       "required": [
@@ -723,7 +723,7 @@
         "bundleOrigin": {
           "type": "string",
           "minLength": 1,
-          "description": "The bundle's `source.origin` — informational only."
+          "description": "The bundle's `source.origin` \u2014 informational only."
         },
         "counts": {
           "type": "object",
@@ -753,12 +753,12 @@
           "items": {
             "type": "string"
           },
-          "description": "Provider/ref ids whose secrets must be re-bound at the destination. Refs only — never secret values."
+          "description": "Provider/ref ids whose secrets must be re-bound at the destination. Refs only \u2014 never secret values."
         }
       }
     },
     "connectorAuthorized": {
-      "description": "RFC 0047 — emitted when the host acquires (or re-authorizes) a third-party OAuth token on a user's behalf via the `host.oauth` flow. Redaction-safe: carries the credential REFERENCE (RFC 0046), never token material. MUST NOT be emitted unless `capabilities.oauth.supported: true`.",
+      "description": "RFC 0047 \u2014 emitted when the host acquires (or re-authorizes) a third-party OAuth token on a user's behalf via the `host.oauth` flow. Redaction-safe: carries the credential REFERENCE (RFC 0046), never token material. MUST NOT be emitted unless `capabilities.oauth.supported: true`.",
       "type": "object",
       "additionalProperties": false,
       "required": [
@@ -786,7 +786,7 @@
       }
     },
     "connectorAuthExpired": {
-      "description": "RFC 0047 — emitted when a stored OAuth token's refresh fails terminally (revoked/expired refresh token). Redaction-safe: no token material. MUST NOT be emitted unless `capabilities.oauth.supported: true`.",
+      "description": "RFC 0047 \u2014 emitted when a stored OAuth token's refresh fails terminally (revoked/expired refresh token). Redaction-safe: no token material. MUST NOT be emitted unless `capabilities.oauth.supported: true`.",
       "type": "object",
       "additionalProperties": false,
       "required": [
@@ -811,7 +811,7 @@
       }
     },
     "coreWorkflowChainEvent": {
-      "description": "RFC 0037 — emitted on every planner→worker handoff state-machine transition. Required when `capabilities.multiAgent.executionModel.supported: true`; MUST NOT be emitted otherwise. RFC 0040 §A extends with optional `causationHostId` (when `crossHostCausation.supported: true`): present + non-empty when the `causationId` points at an event on a different host; absent when the chained-event is on the same host (existing semantics).",
+      "description": "RFC 0037 \u2014 emitted on every planner\u2192worker handoff state-machine transition. Required when `capabilities.multiAgent.executionModel.supported: true`; MUST NOT be emitted otherwise. RFC 0040 \u00a7A extends with optional `causationHostId` (when `crossHostCausation.supported: true`): present + non-empty when the `causationId` points at an event on a different host; absent when the chained-event is on the same host (existing semantics).",
       "type": "object",
       "additionalProperties": false,
       "required": [
@@ -831,20 +831,19 @@
             "child.cancelled",
             "output.harvested"
           ],
-          "description": "Which handoff-state-machine transition this event records. See spec/v1/multi-agent-execution.md §'Handoff state machine'."
+          "description": "Which handoff-state-machine transition this event records. See spec/v1/multi-agent-execution.md \u00a7'Handoff state machine'."
         },
         "workerId": {
           "type": "string",
           "minLength": 1,
-          "description": "The dispatched worker's workflowId — matches the entry in the supervisor's OrchestratorDecision.nextWorkerIds[]."
+          "description": "The dispatched worker's workflowId \u2014 matches the entry in the supervisor's OrchestratorDecision.nextWorkerIds[]."
         },
         "parentRunId": {
           "$ref": "ids.schema.json#/$defs/runId",
           "description": "The orchestrator-driven parent run's runId."
         },
         "childRunId": {
-          "type": "string",
-          "minLength": 1,
+          "$ref": "ids.schema.json#/$defs/runId",
           "description": "The dispatched child run's runId. REQUIRED on phases `dispatch.succeeded` and beyond; absent on `dispatch.began` and `dispatch.failed`."
         },
         "harvestedKeys": {
@@ -852,11 +851,11 @@
           "items": {
             "type": "string"
           },
-          "description": "On phase `output.harvested`: which parent-variable keys were populated by the dispatch config's outputMapping per RFC 0022 §A. SHOULD be present; conformance asserts presence when outputMapping is non-empty."
+          "description": "On phase `output.harvested`: which parent-variable keys were populated by the dispatch config's outputMapping per RFC 0022 \u00a7A. SHOULD be present; conformance asserts presence when outputMapping is non-empty."
         },
         "attestation": {
           "type": "object",
-          "description": "RFC 0063 (when `capabilities.agents.subRunAttestation: true` AND the `core.subWorkflow` node sets `outputAttestation.checksum: true`). A content checksum over the child's harvested output object, computed BEFORE `outputMapping` is applied so the parent (or a downstream node) can verify integrity — host-independent because the recipe is RFC 8785 JCS canonicalization + SHA-256 (the `replay.md` recipe, RFC 0041), enabling verification of a child that ran on a different host (RFC 0040). Advisory: the host does NOT itself reject on checksum mismatch; that is parent policy.",
+          "description": "RFC 0063 (when `capabilities.agents.subRunAttestation: true` AND the `core.subWorkflow` node sets `outputAttestation.checksum: true`). A content checksum over the child's harvested output object, computed BEFORE `outputMapping` is applied so the parent (or a downstream node) can verify integrity \u2014 host-independent because the recipe is RFC 8785 JCS canonicalization + SHA-256 (the `replay.md` recipe, RFC 0041), enabling verification of a child that ran on a different host (RFC 0040). Advisory: the host does NOT itself reject on checksum mismatch; that is parent policy.",
           "additionalProperties": false,
           "required": [
             "checksum",
@@ -884,12 +883,12 @@
         "causationHostId": {
           "type": "string",
           "minLength": 1,
-          "description": "RFC 0040 §A — optional cross-host causation pointer. Present + non-empty when this event's `causationId` (top-level on RunEventDoc) points at an event on a DIFFERENT host; absent when the chained-event is on the SAME host (existing semantics). Value MUST equal the originating host's `capabilities.multiAgent.executionModel.crossHostCausation.hostId` advertisement. Hosts that don't advertise crossHostCausation MUST NOT emit this field."
+          "description": "RFC 0040 \u00a7A \u2014 optional cross-host causation pointer. Present + non-empty when this event's `causationId` (top-level on RunEventDoc) points at an event on a DIFFERENT host; absent when the chained-event is on the SAME host (existing semantics). Value MUST equal the originating host's `capabilities.multiAgent.executionModel.crossHostCausation.hostId` advertisement. Hosts that don't advertise crossHostCausation MUST NOT emit this field."
         }
       }
     },
     "coreWorkflowChainConfidenceEscalated": {
-      "description": "RFC 0039 §A — emitted when a supervisor's OrchestratorDecision carries `confidence` below the active confidence floor (spec floor 0.5 OR operator-stricter `capabilities.multiAgent.executionModel.confidenceEscalationFloor`). Recorded BEFORE the host fires the matching clarify-or-escalate interrupt so the run event log carries the decision point even if the user later confirms the original decision. MUST NOT be emitted unless `capabilities.multiAgent.executionModel.version >= 2`.",
+      "description": "RFC 0039 \u00a7A \u2014 emitted when a supervisor's OrchestratorDecision carries `confidence` below the active confidence floor (spec floor 0.5 OR operator-stricter `capabilities.multiAgent.executionModel.confidenceEscalationFloor`). Recorded BEFORE the host fires the matching clarify-or-escalate interrupt so the run event log carries the decision point even if the user later confirms the original decision. MUST NOT be emitted unless `capabilities.multiAgent.executionModel.version >= 2`.",
       "type": "object",
       "additionalProperties": false,
       "required": [
@@ -909,7 +908,7 @@
           "type": "number",
           "minimum": 0.5,
           "maximum": 1,
-          "description": "The floor that triggered escalation — either the spec floor (0.5) when the host doesn't advertise a stricter `confidenceEscalationFloor`, or the host-advertised stricter value."
+          "description": "The floor that triggered escalation \u2014 either the spec floor (0.5) when the host doesn't advertise a stricter `confidenceEscalationFloor`, or the host-advertised stricter value."
         },
         "escalationKind": {
           "type": "string",
@@ -917,12 +916,12 @@
             "clarify",
             "escalate"
           ],
-          "description": "Which interrupt-kind the host fired in response. `clarify` is preferred per RFC 0039 §A; `escalate` is permitted when the host doesn't expose a clarification UI."
+          "description": "Which interrupt-kind the host fired in response. `clarify` is preferred per RFC 0039 \u00a7A; `escalate` is permitted when the host doesn't expose a clarification UI."
         },
         "workerId": {
           "type": "string",
           "minLength": 1,
-          "description": "The decision's intended next-worker workflowId (when the escalated decision's kind is `next-worker`). OMITTED for `kind: 'terminate'` escalations — terminate decisions have no worker to name, so absent-field is the correct signal rather than empty-string."
+          "description": "The decision's intended next-worker workflowId (when the escalated decision's kind is `next-worker`). OMITTED for `kind: 'terminate'` escalations \u2014 terminate decisions have no worker to name, so absent-field is the correct signal rather than empty-string."
         },
         "parentRunId": {
           "$ref": "ids.schema.json#/$defs/runId",
@@ -930,12 +929,12 @@
         },
         "originalDecision": {
           "$ref": "orchestrator-decision.schema.json",
-          "description": "The OrchestratorDecision that triggered escalation, captured verbatim. The host's existing event-payload redaction harness (the same one enforcing SECURITY invariant `secret-leakage-eventlog-payload` per `conformance/src/scenarios/redaction.test.ts`) applies uniformly across all RunEventType payloads including this one — no per-event-type opt-in is required. The protocol-tier MUST-NOT for raw key material in persisted payloads is the canonical contract; this field inherits that protection."
+          "description": "The OrchestratorDecision that triggered escalation, captured verbatim. The host's existing event-payload redaction harness (the same one enforcing SECURITY invariant `secret-leakage-eventlog-payload` per `conformance/src/scenarios/redaction.test.ts`) applies uniformly across all RunEventType payloads including this one \u2014 no per-event-type opt-in is required. The protocol-tier MUST-NOT for raw key material in persisted payloads is the canonical contract; this field inherits that protection."
         },
         "causationHostId": {
           "type": "string",
           "minLength": 1,
-          "description": "RFC 0040 §A — optional cross-host causation pointer. Present + non-empty when this event's `causationId` points at an event on a DIFFERENT host; absent when same-host (existing semantics). Value MUST equal the originating host's `crossHostCausation.hostId` advertisement."
+          "description": "RFC 0040 \u00a7A \u2014 optional cross-host causation pointer. Present + non-empty when this event's `causationId` points at an event on a DIFFERENT host; absent when same-host (existing semantics). Value MUST equal the originating host's `crossHostCausation.hostId` advertisement."
         }
       }
     },
@@ -1000,7 +999,7 @@
         "engineVersion": {
           "type": "integer",
           "minimum": 0,
-          "description": "v2: integer everywhere (RFC 0172 §B axis 3)."
+          "description": "v2: integer everywhere (RFC 0172 \u00a7B axis 3)."
         },
         "owner": {
           "type": "object",
@@ -1020,7 +1019,7 @@
               "$ref": "subject.schema.json"
             }
           },
-          "description": "RFC 0170 §A.1 — the same block as RunSnapshot.owner."
+          "description": "RFC 0170 \u00a7A.1 \u2014 the same block as RunSnapshot.owner."
         },
         "tags": {
           "type": "array",
@@ -1060,7 +1059,7 @@
           "$ref": "#/$defs/_errorObject"
         },
         "failedNodeId": {
-          "type": "string"
+          "$ref": "ids.schema.json#/$defs/nodeId"
         },
         "durationMs": {
           "type": "integer",
@@ -1075,11 +1074,11 @@
       "properties": {
         "reason": {
           "type": "string",
-          "description": "`v1_pin_unsupported` (RFC 0176 §B.1) is a registered reason."
+          "description": "`v1_pin_unsupported` (RFC 0176 \u00a7B.1) is a registered reason."
         },
         "cancelledBy": {
           "type": "string",
-          "description": "RFC 0176 §B.1 — `v2-cutover` when a v2 host cancels an inherited run whose pin it no longer implements."
+          "description": "RFC 0176 \u00a7B.1 \u2014 `v2-cutover` when a v2 host cancels an inherited run whose pin it no longer implements."
         },
         "durationMs": {
           "type": "integer",
@@ -1087,7 +1086,7 @@
         },
         "parentRunId": {
           "$ref": "ids.schema.json#/$defs/runId",
-          "description": "When this cancellation was triggered by a parent-cancel cascade (`interrupt-profiles.md §openwop-interrupt-cascade-cancel`), the parent runId that initiated it. Pairs with `reason: 'parent-cancelled'`. Absent for direct cancellations."
+          "description": "When this cancellation was triggered by a parent-cancel cascade (`interrupt-profiles.md \u00a7openwop-interrupt-cascade-cancel`), the parent runId that initiated it. Pairs with `reason: 'parent-cancelled'`. Absent for direct cancellations."
         }
       },
       "additionalProperties": false
@@ -1115,7 +1114,7 @@
             "drain",
             "interrupt"
           ],
-          "description": "v1 rest-endpoints.md MUST — the pause drain policy persisted on the event."
+          "description": "v1 rest-endpoints.md MUST \u2014 the pause drain policy persisted on the event."
         }
       },
       "additionalProperties": false
@@ -1136,13 +1135,13 @@
         "engineVersion": {
           "type": "integer",
           "minimum": 0,
-          "description": "v2: integer everywhere (RFC 0172 §B axis 3)."
+          "description": "v2: integer everywhere (RFC 0172 \u00a7B axis 3)."
         }
       },
       "additionalProperties": false
     },
     "runDeadLettered": {
-      "description": "RFC 0053 — emitted when a run/node exhausts its retry policy (RFC 0009) and is routed to the durable dead-letter sink. The run remains fork-eligible (RFC 0011) for `capabilities.deadLetter.retentionDays`. Redaction-safe: `reason` carries no credential material. MUST NOT be emitted unless `capabilities.deadLetter.supported: true`.",
+      "description": "RFC 0053 \u2014 emitted when a run/node exhausts its retry policy (RFC 0009) and is routed to the durable dead-letter sink. The run remains fork-eligible (RFC 0011) for `capabilities.deadLetter.retentionDays`. Redaction-safe: `reason` carries no credential material. MUST NOT be emitted unless `capabilities.deadLetter.supported: true`.",
       "type": "object",
       "additionalProperties": false,
       "required": [
@@ -1182,8 +1181,7 @@
           "$ref": "ids.schema.json#/$defs/nodeId"
         },
         "typeId": {
-          "type": "string",
-          "minLength": 1
+          "$ref": "ids.schema.json#/$defs/typeId"
         },
         "attempt": {
           "type": "integer",
@@ -1260,7 +1258,7 @@
             "conversation.close",
             "low-confidence"
           ],
-          "description": "RFC 0094 §E — the full kind union `interrupt.md` defines (mirrors suspend-request.schema.json). Conversation kinds are gated on the conversation capability per capabilities.md."
+          "description": "RFC 0094 \u00a7E \u2014 the full kind union `interrupt.md` defines (mirrors suspend-request.schema.json). Conversation kinds are gated on the conversation capability per capabilities.md."
         },
         "key": {
           "type": "string",
@@ -1361,7 +1359,7 @@
       "additionalProperties": false
     },
     "interruptRequested": {
-      "description": "Canonical HITL primitive — discriminated union over kind. Payload mirrors `suspend-request.schema.json` (InterruptPayload) plus engine-assigned identity fields.",
+      "description": "Canonical HITL primitive \u2014 discriminated union over kind. Payload mirrors `suspend-request.schema.json` (InterruptPayload) plus engine-assigned identity fields.",
       "$ref": "https://openwop.dev/spec/v2/suspend-request.schema.json"
     },
     "interruptResolved": {
@@ -1390,7 +1388,7 @@
             "conversation.close",
             "low-confidence"
           ],
-          "description": "RFC 0094 §E — the full kind union `interrupt.md` defines (mirrors suspend-request.schema.json). Conversation kinds are gated on the conversation capability per capabilities.md."
+          "description": "RFC 0094 \u00a7E \u2014 the full kind union `interrupt.md` defines (mirrors suspend-request.schema.json). Conversation kinds are gated on the conversation capability per capabilities.md."
         },
         "resumeValue": {},
         "resolvedBy": {
@@ -1412,7 +1410,7 @@
     },
     "contextSummarized": {
       "type": "object",
-      "description": "RFC 0111. Emitted when the host replaces older in-window orchestrator transcript turns with a host-produced summary to honor `multiAgent.executionModel.contextBudget.transcriptTokenBudget`. CONTENT-FREE: the summary text is NEVER inlined — `summaryRef` is an artifactId resolved via `GET /v1/runs/{runId}/artifacts/{artifactId}`. The summary is a NONDETERMINISTIC host output governed like an RFC 0041 envelope: on `:fork mode:replay` the host MUST reuse this recorded `summaryRef` and MUST NOT re-summarize (see multi-agent-execution.md §\"Context economy (RFC 0111)\"). `replacedTurns` lists the event ids the summary stands in for, so a replay engine reconstructs the exact transcript.",
+      "description": "RFC 0111. Emitted when the host replaces older in-window orchestrator transcript turns with a host-produced summary to honor `multiAgent.executionModel.contextBudget.transcriptTokenBudget`. CONTENT-FREE: the summary text is NEVER inlined \u2014 `summaryRef` is an artifactId resolved via `GET /v1/runs/{runId}/artifacts/{artifactId}`. The summary is a NONDETERMINISTIC host output governed like an RFC 0041 envelope: on `:fork mode:replay` the host MUST reuse this recorded `summaryRef` and MUST NOT re-summarize (see multi-agent-execution.md \u00a7\"Context economy (RFC 0111)\"). `replacedTurns` lists the event ids the summary stands in for, so a replay engine reconstructs the exact transcript.",
       "required": [
         "iteration",
         "replacedTurns",
@@ -1458,7 +1456,7 @@
         "tokensAfter": {
           "type": "integer",
           "minimum": 0,
-          "description": "Token count of the summary that replaced the range, in `tokenCounter` units. Expected ≤ `tokensBefore`."
+          "description": "Token count of the summary that replaced the range, in `tokenCounter` units. Expected \u2264 `tokensBefore`."
         }
       },
       "additionalProperties": false
@@ -1490,7 +1488,7 @@
         },
         "registered": {
           "type": "boolean",
-          "description": "RFC 0071. True when `artifactType` resolves to a registered artifact type (pack- or host-registered) and the payload was validated against its schema; false for unregistered/host-local types accepted without schema validation. Optional; absent ⇒ treat as true, preserving pre-RFC-0071 semantics. See artifact-type-packs.md §\"Binding the existing artifact surfaces\"."
+          "description": "RFC 0071. True when `artifactType` resolves to a registered artifact type (pack- or host-registered) and the payload was validated against its schema; false for unregistered/host-local types accepted without schema validation. Optional; absent \u21d2 treat as true, preserving pre-RFC-0071 semantics. See artifact-type-packs.md \u00a7\"Binding the existing artifact surfaces\"."
         },
         "registrationSource": {
           "type": "string",
@@ -1498,14 +1496,14 @@
             "pack",
             "host"
           ],
-          "description": "RFC 0075. Provenance of a registered type: `pack` (matches an installed artifact-type pack) or `host` (a host-native type the host validates against a host-known schema, independent of any pack — e.g. an AI host's built-in artifact types). Optional; meaningful only when `registered: true`. Absent ⇒ unspecified provenance (existing semantics)."
+          "description": "RFC 0075. Provenance of a registered type: `pack` (matches an installed artifact-type pack) or `host` (a host-native type the host validates against a host-known schema, independent of any pack \u2014 e.g. an AI host's built-in artifact types). Optional; meaningful only when `registered: true`. Absent \u21d2 unspecified provenance (existing semantics)."
         }
       },
       "additionalProperties": false
     },
     "outputChunk": {
       "type": "object",
-      "description": "Emitted for streaming output (e.g., LLM token chunks). Stream-mode `messages` consumers see these. RFC 0094 §D single-sources the `ai.message.chunk` payload here: bare {nodeId, runId, chunk, isLast} is the minimum compliant payload per stream-modes.md §messages (the prior {nodeId, chunk}-only required set was the defective restatement). Tiered metadata per stream-modes.md §messages (S2 closure): `meta` adds Tier 1 typed slots and a Tier 2 provider-pass-through escape hatch.",
+      "description": "Emitted for streaming output (e.g., LLM token chunks). Stream-mode `messages` consumers see these. RFC 0094 \u00a7D single-sources the `ai.message.chunk` payload here: bare {nodeId, runId, chunk, isLast} is the minimum compliant payload per stream-modes.md \u00a7messages (the prior {nodeId, chunk}-only required set was the defective restatement). Tiered metadata per stream-modes.md \u00a7messages (S2 closure): `meta` adds Tier 1 typed slots and a Tier 2 provider-pass-through escape hatch.",
       "required": [
         "nodeId",
         "runId",
@@ -1525,7 +1523,7 @@
         },
         "isLast": {
           "type": "boolean",
-          "description": "True for the final chunk of a given AI node call. Required — both reference consumers rely on it for fold termination."
+          "description": "True for the final chunk of a given AI node call. Required \u2014 both reference consumers rely on it for fold termination."
         },
         "channel": {
           "type": "string",
@@ -1539,7 +1537,7 @@
     },
     "_chunkMeta": {
       "type": "object",
-      "description": "Tiered metadata for ai.message.chunk / outputChunk payloads. See stream-modes.md §messages.",
+      "description": "Tiered metadata for ai.message.chunk / outputChunk payloads. See stream-modes.md \u00a7messages.",
       "properties": {
         "finishReason": {
           "type": "string",
@@ -1557,7 +1555,7 @@
         },
         "toolCalls": {
           "type": "array",
-          "description": "Tier 1: structured tool / function calls emitted in this chunk. Each item: `{id, name, arguments}` — `arguments` is a string (JSON-encoded args, may be partial when streaming)."
+          "description": "Tier 1: structured tool / function calls emitted in this chunk. Each item: `{id, name, arguments}` \u2014 `arguments` is a string (JSON-encoded args, may be partial when streaming)."
         },
         "model": {
           "type": "string",
@@ -1584,11 +1582,11 @@
         },
         "provider": {
           "type": "string",
-          "description": "Tier 2: provider name when `providerExtensions` is present. Examples: `openai`, `anthropic`, `google`, `minimax`. Consumers MUST NOT branch on this for behavior — use Tier 1 fields. Provided for observability + debugging only."
+          "description": "Tier 2: provider name when `providerExtensions` is present. Examples: `openai`, `anthropic`, `google`, `minimax`. Consumers MUST NOT branch on this for behavior \u2014 use Tier 1 fields. Provided for observability + debugging only."
         },
         "providerExtensions": {
           "type": "object",
-          "description": "Tier 2: provider pass-through for fields the spec hasn't typed yet. Consumers using this opt into per-provider knowledge; spec evolution may move fields up into Tier 1 over time (additive — typed slot wins).",
+          "description": "Tier 2: provider pass-through for fields the spec hasn't typed yet. Consumers using this opt into per-provider knowledge; spec evolution may move fields up into Tier 1 over time (additive \u2014 typed slot wins).",
           "additionalProperties": true
         }
       },
@@ -1676,7 +1674,7 @@
         "engineVersion": {
           "type": "integer",
           "minimum": 0,
-          "description": "v2: integer everywhere (RFC 0172 §B axis 3)."
+          "description": "v2: integer everywhere (RFC 0172 \u00a7B axis 3)."
         }
       },
       "additionalProperties": false
@@ -1712,14 +1710,14 @@
           "minimum": 0
         },
         "lastNodeId": {
-          "type": "string"
+          "$ref": "ids.schema.json#/$defs/nodeId"
         }
       },
       "additionalProperties": false
     },
     "capBreached": {
       "type": "object",
-      "description": "Emitted when a CapabilityLimit is exceeded. Protocol-level limits use the engine kinds (clarificationRounds / schemaRounds / envelopesPerTurn / maxNodeExecutions). RFC 0008 §K WASM-runtime caps use the wasm-* kinds (memory ceiling, fuel exhaustion, execution-time wall-clock). RFC 0058 run-execution bounds use the run-scoped run-duration (wall-clock timeout; limit=resolvedMs, observed=elapsedMs) and loop-iterations (agent-loop ceiling; limit=resolvedMax, observed=iterationCount) kinds.",
+      "description": "Emitted when a CapabilityLimit is exceeded. Protocol-level limits use the engine kinds (clarificationRounds / schemaRounds / envelopesPerTurn / maxNodeExecutions). RFC 0008 \u00a7K WASM-runtime caps use the wasm-* kinds (memory ceiling, fuel exhaustion, execution-time wall-clock). RFC 0058 run-execution bounds use the run-scoped run-duration (wall-clock timeout; limit=resolvedMs, observed=elapsedMs) and loop-iterations (agent-loop ceiling; limit=resolvedMax, observed=iterationCount) kinds.",
       "required": [
         "kind",
         "limit",
@@ -1747,7 +1745,7 @@
         "limit": {
           "type": "number",
           "minimum": 0,
-          "description": "The effective ceiling. A whole number for the engine/WASM/RFC 0058 integer kinds; a fractional value for budget-cost (dollars, matching budget.exhausted + maxCostUsd — RFC 0084 §D)."
+          "description": "The effective ceiling. A whole number for the engine/WASM/RFC 0058 integer kinds; a fractional value for budget-cost (dollars, matching budget.exhausted + maxCostUsd \u2014 RFC 0084 \u00a7D)."
         },
         "observed": {
           "type": "number",
@@ -1798,7 +1796,7 @@
     },
     "leaseHandedOff": {
       "type": "object",
-      "description": "Emitted when a run's executing lease is transferred from one host to another (e.g., browser → cloud failover).",
+      "description": "Emitted when a run's executing lease is transferred from one host to another (e.g., browser \u2192 cloud failover).",
       "required": [
         "leaseId",
         "fromHost",
@@ -1831,7 +1829,7 @@
     },
     "replayDivergedAtRefusal": {
       "type": "object",
-      "description": "RFC 0041 §B — emitted by `:fork` mode `replay` when the replay's LLM call returns a refusal but the original run got a valid envelope (or vice-versa: the original refused, the replay succeeded). Distinct from the generic `replay.diverged` event (which covers structural output/missing/extra/type-mismatch divergence) to let operators audit safety-policy shifts without filtering through the generic divergence stream. When this event fires, the host MUST also fail the replay with `error.code: \"replay_diverged_at_refusal\"` per `spec/v1/rest-endpoints.md` §\"Common error codes\". Capability-gated on `capabilities.multiAgent.executionModel.replayDeterminism.refusalDivergenceEmission: true`; non-Phase-4 hosts MUST NOT emit this event.",
+      "description": "RFC 0041 \u00a7B \u2014 emitted by `:fork` mode `replay` when the replay's LLM call returns a refusal but the original run got a valid envelope (or vice-versa: the original refused, the replay succeeded). Distinct from the generic `replay.diverged` event (which covers structural output/missing/extra/type-mismatch divergence) to let operators audit safety-policy shifts without filtering through the generic divergence stream. When this event fires, the host MUST also fail the replay with `error.code: \"replay_diverged_at_refusal\"` per `spec/v1/rest-endpoints.md` \u00a7\"Common error codes\". Capability-gated on `capabilities.multiAgent.executionModel.replayDeterminism.refusalDivergenceEmission: true`; non-Phase-4 hosts MUST NOT emit this event.",
       "required": [
         "sourceRunId",
         "atSequence",
@@ -1849,7 +1847,7 @@
           "description": "Event-log index at which the refusal-divergence was detected (the index of the LLM call whose envelope shifted)."
         },
         "originalEventId": {
-          "type": "string",
+          "$ref": "ids.schema.json#/$defs/eventId",
           "description": "Optional eventId of the original event whose envelope is being compared. SHOULD be set when the host has a stable identifier for the event; MAY be omitted when only the sequence index is known."
         },
         "nodeId": {
@@ -1870,7 +1868,7 @@
             "valid",
             "refusal"
           ],
-          "description": "Whether the replay's LLM envelope was a valid response or a refusal. MUST differ from `originalEnvelopeKind` — otherwise there is no divergence to report."
+          "description": "Whether the replay's LLM envelope was a valid response or a refusal. MUST differ from `originalEnvelopeKind` \u2014 otherwise there is no divergence to report."
         },
         "refusalReason": {
           "type": "string",
@@ -1881,7 +1879,7 @@
     },
     "replayDiverged": {
       "type": "object",
-      "description": "Emitted by `:fork` when a replay re-execution produces a different output than the original at a given sequence. See replay.md §divergence detection. `divergencePoint` (RFC 0027 §F) is the canonical optional field for naming which event-emission diverged; the two fields are complementary, not mutually exclusive.",
+      "description": "Emitted by `:fork` when a replay re-execution produces a different output than the original at a given sequence. See replay.md \u00a7divergence detection. `divergencePoint` (RFC 0027 \u00a7F) is the canonical optional field for naming which event-emission diverged; the two fields are complementary, not mutually exclusive.",
       "required": [
         "sourceRunId",
         "atSequence"
@@ -1895,7 +1893,7 @@
           "minimum": 0
         },
         "originalEventId": {
-          "type": "string"
+          "$ref": "ids.schema.json#/$defs/eventId"
         },
         "divergenceKind": {
           "type": "string",
@@ -1908,7 +1906,7 @@
         },
         "divergencePoint": {
           "type": "string",
-          "description": "RFC 0027 §F. Verbatim `RunEventType` enum string identifying which event-emission the replay diverged at (e.g., `\"prompt.composed\"` per RFC 0027, `\"agent.promptResolved\"` per RFC 0029, `\"envelope.retry.exhausted\"` / `\"envelope.recovery.applied\"` per RFC 0032). Set when divergence is detected on a specific cross-kind operational event's payload. When divergence is purely structural (output/missing/extra at the event-array level rather than within a typed payload), `divergenceKind` carries the shape and `divergencePoint` MAY be omitted. The two fields are complementary: a single `replay.diverged` event MAY carry both (e.g., `{ divergenceKind: \"output\", divergencePoint: \"prompt.composed\" }` reads as \"the `prompt.composed` event at sequence N had a different output on replay than the original\"). The field is defined by RFC 0027; values are contributed by consuming RFCs (0029 adds `agent.promptResolved`, 0032 adds the envelope-reliability event names)."
+          "description": "RFC 0027 \u00a7F. Verbatim `RunEventType` enum string identifying which event-emission the replay diverged at (e.g., `\"prompt.composed\"` per RFC 0027, `\"agent.promptResolved\"` per RFC 0029, `\"envelope.retry.exhausted\"` / `\"envelope.recovery.applied\"` per RFC 0032). Set when divergence is detected on a specific cross-kind operational event's payload. When divergence is purely structural (output/missing/extra at the event-array level rather than within a typed payload), `divergenceKind` carries the shape and `divergencePoint` MAY be omitted. The two fields are complementary: a single `replay.diverged` event MAY carry both (e.g., `{ divergenceKind: \"output\", divergencePoint: \"prompt.composed\" }` reads as \"the `prompt.composed` event at sequence N had a different output on replay than the original\"). The field is defined by RFC 0027; values are contributed by consuming RFCs (0029 adds `agent.promptResolved`, 0032 adds the envelope-reliability event names)."
         }
       },
       "additionalProperties": false
@@ -1941,14 +1939,14 @@
         "causationHostId": {
           "type": "string",
           "minLength": 1,
-          "description": "RFC 0040 §A — optional cross-host causation pointer. Present + non-empty when this event's `causationId` points at an event on a DIFFERENT host; absent when same-host. MUST equal the originating host's `crossHostCausation.hostId`."
+          "description": "RFC 0040 \u00a7A \u2014 optional cross-host causation pointer. Present + non-empty when this event's `causationId` points at an event on a DIFFERENT host; absent when same-host. MUST equal the originating host's `crossHostCausation.hostId`."
         }
       },
       "additionalProperties": false
     },
     "agentReasoningDelta": {
       "type": "object",
-      "description": "RFC 0024. Incremental reasoning chunk for live-streaming UX. Emitted while a reasoning block is still open, BEFORE the corresponding `agent.reasoned` finalization. Consumers concatenate `delta` strings in arrival order to reconstruct the in-progress trace; the closing `agent.reasoned` event carries the FULL authoritative `reasoning`. Gated on `capabilities.agents.reasoning.streaming: true`. NOTE: `additionalProperties: true` mirrors the Phase-1 multi-agent-shift carve-out applied to the sibling `agentReasoned` schema — a deliberate forward-compat exception per RFC 0024 §Compatibility, not a precedent generalizable to other event payloads.",
+      "description": "RFC 0024. Incremental reasoning chunk for live-streaming UX. Emitted while a reasoning block is still open, BEFORE the corresponding `agent.reasoned` finalization. Consumers concatenate `delta` strings in arrival order to reconstruct the in-progress trace; the closing `agent.reasoned` event carries the FULL authoritative `reasoning`. Gated on `capabilities.agents.reasoning.streaming: true`. NOTE: `additionalProperties: true` mirrors the Phase-1 multi-agent-shift carve-out applied to the sibling `agentReasoned` schema \u2014 a deliberate forward-compat exception per RFC 0024 \u00a7Compatibility, not a precedent generalizable to other event payloads.",
       "required": [
         "agentId",
         "delta",
@@ -1982,7 +1980,7 @@
     },
     "providerUsage": {
       "type": "object",
-      "description": "RFC 0026. Per-call usage record emitted after every LLM provider invocation. Durably persisted in the run event log; consumed by replay, webhook subscribers, billing reconciliation. The OTel `openwop.cost.*` attribute group (per `observability.md §\"Cost attribution attributes\"`) is the observability sibling — this event type is the durable record. Replay determinism: `inputTokens` + `outputTokens` MUST replay identically; `costEstimateUsd` MAY be omitted on replay, and so MAY the RFC 0116 cost-only `cacheReadTokens`/`cacheWriteTokens` (they are NOT replay-asserted — a prompt-prefix cache hit vs miss MUST NOT change `inputTokens`/`outputTokens` or the recorded envelope). The payload MUST NOT carry credentialRefs, hashed credential identifiers, or prompt/response substrings per `SECURITY/threat-model-secret-leakage.md §SR-1` (enforced by SECURITY invariant `provider-usage-no-credential-leak`).",
+      "description": "RFC 0026. Per-call usage record emitted after every LLM provider invocation. Durably persisted in the run event log; consumed by replay, webhook subscribers, billing reconciliation. The OTel `openwop.cost.*` attribute group (per `observability.md \u00a7\"Cost attribution attributes\"`) is the observability sibling \u2014 this event type is the durable record. Replay determinism: `inputTokens` + `outputTokens` MUST replay identically; `costEstimateUsd` MAY be omitted on replay, and so MAY the RFC 0116 cost-only `cacheReadTokens`/`cacheWriteTokens` (they are NOT replay-asserted \u2014 a prompt-prefix cache hit vs miss MUST NOT change `inputTokens`/`outputTokens` or the recorded envelope). The payload MUST NOT carry credentialRefs, hashed credential identifiers, or prompt/response substrings per `SECURITY/threat-model-secret-leakage.md \u00a7SR-1` (enforced by SECURITY invariant `provider-usage-no-credential-leak`).",
       "required": [
         "provider",
         "model",
@@ -1998,7 +1996,7 @@
         "model": {
           "type": "string",
           "minLength": 1,
-          "description": "Provider-stamped model id as the model expects it. Same value used in the LLM cache-key recipe per `replay.md §A`."
+          "description": "Provider-stamped model id as the model expects it. Same value used in the LLM cache-key recipe per `replay.md \u00a7A`."
         },
         "inputTokens": {
           "type": "integer",
@@ -2018,7 +2016,7 @@
         "costEstimateUsd": {
           "type": "number",
           "minimum": 0,
-          "description": "ADVISORY estimate in USD computed by the host's static rate table. MUST NOT be used for billing — real billing is external. Hosts SHOULD omit when no rate is known rather than emit 0."
+          "description": "ADVISORY estimate in USD computed by the host's static rate table. MUST NOT be used for billing \u2014 real billing is external. Hosts SHOULD omit when no rate is known rather than emit 0."
         },
         "currency": {
           "type": "string",
@@ -2027,12 +2025,12 @@
         },
         "cacheHit": {
           "type": "boolean",
-          "description": "True iff this call was served from the LLM response cache per `replay.md §\"LLM cache-key recipe\"`. When true, inputTokens/outputTokens reflect the ORIGINAL call's billed values; the cached invocation incurred zero new provider cost."
+          "description": "True iff this call was served from the LLM response cache per `replay.md \u00a7\"LLM cache-key recipe\"`. When true, inputTokens/outputTokens reflect the ORIGINAL call's billed values; the cached invocation incurred zero new provider cost."
         },
         "cacheReadTokens": {
           "type": "integer",
           "minimum": 0,
-          "description": "RFC 0116. Optional, cost-only. Provider-reported tokens served from the prompt-prefix context cache on this call — a cache HIT shows > 0. This is a cost hint, NOT a semantic input: it MAY be omitted on replay (NOT replay-asserted, like `costEstimateUsd`), and a hit-vs-miss difference MUST NOT change `inputTokens`/`outputTokens` or the recorded envelope (RFC 0116 replay-invariance MUST). MUST NOT carry prompt/response substrings per `SECURITY/threat-model-secret-leakage.md §SR-1`."
+          "description": "RFC 0116. Optional, cost-only. Provider-reported tokens served from the prompt-prefix context cache on this call \u2014 a cache HIT shows > 0. This is a cost hint, NOT a semantic input: it MAY be omitted on replay (NOT replay-asserted, like `costEstimateUsd`), and a hit-vs-miss difference MUST NOT change `inputTokens`/`outputTokens` or the recorded envelope (RFC 0116 replay-invariance MUST). MUST NOT carry prompt/response substrings per `SECURITY/threat-model-secret-leakage.md \u00a7SR-1`."
         },
         "cacheWriteTokens": {
           "type": "integer",
@@ -2052,7 +2050,7 @@
     },
     "promptComposed": {
       "type": "object",
-      "description": "RFC 0027. Emitted once per (nodeId, kind) composition when a host resolves a PromptRef on a node and assembles its body for an LLM call. Gated on `capabilities.prompts.supported: true` AND `capabilities.prompts.observability !== 'off'`. Body fields (`systemPrompt`, `userPrompt`, `variableBindings`) are populated only under `observability: 'full'`; under `hashed` the event carries only `hash` + `variableHashes`. Replay-deterministic over `(refs, variableHashes, contentTrust)` per `spec/v1/prompts.md §\"Replay determinism\"`. Secret-source variable values MUST be replaced with `[REDACTED:<secretId>]` markers per SECURITY invariant `prompt-composed-secret-redaction`; untrusted-input segments MUST be wrapped with `<UNTRUSTED>...</UNTRUSTED>` markers per SECURITY invariant `prompt-composed-trust-marker`.",
+      "description": "RFC 0027. Emitted once per (nodeId, kind) composition when a host resolves a PromptRef on a node and assembles its body for an LLM call. Gated on `capabilities.prompts.supported: true` AND `capabilities.prompts.observability !== 'off'`. Body fields (`systemPrompt`, `userPrompt`, `variableBindings`) are populated only under `observability: 'full'`; under `hashed` the event carries only `hash` + `variableHashes`. Replay-deterministic over `(refs, variableHashes, contentTrust)` per `spec/v1/prompts.md \u00a7\"Replay determinism\"`. Secret-source variable values MUST be replaced with `[REDACTED:<secretId>]` markers per SECURITY invariant `prompt-composed-secret-redaction`; untrusted-input segments MUST be wrapped with `<UNTRUSTED>...</UNTRUSTED>` markers per SECURITY invariant `prompt-composed-trust-marker`.",
       "required": [
         "nodeId",
         "refs",
@@ -2080,7 +2078,7 @@
             "user-only",
             "agent-reasoning"
           ],
-          "description": "Composition shape — what the host actually assembled. `system+user`: both system and user templates resolved. `system-only`: only a system template applied (e.g., agent intrinsic). `user-only`: only a user template applied. `agent-reasoning`: composition was emitted ahead of an agent reasoning trace per RFC 0024."
+          "description": "Composition shape \u2014 what the host actually assembled. `system+user`: both system and user templates resolved. `system-only`: only a system template applied (e.g., agent intrinsic). `user-only`: only a user template applied. `agent-reasoning`: composition was emitted ahead of an agent reasoning trace per RFC 0024."
         },
         "hash": {
           "type": "string",
@@ -2089,7 +2087,7 @@
         },
         "composed": {
           "type": "string",
-          "description": "Generic composed-body field. Present only when `capabilities.prompts.observability` is `full`. Populated for ALL four PromptKind values (system / user / few-shot / schema-hint) so consumers have a single body field to read — necessary for few-shot + schema-hint templates that don't fit the system/user split below. Same secret-redaction + trust-marker invariants apply as for the kind-specific fields. The kind-specific `systemPrompt` + `userPrompt` fields below remain populated for system/user kinds so existing consumers that key off them continue to work; both fields carry identical content for those kinds."
+          "description": "Generic composed-body field. Present only when `capabilities.prompts.observability` is `full`. Populated for ALL four PromptKind values (system / user / few-shot / schema-hint) so consumers have a single body field to read \u2014 necessary for few-shot + schema-hint templates that don't fit the system/user split below. Same secret-redaction + trust-marker invariants apply as for the kind-specific fields. The kind-specific `systemPrompt` + `userPrompt` fields below remain populated for system/user kinds so existing consumers that key off them continue to work; both fields carry identical content for those kinds."
         },
         "systemPrompt": {
           "type": "string",
@@ -2102,7 +2100,7 @@
         "variableBindings": {
           "type": "object",
           "additionalProperties": true,
-          "description": "Variable-name → bound-value map. Secret-source bindings MUST appear as `[REDACTED:<secretId>]`. Only present under `observability: 'full'`."
+          "description": "Variable-name \u2192 bound-value map. Secret-source bindings MUST appear as `[REDACTED:<secretId>]`. Only present under `observability: 'full'`."
         },
         "variableHashes": {
           "type": "object",
@@ -2110,7 +2108,7 @@
             "type": "string",
             "pattern": "^sha256:[0-9a-f]{64}$"
           },
-          "description": "Variable-name → sha256(value) map. Always present (under both `hashed` and `full`). Enables replay-determinism checks without exposing values."
+          "description": "Variable-name \u2192 sha256(value) map. Always present (under both `hashed` and `full`). Enables replay-determinism checks without exposing values."
         },
         "contentTrust": {
           "type": "string",
@@ -2118,19 +2116,19 @@
             "trusted",
             "untrusted"
           ],
-          "description": "Aggregate trust marker. `untrusted` iff ANY contributing input was tagged untrusted per RFC 0020 §D / AIEnvelope.meta.contentTrust propagation. When `untrusted`, the composed bodies MUST contain `<UNTRUSTED>...</UNTRUSTED>` markers around the untrusted segments."
+          "description": "Aggregate trust marker. `untrusted` iff ANY contributing input was tagged untrusted per RFC 0020 \u00a7D / AIEnvelope.meta.contentTrust propagation. When `untrusted`, the composed bodies MUST contain `<UNTRUSTED>...</UNTRUSTED>` markers around the untrusted segments."
         },
         "causationHostId": {
           "type": "string",
           "minLength": 1,
-          "description": "RFC 0040 §A — optional cross-host causation pointer. Present + non-empty when this event's `causationId` points at an event on a DIFFERENT host; absent when same-host. MUST equal the originating host's `crossHostCausation.hostId`."
+          "description": "RFC 0040 \u00a7A \u2014 optional cross-host causation pointer. Present + non-empty when this event's `causationId` points at an event on a DIFFERENT host; absent when same-host. MUST equal the originating host's `crossHostCausation.hostId`."
         }
       },
       "additionalProperties": false
     },
     "agentPromptResolved": {
       "type": "object",
-      "description": "RFC 0029 §B. Emitted once per (nodeId, kind) pair BEFORE the corresponding `prompt.composed` event (when emitted). Surfaces the four-layer resolution chain per `spec/v1/prompts.md` §\"Resolution chain (normative)\" so cross-host debuggers and multi-agent visualizers can render which PromptRef applied at this node and why. Gated on `capabilities.prompts.supported: true`; payload is durable in the event log and participates in replay. Carries refs (not bodies), so emission is safe regardless of `capabilities.prompts.observability` — the secret-redaction + trust-marker invariants on `prompt.composed` (RFC 0027 §G) don't apply here.",
+      "description": "RFC 0029 \u00a7B. Emitted once per (nodeId, kind) pair BEFORE the corresponding `prompt.composed` event (when emitted). Surfaces the four-layer resolution chain per `spec/v1/prompts.md` \u00a7\"Resolution chain (normative)\" so cross-host debuggers and multi-agent visualizers can render which PromptRef applied at this node and why. Gated on `capabilities.prompts.supported: true`; payload is durable in the event log and participates in replay. Carries refs (not bodies), so emission is safe regardless of `capabilities.prompts.observability` \u2014 the secret-redaction + trust-marker invariants on `prompt.composed` (RFC 0027 \u00a7G) don't apply here.",
       "required": [
         "nodeId",
         "kind",
@@ -2171,7 +2169,7 @@
                   "workflow-defaults",
                   "host-defaults"
                 ],
-                "description": "Identifies which precedence layer this chain entry represents. The four normative layers per RFC 0029 §A are `node`, `agent-*`, `workflow-defaults`, `host-defaults`. `run-configurable` is reserved for the optional `RunOptions.configurable.promptOverrides` extension described in RFC 0029 §\"Alternatives considered\" #5; hosts that honor that extension MUST emit a chain entry with this layer value above the `node` entry."
+                "description": "Identifies which precedence layer this chain entry represents. The four normative layers per RFC 0029 \u00a7A are `node`, `agent-*`, `workflow-defaults`, `host-defaults`. `run-configurable` is reserved for the optional `RunOptions.configurable.promptOverrides` extension described in RFC 0029 \u00a7\"Alternatives considered\" #5; hosts that honor that extension MUST emit a chain entry with this layer value above the `node` entry."
               },
               "source": {
                 "type": "string",
@@ -2179,7 +2177,7 @@
               },
               "applied": {
                 "type": "boolean",
-                "description": "True for exactly one entry in the chain — the layer whose ref was selected. False for layers that yielded null OR were skipped after a higher-precedence layer already applied."
+                "description": "True for exactly one entry in the chain \u2014 the layer whose ref was selected. False for layers that yielded null OR were skipped after a higher-precedence layer already applied."
               },
               "reason": {
                 "type": "string",
@@ -2198,7 +2196,7 @@
         "causationHostId": {
           "type": "string",
           "minLength": 1,
-          "description": "RFC 0040 §A — optional cross-host causation pointer. Present + non-empty when this event's `causationId` points at an event on a DIFFERENT host; absent when same-host. MUST equal the originating host's `crossHostCausation.hostId`."
+          "description": "RFC 0040 \u00a7A \u2014 optional cross-host causation pointer. Present + non-empty when this event's `causationId` points at an event on a DIFFERENT host; absent when same-host. MUST equal the originating host's `crossHostCausation.hostId`."
         }
       },
       "additionalProperties": false
@@ -2206,7 +2204,7 @@
     "modelCapabilitySubstituted": {
       "type": "object",
       "additionalProperties": false,
-      "description": "RFC 0031 §D. Emitted when a host substitutes the active model with a NodeModule's declared `fallbackModel` because the active model lacks one or more of the `requiredModelCapabilities`. MUST event per RFC 0031 §B step 3. The `fallbackProvider` + `fallbackModel` pair MAY be redacted as all-or-nothing `\"[REDACTED]\"` when workspace policy treats multi-vendor posture as confidential per SECURITY invariant `model-capability-substituted-no-credential-disclosure`. The other fields are not redactable — `originalProvider` is already public via `RunOptions.configurable.ai.provider`, and `nodeId` / `missingCapabilities` carry no provider-possession information.",
+      "description": "RFC 0031 \u00a7D. Emitted when a host substitutes the active model with a NodeModule's declared `fallbackModel` because the active model lacks one or more of the `requiredModelCapabilities`. MUST event per RFC 0031 \u00a7B step 3. The `fallbackProvider` + `fallbackModel` pair MAY be redacted as all-or-nothing `\"[REDACTED]\"` when workspace policy treats multi-vendor posture as confidential per SECURITY invariant `model-capability-substituted-no-credential-disclosure`. The other fields are not redactable \u2014 `originalProvider` is already public via `RunOptions.configurable.ai.provider`, and `nodeId` / `missingCapabilities` carry no provider-possession information.",
       "required": [
         "nodeId",
         "originalProvider",
@@ -2249,7 +2247,7 @@
     "modelCapabilityInsufficient": {
       "type": "object",
       "additionalProperties": false,
-      "description": "RFC 0031 §D. Emitted when a host refuses to dispatch a NodeModule because the active model lacks declared `requiredModelCapabilities` AND no viable fallback is available (no `fallbackModel` declared, OR the host cannot authenticate to the fallback provider). MUST event per RFC 0031 §B step 4. Pairs with `RunSnapshot.error.code = \"capability_not_provided\"` per `capabilities.md` §\"Unsupported capability — refusal contract\". Recursive fallback is NOT permitted (RFC 0031 §\"Unresolved questions\" #3): if a host attempts substitution and the fallback itself fails, the host MUST emit this event with `fallbackAttempted: true` and refuse, not chain to another fallback.",
+      "description": "RFC 0031 \u00a7D. Emitted when a host refuses to dispatch a NodeModule because the active model lacks declared `requiredModelCapabilities` AND no viable fallback is available (no `fallbackModel` declared, OR the host cannot authenticate to the fallback provider). MUST event per RFC 0031 \u00a7B step 4. Pairs with `RunSnapshot.error.code = \"capability_not_provided\"` per `capabilities.md` \u00a7\"Unsupported capability \u2014 refusal contract\". Recursive fallback is NOT permitted (RFC 0031 \u00a7\"Unresolved questions\" #3): if a host attempts substitution and the fallback itself fails, the host MUST emit this event with `fallbackAttempted: true` and refuse, not chain to another fallback.",
       "required": [
         "nodeId",
         "provider",
@@ -2287,7 +2285,7 @@
     "envelopeRetryAttempted": {
       "type": "object",
       "additionalProperties": false,
-      "description": "RFC 0032 §B.1. Emitted when a host retries an envelope emission after a parse or validation failure on a prior attempt. The first attempt does NOT emit this event; the second attempt emits with `attempt: 2`, etc. SHOULD-tier — hosts that don't implement retry don't emit; hosts that DO retry on validation failure SHOULD emit per attempt past the first.",
+      "description": "RFC 0032 \u00a7B.1. Emitted when a host retries an envelope emission after a parse or validation failure on a prior attempt. The first attempt does NOT emit this event; the second attempt emits with `attempt: 2`, etc. SHOULD-tier \u2014 hosts that don't implement retry don't emit; hosts that DO retry on validation failure SHOULD emit per attempt past the first.",
       "required": [
         "nodeId",
         "attempt",
@@ -2322,21 +2320,21 @@
               "pattern": "^x-host-[a-z][a-z0-9-]*-[a-z][a-z0-9-]*$"
             }
           ],
-          "description": "Why the prior attempt failed. Spec-reserved values: `schema-violation` (model emitted wrong-shape JSON; corrective fragment + retry per RFC 0033 §C), `truncation` (stop_reason: max_tokens; budget-double + retry per RFC 0033 §B), `type-drift` (envelope `type` discriminator drifted from what was advertised mid-run), `type-mismatch` (a typed payload field was emitted with the wrong runtime type — e.g., string where number was declared), `refusal` (provider safety-stop; NO retry per RFC 0032 §B.3), `parse-error` (response was not extractable as JSON even after lenient parsing), `unknown` (host could not classify). Host-private extensions MUST prefix with `x-host-<host>-` per `host-extensions.md` §\"Canonical-prefix table\"; matches the RFC 0031 §B `requiredModelCapabilities` precedent."
+          "description": "Why the prior attempt failed. Spec-reserved values: `schema-violation` (model emitted wrong-shape JSON; corrective fragment + retry per RFC 0033 \u00a7C), `truncation` (stop_reason: max_tokens; budget-double + retry per RFC 0033 \u00a7B), `type-drift` (envelope `type` discriminator drifted from what was advertised mid-run), `type-mismatch` (a typed payload field was emitted with the wrong runtime type \u2014 e.g., string where number was declared), `refusal` (provider safety-stop; NO retry per RFC 0032 \u00a7B.3), `parse-error` (response was not extractable as JSON even after lenient parsing), `unknown` (host could not classify). Host-private extensions MUST prefix with `x-host-<host>-` per `host-extensions.md` \u00a7\"Canonical-prefix table\"; matches the RFC 0031 \u00a7B `requiredModelCapabilities` precedent."
         },
         "previousError": {
           "type": [
             "string",
             "null"
           ],
-          "description": "Diagnostic text from the failing attempt. MUST NOT contain prompt or response substring excerpts; hosts SHOULD limit to validator output (e.g., \"required field 'steps' missing\"). Subject to SR-1 redaction per `ai-envelope.md` §\"Redaction (SR-1 carry-forward)\"."
+          "description": "Diagnostic text from the failing attempt. MUST NOT contain prompt or response substring excerpts; hosts SHOULD limit to validator output (e.g., \"required field 'steps' missing\"). Subject to SR-1 redaction per `ai-envelope.md` \u00a7\"Redaction (SR-1 carry-forward)\"."
         }
       }
     },
     "envelopeRetryExhausted": {
       "type": "object",
       "additionalProperties": false,
-      "description": "RFC 0032 §B.2. Emitted when a host has exhausted its retry budget and is about to surface a terminal envelope failure to the node. MUST-tier — alternative is silent terminal failure with no event surface, leaving conformance suites unable to assert correct give-up behavior. Hosts that don't retry MUST still emit this event when an envelope attempt terminally fails (with `totalAttempts: 1`). Pairs with `cap.breached` when the failure mode is schema-violation or truncation per RFC 0033 §B + §C.",
+      "description": "RFC 0032 \u00a7B.2. Emitted when a host has exhausted its retry budget and is about to surface a terminal envelope failure to the node. MUST-tier \u2014 alternative is silent terminal failure with no event surface, leaving conformance suites unable to assert correct give-up behavior. Hosts that don't retry MUST still emit this event when an envelope attempt terminally fails (with `totalAttempts: 1`). Pairs with `cap.breached` when the failure mode is schema-violation or truncation per RFC 0033 \u00a7B + \u00a7C.",
       "required": [
         "nodeId",
         "totalAttempts",
@@ -2368,7 +2366,7 @@
               "pattern": "^x-host-[a-z][a-z0-9-]*-[a-z][a-z0-9-]*$"
             }
           ],
-          "description": "Same value set as `envelope.retry.attempted.reason` (§B.1). Spec-reserved closed enum plus `x-host-<host>-` extensions."
+          "description": "Same value set as `envelope.retry.attempted.reason` (\u00a7B.1). Spec-reserved closed enum plus `x-host-<host>-` extensions."
         },
         "finalError": {
           "type": [
@@ -2382,7 +2380,7 @@
     "envelopeRefusal": {
       "type": "object",
       "additionalProperties": false,
-      "description": "RFC 0032 §B.3. Emitted when the underlying LLM provider returns an explicit refusal (e.g., OpenAI `message.refusal`, Anthropic safety-stop, Gemini safety-block). MUST-tier. Hosts MUST NOT retry on refusal — retrying refusal with prompt mutation creates a circumvention concern (the host automatically searches for a prompt the model will accept, evading the safety filter's intent) per RFC 0032 §B.3 + RFC 0033 §D. The node MUST fail with `error.code = \"envelope_refusal\"` per RFC 0033 §F (renamed from `envelope_refused_by_provider` per the 2026-05-21 RFC adoption-feedback amendment).",
+      "description": "RFC 0032 \u00a7B.3. Emitted when the underlying LLM provider returns an explicit refusal (e.g., OpenAI `message.refusal`, Anthropic safety-stop, Gemini safety-block). MUST-tier. Hosts MUST NOT retry on refusal \u2014 retrying refusal with prompt mutation creates a circumvention concern (the host automatically searches for a prompt the model will accept, evading the safety filter's intent) per RFC 0032 \u00a7B.3 + RFC 0033 \u00a7D. The node MUST fail with `error.code = \"envelope_refusal\"` per RFC 0033 \u00a7F (renamed from `envelope_refused_by_provider` per the 2026-05-21 RFC adoption-feedback amendment).",
       "required": [
         "nodeId",
         "provider",
@@ -2417,7 +2415,7 @@
     "envelopeTruncated": {
       "type": "object",
       "additionalProperties": false,
-      "description": "RFC 0032 §B.4. Emitted when the LLM emission was cut off before the envelope was complete (typically `stop_reason: \"max_tokens\"`). SHOULD-tier — hosts that distinguish truncation from schema-violation per RFC 0033 §A MUST emit this event when truncation occurs. Hosts that conflate truncation with schema-violation (legacy behavior) MAY omit; they then fail RFC 0033 conformance.",
+      "description": "RFC 0032 \u00a7B.4. Emitted when the LLM emission was cut off before the envelope was complete (typically `stop_reason: \"max_tokens\"`). SHOULD-tier \u2014 hosts that distinguish truncation from schema-violation per RFC 0033 \u00a7A MUST emit this event when truncation occurs. Hosts that conflate truncation with schema-violation (legacy behavior) MAY omit; they then fail RFC 0033 conformance.",
       "required": [
         "nodeId",
         "provider",
@@ -2447,7 +2445,7 @@
         "partialPayloadAvailable": {
           "type": "boolean",
           "default": false,
-          "description": "True if the host recovered a partial envelope before truncation. Hosts MAY use this signal to route to a recovery path (e.g., budget-doubled retry per RFC 0033 §B)."
+          "description": "True if the host recovered a partial envelope before truncation. Hosts MAY use this signal to route to a recovery path (e.g., budget-doubled retry per RFC 0033 \u00a7B)."
         },
         "outputTokenCount": {
           "type": [
@@ -2462,7 +2460,7 @@
     "envelopeNlToFormatEngaged": {
       "type": "object",
       "additionalProperties": false,
-      "description": "RFC 0032 §B.5. Emitted when the host has escalated to a two-call NL-to-Format fallback after retry exhaustion (per Tam et al., arXiv 2408.02442 mitigation strategy: free-form reasoning in the first call → schema coercion in the second call). MAY-tier — NL-to-Format is one of many possible recovery strategies; hosts that don't implement it don't advertise it.",
+      "description": "RFC 0032 \u00a7B.5. Emitted when the host has escalated to a two-call NL-to-Format fallback after retry exhaustion (per Tam et al., arXiv 2408.02442 mitigation strategy: free-form reasoning in the first call \u2192 schema coercion in the second call). MAY-tier \u2014 NL-to-Format is one of many possible recovery strategies; hosts that don't implement it don't advertise it.",
       "required": [
         "nodeId",
         "originalEnvelopeType"
@@ -2486,7 +2484,7 @@
     "envelopeRecoveryApplied": {
       "type": "object",
       "additionalProperties": false,
-      "description": "RFC 0032 §B.6. Emitted when lenient parsing recovered a malformed envelope (e.g., JSON repair via `jsonrepair`, markdown fence stripping, last-balanced-object extraction). Recovery is internal to the parsing step, BEFORE validation; recovery does NOT consume a retry attempt per RFC 0033 §D. MAY-tier — lenient parsing is a host-discretion recovery path. The event payload MUST NOT carry the recovered envelope content or any substring from the model's pre-recovery output per SECURITY invariant `envelope-recovery-no-content-leak`; only the recovery path identifier and the optional `byteOffset` are emitted. The recovered content rides on the subsequent envelope acceptance + downstream `RunEventDoc`, NOT on this event.",
+      "description": "RFC 0032 \u00a7B.6. Emitted when lenient parsing recovered a malformed envelope (e.g., JSON repair via `jsonrepair`, markdown fence stripping, last-balanced-object extraction). Recovery is internal to the parsing step, BEFORE validation; recovery does NOT consume a retry attempt per RFC 0033 \u00a7D. MAY-tier \u2014 lenient parsing is a host-discretion recovery path. The event payload MUST NOT carry the recovered envelope content or any substring from the model's pre-recovery output per SECURITY invariant `envelope-recovery-no-content-leak`; only the recovery path identifier and the optional `byteOffset` are emitted. The recovered content rides on the subsequent envelope acceptance + downstream `RunEventDoc`, NOT on this event.",
       "required": [
         "nodeId",
         "path"
@@ -2504,7 +2502,7 @@
             "brace-walker",
             "custom"
           ],
-          "description": "Which recovery path succeeded. `direct` is reserved for the no-recovery-needed path and is informational; hosts MAY omit emission when `path: \"direct\"`. MUST replay identically (deterministic parsing → deterministic recovery outcome)."
+          "description": "Which recovery path succeeded. `direct` is reserved for the no-recovery-needed path and is informational; hosts MAY omit emission when `path: \"direct\"`. MUST replay identically (deterministic parsing \u2192 deterministic recovery outcome)."
         },
         "byteOffset": {
           "type": [
@@ -2543,7 +2541,7 @@
         },
         "argsHash": {
           "type": "string",
-          "description": "RFC 0064 (when `capabilities.toolHooks.prePostEvents`). SHA-256 over RFC 8785 JCS-canonicalized args with resolved secrets already redacted (SR-1) — the SIEM-safe, content-free alternative to `inputs`. Raw key material MUST NOT enter the hash input."
+          "description": "RFC 0064 (when `capabilities.toolHooks.prePostEvents`). SHA-256 over RFC 8785 JCS-canonicalized args with resolved secrets already redacted (SR-1) \u2014 the SIEM-safe, content-free alternative to `inputs`. Raw key material MUST NOT enter the hash input."
         },
         "principal": {
           "type": "string",
@@ -2561,7 +2559,7 @@
         "causationHostId": {
           "type": "string",
           "minLength": 1,
-          "description": "RFC 0040 §A — optional cross-host causation pointer. Present + non-empty when this event's `causationId` points at an event on a DIFFERENT host; absent when same-host. MUST equal the originating host's `crossHostCausation.hostId`."
+          "description": "RFC 0040 \u00a7A \u2014 optional cross-host causation pointer. Present + non-empty when this event's `causationId` points at an event on a DIFFERENT host; absent when same-host. MUST equal the originating host's `crossHostCausation.hostId`."
         }
       },
       "additionalProperties": false
@@ -2611,29 +2609,39 @@
         "causationHostId": {
           "type": "string",
           "minLength": 1,
-          "description": "RFC 0040 §A — optional cross-host causation pointer. Present + non-empty when this event's `causationId` points at an event on a DIFFERENT host; absent when same-host. MUST equal the originating host's `crossHostCausation.hostId`."
+          "description": "RFC 0040 \u00a7A \u2014 optional cross-host causation pointer. Present + non-empty when this event's `causationId` points at an event on a DIFFERENT host; absent when same-host. MUST equal the originating host's `crossHostCausation.hostId`."
         }
       },
       "additionalProperties": false
     },
     "agentHandoff": {
       "type": "object",
-      "description": "Multi-Agent Shift Phase 1. Emitted when control transfers from one agent to another mid-run (e.g., orchestrator → worker, worker → worker via `core.dispatch`). Pairs with the receiving agent's subsequent `agent.decided` / `agent.toolCalled` / `node.started`.",
+      "description": "Multi-Agent Shift Phase 1. Emitted when control transfers from one agent to another mid-run (e.g., orchestrator \u2192 worker, worker \u2192 worker via `core.dispatch`). Pairs with the receiving agent's subsequent `agent.decided` / `agent.toolCalled` / `node.started`.",
       "required": [
         "fromAgentId",
         "toAgentId"
       ],
       "properties": {
         "fromAgentId": {
-          "type": "string",
-          "minLength": 3,
-          "maxLength": 256,
+          "allOf": [
+            {
+              "$ref": "ids.schema.json#/$defs/agentId"
+            },
+            {
+              "minLength": 3
+            }
+          ],
           "description": "Agent surrendering control."
         },
         "toAgentId": {
-          "type": "string",
-          "minLength": 3,
-          "maxLength": 256,
+          "allOf": [
+            {
+              "$ref": "ids.schema.json#/$defs/agentId"
+            },
+            {
+              "minLength": 3
+            }
+          ],
           "description": "Agent receiving control."
         },
         "reason": {
@@ -2643,7 +2651,7 @@
         "causationHostId": {
           "type": "string",
           "minLength": 1,
-          "description": "RFC 0040 §A — optional cross-host causation pointer. Present + non-empty when this event's `causationId` points at an event on a DIFFERENT host; absent when same-host. MUST equal the originating host's `crossHostCausation.hostId`."
+          "description": "RFC 0040 \u00a7A \u2014 optional cross-host causation pointer. Present + non-empty when this event's `causationId` points at an event on a DIFFERENT host; absent when same-host. MUST equal the originating host's `crossHostCausation.hostId`."
         }
       },
       "additionalProperties": false
@@ -2666,12 +2674,12 @@
           "type": "number",
           "minimum": 0,
           "maximum": 1,
-          "description": "Optional confidence in `[0, 1]`. Below the threshold → escalate via `node.suspended { reason: 'low-confidence' }`. Absent values are treated as 'no signal' — no escalation."
+          "description": "Optional confidence in `[0, 1]`. Below the threshold \u2192 escalate via `node.suspended { reason: 'low-confidence' }`. Absent values are treated as 'no signal' \u2014 no escalation."
         },
         "causationHostId": {
           "type": "string",
           "minLength": 1,
-          "description": "RFC 0040 §A — optional cross-host causation pointer. Present + non-empty when this event's `causationId` points at an event on a DIFFERENT host; absent when same-host. MUST equal the originating host's `crossHostCausation.hostId`."
+          "description": "RFC 0040 \u00a7A \u2014 optional cross-host causation pointer. Present + non-empty when this event's `causationId` points at an event on a DIFFERENT host; absent when same-host. MUST equal the originating host's `crossHostCausation.hostId`."
         }
       },
       "additionalProperties": false
@@ -2692,7 +2700,7 @@
         "target": {
           "type": "string",
           "minLength": 1,
-          "description": "Opaque reference to what was checked — the eventId of the verified `agent.decided`, a child runId, or a tool callId. Chains the verdict to its subject."
+          "description": "Opaque reference to what was checked \u2014 the eventId of the verified `agent.decided`, a child runId, or a tool callId. Chains the verdict to its subject."
         },
         "verdict": {
           "type": "string",
@@ -2710,18 +2718,18 @@
             "minLength": 1
           },
           "uniqueItems": true,
-          "description": "Optional closed list of the criteria KEYS evaluated (e.g. `[\"schema-valid\",\"grounded\"]`). Keys only — never per-criterion verdict text — for SIEM safety."
+          "description": "Optional closed list of the criteria KEYS evaluated (e.g. `[\"schema-valid\",\"grounded\"]`). Keys only \u2014 never per-criterion verdict text \u2014 for SIEM safety."
         },
         "confidence": {
           "type": "number",
           "minimum": 0,
           "maximum": 1,
-          "description": "Optional verifier confidence in `[0,1]` — the critic's confidence in its OWN verdict, distinct from the actor's `agent.decided.confidence`. MAY drive the RFC 0039 escalation contract."
+          "description": "Optional verifier confidence in `[0,1]` \u2014 the critic's confidence in its OWN verdict, distinct from the actor's `agent.decided.confidence`. MAY drive the RFC 0039 escalation contract."
         },
         "causationHostId": {
           "type": "string",
           "minLength": 1,
-          "description": "RFC 0040 §A — cross-host causation pointer when the verified target lives on a different host."
+          "description": "RFC 0040 \u00a7A \u2014 cross-host causation pointer when the verified target lives on a different host."
         }
       },
       "additionalProperties": false
@@ -2736,7 +2744,7 @@
       "properties": {
         "agentId": {
           "$ref": "ids.schema.json#/$defs/agentId",
-          "description": "AgentRef.agentId of the orchestrator. MUST equal `RunSnapshot.runOrchestrator.agentId` for the run's lifetime — orchestrator identity is set at first decision and does not change."
+          "description": "AgentRef.agentId of the orchestrator. MUST equal `RunSnapshot.runOrchestrator.agentId` for the run's lifetime \u2014 orchestrator identity is set at first decision and does not change."
         },
         "decision": {
           "$ref": "orchestrator-decision.schema.json"
@@ -2744,32 +2752,30 @@
         "iteration": {
           "type": "integer",
           "minimum": 1,
-          "description": "RFC 0061 (`multiAgent.executionModel.version >= 5`). 1-based, monotonic count of orchestrator turns in this run — the observable loop-iteration counter that `maxLoopIterations` (RFC 0058) bounds; a breach emits `cap.breached { kind: 'loop-iterations', observed: <this+1> }`. A `version >= 5` host MUST set it on every `runOrchestrator.decided`, incrementing by exactly 1 per turn and surviving a stateful HITL resume unchanged. Recorded in the event and re-emitted verbatim on replay/`:fork`, never recomputed (`replay.md`). Omitted by hosts on `version < 5`."
+          "description": "RFC 0061 (`multiAgent.executionModel.version >= 5`). 1-based, monotonic count of orchestrator turns in this run \u2014 the observable loop-iteration counter that `maxLoopIterations` (RFC 0058) bounds; a breach emits `cap.breached { kind: 'loop-iterations', observed: <this+1> }`. A `version >= 5` host MUST set it on every `runOrchestrator.decided`, incrementing by exactly 1 per turn and surviving a stateful HITL resume unchanged. Recorded in the event and re-emitted verbatim on replay/`:fork`, never recomputed (`replay.md`). Omitted by hosts on `version < 5`."
         },
         "causationHostId": {
           "type": "string",
           "minLength": 1,
-          "description": "RFC 0040 §A — optional cross-host causation pointer. Present + non-empty when this event's `causationId` points at an event on a DIFFERENT host; absent when same-host. MUST equal the originating host's `crossHostCausation.hostId`."
+          "description": "RFC 0040 \u00a7A \u2014 optional cross-host causation pointer. Present + non-empty when this event's `causationId` points at an event on a DIFFERENT host; absent when same-host. MUST equal the originating host's `crossHostCausation.hostId`."
         }
       },
       "additionalProperties": false
     },
     "nodeDispatched": {
       "type": "object",
-      "description": "Emitted by `core.dispatch` (RFC 0007 §D + RFC 0022 §A) for each child workflow spawned by a `next-worker` OrchestratorDecision. The envelope's top-level `nodeId` carries the dispatching `core.dispatch` node's id; the payload names the spawned child run + its terminal status at the moment of emission. Lets observers reconstruct the parent → child linkage without scanning the runs table.",
+      "description": "Emitted by `core.dispatch` (RFC 0007 \u00a7D + RFC 0022 \u00a7A) for each child workflow spawned by a `next-worker` OrchestratorDecision. The envelope's top-level `nodeId` carries the dispatching `core.dispatch` node's id; the payload names the spawned child run + its terminal status at the moment of emission. Lets observers reconstruct the parent \u2192 child linkage without scanning the runs table.",
       "required": [
         "childRunId",
         "childWorkflowId"
       ],
       "properties": {
         "childRunId": {
-          "type": "string",
-          "minLength": 1,
+          "$ref": "ids.schema.json#/$defs/runId",
           "description": "RunId of the spawned child run."
         },
         "childWorkflowId": {
-          "type": "string",
-          "minLength": 1,
+          "$ref": "ids.schema.json#/$defs/workflowId",
           "description": "WorkflowId of the spawned child."
         },
         "childStatus": {
@@ -2781,7 +2787,7 @@
     },
     "dispatchFanOut": {
       "type": "object",
-      "description": "RFC 0118. Emitted by `core.dispatch` when a `fanOutPolicy: 'parallel'` wave BEGINS, so the parent stays observable while children run concurrently. The envelope's `nodeId` carries the dispatching `core.dispatch` node id; `causationId` is set to the consumed `runOrchestrator.decided` event so replay reconstructs decision → fan-out. Emitted ONLY on the parallel path.",
+      "description": "RFC 0118. Emitted by `core.dispatch` when a `fanOutPolicy: 'parallel'` wave BEGINS, so the parent stays observable while children run concurrently. The envelope's `nodeId` carries the dispatching `core.dispatch` node id; `causationId` is set to the consumed `runOrchestrator.decided` event so replay reconstructs decision \u2192 fan-out. Emitted ONLY on the parallel path.",
       "required": [
         "fanOutPolicy",
         "childCount"
@@ -2789,7 +2795,7 @@
       "properties": {
         "fanOutPolicy": {
           "const": "parallel",
-          "description": "Always `\"parallel\"` — this event is emitted only on the parallel fan-out path."
+          "description": "Always `\"parallel\"` \u2014 this event is emitted only on the parallel fan-out path."
         },
         "childCount": {
           "type": "integer",
@@ -2799,7 +2805,7 @@
         "maxConcurrency": {
           "type": "integer",
           "minimum": 1,
-          "description": "Effective concurrency ceiling for the wave (`min(config.maxConcurrency ?? ∞, capabilities.dispatch.maxFanOut ?? ∞)`), when bounded."
+          "description": "Effective concurrency ceiling for the wave (`min(config.maxConcurrency ?? \u221e, capabilities.dispatch.maxFanOut ?? \u221e)`), when bounded."
         },
         "joinMode": {
           "type": "string",
@@ -2831,7 +2837,7 @@
             "failed",
             "partial"
           ],
-          "description": "`'satisfied'` — `mode` met and `onChildFailure` did not fail the node. `'failed'` — `onChildFailure: 'fail-fast'` tripped, or `mode` could not be satisfied (e.g. quorum unreachable); the dispatch node fails. `'partial'` — `mode` satisfied but ≥1 child is non-`completed` under `collect`/`absorb`; the node SUCCEEDS."
+          "description": "`'satisfied'` \u2014 `mode` met and `onChildFailure` did not fail the node. `'failed'` \u2014 `onChildFailure: 'fail-fast'` tripped, or `mode` could not be satisfied (e.g. quorum unreachable); the dispatch node fails. `'partial'` \u2014 `mode` satisfied but \u22651 child is non-`completed` under `collect`/`absorb`; the node SUCCEEDS."
         },
         "completedCount": {
           "type": "integer",
@@ -2853,7 +2859,7 @@
           "items": {
             "type": "string"
           },
-          "description": "`childRunId`s in the parent host's observed wall-clock terminal order — the replay-deterministic tiebreak for colliding `outputMapping` keys. Recorded at terminal-fold time; never recomputed from child timestamps."
+          "description": "`childRunId`s in the parent host's observed wall-clock terminal order \u2014 the replay-deterministic tiebreak for colliding `outputMapping` keys. Recorded at terminal-fold time; never recomputed from child timestamps."
         }
       },
       "additionalProperties": false
@@ -2928,7 +2934,7 @@
     },
     "memoryCompacted": {
       "type": "object",
-      "description": "RFC 0012 (Memory Compaction Profile). Emitted by a host advertising `capabilities.memory.compaction.supported: true` each time a compaction run completes, regardless of trigger. `outputId` MUST be readable via `MemoryAdapter.get(memoryRef, outputId)` until normal TTL eviction. SR-1 carry-forward (RFC 0012 §D) applies: the host MUST route compacted entry content through the same BYOK redaction harness applied to a fresh `put`.",
+      "description": "RFC 0012 (Memory Compaction Profile). Emitted by a host advertising `capabilities.memory.compaction.supported: true` each time a compaction run completes, regardless of trigger. `outputId` MUST be readable via `MemoryAdapter.get(memoryRef, outputId)` until normal TTL eviction. SR-1 carry-forward (RFC 0012 \u00a7D) applies: the host MUST route compacted entry content through the same BYOK redaction harness applied to a fresh `put`.",
       "required": [
         "memoryRef",
         "outputId",
@@ -2940,7 +2946,7 @@
         "memoryRef": {
           "type": "string",
           "minLength": 1,
-          "description": "Opaque MemoryAdapter handle per RFC 0004 §C. Bounds compaction to a single memory scope."
+          "description": "Opaque MemoryAdapter handle per RFC 0004 \u00a7C. Bounds compaction to a single memory scope."
         },
         "outputId": {
           "type": "string",
@@ -2953,7 +2959,7 @@
             "type": "string",
             "minLength": 1
           },
-          "description": "Ids of entries collapsed into outputId. Hosts MAY omit when sourceCount > 100; the `compacted-from:<runId>` tag convention (RFC 0012 §C) becomes the authoritative provenance signal. When present, MUST be exhaustive within the array (no 'and N more' semantics)."
+          "description": "Ids of entries collapsed into outputId. Hosts MAY omit when sourceCount > 100; the `compacted-from:<runId>` tag convention (RFC 0012 \u00a7C) becomes the authoritative provenance signal. When present, MUST be exhaustive within the array (no 'and N more' semantics)."
         },
         "sourceCount": {
           "type": "integer",
@@ -2976,7 +2982,7 @@
         },
         "distillation": {
           "type": "object",
-          "description": "RFC 0062 (when `capabilities.memory.distillation.supported: true`). Present when this compaction is part of a budgeted distillation run (a scheduled or on-demand 'dream'). Absent for a plain RFC 0012 compaction. Carries the token-budget accounting + whether the memory index was refreshed — not a parallel `memory.distilled` event.",
+          "description": "RFC 0062 (when `capabilities.memory.distillation.supported: true`). Present when this compaction is part of a budgeted distillation run (a scheduled or on-demand 'dream'). Absent for a plain RFC 0012 compaction. Carries the token-budget accounting + whether the memory index was refreshed \u2014 not a parallel `memory.distilled` event.",
           "additionalProperties": false,
           "required": [
             "tokenBudget",
@@ -2986,12 +2992,12 @@
             "tokenBudget": {
               "type": "integer",
               "minimum": 1,
-              "description": "Effective per-run budget honored (≤ advertised `maxTokenBudget`), counted against the advertised `tokenizerName`."
+              "description": "Effective per-run budget honored (\u2264 advertised `maxTokenBudget`), counted against the advertised `tokenizerName`."
             },
             "tokensUsed": {
               "type": "integer",
               "minimum": 0,
-              "description": "Total input+output tokens the distillation consumed, best-effort-honest per the advertised tokenizer (±10% tolerance). MUST be ≤ `tokenBudget` on a successful run."
+              "description": "Total input+output tokens the distillation consumed, best-effort-honest per the advertised tokenizer (\u00b110% tolerance). MUST be \u2264 `tokenBudget` on a successful run."
             },
             "indexUpdated": {
               "type": "boolean",
@@ -3004,7 +3010,7 @@
     },
     "memoryWritten": {
       "type": "object",
-      "description": "RFC 0057. Emitted by a host advertising `capabilities.memory.attribution.emitsWriteEvents: true` for each memory write a run makes, attributing it to the node (and agent, when known) that caused it. Content-free: identifiers + non-secret tags only — the entry content is served by the read-side (`MemoryAdapter.get`), already SR-1-redacted. On replay the event is re-read from the log, never regenerated (the host MUST NOT mint a new `memoryId` or timestamp at replay time). SECURITY invariants `memory-attribution-no-content` + `memory-attribution-tenant-scoped` apply.",
+      "description": "RFC 0057. Emitted by a host advertising `capabilities.memory.attribution.emitsWriteEvents: true` for each memory write a run makes, attributing it to the node (and agent, when known) that caused it. Content-free: identifiers + non-secret tags only \u2014 the entry content is served by the read-side (`MemoryAdapter.get`), already SR-1-redacted. On replay the event is re-read from the log, never regenerated (the host MUST NOT mint a new `memoryId` or timestamp at replay time). SECURITY invariants `memory-attribution-no-content` + `memory-attribution-tenant-scoped` apply.",
       "required": [
         "memoryRef",
         "memoryId"
@@ -3013,7 +3019,7 @@
         "memoryRef": {
           "type": "string",
           "minLength": 1,
-          "description": "Opaque MemoryAdapter handle (RFC 0004 §C) the entry was written under; resolvable via the read-side."
+          "description": "Opaque MemoryAdapter handle (RFC 0004 \u00a7C) the entry was written under; resolvable via the read-side."
         },
         "memoryId": {
           "type": "string",
@@ -3022,25 +3028,25 @@
         },
         "nodeId": {
           "$ref": "ids.schema.json#/$defs/nodeId",
-          "description": "SHOULD — the node whose execution caused the write. Omitted only for writes with no node attribution (e.g. host session-end auto-memory)."
+          "description": "SHOULD \u2014 the node whose execution caused the write. Omitted only for writes with no node attribution (e.g. host session-end auto-memory)."
         },
         "agentId": {
           "$ref": "ids.schema.json#/$defs/agentId",
-          "description": "MAY — the agent identity (AgentRef per RFC 0002) behind the write, when known."
+          "description": "MAY \u2014 the agent identity (AgentRef per RFC 0002) behind the write, when known."
         },
         "tags": {
           "type": "array",
           "items": {
             "type": "string"
           },
-          "description": "MAY — the entry's non-secret labels. MUST NOT carry secret material (the no-content invariant covers payload bodies)."
+          "description": "MAY \u2014 the entry's non-secret labels. MUST NOT carry secret material (the no-content invariant covers payload bodies)."
         }
       },
       "additionalProperties": false
     },
     "agentMemoryConsolidated": {
       "type": "object",
-      "description": "RFC 0068 (`Draft`). Emitted by a host advertising `capabilities.agents.memoryConsolidation.supported: true` after a background consolidation pass over LONG-TERM memory (merge/dedup/supersede/strengthen). Content-free: identifiers + counts only — entry content is served by the SR-1-redacted read-side (`MemoryAdapter.get`). On replay the event is re-read from the log, never regenerated. Distinct from RFC 0062 `memory.compacted` (token-budgeted distillation of transactional memory). SR-1 carry-forward (RFC 0004) + CTI-1 apply to the consolidated entries.",
+      "description": "RFC 0068 (`Draft`). Emitted by a host advertising `capabilities.agents.memoryConsolidation.supported: true` after a background consolidation pass over LONG-TERM memory (merge/dedup/supersede/strengthen). Content-free: identifiers + counts only \u2014 entry content is served by the SR-1-redacted read-side (`MemoryAdapter.get`). On replay the event is re-read from the log, never regenerated. Distinct from RFC 0062 `memory.compacted` (token-budgeted distillation of transactional memory). SR-1 carry-forward (RFC 0004) + CTI-1 apply to the consolidated entries.",
       "required": [
         "memoryRef",
         "inputCount",
@@ -3050,7 +3056,7 @@
         "memoryRef": {
           "type": "string",
           "minLength": 1,
-          "description": "Opaque MemoryAdapter handle (RFC 0004 §C) the consolidation pass operated over. Bounds the pass to a single memory scope (CTI-1)."
+          "description": "Opaque MemoryAdapter handle (RFC 0004 \u00a7C) the consolidation pass operated over. Bounds the pass to a single memory scope (CTI-1)."
         },
         "inputCount": {
           "type": "integer",
@@ -3068,7 +3074,7 @@
             "type": "string",
             "minLength": 1
           },
-          "description": "MAY — ids of entries collapsed/superseded by the pass. Hosts MAY omit when inputCount is large; consumers MUST tolerate absence."
+          "description": "MAY \u2014 ids of entries collapsed/superseded by the pass. Hosts MAY omit when inputCount is large; consumers MUST tolerate absence."
         },
         "trigger": {
           "type": "string",
@@ -3077,14 +3083,14 @@
             "scheduled",
             "on-demand"
           ],
-          "description": "MAY — which initiation path drove this pass (mirrors `agents.memoryConsolidation.schedule`)."
+          "description": "MAY \u2014 which initiation path drove this pass (mirrors `agents.memoryConsolidation.schedule`)."
         }
       },
       "additionalProperties": false
     },
     "commitmentFired": {
       "type": "object",
-      "description": "RFC 0068 (`Draft`). Emitted by a host advertising `capabilities.agents.commitments.supported: true` when an inferred standing commitment fires. Content-free: identifiers + condition kind only — the intention text lives in SR-1-redacted memory (`MemoryAdapter.get(memoryRef, memoryId)`). The fired arm composes RFC 0052 (time) or RFC 0060 (predicate). On replay the event is re-read from the log, never regenerated (the host MUST NOT re-infer or re-fire a commitment at replay time). CTI-1: the commitment, its memory provenance, and any run it enqueues MUST share the source memory's tenant.",
+      "description": "RFC 0068 (`Draft`). Emitted by a host advertising `capabilities.agents.commitments.supported: true` when an inferred standing commitment fires. Content-free: identifiers + condition kind only \u2014 the intention text lives in SR-1-redacted memory (`MemoryAdapter.get(memoryRef, memoryId)`). The fired arm composes RFC 0052 (time) or RFC 0060 (predicate). On replay the event is re-read from the log, never regenerated (the host MUST NOT re-infer or re-fire a commitment at replay time). CTI-1: the commitment, its memory provenance, and any run it enqueues MUST share the source memory's tenant.",
       "required": [
         "commitmentId",
         "memoryRef",
@@ -3104,7 +3110,7 @@
         "memoryId": {
           "type": "string",
           "minLength": 1,
-          "description": "MAY — id of the source `MemoryEntry` the commitment was inferred from, when a single entry is attributable. Resolvable via `MemoryAdapter.get`; content is read SR-1-redacted from the read-side."
+          "description": "MAY \u2014 id of the source `MemoryEntry` the commitment was inferred from, when a single entry is attributable. Resolvable via `MemoryAdapter.get`; content is read SR-1-redacted from the read-side."
         },
         "condition": {
           "type": "string",
@@ -3115,16 +3121,15 @@
           "description": "Which fire-condition kind triggered. `time` composes RFC 0052; `predicate` composes RFC 0060."
         },
         "enqueuedRunId": {
-          "type": "string",
-          "minLength": 1,
-          "description": "MAY — id of the run the fired commitment enqueued, when the host initiates one. Absent when the commitment fires as a notification without a run."
+          "$ref": "ids.schema.json#/$defs/runId",
+          "description": "MAY \u2014 id of the run the fired commitment enqueued, when the host initiates one. Absent when the commitment fires as a notification without a run."
         }
       },
       "additionalProperties": false
     },
     "agentInvocationStarted": {
       "type": "object",
-      "description": "RFC 0077. Emitted by a host advertising `capabilities.agents.liveRuntime.supported: true` as the FIRST agent-scoped event of a live manifest invocation, bracketing the existing `agent.*` family with `agent.invocation.completed`. Content-free: identifiers + selection metadata only — prompt/task content is served by the run's normal projection, never on this event. A recorded-fact event per `replay.md` §\"Recorded-fact events\": on replay it is re-emitted from the log and the host MUST NOT regenerate its `invocationId` (or any identifier). Distinct from the deterministic RFC 0070 sample floor.",
+      "description": "RFC 0077. Emitted by a host advertising `capabilities.agents.liveRuntime.supported: true` as the FIRST agent-scoped event of a live manifest invocation, bracketing the existing `agent.*` family with `agent.invocation.completed`. Content-free: identifiers + selection metadata only \u2014 prompt/task content is served by the run's normal projection, never on this event. A recorded-fact event per `replay.md` \u00a7\"Recorded-fact events\": on replay it is re-emitted from the log and the host MUST NOT regenerate its `invocationId` (or any identifier). Distinct from the deterministic RFC 0070 sample floor.",
       "required": [
         "invocationId",
         "agentId",
@@ -3134,7 +3139,7 @@
         "invocationId": {
           "type": "string",
           "minLength": 1,
-          "description": "Host-defined id correlating this agent invocation within its run, UNIQUE-WITHIN-RUN (not a mandated global id-space). Distinct from `runId` — one run MAY dispatch several invocations (multiple agent nodes, or a handoff chain) — but a host MAY derive it from an existing per-node-execution receipt id (e.g. `runId:nodeId:seq`) or mint a UUID; a single-invocation run MAY reuse `runId`. Recorded-fact: re-read from the log on replay, never regenerated (`replay.md` §\"Recorded-fact events\"). Correlates to the matching `agent.invocation.completed`."
+          "description": "Host-defined id correlating this agent invocation within its run, UNIQUE-WITHIN-RUN (not a mandated global id-space). Distinct from `runId` \u2014 one run MAY dispatch several invocations (multiple agent nodes, or a handoff chain) \u2014 but a host MAY derive it from an existing per-node-execution receipt id (e.g. `runId:nodeId:seq`) or mint a UUID; a single-invocation run MAY reuse `runId`. Recorded-fact: re-read from the log on replay, never regenerated (`replay.md` \u00a7\"Recorded-fact events\"). Correlates to the matching `agent.invocation.completed`."
         },
         "agentId": {
           "$ref": "ids.schema.json#/$defs/agentId",
@@ -3151,39 +3156,39 @@
         },
         "modelClass": {
           "type": "string",
-          "description": "MAY — the manifest's abstract `modelClass`. Always populatable at start."
+          "description": "MAY \u2014 the manifest's abstract `modelClass`. Always populatable at start."
         },
         "resolvedModel": {
           "type": "string",
-          "description": "MAY — the concrete model the host selected. OPTIONAL: modelClass→concrete resolution MAY happen downstream (with capability-gated fallback substitution), so a dispatch-time start event genuinely may not know it; a host MAY also omit for deployment-privacy."
+          "description": "MAY \u2014 the concrete model the host selected. OPTIONAL: modelClass\u2192concrete resolution MAY happen downstream (with capability-gated fallback substitution), so a dispatch-time start event genuinely may not know it; a host MAY also omit for deployment-privacy."
         },
         "resolvedProvider": {
           "type": "string",
-          "description": "MAY — the concrete provider the host routed to (aligns with `capabilities.aiProviders.supported` / RFC 0067 `authModes`). OPTIONAL, same rationale as `resolvedModel`."
+          "description": "MAY \u2014 the concrete provider the host routed to (aligns with `capabilities.aiProviders.supported` / RFC 0067 `authModes`). OPTIONAL, same rationale as `resolvedModel`."
         },
         "resolvedAgentVersion": {
           "type": "string",
-          "description": "MAY — RFC 0082 §B. When this invocation's `AgentRef` bound a `channel` (rather than an exact `version`), the concrete agent-definition version the host pinned per-(run, agentId, channel) at first resolution. A RECORDED FACT: re-read from the log on replay and NEVER re-resolved against a moved channel (the whole event is recorded-fact). Absent when the ref used an exact `version` or host-default resolution."
+          "description": "MAY \u2014 RFC 0082 \u00a7B. When this invocation's `AgentRef` bound a `channel` (rather than an exact `version`), the concrete agent-definition version the host pinned per-(run, agentId, channel) at first resolution. A RECORDED FACT: re-read from the log on replay and NEVER re-resolved against a moved channel (the whole event is recorded-fact). Absent when the ref used an exact `version` or host-default resolution."
         },
         "resolvedChannel": {
           "type": "string",
-          "description": "MAY — RFC 0082 §B. The named `channel` the `AgentRef` bound (mirrors `AgentRef.channel`), for which `resolvedAgentVersion` is the pinned resolution. Content-free label; present only when the ref bound a channel."
+          "description": "MAY \u2014 RFC 0082 \u00a7B. The named `channel` the `AgentRef` bound (mirrors `AgentRef.channel`), for which `resolvedAgentVersion` is the pinned resolution. Content-free label; present only when the ref bound a channel."
         },
         "toolSurfaceCount": {
           "type": "integer",
           "minimum": 0,
-          "description": "MAY — number of tools in the constructed surface after `toolAllowlist` filtering. Content-free count, not the tool ids."
+          "description": "MAY \u2014 number of tools in the constructed surface after `toolAllowlist` filtering. Content-free count, not the tool ids."
         },
         "memoryBound": {
           "type": "boolean",
-          "description": "MAY — whether a long-term memory backend was bound for the invocation."
+          "description": "MAY \u2014 whether a long-term memory backend was bound for the invocation."
         }
       },
       "additionalProperties": false
     },
     "agentInvocationCompleted": {
       "type": "object",
-      "description": "RFC 0077. Emitted by a host advertising `capabilities.agents.liveRuntime.supported: true` as the LAST agent-scoped event of a live manifest invocation (after the terminal `agent.decided`). Content-free: identifiers + outcome metadata only — the result body is served by the run's normal projection. A recorded-fact event per `replay.md` §\"Recorded-fact events\": re-read from the log on replay, never regenerated.",
+      "description": "RFC 0077. Emitted by a host advertising `capabilities.agents.liveRuntime.supported: true` as the LAST agent-scoped event of a live manifest invocation (after the terminal `agent.decided`). Content-free: identifiers + outcome metadata only \u2014 the result body is served by the run's normal projection. A recorded-fact event per `replay.md` \u00a7\"Recorded-fact events\": re-read from the log on replay, never regenerated.",
       "required": [
         "invocationId",
         "agentId",
@@ -3208,28 +3213,27 @@
             "refused",
             "failed"
           ],
-          "description": "Terminal disposition. `completed`: produced a (schema-valid, if enforced) terminal result. `handed-off`: control passed to another agent (`agent.handoff`). `escalated`: confidence escalation fired (RFC 0002 §F). `refused`: the model refused (RFC 0032 refusal envelope) — never a silent substitution. `failed`: an error terminated the invocation."
+          "description": "Terminal disposition. `completed`: produced a (schema-valid, if enforced) terminal result. `handed-off`: control passed to another agent (`agent.handoff`). `escalated`: confidence escalation fired (RFC 0002 \u00a7F). `refused`: the model refused (RFC 0032 refusal envelope) \u2014 never a silent substitution. `failed`: an error terminated the invocation."
         },
         "schemaValidated": {
           "type": "boolean",
-          "description": "MAY — whether the terminal result was validated against `handoff.returnSchemaRef` (true only when `liveRuntime.structuredOutput` is advertised and a `returnSchemaRef` exists)."
+          "description": "MAY \u2014 whether the terminal result was validated against `handoff.returnSchemaRef` (true only when `liveRuntime.structuredOutput` is advertised and a `returnSchemaRef` exists)."
         },
         "confidence": {
           "type": "number",
           "minimum": 0,
           "maximum": 1,
-          "description": "MAY — the terminal `agent.decided` confidence, mirrored for convenience. Content-free scalar."
+          "description": "MAY \u2014 the terminal `agent.decided` confidence, mirrored for convenience. Content-free scalar."
         },
         "enqueuedRunId": {
-          "type": "string",
-          "minLength": 1,
-          "description": "MAY — id of a follow-on run the invocation enqueued (e.g. a sub-run), when applicable."
+          "$ref": "ids.schema.json#/$defs/runId",
+          "description": "MAY \u2014 id of a follow-on run the invocation enqueued (e.g. a sub-run), when applicable."
         }
       },
       "additionalProperties": false
     },
     "workspaceUpdated": {
-      "description": "RFC 0059. Emitted by a host advertising `capabilities.workspace.supported: true` on each successful `PUT`/`DELETE` of a workspace file, attributing the change to the file `path` + resulting `version`. Content-free: carries the path + version only — the file body is served by the read-side (`GET /v1/host/workspace/files/{path}`), already SR-1-redacted (RFC 0059 §E WSR-1). On replay the event is re-read from the log, never regenerated. MUST NOT be emitted unless `capabilities.workspace.supported: true`. The proposed SECURITY invariant `workspace-cross-tenant-isolation` (WCT-1) applies to the read-side that resolves these paths.",
+      "description": "RFC 0059. Emitted by a host advertising `capabilities.workspace.supported: true` on each successful `PUT`/`DELETE` of a workspace file, attributing the change to the file `path` + resulting `version`. Content-free: carries the path + version only \u2014 the file body is served by the read-side (`GET /v1/host/workspace/files/{path}`), already SR-1-redacted (RFC 0059 \u00a7E WSR-1). On replay the event is re-read from the log, never regenerated. MUST NOT be emitted unless `capabilities.workspace.supported: true`. The proposed SECURITY invariant `workspace-cross-tenant-isolation` (WCT-1) applies to the read-side that resolves these paths.",
       "type": "object",
       "additionalProperties": false,
       "required": [
@@ -3251,7 +3255,7 @@
     },
     "evalStarted": {
       "type": "object",
-      "description": "RFC 0081 §C. Emitted ONCE at the start of an eval run (a `mode: \"eval\"` run, RFC 0081 §B) by a host advertising `capabilities.agents.evalSuite.supported: true`. Content-free: suite provenance + counts only. A recorded-fact event per `replay.md` §\"Recorded-fact events\".",
+      "description": "RFC 0081 \u00a7C. Emitted ONCE at the start of an eval run (a `mode: \"eval\"` run, RFC 0081 \u00a7B) by a host advertising `capabilities.agents.evalSuite.supported: true`. Content-free: suite provenance + counts only. A recorded-fact event per `replay.md` \u00a7\"Recorded-fact events\".",
       "required": [
         "suiteId",
         "suiteVersion",
@@ -3287,19 +3291,18 @@
               "live-shadow"
             ]
           },
-          "description": "The eval modes this run exercises (RFC 0081 §D)."
+          "description": "The eval modes this run exercises (RFC 0081 \u00a7D)."
         },
         "baselineRunId": {
-          "type": "string",
-          "minLength": 1,
-          "description": "MAY — for `regression` mode, the prior eval run this run is scored against."
+          "$ref": "ids.schema.json#/$defs/runId",
+          "description": "MAY \u2014 for `regression` mode, the prior eval run this run is scored against."
         }
       },
       "additionalProperties": false
     },
     "evalScored": {
       "type": "object",
-      "description": "RFC 0081 §C. Emitted ONCE PER TASK, after that task's terminal `agent.decided`, so a streaming consumer sees results land incrementally. Content-free: the task id + scalars + counts ONLY — NEVER the task output, rubric prose, or model completion (SECURITY invariant `eval-summary-no-content-leak`). A recorded-fact event.",
+      "description": "RFC 0081 \u00a7C. Emitted ONCE PER TASK, after that task's terminal `agent.decided`, so a streaming consumer sees results land incrementally. Content-free: the task id + scalars + counts ONLY \u2014 NEVER the task output, rubric prose, or model completion (SECURITY invariant `eval-summary-no-content-leak`). A recorded-fact event.",
       "required": [
         "taskId",
         "score",
@@ -3315,7 +3318,7 @@
           "type": "number",
           "minimum": 0,
           "maximum": 1,
-          "description": "Task score (0.0–1.0)."
+          "description": "Task score (0.0\u20131.0)."
         },
         "passed": {
           "type": "boolean",
@@ -3324,28 +3327,28 @@
         "costUsd": {
           "type": "number",
           "minimum": 0,
-          "description": "MAY — task cost (scalar; summed from RFC 0026 `provider.usage`). NEVER a pricing breakdown."
+          "description": "MAY \u2014 task cost (scalar; summed from RFC 0026 `provider.usage`). NEVER a pricing breakdown."
         },
         "latencyMs": {
           "type": "integer",
           "minimum": 0,
-          "description": "MAY — task wall-clock latency."
+          "description": "MAY \u2014 task wall-clock latency."
         },
         "schemaValid": {
           "type": "boolean",
-          "description": "MAY — whether the output validated against `handoff.returnSchemaRef`."
+          "description": "MAY \u2014 whether the output validated against `handoff.returnSchemaRef`."
         },
         "safetyFindingCount": {
           "type": "integer",
           "minimum": 0,
-          "description": "MAY — count of safety findings for the task (the redaction-safe descriptors live on `EvalSummary`; the event carries the count only)."
+          "description": "MAY \u2014 count of safety findings for the task (the redaction-safe descriptors live on `EvalSummary`; the event carries the count only)."
         }
       },
       "additionalProperties": false
     },
     "evalCompleted": {
       "type": "object",
-      "description": "RFC 0081 §C. Emitted ONCE, after all tasks and before `run.completed`. Content-free: aggregate scalars only. A recorded-fact event. The full scorecard is the run's output (`eval-summary.schema.json`), served by `GET /v1/runs/{runId}/eval-summary`.",
+      "description": "RFC 0081 \u00a7C. Emitted ONCE, after all tasks and before `run.completed`. Content-free: aggregate scalars only. A recorded-fact event. The full scorecard is the run's output (`eval-summary.schema.json`), served by `GET /v1/runs/{runId}/eval-summary`.",
       "required": [
         "aggregateScore",
         "passed",
@@ -3357,11 +3360,11 @@
           "type": "number",
           "minimum": 0,
           "maximum": 1,
-          "description": "The suite-level score (0.0–1.0)."
+          "description": "The suite-level score (0.0\u20131.0)."
         },
         "passed": {
           "type": "boolean",
-          "description": "Whether the run cleared the suite thresholds — the flag an RFC 0082 deployment gate MAY require."
+          "description": "Whether the run cleared the suite thresholds \u2014 the flag an RFC 0082 deployment gate MAY require."
         },
         "taskCount": {
           "type": "integer",
@@ -3377,14 +3380,14 @@
           "type": "number",
           "minimum": -1,
           "maximum": 1,
-          "description": "MAY — for `regression` mode, `aggregateScore` minus the baseline's (negative ⇒ regression)."
+          "description": "MAY \u2014 for `regression` mode, `aggregateScore` minus the baseline's (negative \u21d2 regression)."
         }
       },
       "additionalProperties": false
     },
     "toolSessionOpened": {
       "type": "object",
-      "description": "RFC 0078 §D. Emitted when the host opens a multi-step tool session, bracketing one or more RFC 0064 `agent.toolCalled`/`agent.toolReturned` call events. Content-free: identifiers only — never tool arguments, results, or credential material (SR-1). Emitted only when `capabilities.toolCatalog.sessionLifecycle: true`.",
+      "description": "RFC 0078 \u00a7D. Emitted when the host opens a multi-step tool session, bracketing one or more RFC 0064 `agent.toolCalled`/`agent.toolReturned` call events. Content-free: identifiers only \u2014 never tool arguments, results, or credential material (SR-1). Emitted only when `capabilities.toolCatalog.sessionLifecycle: true`.",
       "required": [
         "sessionId",
         "toolId"
@@ -3405,7 +3408,7 @@
     },
     "toolSessionClosed": {
       "type": "object",
-      "description": "RFC 0078 §D. Emitted when the host closes a multi-step tool session opened by `tool.session.opened`. Content-free: identifiers + a closed-enum outcome only — never tool arguments, results, or credential material (SR-1).",
+      "description": "RFC 0078 \u00a7D. Emitted when the host closes a multi-step tool session opened by `tool.session.opened`. Content-free: identifiers + a closed-enum outcome only \u2014 never tool arguments, results, or credential material (SR-1).",
       "required": [
         "sessionId",
         "toolId",
@@ -3429,14 +3432,14 @@
             "failed",
             "cancelled"
           ],
-          "description": "Terminal disposition of the session. Content-free — no failure detail/result on the payload."
+          "description": "Terminal disposition of the session. Content-free \u2014 no failure detail/result on the payload."
         }
       },
       "additionalProperties": false
     },
     "egressDecided": {
       "type": "object",
-      "description": "RFC 0079 §B. Emitted when a host evaluates a credentialed egress (via `ctx.http.safeFetch` / a tool) against credential provenance + the SSRF guard. Content-free: identifiers + decision only — no credential value, no request/response body (SR-1). On replay re-read from the log, never regenerated (the decision is a recorded fact). Emitted only when `capabilities.httpClient.egressPolicy.supported: true`.",
+      "description": "RFC 0079 \u00a7B. Emitted when a host evaluates a credentialed egress (via `ctx.http.safeFetch` / a tool) against credential provenance + the SSRF guard. Content-free: identifiers + decision only \u2014 no credential value, no request/response body (SR-1). On replay re-read from the log, never regenerated (the decision is a recorded fact). Emitted only when `capabilities.httpClient.egressPolicy.supported: true`.",
       "required": [
         "decision",
         "destination"
@@ -3450,17 +3453,17 @@
             "downgraded",
             "approval-required"
           ],
-          "description": "`allowed`: egress proceeds with the credential; `denied`: blocked (out-of-audience / expired / SSRF / unevaluable provenance — fail-closed); `downgraded`: proceeds WITHOUT the credential (anonymous egress, when host policy permits); `approval-required`: suspended pending an RFC 0051 approval interrupt."
+          "description": "`allowed`: egress proceeds with the credential; `denied`: blocked (out-of-audience / expired / SSRF / unevaluable provenance \u2014 fail-closed); `downgraded`: proceeds WITHOUT the credential (anonymous egress, when host policy permits); `approval-required`: suspended pending an RFC 0051 approval interrupt."
         },
         "destination": {
           "type": "string",
           "minLength": 1,
-          "description": "The egress destination **host/authority ONLY** (`api.stripe.com`) — NOT a path, query, or full URL (SR-1: a path/query can carry secrets; the host MUST strip them for this canonical content-free event). A host whose internal audit retains the path keeps that on its vendor `x-host-*` variant, never here."
+          "description": "The egress destination **host/authority ONLY** (`api.stripe.com`) \u2014 NOT a path, query, or full URL (SR-1: a path/query can carry secrets; the host MUST strip them for this canonical content-free event). A host whose internal audit retains the path keeps that on its vendor `x-host-*` variant, never here."
         },
         "credentialId": {
           "type": "string",
           "minLength": 1,
-          "description": "MAY — the provenance `credentialId` considered (absent for an anonymous / denied-pre-credential egress)."
+          "description": "MAY \u2014 the provenance `credentialId` considered (absent for an anonymous / denied-pre-credential egress)."
         },
         "reason": {
           "type": "string",
@@ -3473,19 +3476,19 @@
             "scope-denied",
             "policy-denied"
           ],
-          "description": "MAY — a machine-stable reason code (a CLOSED enum — a free-form reason is a leak vector that would let a host spill the blocked URL/host/header into it, defeating `egress-decision-no-secret-leak`). The load-bearing field is `decision`."
+          "description": "MAY \u2014 a machine-stable reason code (a CLOSED enum \u2014 a free-form reason is a leak vector that would let a host spill the blocked URL/host/header into it, defeating `egress-decision-no-secret-leak`). The load-bearing field is `decision`."
         },
         "auditCorrelationId": {
           "type": "string",
           "minLength": 1,
-          "description": "MAY — correlates to the provenance descriptor + host audit log."
+          "description": "MAY \u2014 correlates to the provenance descriptor + host audit log."
         }
       },
       "additionalProperties": false
     },
     "triggerSubscriptionStateChanged": {
       "type": "object",
-      "description": "RFC 0083 §C. Emitted when a trigger subscription changes state (the §B four-state machine). Content-free: identifiers + states only — no inbound payload, headers, or credential material (SR-1). Emitted only when `capabilities.triggerBridge.supported: true`.",
+      "description": "RFC 0083 \u00a7C. Emitted when a trigger subscription changes state (the \u00a7B four-state machine). Content-free: identifiers + states only \u2014 no inbound payload, headers, or credential material (SR-1). Emitted only when `capabilities.triggerBridge.supported: true`.",
       "required": [
         "subscriptionId",
         "source",
@@ -3540,14 +3543,14 @@
             "source-removed",
             "provenance-unevaluable"
           ],
-          "description": "MAY — a machine-stable reason code (a CLOSED enum — a free-form reason is a leak vector that would let a host spill an inbound URL/host/header into it). The load-bearing field is `toState`."
+          "description": "MAY \u2014 a machine-stable reason code (a CLOSED enum \u2014 a free-form reason is a leak vector that would let a host spill an inbound URL/host/header into it). The load-bearing field is `toState`."
         }
       },
       "additionalProperties": false
     },
     "triggerDeliveryAttempted": {
       "type": "object",
-      "description": "RFC 0083 §C. Emitted on each inbound-delivery attempt against an active subscription. Content-free: the subscription id, the dedup key, the attempt counter, the outcome, and the resulting runId only — NEVER the inbound body, headers, or credential material (SR-1).",
+      "description": "RFC 0083 \u00a7C. Emitted on each inbound-delivery attempt against an active subscription. Content-free: the subscription id, the dedup key, the attempt counter, the outcome, and the resulting runId only \u2014 NEVER the inbound body, headers, or credential material (SR-1).",
       "required": [
         "subscriptionId",
         "dedupKey",
@@ -3562,7 +3565,7 @@
         "dedupKey": {
           "type": "string",
           "minLength": 1,
-          "description": "The de-duplication key (§C-1). MUST be a **host-opaque** stable key (e.g. `hash(subscriptionId + inbound-event-id)`); it MUST NOT embed inbound body / path / header content in cleartext (SR-1 — a key like `POST /webhook/orders/12345?token=…` would leak). A repeat within retention is a no-op returning the prior runId."
+          "description": "The de-duplication key (\u00a7C-1). MUST be a **host-opaque** stable key (e.g. `hash(subscriptionId + inbound-event-id)`); it MUST NOT embed inbound body / path / header content in cleartext (SR-1 \u2014 a key like `POST /webhook/orders/12345?token=\u2026` would leak). A repeat within retention is a no-op returning the prior runId."
         },
         "attempt": {
           "type": "integer",
@@ -3580,14 +3583,14 @@
         },
         "runId": {
           "$ref": "ids.schema.json#/$defs/runId",
-          "description": "MAY — the run started by a `delivered` outcome (the run's `run.started` carries this delivery's id as `causationId`, RFC 0040). Absent for `retrying` / `dead-lettered`."
+          "description": "MAY \u2014 the run started by a `delivered` outcome (the run's `run.started` carries this delivery's id as `causationId`, RFC 0040). Absent for `retrying` / `dead-lettered`."
         }
       },
       "additionalProperties": false
     },
     "budgetReserved": {
       "type": "object",
-      "description": "RFC 0084 §C. Emitted once at run start with the resolved effective budget (`min` across run/workflow/agent/project scopes, clamped to the host ceiling). A recorded fact — replay re-reads it, never re-resolves (§B). Content-free: dimension ceilings + scope only, no pricing breakdown (SR-1, `budget-no-pricing-leak`).",
+      "description": "RFC 0084 \u00a7C. Emitted once at run start with the resolved effective budget (`min` across run/workflow/agent/project scopes, clamped to the host ceiling). A recorded fact \u2014 replay re-reads it, never re-resolves (\u00a7B). Content-free: dimension ceilings + scope only, no pricing breakdown (SR-1, `budget-no-pricing-leak`).",
       "required": [
         "effectiveBudget",
         "scope"
@@ -3624,14 +3627,14 @@
             "agent",
             "project"
           ],
-          "description": "The binding scope the effective budget resolved from (§B)."
+          "description": "The binding scope the effective budget resolved from (\u00a7B)."
         }
       },
       "additionalProperties": false
     },
     "budgetConsumed": {
       "type": "object",
-      "description": "RFC 0084 §C. A running projection of spend, derived from the existing events (`provider.usage` tokens/cost, `agent.toolCalled`, `node.retried`) — NOT a new measurement (no double-counting). The host MAY coalesce. Content-free: dimension name + integers only, no pricing breakdown / rate card (SR-1).",
+      "description": "RFC 0084 \u00a7C. A running projection of spend, derived from the existing events (`provider.usage` tokens/cost, `agent.toolCalled`, `node.retried`) \u2014 NOT a new measurement (no double-counting). The host MAY coalesce. Content-free: dimension name + integers only, no pricing breakdown / rate card (SR-1).",
       "required": [
         "dimension",
         "consumed",
@@ -3660,14 +3663,14 @@
         },
         "remaining": {
           "type": "number",
-          "description": "MAY — `limit - consumed`."
+          "description": "MAY \u2014 `limit - consumed`."
         }
       },
       "additionalProperties": false
     },
     "budgetThresholdCrossed": {
       "type": "object",
-      "description": "RFC 0084 §C. Emitted once per dimension when consumption crosses `thresholdPercent`. Content-free.",
+      "description": "RFC 0084 \u00a7C. Emitted once per dimension when consumption crosses `thresholdPercent`. Content-free.",
       "required": [
         "dimension",
         "consumed",
@@ -3703,7 +3706,7 @@
     },
     "budgetExhausted": {
       "type": "object",
-      "description": "RFC 0084 §C. Emitted when a dimension hits its limit. For a hard dimension this is followed by `cap.breached{kind:\"budget-*\"}` → `run.failed{budget_exhausted}` (or, with `onExhaustion:\"interrupt\"`, an approval interrupt). Content-free.",
+      "description": "RFC 0084 \u00a7C. Emitted when a dimension hits its limit. For a hard dimension this is followed by `cap.breached{kind:\"budget-*\"}` \u2192 `run.failed{budget_exhausted}` (or, with `onExhaustion:\"interrupt\"`, an approval interrupt). Content-free.",
       "required": [
         "dimension",
         "consumed",
@@ -3732,7 +3735,7 @@
     },
     "deploymentPromoted": {
       "type": "object",
-      "description": "RFC 0082 §D. Emitted on the deployment-management run when a version is promoted into a new lifecycle state (the §E contract: authorized via RFC 0049 `deploy:*`, gated via RFC 0051 `approvalGate`, eval-verified via RFC 0081 when `requiredEval` is configured). Content-free: ids / state / scalars / content-free references only — NEVER a manifest body, prompt, or credential (SECURITY invariant `deployment-event-no-content-leak`; `additionalProperties:false` enforces it). A recorded-fact event per `replay.md` §\"Recorded-fact events\". Audit-logged with the acting principal (`auth.md`).",
+      "description": "RFC 0082 \u00a7D. Emitted on the deployment-management run when a version is promoted into a new lifecycle state (the \u00a7E contract: authorized via RFC 0049 `deploy:*`, gated via RFC 0051 `approvalGate`, eval-verified via RFC 0081 when `requiredEval` is configured). Content-free: ids / state / scalars / content-free references only \u2014 NEVER a manifest body, prompt, or credential (SECURITY invariant `deployment-event-no-content-leak`; `additionalProperties:false` enforces it). A recorded-fact event per `replay.md` \u00a7\"Recorded-fact events\". Audit-logged with the acting principal (`auth.md`).",
       "additionalProperties": false,
       "required": [
         "agentId",
@@ -3747,7 +3750,7 @@
         "fromVersion": {
           "type": "string",
           "minLength": 1,
-          "description": "MAY — the version previously occupying the target channel/state (absent on a first promotion)."
+          "description": "MAY \u2014 the version previously occupying the target channel/state (absent on a first promotion)."
         },
         "toVersion": {
           "type": "string",
@@ -3770,29 +3773,28 @@
         "channel": {
           "type": "string",
           "minLength": 1,
-          "description": "MAY — the named channel this promotion targets (when promoting to a channel)."
+          "description": "MAY \u2014 the named channel this promotion targets (when promoting to a channel)."
         },
         "canaryPercent": {
           "type": "integer",
           "minimum": 0,
           "maximum": 100,
-          "description": "MAY — the canary traffic share assigned (when promoting `active` at < 100)."
+          "description": "MAY \u2014 the canary traffic share assigned (when promoting `active` at < 100)."
         },
         "evalRunId": {
-          "type": "string",
-          "minLength": 1,
-          "description": "MAY — the RFC 0081 eval run whose `EvalSummary.passed` gated this promotion (the §E evidence)."
+          "$ref": "ids.schema.json#/$defs/runId",
+          "description": "MAY \u2014 the RFC 0081 eval run whose `EvalSummary.passed` gated this promotion (the \u00a7E evidence)."
         },
         "approvalGateId": {
           "type": "string",
           "minLength": 1,
-          "description": "MAY — the RFC 0051 approvalGate that authorized this promotion."
+          "description": "MAY \u2014 the RFC 0051 approvalGate that authorized this promotion."
         }
       }
     },
     "deploymentRolledBack": {
       "type": "object",
-      "description": "RFC 0082 §D. Emitted when an `active` version is rolled back and a prior version restored to `active`. Content-free (`deployment-event-no-content-leak`). Recorded-fact; audit-logged.",
+      "description": "RFC 0082 \u00a7D. Emitted when an `active` version is rolled back and a prior version restored to `active`. Content-free (`deployment-event-no-content-leak`). Recorded-fact; audit-logged.",
       "additionalProperties": false,
       "required": [
         "agentId",
@@ -3823,13 +3825,13 @@
         "reason": {
           "type": "string",
           "minLength": 1,
-          "description": "MAY — a short redaction-safe rollback reason label (NOT free-text content; same posture as `run.dead_lettered.reason`)."
+          "description": "MAY \u2014 a short redaction-safe rollback reason label (NOT free-text content; same posture as `run.dead_lettered.reason`)."
         }
       }
     },
     "deploymentCanaryAdjusted": {
       "type": "object",
-      "description": "RFC 0082 §D. Emitted when an `active` version's canary traffic share changes. Content-free (`deployment-event-no-content-leak`). Recorded-fact; audit-logged.",
+      "description": "RFC 0082 \u00a7D. Emitted when an `active` version's canary traffic share changes. Content-free (`deployment-event-no-content-leak`). Recorded-fact; audit-logged.",
       "additionalProperties": false,
       "required": [
         "agentId",
@@ -3863,7 +3865,7 @@
     },
     "deploymentStateChanged": {
       "type": "object",
-      "description": "RFC 0082 §D. Emitted on any non-promotion lifecycle transition (pause / resume / deprecate). Content-free (`deployment-event-no-content-leak`). Recorded-fact; audit-logged.",
+      "description": "RFC 0082 \u00a7D. Emitted on any non-promotion lifecycle transition (pause / resume / deprecate). Content-free (`deployment-event-no-content-leak`). Recorded-fact; audit-logged.",
       "additionalProperties": false,
       "required": [
         "agentId",
@@ -3911,7 +3913,7 @@
     },
     "rosterRunInitiated": {
       "type": "object",
-      "description": "RFC 0086 §C. Emitted once, immediately after `run.started` and before any agent invocation, when a trigger (RFC 0052 schedule / RFC 0083 durable work item) fires a workflow in a roster member's portfolio — attributing the run to the standing agent. Content-free (`roster-attribution-no-content`): ids + persona + trigger source ONLY — never the work-item body, prompt, or credential material (SR-1). A recorded-fact event (replay.md §'Recorded-fact events'): re-emitted from the log on replay, identifiers never regenerated, so the run stays attributed to the same member even if the entry was since renamed or deleted.",
+      "description": "RFC 0086 \u00a7C. Emitted once, immediately after `run.started` and before any agent invocation, when a trigger (RFC 0052 schedule / RFC 0083 durable work item) fires a workflow in a roster member's portfolio \u2014 attributing the run to the standing agent. Content-free (`roster-attribution-no-content`): ids + persona + trigger source ONLY \u2014 never the work-item body, prompt, or credential material (SR-1). A recorded-fact event (replay.md \u00a7'Recorded-fact events'): re-emitted from the log on replay, identifiers never regenerated, so the run stays attributed to the same member even if the entry was since renamed or deleted.",
       "additionalProperties": false,
       "required": [
         "rosterId",
@@ -3945,16 +3947,15 @@
           "description": "What fired the run: an RFC 0083 source (`schedule`/`webhook`/`queue`/`email`/`form`) or a host-extension source name (e.g. a vendor Kanban bridge)."
         },
         "triggerSubscriptionId": {
-          "type": "string",
-          "minLength": 1,
-          "description": "MAY. The RFC 0083 trigger-subscription id when the fire came through the durable trigger bridge, so trigger → run → roster is traceable via /ancestry (RFC 0040)."
+          "$ref": "ids.schema.json#/$defs/subscriptionId",
+          "description": "MAY. The RFC 0083 trigger-subscription id when the fire came through the durable trigger bridge, so trigger \u2192 run \u2192 roster is traceable via /ancestry (RFC 0040)."
         }
       }
     },
     "compensationRequested": {
       "type": "object",
       "additionalProperties": false,
-      "description": "RFC 0151 §D — plan persisted, before the first inverse action. Content-free: opaque node/effect IDs, attempt, ordering model, and closed reason codes. Provider bodies and credentials MUST NOT appear (§D/§G) — these land in the durable log, the least revocable place a credential can reach.",
+      "description": "RFC 0151 \u00a7D \u2014 plan persisted, before the first inverse action. Content-free: opaque node/effect IDs, attempt, ordering model, and closed reason codes. Provider bodies and credentials MUST NOT appear (\u00a7D/\u00a7G) \u2014 these land in the durable log, the least revocable place a credential can reach.",
       "properties": {
         "compensationId": {
           "type": "string",
@@ -3981,7 +3982,7 @@
     "compensationStarted": {
       "type": "object",
       "additionalProperties": false,
-      "description": "RFC 0151 §D — first inverse action started. Content-free: opaque node/effect IDs, attempt, ordering model, and closed reason codes. Provider bodies and credentials MUST NOT appear (§D/§G) — these land in the durable log, the least revocable place a credential can reach.",
+      "description": "RFC 0151 \u00a7D \u2014 first inverse action started. Content-free: opaque node/effect IDs, attempt, ordering model, and closed reason codes. Provider bodies and credentials MUST NOT appear (\u00a7D/\u00a7G) \u2014 these land in the durable log, the least revocable place a credential can reach.",
       "properties": {
         "compensationId": {
           "type": "string",
@@ -4008,7 +4009,7 @@
     "compensationCompleted": {
       "type": "object",
       "additionalProperties": false,
-      "description": "RFC 0151 §D — every inverse action succeeded. Content-free: opaque node/effect IDs, attempt, ordering model, and closed reason codes. Provider bodies and credentials MUST NOT appear (§D/§G) — these land in the durable log, the least revocable place a credential can reach.",
+      "description": "RFC 0151 \u00a7D \u2014 every inverse action succeeded. Content-free: opaque node/effect IDs, attempt, ordering model, and closed reason codes. Provider bodies and credentials MUST NOT appear (\u00a7D/\u00a7G) \u2014 these land in the durable log, the least revocable place a credential can reach.",
       "properties": {
         "compensationId": {
           "type": "string",
@@ -4035,7 +4036,7 @@
     "compensationFailed": {
       "type": "object",
       "additionalProperties": false,
-      "description": "RFC 0151 §D — an inverse action exhausted its retries. Content-free: opaque node/effect IDs, attempt, ordering model, and closed reason codes. Provider bodies and credentials MUST NOT appear (§D/§G) — these land in the durable log, the least revocable place a credential can reach.",
+      "description": "RFC 0151 \u00a7D \u2014 an inverse action exhausted its retries. Content-free: opaque node/effect IDs, attempt, ordering model, and closed reason codes. Provider bodies and credentials MUST NOT appear (\u00a7D/\u00a7G) \u2014 these land in the durable log, the least revocable place a credential can reach.",
       "properties": {
         "compensationId": {
           "type": "string",
@@ -4072,7 +4073,7 @@
     "compensationPaused": {
       "type": "object",
       "additionalProperties": false,
-      "description": "RFC 0151 §D — paused for authorized intervention. Content-free: opaque node/effect IDs, attempt, ordering model, and closed reason codes. Provider bodies and credentials MUST NOT appear (§D/§G) — these land in the durable log, the least revocable place a credential can reach.",
+      "description": "RFC 0151 \u00a7D \u2014 paused for authorized intervention. Content-free: opaque node/effect IDs, attempt, ordering model, and closed reason codes. Provider bodies and credentials MUST NOT appear (\u00a7D/\u00a7G) \u2014 these land in the durable log, the least revocable place a credential can reach.",
       "properties": {
         "compensationId": {
           "type": "string",
@@ -4109,7 +4110,7 @@
     "compensationManualInterventionRequired": {
       "type": "object",
       "additionalProperties": false,
-      "description": "RFC 0151 §D — operator action required. Content-free: opaque node/effect IDs, attempt, ordering model, and closed reason codes. Provider bodies and credentials MUST NOT appear (§D/§G) — these land in the durable log, the least revocable place a credential can reach.",
+      "description": "RFC 0151 \u00a7D \u2014 operator action required. Content-free: opaque node/effect IDs, attempt, ordering model, and closed reason codes. Provider bodies and credentials MUST NOT appear (\u00a7D/\u00a7G) \u2014 these land in the durable log, the least revocable place a credential can reach.",
       "properties": {
         "compensationId": {
           "type": "string",
@@ -4145,31 +4146,31 @@
     },
     "approvalRequested": {
       "$ref": "#/$defs/interruptRequested",
-      "description": "RFC 0171 §A.4 E4 — sub-typing is $ref composition, not duplication: the legacy approvalRequested shape (deprecation row legacy-interrupt-payloads) is the unified interruptRequested payload; the event type is kept, its payload is not a second shape."
+      "description": "RFC 0171 \u00a7A.4 E4 \u2014 sub-typing is $ref composition, not duplication: the legacy approvalRequested shape (deprecation row legacy-interrupt-payloads) is the unified interruptRequested payload; the event type is kept, its payload is not a second shape."
     },
     "clarificationRequested": {
       "$ref": "#/$defs/interruptRequested",
-      "description": "RFC 0171 §A.4 E4 — sub-typing is $ref composition, not duplication: the legacy clarificationRequested shape (deprecation row legacy-interrupt-payloads) is the unified interruptRequested payload; the event type is kept, its payload is not a second shape."
+      "description": "RFC 0171 \u00a7A.4 E4 \u2014 sub-typing is $ref composition, not duplication: the legacy clarificationRequested shape (deprecation row legacy-interrupt-payloads) is the unified interruptRequested payload; the event type is kept, its payload is not a second shape."
     },
     "approvalReceived": {
       "$ref": "#/$defs/interruptResolved",
-      "description": "RFC 0171 §A.4 E4 — sub-typing is $ref composition, not duplication: the legacy approvalReceived shape (deprecation row legacy-interrupt-payloads) is the unified interruptResolved payload; the event type is kept, its payload is not a second shape."
+      "description": "RFC 0171 \u00a7A.4 E4 \u2014 sub-typing is $ref composition, not duplication: the legacy approvalReceived shape (deprecation row legacy-interrupt-payloads) is the unified interruptResolved payload; the event type is kept, its payload is not a second shape."
     },
     "approvalGranted": {
       "$ref": "#/$defs/interruptResolved",
-      "description": "RFC 0171 §A.4 E4 — sub-typing is $ref composition, not duplication: the legacy approvalGranted shape (deprecation row legacy-interrupt-payloads) is the unified interruptResolved payload; the event type is kept, its payload is not a second shape."
+      "description": "RFC 0171 \u00a7A.4 E4 \u2014 sub-typing is $ref composition, not duplication: the legacy approvalGranted shape (deprecation row legacy-interrupt-payloads) is the unified interruptResolved payload; the event type is kept, its payload is not a second shape."
     },
     "approvalRejected": {
       "$ref": "#/$defs/interruptResolved",
-      "description": "RFC 0171 §A.4 E4 — sub-typing is $ref composition, not duplication: the legacy approvalRejected shape (deprecation row legacy-interrupt-payloads) is the unified interruptResolved payload; the event type is kept, its payload is not a second shape."
+      "description": "RFC 0171 \u00a7A.4 E4 \u2014 sub-typing is $ref composition, not duplication: the legacy approvalRejected shape (deprecation row legacy-interrupt-payloads) is the unified interruptResolved payload; the event type is kept, its payload is not a second shape."
     },
     "approvalOverridden": {
       "$ref": "#/$defs/interruptResolved",
-      "description": "RFC 0171 §A.4 E4 — sub-typing is $ref composition, not duplication: the legacy approvalOverridden shape (deprecation row legacy-interrupt-payloads) is the unified interruptResolved payload; the event type is kept, its payload is not a second shape."
+      "description": "RFC 0171 \u00a7A.4 E4 \u2014 sub-typing is $ref composition, not duplication: the legacy approvalOverridden shape (deprecation row legacy-interrupt-payloads) is the unified interruptResolved payload; the event type is kept, its payload is not a second shape."
     },
     "clarificationResolved": {
       "$ref": "#/$defs/interruptResolved",
-      "description": "RFC 0171 §A.4 E4 — sub-typing is $ref composition, not duplication: the legacy clarificationResolved shape (deprecation row legacy-interrupt-payloads) is the unified interruptResolved payload; the event type is kept, its payload is not a second shape."
+      "description": "RFC 0171 \u00a7A.4 E4 \u2014 sub-typing is $ref composition, not duplication: the legacy clarificationResolved shape (deprecation row legacy-interrupt-payloads) is the unified interruptResolved payload; the event type is kept, its payload is not a second shape."
     },
     "negotiationDecided": {
       "type": "object",
@@ -4204,7 +4205,7 @@
         "peerDigest": {
           "type": "string",
           "pattern": "^[0-9a-f]{64}$",
-          "description": "SHA-256 of the peer origin; never the origin in clear (RFC 0175 §D.3)."
+          "description": "SHA-256 of the peer origin; never the origin in clear (RFC 0175 \u00a7D.3)."
         },
         "reason": {
           "type": "string",
@@ -4220,12 +4221,12 @@
           "format": "date-time"
         }
       },
-      "description": "RFC 0175 §D.3 — the content-free negotiation audit event."
+      "description": "RFC 0175 \u00a7D.3 \u2014 the content-free negotiation audit event."
     }
   },
   "additionalProperties": false,
   "_typeIndex": {
-    "description": "NORMATIVE (RFC 0171 §A.4): v2 event type → $defs key, generated from spec/v2/event-codemap.json.",
+    "description": "NORMATIVE (RFC 0171 \u00a7A.4): v2 event type \u2192 $defs key, generated from spec/v2/event-codemap.json.",
     "type": "object",
     "additionalProperties": false,
     "properties": {