@openwop/spec-artifacts 2.0.0-rc.38 → 2.0.0-rc.8

package/spec/v1/deprecations.json

@@ -9,7 +9,7 @@
       "surface": "top-level `capabilities` wrapper object in /.well-known/openwop",
       "kind": "discovery-shape",
       "deprecatedIn": "RFC 0073 (v1.1)",
-      "authority": "RFC 0073 \u00a7Proposal; spec/v1/capabilities.md \u00a7Discovery document root (\"deprecated legacy shape, tolerated only by the schema's additionalProperties: true\")",
+      "authority": "RFC 0073 §Proposal; spec/v1/capabilities.md §Discovery document root (\"deprecated legacy shape, tolerated only by the schema's additionalProperties: true\")",
       "removeIn": "2.0",
       "replacement": "capability families at the document root",
       "codemod": null,
@@ -23,11 +23,8 @@
           "token": "deprecated mirror"
         }
       ],
-      "removalTrigger": [
-        "v2.0-cut",
-        "v1-end-of-support"
-      ],
-      "note": " RFC 0176 \u00a7C.2: absent from the v2 representation at the cut; removed from the v1 representation at v1 end-of-support."
+      "removalTrigger": "v1-end-of-support",
+      "note": " RFC 0176 §C.2: absent from the v2 representation at the cut; removed from the v1 representation at v1 end-of-support."
     },
     {
       "id": "openwop.deprecation.host-dotted-mirror",
@@ -35,9 +32,9 @@
       "surface": "host-side `host.<family>` dotted mirror of root capability families",
       "kind": "discovery-shape",
       "deprecatedIn": "RFC 0073 (v1.1)",
-      "authority": "RFC 0073 \u00a73 \"Reference host \u2014 canonical root + deprecated mirror\"; retirement gated on the v2 major (RFC 0073 UQ1/UQ2)",
+      "authority": "RFC 0073 §3 \"Reference host — canonical root + deprecated mirror\"; retirement gated on the v2 major (RFC 0073 UQ1/UQ2)",
       "removeIn": "2.0",
-      "replacement": "one declaration file: document-root key \u2261 pack peer-dependency identifier \u2261 spec section anchor (v2 program C.2)",
+      "replacement": "one declaration file: document-root key ≡ pack peer-dependency identifier ≡ spec section anchor (v2 program C.2)",
       "codemod": null,
       "sources": [
         {
@@ -45,19 +42,16 @@
           "token": "canonical root + deprecated mirror"
         }
       ],
-      "removalTrigger": [
-        "v2.0-cut",
-        "v1-end-of-support"
-      ],
-      "note": " RFC 0176 \u00a7C.2: absent from the v2 representation at the cut; removed from the v1 representation at v1 end-of-support."
+      "removalTrigger": "v1-end-of-support",
+      "note": " RFC 0176 §C.2: absent from the v2 representation at the cut; removed from the v1 representation at v1 end-of-support."
     },
     {
       "id": "openwop.deprecation.profile-openwop-core-alias",
       "status": "deprecated",
       "surface": "profile id `openwop-core` (alias of `openwop-discovery-core`)",
       "kind": "profile-id",
-      "deprecatedIn": "RFC 0155 \u00a7A (v1.2, 2026-08-16)",
-      "authority": "spec/v1/profiles.md \u00a7`openwop-discovery-core` (canonical) \u2014 alias `openwop-core` (deprecated); RFC 0155 \u00a7A: removal \"no earlier than v2\"",
+      "deprecatedIn": "RFC 0155 §A (v1.2, 2026-08-16)",
+      "authority": "spec/v1/profiles.md §`openwop-discovery-core` (canonical) — alias `openwop-core` (deprecated); RFC 0155 §A: removal \"no earlier than v2\"",
       "removeIn": "2.0",
       "replacement": "openwop-discovery-core",
       "codemod": null,
@@ -73,8 +67,8 @@
       "status": "deprecated",
       "surface": "state-key prefix conventions as a back-compat layer over typed channels",
       "kind": "prose-convention",
-      "deprecatedIn": "spec/v1/channels-and-reducers.md (v1.0; no RFC cited \u2014 the spec text says the conventions are \"a back-compat layer that the spec deprecates over time\")",
-      "authority": "spec/v1/channels-and-reducers.md \u00a7Why this exists",
+      "deprecatedIn": "spec/v1/channels-and-reducers.md (v1.0; no RFC cited — the spec text says the conventions are \"a back-compat layer that the spec deprecates over time\")",
+      "authority": "spec/v1/channels-and-reducers.md §Why this exists",
       "removeIn": "2.0",
       "replacement": "typed channels with explicit reducers",
       "codemod": null,
@@ -91,8 +85,8 @@
       "status": "deprecated",
       "surface": "capabilities.a2a `supported: true` without `protocolVersions[]`",
       "kind": "discovery-field",
-      "deprecatedIn": "RFC 0152 \u00a7A",
-      "authority": "spec/v1/a2a-integration.md \u00a7Discovery: \"`supported: true` without `protocolVersions` is deprecated\"",
+      "deprecatedIn": "RFC 0152 §A",
+      "authority": "spec/v1/a2a-integration.md §Discovery: \"`supported: true` without `protocolVersions` is deprecated\"",
       "removeIn": "2.0",
       "replacement": "non-empty `protocolVersions[]` + `preferredVersion` (v2: a capability facet under the closed root, v2 program C.2)",
       "codemod": null,
@@ -108,8 +102,8 @@
       "status": "deprecated",
       "surface": "capabilities.mcp `supported: true` without `protocolVersions[]`",
       "kind": "discovery-field",
-      "deprecatedIn": "RFC 0153 \u00a7A",
-      "authority": "spec/v1/mcp-integration.md \u00a7Discovery: \"Unqualified `supported: true` is deprecated and cannot substantiate a current-MCP claim\"",
+      "deprecatedIn": "RFC 0153 §A",
+      "authority": "spec/v1/mcp-integration.md §Discovery: \"Unqualified `supported: true` is deprecated and cannot substantiate a current-MCP claim\"",
       "removeIn": "2.0",
       "replacement": "non-empty `protocolVersions[]` (MCP date form) + `preferredVersion`",
       "codemod": null,
@@ -126,7 +120,7 @@
       "surface": "workflow node `config.outputArtifactType` bag entry",
       "kind": "schema-field",
       "deprecatedIn": "schemas/workflow-definition.schema.json (first-class `artifactType` field)",
-      "authority": "schemas/workflow-definition.schema.json \u2014 `artifactType` description: \"replaces the deprecated config.outputArtifactType bag entry\"",
+      "authority": "schemas/workflow-definition.schema.json — `artifactType` description: \"replaces the deprecated config.outputArtifactType bag entry\"",
       "removeIn": "2.0",
       "replacement": "node.artifactType",
       "codemod": null,
@@ -143,7 +137,7 @@
       "surface": "workflow node `config.chatCard` bag entry",
       "kind": "schema-field",
       "deprecatedIn": "schemas/workflow-definition.schema.json (first-class `chatCard` field)",
-      "authority": "schemas/workflow-definition.schema.json \u2014 `chatCard` description: \"replaces the deprecated config.chatCard bag entry\"",
+      "authority": "schemas/workflow-definition.schema.json — `chatCard` description: \"replaces the deprecated config.chatCard bag entry\"",
       "removeIn": "2.0",
       "replacement": "node.chatCard",
       "codemod": null,
@@ -160,7 +154,7 @@
       "surface": "capabilities.auth.subjectLinking",
       "kind": "discovery-field",
       "deprecatedIn": "RFC 0164 (suite 1.151.0, 2026-09-02)",
-      "authority": "RFC 0164 \u00a7A.3: the flag is DERIVED (MUST be true whenever both `openwop-auth-saml` and `openwop-auth-scim` are advertised) and deprecated toward v2; the profile pair carries the obligation",
+      "authority": "RFC 0164 §A.3: the flag is DERIVED (MUST be true whenever both `openwop-auth-saml` and `openwop-auth-scim` are advertised) and deprecated toward v2; the profile pair carries the obligation",
       "removeIn": "2.0",
       "replacement": "the profile pair itself; v2 Subject record with `keyClass` (v2 program C.3)",
       "codemod": null,
@@ -181,7 +175,7 @@
       "surface": "certification bundle format v1 (schemas/conformance-certification-bundle.schema.json, `bundleVersion: \"1\"`)",
       "kind": "artifact",
       "deprecatedIn": "RFC 0148 (suite 1.114.0, 2026-08-12); `--certify` default flipped to v2 at suite 1.152.0",
-      "authority": "COMPATIBILITY.md \u00a72 \"Measurement vs. claim\": v1 remains parseable but ceases to substantiate a new certification after the 90-day window that began 2026-08-12 (ends 2026-11-10)",
+      "authority": "COMPATIBILITY.md §2 \"Measurement vs. claim\": v1 remains parseable but ceases to substantiate a new certification after the 90-day window that began 2026-08-12 (ends 2026-11-10)",
       "removeIn": "2.0",
       "replacement": "certification bundle v2 (schemas/certification-bundle-v2.schema.json); bundle v3 at v2.0 (v2 program C.1)",
       "codemod": null,
@@ -201,8 +195,8 @@
       "status": "deprecated",
       "surface": "`Capabilities-Etag` response header on GET /.well-known/openwop",
       "kind": "header",
-      "deprecatedIn": "RFC 0165 \u00a7C.2 (suite 1.155.0, 2026-09-02)",
-      "authority": "RFC 0165 \u00a7C.2: hosts SHOULD send a standard ETag on /.well-known/openwop and honor If-None-Match; Capabilities-Etag keeps its semantics through v1.x and is removed at 2.0",
+      "deprecatedIn": "RFC 0165 §C.2 (suite 1.155.0, 2026-09-02)",
+      "authority": "RFC 0165 §C.2: hosts SHOULD send a standard ETag on /.well-known/openwop and honor If-None-Match; Capabilities-Etag keeps its semantics through v1.x and is removed at 2.0",
       "removeIn": "2.0",
       "replacement": "standard `ETag` / `If-None-Match` on the discovery document (dual-emitted through v1.x)",
       "codemod": null,
@@ -213,14 +207,11 @@
         },
         {
           "file": "RFCS/0165-v2-preparation-wire-shapes.md",
-          "token": "\u00a7C.2 Discovery cache validator"
+          "token": "§C.2 Discovery cache validator"
         }
       ],
-      "removalTrigger": [
-        "v2.0-cut",
-        "v1-end-of-support"
-      ],
-      "note": " RFC 0176 \u00a7C.2: absent from the v2 representation at the cut; removed from the v1 representation at v1 end-of-support."
+      "removalTrigger": "v1-end-of-support",
+      "note": " RFC 0176 §C.2: absent from the v2 representation at the cut; removed from the v1 representation at v1 end-of-support."
     },
     {
       "id": "openwop.deprecation.contract-provenance",
@@ -245,8 +236,8 @@
       "status": "deprecated",
       "surface": "the `X-openwop-*` webhook delivery header family (Webhook-Id, Event-Type, Timestamp, Signature, Signature-Algorithm)",
       "kind": "header",
-      "deprecatedIn": "RFC 0165 \u00a7C.1 (suite 1.155.0, 2026-09-02)",
-      "authority": "RFC 0165 \u00a7C.1: hosts SHOULD dual-emit the `OpenWOP-*` family with identical values; subscribers SHOULD accept either; the `X-openwop-*` family MUST still be sent through v1.x and is removed at 2.0",
+      "deprecatedIn": "RFC 0165 §C.1 (suite 1.155.0, 2026-09-02)",
+      "authority": "RFC 0165 §C.1: hosts SHOULD dual-emit the `OpenWOP-*` family with identical values; subscribers SHOULD accept either; the `X-openwop-*` family MUST still be sent through v1.x and is removed at 2.0",
       "removeIn": "2.0",
       "replacement": "`OpenWOP-Webhook-Id`, `OpenWOP-Event-Type`, `OpenWOP-Timestamp`, `OpenWOP-Signature: sha256={hex}`, `OpenWOP-Signature-Algorithm`",
       "codemod": null,
@@ -258,7 +249,7 @@
         },
         {
           "file": "RFCS/0165-v2-preparation-wire-shapes.md",
-          "token": "\u00a7C.1 Webhook headers"
+          "token": "§C.1 Webhook headers"
         }
       ]
     },
@@ -290,11 +281,11 @@
       "surface": "`engineVersion` typed integer at the discovery root and string on run-event / run-snapshot / three event payloads",
       "kind": "schema-field",
       "deprecatedIn": null,
-      "authority": "RFC 0165 \u00a7A.4 (recorded; unification is a v2 C.5 item \u2014 changing either type is a COMPATIBILITY \u00a72.2 break in v1.x)",
+      "authority": "RFC 0165 §A.4 (recorded; unification is a v2 C.5 item — changing either type is a COMPATIBILITY §2.2 break in v1.x)",
       "removeIn": "2.0",
       "replacement": "one integer `engineVersion` on every carrier (v2)",
       "codemod": null,
-      "note": "In v1.x the per-event value is the decimal string rendering of the root integer (version-negotiation.md \u00a7\"Protocol version grammar\").",
+      "note": "In v1.x the per-event value is the decimal string rendering of the root integer (version-negotiation.md §\"Protocol version grammar\").",
       "sources": [
         {
           "file": "spec/v1/version-negotiation.md",
@@ -312,7 +303,7 @@
       "surface": "`since` query parameter on GET /v1/runs/{runId}/events/poll",
       "kind": "discovery-field",
       "deprecatedIn": null,
-      "authority": "v2 charter C.4 (RFC 0167 \u00a7E; version-negotiation.md names `lastSequence` authoritative and `since` back-compat for pre-v1.0 deployments)",
+      "authority": "v2 charter C.4 (RFC 0167 §E; version-negotiation.md names `lastSequence` authoritative and `since` back-compat for pre-v1.0 deployments)",
       "removeIn": "2.0",
       "replacement": "`lastSequence` in v1.x; the v2 C.4 child defines the cursor (RFC 0165 G7)",
       "codemod": null,
@@ -330,7 +321,7 @@
       "surface": "`X-Dedup`, `X-Force-Engine-Version`, `X-Pack-Sha`, `X-Pack-Signing-Method` request headers",
       "kind": "header",
       "deprecatedIn": null,
-      "authority": "v2 charter C.4 (RFC 0167 \u00a7E): `OpenWOP-*` for every non-standard header; RFC 0165 \u00a7C.1 covered only the webhook family",
+      "authority": "v2 charter C.4 (RFC 0167 §E): `OpenWOP-*` for every non-standard header; RFC 0165 §C.1 covered only the webhook family",
       "removeIn": "2.0",
       "replacement": "`OpenWOP-Dedup`, `OpenWOP-Force-Engine-Version` (seam-only, moves to the seams profile), `OpenWOP-Pack-Sha`, `OpenWOP-Pack-Signing-Method`",
       "codemod": null,
@@ -394,7 +385,7 @@
       "surface": "node config `credentialProvider` key",
       "kind": "schema-field",
       "deprecatedIn": "node-packs.md (`provider` is canonical; `credentialProvider` is named as the legacy alias)",
-      "authority": "spec/v1/node-packs.md \u00a7Credential resolution (\"and the legacy alias `credentialProvider`\")",
+      "authority": "spec/v1/node-packs.md §Credential resolution (\"and the legacy alias `credentialProvider`\")",
       "removeIn": "2.0",
       "replacement": "`provider`",
       "codemod": null,
@@ -428,7 +419,7 @@
       "surface": "`approvalRequested` / `clarificationRequested` legacy event payload definitions and the free-text `feedback` field",
       "kind": "schema-field",
       "deprecatedIn": "run-event-payloads.schema.json + interrupt-profiles.md (the interrupt primitive `interrupt.requested {kind}` is canonical)",
-      "authority": "schemas/run-event-payloads.schema.json $defs approvalRequested / clarificationRequested descriptions; spec/v1/interrupt-profiles.md \u00a7Approval",
+      "authority": "schemas/run-event-payloads.schema.json $defs approvalRequested / clarificationRequested descriptions; spec/v1/interrupt-profiles.md §Approval",
       "removeIn": "2.0",
       "replacement": "`interrupt.requested` with `kind: approval | clarification`; `refineFeedback`",
       "codemod": null,
@@ -448,8 +439,8 @@
       "status": "deprecated",
       "surface": "`a2a-0.3-legacy` A2A profile id",
       "kind": "profile-id",
-      "deprecatedIn": "RFC 0152 \u00a7A (A2A 1.0.0 published 2026-03-12; legacy window ends 2027-03-12)",
-      "authority": "spec/v1/a2a-integration.md \u00a7Discovery (\"a host SHOULD NOT advertise `a2a-0.3-legacy`\" after 2027-03-12); RFC 0152 register G1/R1",
+      "deprecatedIn": "RFC 0152 §A (A2A 1.0.0 published 2026-03-12; legacy window ends 2027-03-12)",
+      "authority": "spec/v1/a2a-integration.md §Discovery (\"a host SHOULD NOT advertise `a2a-0.3-legacy`\" after 2027-03-12); RFC 0152 register G1/R1",
       "removeIn": "2.0",
       "replacement": "`a2a-1.0` only; the v2 C.8 child removes the legacy path",
       "codemod": null,
@@ -469,8 +460,8 @@
       "status": "deprecated",
       "surface": "`mcp-2025-06-18-legacy` MCP profile id",
       "kind": "profile-id",
-      "deprecatedIn": "RFC 0153 \u00a7A (current profile accepted 2026-08-12; legacy window ends 2027-08-12)",
-      "authority": "spec/v1/mcp-integration.md \u00a7Discovery; RFC 0153 register G1/R1",
+      "deprecatedIn": "RFC 0153 §A (current profile accepted 2026-08-12; legacy window ends 2027-08-12)",
+      "authority": "spec/v1/mcp-integration.md §Discovery; RFC 0153 register G1/R1",
       "removeIn": "2.0",
       "replacement": "`mcp-2026-07-28` only; the v2 C.8 child removes the legacy path",
       "codemod": null,
@@ -490,8 +481,8 @@
       "status": "deprecated",
       "surface": "`openwop-Webhook-Signature: v1=<hex>` header the pre-1.9.0 SDK helpers read (never in any spec file)",
       "kind": "header",
-      "deprecatedIn": "RFC 0165 \u00a7C.3 (SDK-versus-spec defect; fixed in openwop-sdks TS 1.9.0 / Py 1.7.0 / Go v1.6.0)",
-      "authority": "RFC 0165 \u00a7C.3",
+      "deprecatedIn": "RFC 0165 §C.3 (SDK-versus-spec defect; fixed in openwop-sdks TS 1.9.0 / Py 1.7.0 / Go v1.6.0)",
+      "authority": "RFC 0165 §C.3",
       "removeIn": "2.0",
       "replacement": "`X-openwop-Signature: sha256={hex}` in v1.x; `OpenWOP-Signature` in v2",
       "codemod": null,
@@ -505,10 +496,10 @@
     {
       "id": "openwop.deprecation.undeclared-host-extension-families",
       "status": "proposed",
-      "surface": "the 11 `\u00a7host.*` families RFC 0144 classed `extension` (brand, canvas, chat, coordination, dataIntegration, entities, kanban, knowledge, launchStudio, messaging, webResearch) \u2014 declared in neither the dotted nor the root spelling",
+      "surface": "the 11 `§host.*` families RFC 0144 classed `extension` (brand, canvas, chat, coordination, dataIntegration, entities, kanban, knowledge, launchStudio, messaging, webResearch) — declared in neither the dotted nor the root spelling",
       "kind": "discovery-shape",
       "deprecatedIn": null,
-      "authority": "v2 charter C.2 (RFC 0167 \u00a7E): one declaration file; extensions live under one namespaced key; RFC 0144 \u00a7A classified them deliberately as extension namespaces",
+      "authority": "v2 charter C.2 (RFC 0167 §E): one declaration file; extensions live under one namespaced key; RFC 0144 §A classified them deliberately as extension namespaces",
       "removeIn": "2.0",
       "replacement": "the v2 extension namespace key (C.2 child); the prose sections move to spec/v2/ext/",
       "codemod": null,
@@ -526,9 +517,9 @@
       "surface": "the `/v1/` path-key prefix on every versioned operation",
       "kind": "path",
       "deprecatedIn": null,
-      "authority": "RFC 0172 \u00a7A.2 (v2 operations are unversioned path keys on a bare origin; v1 keys retained through the overlap and removed with the v1 tree at Phase 5)",
+      "authority": "RFC 0172 §A.2 (v2 operations are unversioned path keys on a bare origin; v1 keys retained through the overlap and removed with the v1 tree at Phase 5)",
       "removeIn": "2.0",
-      "replacement": "unversioned path keys + `OpenWOP-Version` negotiation (RFC 0172 \u00a7A)",
+      "replacement": "unversioned path keys + `OpenWOP-Version` negotiation (RFC 0172 §A)",
       "codemod": null,
       "note": "Proposed: the prefix is the v1 wire surface itself and cannot be deprecated inside v1.x; the row exists so the removal has a date and the alias coverage gate sees the surface.",
       "sources": [
@@ -544,7 +535,7 @@
       "surface": "the per-RFC `G<n>` local gap id as the register's ID column",
       "kind": "prose-convention",
       "deprecatedIn": null,
-      "authority": "RFC 0178 \u00a7B.2 (the `openwop.gap.<rfc>.<n>` id is canonical; `G<n>` is an alias until 2.1)",
+      "authority": "RFC 0178 §B.2 (the `openwop.gap.<rfc>.<n>` id is canonical; `G<n>` is an alias until 2.1)",
       "removeIn": "2.1",
       "replacement": "`openwop.gap.<rfc>.<n>` in the ID column",
       "codemod": null,
@@ -562,7 +553,7 @@
       "surface": "registry version manifest `deprecated` boolean (an advisory version flag that collides with the JSON Schema `deprecated` annotation keyword)",
       "kind": "schema-field",
       "deprecatedIn": null,
-      "authority": "RFC 0178 \u00a7A.1 (renamed so the annotation keyword is unambiguous); the rename rides C.10's registry/v2 re-sign",
+      "authority": "RFC 0178 §A.1 (renamed so the annotation keyword is unambiguous); the rename rides C.10's registry/v2 re-sign",
       "removeIn": "2.0",
       "replacement": "`versionDeprecated`",
       "codemod": null,
@@ -580,7 +571,7 @@
       "surface": "the two-segment interrupt resume token `base64url(payload).hmac` with no scheme id, algorithm, or key id",
       "kind": "artifact",
       "deprecatedIn": null,
-      "authority": "RFC 0170 \u00a7E.1 (`ow2.<alg>.<kid>.<payload>.<mac>`); interrupt.md \u00a7Resume tokens' rotation rule references an algorithm-version discriminator the format does not contain",
+      "authority": "RFC 0170 §E.1 (`ow2.<alg>.<kid>.<payload>.<mac>`); interrupt.md §Resume tokens' rotation rule references an algorithm-version discriminator the format does not contain",
       "removeIn": "2.0",
       "replacement": "`ow2.<alg>.<kid>.<payload>.<mac>`; issued v1 tokens resolvable under `kid: legacy` until their expiry",
       "codemod": null,
@@ -598,7 +589,7 @@
       "surface": "`details.retryAfter`, `details.retryAfterMs`, `details.retryAfterSeconds` on error envelopes (three body spellings beside the `Retry-After` header)",
       "kind": "schema-field",
       "deprecatedIn": null,
-      "authority": "RFC 0171 \u00a7B.2 (retry timing lives in `Retry-After` only)",
+      "authority": "RFC 0171 §B.2 (retry timing lives in `Retry-After` only)",
       "removeIn": "2.0",
       "replacement": "the `Retry-After` header",
       "codemod": null,
@@ -620,7 +611,7 @@
       "surface": "dotted reserved keys in `RunOptions.configurable` (`ai.provider`, `ai.model`, `ai.credentialRef`, `distillation.tokenBudget`) and the open map they live in",
       "kind": "schema-field",
       "deprecatedIn": null,
-      "authority": "RFC 0171 \u00a7D.1 (closed, nested, versioned `configurable`)",
+      "authority": "RFC 0171 §D.1 (closed, nested, versioned `configurable`)",
       "removeIn": "2.0",
       "replacement": "`configurable.ai.*`, `configurable.distillation.*`; vendor keys under `configurable.extensions.<org>`",
       "codemod": "openwop.codemod.configurable-v2",
@@ -638,7 +629,7 @@
       "surface": "discovery flags that gate a security-load-bearing MUST: the fourteen `auth.*` gates, `replay.sideEffectSuppression`, `webhooks.durable`, `interrupt.approverRouting` (as a gate), `sandbox.supported` (as a gate)",
       "kind": "discovery-field",
       "deprecatedIn": null,
-      "authority": "RFC 0173 \u00a7A.1 (an obligation of the surface, never a discovery flag; RFC 0164 \u00a722's ruling applied corpus-wide)",
+      "authority": "RFC 0173 §A.1 (an obligation of the surface, never a discovery flag; RFC 0164 §22's ruling applied corpus-wide)",
       "removeIn": "2.0",
       "replacement": "the obligation binds when the surface is advertised; `auth.lanes[]`, `replay`, `webhooks`, `interrupt.refKinds[]`, `sandbox.isolationModel` stay as facets; relaxations are operator settings recorded in bundle v3 `host.relaxations[]`",
       "codemod": null,
@@ -664,7 +655,7 @@
       "surface": "`supportedTransports[]` at the discovery root (`rest | mcp | a2a | grpc`)",
       "kind": "discovery-field",
       "deprecatedIn": null,
-      "authority": "RFC 0175 \u00a7B.1 (REST is the wire; A2A and MCP are compositions with first-class facets; gRPC is demoted)",
+      "authority": "RFC 0175 §B.1 (REST is the wire; A2A and MCP are compositions with first-class facets; gRPC is demoted)",
       "removeIn": "2.0",
       "replacement": "none; `a2a.*` and `mcp.*` facets",
       "codemod": "openwop.codemod.discovery-document-v2",
@@ -682,7 +673,7 @@
       "surface": "`capabilities.grpc` block and `grpc-transport.md` as a core Stable document with RFC 2119 MUSTs",
       "kind": "discovery-field",
       "deprecatedIn": null,
-      "authority": "RFC 0175 \u00a7A.1 (demoted to `spec/v2/ext/grpc-transport/`, `unwitnessable`, `adoption: none`; the door back into core is named)",
+      "authority": "RFC 0175 §A.1 (demoted to `spec/v2/ext/grpc-transport/`, `unwitnessable`, `adoption: none`; the door back into core is named)",
       "removeIn": "2.0",
       "replacement": "`spec/v2/ext/grpc-transport/` (documented, not advertised)",
       "codemod": "openwop.codemod.discovery-document-v2",
@@ -697,16 +688,13 @@
     {
       "id": "openwop.deprecation.well-known-wop-alias",
       "status": "proposed",
-      "surface": "`/.well-known/wop` served byte-identically with `/.well-known/openwop` (MyndHyve, the wop \u2192 openwop rebrand alias; the C.5 precedent)",
+      "surface": "`/.well-known/wop` served byte-identically with `/.well-known/openwop` (MyndHyve, the wop → openwop rebrand alias; the C.5 precedent)",
       "kind": "path",
       "deprecatedIn": null,
-      "authority": "RFC 0176 \u00a7C.3",
+      "authority": "RFC 0176 §C.3",
       "removeIn": "2.0",
-      "removalTrigger": [
-        "v2.0-cut",
-        "v1-end-of-support"
-      ],
-      "replacement": "`/.well-known/openwop` (one resource; RFC 0176 \u00a7C.1)",
+      "removalTrigger": "v1-end-of-support",
+      "replacement": "`/.well-known/openwop` (one resource; RFC 0176 §C.1)",
       "codemod": null,
       "note": "Proposed: the alias exists in one host and was never registered; it is the model RFC 0172 cites for overlap publication.",
       "sources": [
@@ -722,11 +710,11 @@
       "surface": "`engines.openwop` ranges with no upper bound read as open (146 of 282 published versions)",
       "kind": "schema-field",
       "deprecatedIn": null,
-      "authority": "RFC 0177 \u00a7A.1 (absent ceiling \u21d2 `<2.0.0`; `pack_engine_unsupported` at install on every publication path)",
+      "authority": "RFC 0177 §A.1 (absent ceiling ⇒ `<2.0.0`; `pack_engine_unsupported` at install on every publication path)",
       "removeIn": "2.0",
       "replacement": "an explicit `>=x.y.z <M.0.0` range; the v2 schema enforces the grammar",
       "codemod": null,
-      "note": "Proposed: no codemod \u2014 the author declares compatibility; `openwop.codemod.pack-manifest-v2` refuses a manifest with no v2-satisfiable range.",
+      "note": "Proposed: no codemod — the author declares compatibility; `openwop.codemod.pack-manifest-v2` refuses a manifest with no v2-satisfiable range.",
       "sources": [
         {
           "file": "spec/v1/node-packs.md",
@@ -740,7 +728,7 @@
       "surface": "peer-dependency identifiers that are not declaration-file keys: `host.*` dotted twins (`host.fs`/`fs`, `host.queueBus`/`queueBus`), `openwop.agents.memoryBackends`, facet paths (`aiProviders.imageGeneration`, `host.aiEnvelope.await`), the reserved-slot prose list",
       "kind": "schema-field",
       "deprecatedIn": null,
-      "authority": "RFC 0177 \u00a7B.1\u2013\u00a7B.2 (identifier \u2261 declaration-file key; `pack_peer_dependency_undefined` reads against the file; generated alias table)",
+      "authority": "RFC 0177 §B.1–§B.2 (identifier ≡ declaration-file key; `pack_peer_dependency_undefined` reads against the file; generated alias table)",
       "removeIn": "2.0",
       "removalTrigger": "v1-end-of-support",
       "replacement": "`spec/v2/peer-dependency-aliases.json` through the overlap; `peerDependenciesMeta.<family>.facets[]` for facets",
@@ -756,14 +744,14 @@
     {
       "id": "openwop.deprecation.manifest-signing-method",
       "status": "proposed",
-      "surface": "`signing.method: manual | ed25519 | sigstore` \u2014 two values the schema calls synonymous that the verifier treats as signatures over different bytes",
+      "surface": "`signing.method: manual | ed25519 | sigstore` — two values the schema calls synonymous that the verifier treats as signatures over different bytes",
       "kind": "schema-field",
       "deprecatedIn": null,
-      "authority": "RFC 0177 \u00a7C.3 (one `signing.scheme: ed25519-canonical-json`)",
+      "authority": "RFC 0177 §C.3 (one `signing.scheme: ed25519-canonical-json`)",
       "removeIn": "2.0",
       "replacement": "`signing.scheme`",
       "codemod": "openwop.codemod.pack-manifest-v2",
-      "note": "Proposed: the codemod refuses `ed25519` and `sigstore` \u2014 those packs are re-signed in `registry/v2/`, never relabeled.",
+      "note": "Proposed: the codemod refuses `ed25519` and `sigstore` — those packs are re-signed in `registry/v2/`, never relabeled.",
       "sources": [
         {
           "file": "schemas/registry-version-manifest.schema.json",
@@ -777,7 +765,7 @@
       "surface": "`connection-packs.md` clause 6: an installed pack takes precedence over a built-in of the same `provider.id` when its version is greater-than-or-equal",
       "kind": "prose-convention",
       "deprecatedIn": null,
-      "authority": "RFC 0177 \u00a7D.1 (RFC 0095 UQ4 decided: fail-closed `connection_provider_conflict`; qualified `<packName>#<id>` form)",
+      "authority": "RFC 0177 §D.1 (RFC 0095 UQ4 decided: fail-closed `connection_provider_conflict`; qualified `<packName>#<id>` form)",
       "removeIn": "2.0",
       "replacement": "fail-closed conflict; the qualified form",
       "codemod": null,
@@ -795,7 +783,7 @@
       "surface": "the nine `/v1/host/sample/*`, `/v1/host/workspace/files*` and `/v1/packs-test/*` seam/test operations in `api/openapi.yaml` and `spec/v1/operation-path-manifest.json`, and the `testSeams` discovery-flag proposals",
       "kind": "path",
       "deprecatedIn": null,
-      "authority": "RFC 0168 \u00a7C (seams are the profile `openwop-conformance-seams-v2` with `api/seams-v2.yaml`; forbidden from the capability namespace)",
+      "authority": "RFC 0168 §C (seams are the profile `openwop-conformance-seams-v2` with `api/seams-v2.yaml`; forbidden from the capability namespace)",
       "removeIn": "2.0",
       "replacement": "`api/seams-v2.yaml`; `profiles[]` membership",
       "codemod": null,
@@ -813,7 +801,7 @@
       "surface": "the 29 corpus-coherence scenarios reported `blocked` in every host bundle",
       "kind": "artifact",
       "deprecatedIn": null,
-      "authority": "RFC 0168 \u00a7D.1 (spec-repo CI; never in a bundle)",
+      "authority": "RFC 0168 §D.1 (spec-repo CI; never in a bundle)",
       "removeIn": "2.0",
       "replacement": "`scripts/check-spec-coherence.mjs`",
       "codemod": null,
@@ -831,11 +819,11 @@
       "surface": "the published suite tarball's vendored `api/` and `schemas/` copies (and `src`, suite self-tests)",
       "kind": "artifact",
       "deprecatedIn": null,
-      "authority": "RFC 0168 \u00a7D.2 (`dist`, `fixtures`, `vectors` only; corpus as the digest-checked peer dependency `@openwop/spec-artifacts`)",
+      "authority": "RFC 0168 §D.2 (`dist`, `fixtures`, `vectors` only; corpus as the digest-checked peer dependency `@openwop/spec-artifacts`)",
       "removeIn": "2.0",
       "replacement": "`@openwop/spec-artifacts`",
       "codemod": null,
-      "note": "Proposed: the 1.138.1 mechanism \u2014 one source, no copy.",
+      "note": "Proposed: the 1.138.1 mechanism — one source, no copy.",
       "sources": [
         {
           "file": "conformance/README.md",
@@ -849,7 +837,7 @@
       "surface": "certification bundle v2 (`bundleVersion: \"2\"`, root `additionalProperties: true`, `witnessSha256` absent, unsigned)",
       "kind": "artifact",
       "deprecatedIn": null,
-      "authority": "RFC 0168 \u00a7E (bundle v3: closed root, required witness/build/tier/count, Ed25519 attestation)",
+      "authority": "RFC 0168 §E (bundle v3: closed root, required witness/build/tier/count, Ed25519 attestation)",
       "removeIn": "2.0",
       "removalTrigger": "v1-end-of-support",
       "replacement": "bundle v3 (`schemas/v2/certification-bundle.schema.json`)",

package/spec/v1/deprecations.schema.json

@@ -2,7 +2,7 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://openwop.dev/spec/v1/deprecations.schema.json",
   "title": "OpenWOP deprecation register",
-  "description": "Shape of spec/v1/deprecations.json \u2014 the index of every surface an RFC or spec annotation has deprecated in v1.x (status: deprecated), plus surfaces the v2 program proposes to deprecate but no RFC has yet (status: proposed). In v1.x the register records deprecations; it never creates one (COMPATIBILITY.md \u00a77). It is not a wire artifact and is deliberately kept out of schemas/.",
+  "description": "Shape of spec/v1/deprecations.json — the index of every surface an RFC or spec annotation has deprecated in v1.x (status: deprecated), plus surfaces the v2 program proposes to deprecate but no RFC has yet (status: proposed). In v1.x the register records deprecations; it never creates one (COMPATIBILITY.md §7). It is not a wire artifact and is deliberately kept out of schemas/.",
   "type": "object",
   "additionalProperties": false,
   "required": [
@@ -95,7 +95,7 @@
         "removeIn": {
           "type": "string",
           "pattern": "^[0-9]+\\.[0-9]+$",
-          "description": "Protocol major.minor at which the surface is removed. v1.x deprecations remove no earlier than 2.0 (COMPATIBILITY.md \u00a77)."
+          "description": "Protocol major.minor at which the surface is removed. v1.x deprecations remove no earlier than 2.0 (COMPATIBILITY.md §7)."
         },
         "replacement": {
           "type": "string",
@@ -136,28 +136,12 @@
           }
         },
         "removalTrigger": {
-          "oneOf": [
-            {
-              "type": "string",
-              "enum": [
-                "v2.0-cut",
-                "v1-end-of-support"
-              ]
-            },
-            {
-              "type": "array",
-              "items": {
-                "type": "string",
-                "enum": [
-                  "v2.0-cut",
-                  "v1-end-of-support"
-                ]
-              },
-              "minItems": 1,
-              "uniqueItems": true
-            }
+          "type": "string",
+          "enum": [
+            "v2.0-cut",
+            "v1-end-of-support"
           ],
-          "description": "RFC 0176 \u00a7C.2: the event(s) that remove the surface. `v2.0-cut` \u2014 absent from the v2 representation from the cut; `v1-end-of-support` \u2014 removed from the v1 representation when every INTEROP-MATRIX host has produced a non-vacuous v2 bundle plus 90 days (charter Phase 0 rule). A SET, because \u00a7C.2 gives one row two independent removal events: the wrapper, the dotted mirror and Capabilities-Etag are absent from v2 at the cut AND removed from v1 at end-of-support, and a scalar could express only one. Until 2026-09-04 those rows carried `v1-end-of-support` alone while `v2-well-known-one-resource` asserted the `v2.0-cut` obligation by name \u2014 the scenario was right about the effect and the data could not say so. A bare string remains valid for rows with one trigger. Optional; removeIn stays the version."
+          "description": "RFC 0176 §C.2: the event that removes the surface. v2.0-cut — absent from the v2 representation from the cut; v1-end-of-support — removed from the v1 representation when every INTEROP-MATRIX host has produced a non-vacuous v2 bundle plus 90 days (charter Phase 0 rule). Optional; removeIn stays the version."
         }
       },
       "allOf": [

package/spec/v1/extensions.json

@@ -37,7 +37,7 @@
   "rfc": "0155 \u00a7C",
   "coverage": {
     "rule": "Derived by scripts/generate-extension-registry-coverage.mjs from the top-level keys of schemas/capabilities.schema.json. coreFields = the openwop-discovery-core predicate fields (profiles.md); metadataFields = keys that describe the document or host rather than gate an optional feature (each carries its rationale in metadataRationale; a key that gates behaviour may not be listed there); covered = extension families reached by some record capabilityPath; uncovered = every other family. Uncovered means no registry record exists \u2014 not that the family is non-compliant. Regenerate with --write; the gate runs --check.",
-    "familiesTotal": 93,
+    "familiesTotal": 92,
     "coreFields": [
       "limits",
       "protocolVersion",
@@ -153,8 +153,7 @@
       "workspace"
     ],
     "uncovered": [
-      "preferredVersion",
-      "signingKeys"
+      "preferredVersion"
     ]
   },
   "extensions": [

package/spec/v2/declaration.json

@@ -121,13 +121,6 @@
       "note": null,
       "disposition": "kept"
     },
-    {
-      "key": "signingKeys",
-      "kind": "metadata",
-      "schema": "metadata/signingKeys",
-      "note": "host bundle-signing public keys (RFC 0168 §E.2); v2-only — the surface the RFC named when it disposed of \"a signature nobody can check\"",
-      "disposition": "kept"
-    },
     {
       "key": "discovery",
       "kind": "metadata",

package/spec/v2/release.json

@@ -1,6 +1,6 @@
 {
-  "$comment": "RFC 0172 \u00a7D.1 \u2014 the one release identity the v2 artifacts derive from. `version` is the next corpus tag `v<version>` (the publish workflow's coordinated-release tag pattern `v*`; RFC 0172's `openwop/v2.<minor>.<patch>` spelling is amended to this at its flip). api/v2/*.yaml info.version, the suite's 2.x version and @openwop/spec-artifacts read it. Bumped by the release PR that cuts the tag, never by hand elsewhere.",
-  "version": "2.0.0-rc.38",
+  "$comment": "RFC 0172 §D.1 — the one release identity the v2 artifacts derive from. `version` is the next corpus tag `v<version>` (the publish workflow's coordinated-release tag pattern `v*`; RFC 0172's `openwop/v2.<minor>.<patch>` spelling is amended to this at its flip). api/v2/*.yaml info.version, the suite's 2.x version and @openwop/spec-artifacts read it. Bumped by the release PR that cuts the tag, never by hand elsewhere.",
+  "version": "2.0.0-rc.8",
   "corpusTag": null,
   "updated": "2026-09-03"
 }

package/schemas/v2/webhook-delivery.schema.json

@@ -1,26 +0,0 @@
-{
-  "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://openwop.dev/spec/v2/webhook-delivery.schema.json",
-  "title": "Webhook delivery envelope (webhooks.md \u00a7Delivery)",
-  "description": "The body of an outbound webhook delivery. Written 2026-09-04 because it did not exist: the envelope was specified by one sentence in webhooks.md \u00a7Delivery ('the body is `{ runId, workspaceId, event }` where `event` is the verbatim run event') and no artifact bound it, while the NESTED event.runId was bound all along through run-event.schema.json. Two production hosts arrived at that asymmetry independently \u2014 one asking what major an outbound payload speaks, the other answering from the $ref graph \u2014 and both concluded the gap was a missing artifact rather than a missing paragraph. An emitter that projects correctly could be asserted but not checked, which is the wrong way round.",
-  "type": "object",
-  "additionalProperties": false,
-  "required": [
-    "runId",
-    "event"
-  ],
-  "properties": {
-    "runId": {
-      "$ref": "ids.schema.json#/$defs/runId",
-      "description": "The run this delivery is about, tenant-bound per identity.md \u00a75. An outbound emission is not a response to a versioned request, so nothing about the request cycle supplies the form \u2014 the grammar does, and it is the same grammar everywhere a v2 runId is rendered. A host that projects on responses and not on emissions hands the subscriber an id the client never saw: the correlation filter matches nothing, with no error, no 4xx and no log line. A tier-1 host hit exactly that, and the silence is why this field is bound here rather than left to the prose."
-    },
-    "workspaceId": {
-      "$ref": "ids.schema.json#/$defs/workspaceId",
-      "description": "The workspace the run belongs to. OPTIONAL, and present exactly when RunSnapshot.owner.workspace is (identity.md \u00a71: owner is { tenant, workspace?, subject }). This field was REQUIRED for the first six hours of the schema's life, which made the envelope tighter than the identity model it renders: a run in a single-workspace tenant has no workspace, and the only way a host could satisfy the envelope was to put its tenant id in this field. A tier-1 host proposed exactly that \u2014 `owner.workspace ?? tenantId` \u2014 and asked for a veto. This is the veto. A tenant id in a workspace field is two facts wearing one name, and every consumer downstream would have to know which host lied."
-    },
-    "event": {
-      "$ref": "run-event.schema.json",
-      "description": "The verbatim run event (events.md). 'Verbatim' is load-bearing: the envelope is one of the three renderings generated from a single payload definition (RFC 0171 \u00a7A.4), so this is the event as persisted, not a re-serialization. Its own runId is bound by run-event.schema.json to the same $def as the envelope's, which is what made the envelope's omission survivable for as long as it did \u2014 and invisible for just as long."
-    }
-  }
-}