@openwop/spec-artifacts 2.0.0-rc.8 → 2.0.0

package/schemas/v2/effect-seam-manifest.schema.json

@@ -1,8 +1,8 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://openwop.dev/spec/v2/effect-seam-manifest.schema.json",
-  "title": "Effect-seam manifest (RFC 0173 §C)",
-  "description": "Host-declared, machine-checkable list of every outbound effect path the node runtime can reach (RFC 0173 §C.1: `{ seam, kind, guarded: true, guardedBy }`; `branchReFires` states the RFC 0140 G6 asymmetry). Served at GET /host/effect-seams (canonical, not a test seam). A seam omitted is invisible to the suite (negative-existence); the RFC 0140 R5 audit is the control.",
+  "title": "Effect-seam manifest (RFC 0173 \u00a7C)",
+  "description": "Host-declared, machine-checkable list of every outbound effect path the node runtime can reach (RFC 0173 \u00a7C.1: `{ seam, kind, guarded: true, guardedBy }`; `branchReFires` states the RFC 0140 G6 asymmetry). Served at GET /host/effect-seams (canonical, not a test seam). A seam omitted is invisible to the suite (negative-existence); the RFC 0140 R5 audit is the control.",
   "type": "object",
   "additionalProperties": false,
   "required": [
@@ -69,15 +69,18 @@
             "type": "string",
             "enum": [
               "http",
+              "smtp",
               "queue",
               "storage",
               "provider-sdk",
-              "webhook-fanout"
-            ]
+              "webhook-fanout",
+              "other"
+            ],
+            "description": "The outbound WIRE MECHANISM this seam leaves the host by \u2014 not the suite's driving mechanism, and not the business purpose. `other` is the escape for a mechanism this list does not name (raw TCP, gRPC, a filesystem write, a device SDK); a row using it MUST carry `note` saying which, so an unnameable mechanism is still auditable and no seam can hide behind a vague label. Completeness outranks driveability: a path the suite cannot drive (SMTP, for one) is still MUST-list \u2014 the scenario records it `inapplicable` with that reason, and an omitted row is invisible to the suite entirely (replay.md)."
           },
           "guarded": {
             "const": true,
-            "description": "RFC 0173 §C.1 — every row MUST be guarded; the scenario asserts it and drives one seam of each kind through the suite's receiver."
+            "description": "RFC 0173 \u00a7C.1 \u2014 every row MUST be guarded; the scenario asserts it and drives one seam of each kind through the suite's receiver."
           },
           "guardedBy": {
             "type": "string",
@@ -86,11 +89,31 @@
           },
           "branchReFires": {
             "type": "boolean",
-            "description": "RFC 0140 G6 — a `branch` fork re-fires this seam by design; stated here and witnessed as a permission."
+            "description": "RFC 0140 G6 \u2014 a `branch` fork re-fires this seam by design; stated here and witnessed as a permission."
           },
           "note": {
-            "type": "string"
+            "type": "string",
+            "description": "Free text. REQUIRED when `kind` is `other`, where it MUST name the mechanism."
           }
+        },
+        "if": {
+          "properties": {
+            "kind": {
+              "const": "other"
+            }
+          },
+          "required": [
+            "kind"
+          ]
+        },
+        "then": {
+          "required": [
+            "seam",
+            "kind",
+            "guarded",
+            "guardedBy",
+            "note"
+          ]
         }
       }
     }

package/schemas/v2/error-envelope.schema.json

@@ -2,7 +2,7 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://openwop.dev/spec/v2/error-envelope.schema.json",
   "title": "ErrorEnvelope (v2)",
-  "description": "GENERATED from spec/v2/errors.json by scripts/generate-error-envelope.mjs (RFC 0171 §B.1). 94 registered codes; vendor codes match ^(?!openwop\\.)[a-z][a-z0-9]*(-[a-z0-9]+)*\\.[a-z][a-z0-9_]*$. Consumers MUST accept an unknown registered member and MUST NOT act on it (RFC 0171 §A.5).",
+  "description": "GENERATED from spec/v2/errors.json by scripts/generate-error-envelope.mjs (RFC 0171 §B.1). 97 registered codes; vendor codes match ^(?!openwop\\.)[a-z][a-z0-9]*(-[a-z0-9]+)*\\.[a-z][a-z0-9_]*$. Consumers MUST accept an unknown registered member and MUST NOT act on it (RFC 0171 §A.5).",
   "type": "object",
   "additionalProperties": false,
   "required": [
@@ -15,100 +15,103 @@
         {
           "type": "string",
           "enum": [
-            "audience_mismatch",
-            "capability_not_provided",
-            "capability_required",
-            "client_version_unsupported",
-            "connection_provider_conflict",
             "connection_provider_unresolved",
             "connector_action_unresolved",
-            "connector_auth_expired",
-            "credential_forbidden",
-            "credential_not_found",
-            "credential_required",
-            "credential_revoked",
             "credential_scope_unsupported",
-            "credential_unavailable",
             "delegation_chain_cyclic",
             "delegation_chain_too_long",
-            "delegation_expired",
-            "delegation_scope_amplified",
-            "envelope_correlation_conflict",
-            "envelope_invalid",
-            "envelope_refusal",
-            "envelope_truncation_unrecoverable",
-            "event_type_unmapped",
-            "forbidden",
-            "force_engine_version_forbidden",
-            "fork_point_invalid",
-            "id_tenant_mismatch",
-            "idempotency_in_flight",
             "idempotency_key_invalid",
-            "idempotency_key_mismatch",
-            "identity_unresolvable",
-            "identity_unverified",
-            "internal_error",
             "interop_version_unsupported",
-            "interrupt_already_resolved",
-            "interrupt_cancelled",
-            "interrupt_expired",
-            "interrupt_not_found",
-            "interrupt_token_invalid",
-            "key_revoked",
-            "loop_limit_exceeded",
-            "mcp_mrtr_rounds_exceeded",
-            "mock_provider_forbidden",
-            "not_found",
             "oauth_provider_unsupported",
             "oauth_scope_unsupported",
-            "pack_dependency_conflict",
             "pack_dependency_cycle",
             "pack_engine_unsupported",
             "pack_integrity_failure",
-            "pack_integrity_mismatch",
             "pack_kind_invalid",
-            "pack_load_failure",
             "pack_lockfile_incomplete",
-            "pack_namespace_unauthorized",
             "pack_peer_dependency_missing",
             "pack_peer_dependency_undefined",
-            "pack_registry_unreachable",
-            "pack_runtime_requirement_unmet",
             "pack_signature_invalid",
             "pack_validation_failed",
-            "pack_version_not_found",
             "protocol_version_mismatch",
+            "schedule_horizon_exceeded",
+            "sub_chain_cycle",
+            "sub_chain_depth_exceeded",
+            "unsupported_stream_mode",
+            "until_in_past",
+            "validation_error",
+            "webhook_url_rejected",
+            "audience_mismatch",
+            "connector_auth_expired",
+            "credential_revoked",
+            "delegation_expired",
+            "identity_unresolvable",
+            "identity_unverified",
+            "interrupt_token_invalid",
+            "key_revoked",
+            "sender_constraint_missing",
+            "unauthenticated",
+            "credential_forbidden",
+            "delegation_scope_amplified",
+            "forbidden",
+            "force_engine_version_forbidden",
+            "id_tenant_mismatch",
+            "mock_provider_forbidden",
+            "pack_namespace_unauthorized",
+            "run_forbidden",
+            "sandbox_capability_denied",
+            "sandbox_escape_attempt",
+            "workspace_membership_required",
+            "credential_not_found",
+            "interrupt_not_found",
+            "not_found",
+            "pack_version_not_found",
+            "replay_source_missing",
+            "signature_not_available",
             "protocol_version_unsupported",
-            "rate_limited",
-            "recursion_limit_exceeded",
+            "connection_provider_conflict",
+            "envelope_correlation_conflict",
+            "idempotency_in_flight",
+            "idempotency_key_mismatch",
+            "interrupt_already_resolved",
+            "pack_dependency_conflict",
+            "pack_integrity_mismatch",
             "replay_diverged_at_refusal",
             "replay_memory_snapshot_unavailable",
-            "replay_source_missing",
-            "residency_unavailable",
             "run_already_active",
-            "run_forbidden",
             "run_terminal",
+            "run_state_conflict",
+            "version_conflict",
+            "workspace_conflict",
+            "interrupt_cancelled",
+            "interrupt_expired",
+            "payload_too_large",
+            "workspace_too_large",
+            "unsupported_media_type",
+            "capability_not_provided",
+            "capability_required",
+            "credential_required",
+            "envelope_invalid",
+            "envelope_refusal",
+            "envelope_truncation_unrecoverable",
+            "fork_point_invalid",
+            "loop_limit_exceeded",
+            "mcp_mrtr_rounds_exceeded",
+            "pack_runtime_requirement_unmet",
+            "recursion_limit_exceeded",
+            "residency_unavailable",
             "run_timeout",
-            "runner_unavailable",
-            "sandbox_capability_denied",
-            "sandbox_escape_attempt",
             "sandbox_memory_exceeded",
             "sandbox_timeout",
-            "schedule_horizon_exceeded",
-            "sender_constraint_missing",
-            "signature_not_available",
-            "sub_chain_cycle",
-            "sub_chain_depth_exceeded",
             "token_budget_exceeded",
-            "unauthenticated",
-            "unsupported_stream_mode",
-            "until_in_past",
-            "validation_error",
-            "version_conflict",
-            "webhook_url_rejected",
-            "workspace_conflict",
-            "workspace_membership_required",
-            "workspace_too_large"
+            "client_version_unsupported",
+            "rate_limited",
+            "event_type_unmapped",
+            "internal_error",
+            "pack_load_failure",
+            "credential_unavailable",
+            "pack_registry_unreachable",
+            "runner_unavailable"
           ]
         },
         {
@@ -122,112 +125,156 @@
       "minLength": 1
     },
     "details": {
-      "type": "object",
-      "additionalProperties": true,
-      "description": "Error-specific contextual data. No code has registered a details schema yet (errors.json rows carry details: null); when one does, this becomes a oneOf discriminated on error."
+      "oneOf": [
+        {
+          "type": "object",
+          "required": [
+            "supported"
+          ],
+          "properties": {
+            "supported": {
+              "type": "array",
+              "minItems": 1,
+              "items": {
+                "type": "string",
+                "enum": [
+                  "values",
+                  "updates",
+                  "messages",
+                  "debug"
+                ]
+              },
+              "description": "Each individual mode the host serves; combinations are not listed (events.md §The events channel)."
+            }
+          },
+          "additionalProperties": true,
+          "x-openwop-error": "unsupported_stream_mode"
+        },
+        {
+          "type": "object",
+          "required": [
+            "runStatus"
+          ],
+          "properties": {
+            "runStatus": {
+              "type": "string",
+              "description": "The run status that refused the transition (runs.md §Pause and resume)."
+            }
+          },
+          "additionalProperties": true,
+          "x-openwop-error": "run_state_conflict"
+        },
+        {
+          "type": "object",
+          "additionalProperties": true
+        }
+      ]
     }
   },
   "x-openwop-http-status": {
-    "audience_mismatch": 401,
-    "capability_not_provided": 422,
-    "capability_required": 422,
-    "client_version_unsupported": 426,
-    "connection_provider_conflict": 409,
     "connection_provider_unresolved": 400,
     "connector_action_unresolved": 400,
-    "connector_auth_expired": 401,
-    "credential_forbidden": 403,
-    "credential_not_found": 404,
-    "credential_required": 422,
-    "credential_revoked": 401,
     "credential_scope_unsupported": 400,
-    "credential_unavailable": 501,
     "delegation_chain_cyclic": 400,
     "delegation_chain_too_long": 400,
-    "delegation_expired": 401,
-    "delegation_scope_amplified": 403,
-    "envelope_correlation_conflict": 409,
-    "envelope_invalid": 422,
-    "envelope_refusal": 422,
-    "envelope_truncation_unrecoverable": 422,
-    "event_type_unmapped": 500,
-    "forbidden": 403,
-    "force_engine_version_forbidden": 403,
-    "fork_point_invalid": 422,
-    "id_tenant_mismatch": 403,
-    "idempotency_in_flight": 409,
     "idempotency_key_invalid": 400,
-    "idempotency_key_mismatch": 409,
-    "identity_unresolvable": 401,
-    "identity_unverified": 401,
-    "internal_error": 500,
     "interop_version_unsupported": 400,
-    "interrupt_already_resolved": 409,
-    "interrupt_cancelled": 410,
-    "interrupt_expired": 410,
-    "interrupt_not_found": 404,
-    "interrupt_token_invalid": 401,
-    "key_revoked": 401,
-    "loop_limit_exceeded": 422,
-    "mcp_mrtr_rounds_exceeded": 422,
-    "mock_provider_forbidden": 403,
-    "not_found": 404,
     "oauth_provider_unsupported": 400,
     "oauth_scope_unsupported": 400,
-    "pack_dependency_conflict": 409,
     "pack_dependency_cycle": 400,
     "pack_engine_unsupported": 400,
     "pack_integrity_failure": 400,
-    "pack_integrity_mismatch": 409,
     "pack_kind_invalid": 400,
-    "pack_load_failure": 500,
     "pack_lockfile_incomplete": 400,
-    "pack_namespace_unauthorized": 403,
     "pack_peer_dependency_missing": 400,
     "pack_peer_dependency_undefined": 400,
-    "pack_registry_unreachable": 503,
-    "pack_runtime_requirement_unmet": 422,
     "pack_signature_invalid": 400,
     "pack_validation_failed": 400,
-    "pack_version_not_found": 404,
     "protocol_version_mismatch": 400,
+    "schedule_horizon_exceeded": 400,
+    "sub_chain_cycle": 400,
+    "sub_chain_depth_exceeded": 400,
+    "unsupported_stream_mode": 400,
+    "until_in_past": 400,
+    "validation_error": 400,
+    "webhook_url_rejected": 400,
+    "audience_mismatch": 401,
+    "connector_auth_expired": 401,
+    "credential_revoked": 401,
+    "delegation_expired": 401,
+    "identity_unresolvable": 401,
+    "identity_unverified": 401,
+    "interrupt_token_invalid": 401,
+    "key_revoked": 401,
+    "sender_constraint_missing": 401,
+    "unauthenticated": 401,
+    "credential_forbidden": 403,
+    "delegation_scope_amplified": 403,
+    "forbidden": 403,
+    "force_engine_version_forbidden": 403,
+    "id_tenant_mismatch": 403,
+    "mock_provider_forbidden": 403,
+    "pack_namespace_unauthorized": 403,
+    "run_forbidden": 403,
+    "sandbox_capability_denied": 403,
+    "sandbox_escape_attempt": 403,
+    "workspace_membership_required": 403,
+    "credential_not_found": 404,
+    "interrupt_not_found": 404,
+    "not_found": 404,
+    "pack_version_not_found": 404,
+    "replay_source_missing": 404,
+    "signature_not_available": 404,
     "protocol_version_unsupported": 406,
-    "rate_limited": 429,
-    "recursion_limit_exceeded": 422,
+    "connection_provider_conflict": 409,
+    "envelope_correlation_conflict": 409,
+    "idempotency_in_flight": 409,
+    "idempotency_key_mismatch": 409,
+    "interrupt_already_resolved": 409,
+    "pack_dependency_conflict": 409,
+    "pack_integrity_mismatch": 409,
     "replay_diverged_at_refusal": 409,
     "replay_memory_snapshot_unavailable": 409,
-    "replay_source_missing": 404,
-    "residency_unavailable": 422,
     "run_already_active": 409,
-    "run_forbidden": 403,
     "run_terminal": 409,
+    "run_state_conflict": 409,
+    "version_conflict": 409,
+    "workspace_conflict": 409,
+    "interrupt_cancelled": 410,
+    "interrupt_expired": 410,
+    "payload_too_large": 413,
+    "workspace_too_large": 413,
+    "unsupported_media_type": 415,
+    "capability_not_provided": 422,
+    "capability_required": 422,
+    "credential_required": 422,
+    "envelope_invalid": 422,
+    "envelope_refusal": 422,
+    "envelope_truncation_unrecoverable": 422,
+    "fork_point_invalid": 422,
+    "loop_limit_exceeded": 422,
+    "mcp_mrtr_rounds_exceeded": 422,
+    "pack_runtime_requirement_unmet": 422,
+    "recursion_limit_exceeded": 422,
+    "residency_unavailable": 422,
     "run_timeout": 422,
-    "runner_unavailable": 503,
-    "sandbox_capability_denied": 403,
-    "sandbox_escape_attempt": 403,
     "sandbox_memory_exceeded": 422,
     "sandbox_timeout": 422,
-    "schedule_horizon_exceeded": 400,
-    "sender_constraint_missing": 401,
-    "signature_not_available": 404,
-    "sub_chain_cycle": 400,
-    "sub_chain_depth_exceeded": 400,
     "token_budget_exceeded": 422,
-    "unauthenticated": 401,
-    "unsupported_stream_mode": 400,
-    "until_in_past": 400,
-    "validation_error": 400,
-    "version_conflict": 409,
-    "webhook_url_rejected": 400,
-    "workspace_conflict": 409,
-    "workspace_membership_required": 403,
-    "workspace_too_large": 413
+    "client_version_unsupported": 426,
+    "rate_limited": 429,
+    "event_type_unmapped": 500,
+    "internal_error": 500,
+    "pack_load_failure": 500,
+    "credential_unavailable": 501,
+    "pack_registry_unreachable": 503,
+    "runner_unavailable": 503
   },
   "x-openwop-retriable": [
+    "residency_unavailable",
+    "rate_limited",
     "internal_error",
     "pack_registry_unreachable",
-    "rate_limited",
-    "residency_unavailable",
     "runner_unavailable"
   ]
 }

package/schemas/v2/eval-summary.schema.json

@@ -2,7 +2,7 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://openwop.dev/spec/v2/eval-summary.schema.json",
   "title": "EvalSummary",
-  "description": "RFC 0081 §C. The terminal scorecard of an eval run (the `mode: \"eval\"` projection over `POST /v1/runs`, RFC 0081 §B): the aggregate + per-task scores, cost, latency, schema-validity, and safety findings, plus the suite provenance and (for `regression` mode) the score delta vs a baseline. Set as the eval run's output and served by `GET /v1/runs/{runId}/eval-summary`. SECURITY invariant `eval-summary-no-content-leak`: the summary carries scores, ids, counts, and redaction-safe safety descriptors only — NEVER task output bodies, rubric prose, model completions, prompts, or credential material (SR-1). A consumer reads the run's normal projection for any body.",
+  "description": "RFC 0081 \u00a7C. The terminal scorecard of an eval run (the `mode: \"eval\"` projection over `POST /v1/runs`, RFC 0081 \u00a7B): the aggregate + per-task scores, cost, latency, schema-validity, and safety findings, plus the suite provenance and (for `regression` mode) the score delta vs a baseline. Set as the eval run's output and served by `GET /v1/runs/{runId}/eval-summary`. SECURITY invariant `eval-summary-no-content-leak`: the summary carries scores, ids, counts, and redaction-safe safety descriptors only \u2014 NEVER task output bodies, rubric prose, model completions, prompts, or credential material (SR-1). A consumer reads the run's normal projection for any body.",
   "type": "object",
   "additionalProperties": false,
   "required": [
@@ -41,11 +41,11 @@
       "type": "number",
       "minimum": 0,
       "maximum": 1,
-      "description": "The suite-level score (0.0–1.0): the aggregation (host-defined, typically the mean) of per-task scores."
+      "description": "The suite-level score (0.0\u20131.0): the aggregation (host-defined, typically the mean) of per-task scores."
     },
     "passed": {
       "type": "boolean",
-      "description": "Whether the run cleared the suite's `thresholds` (RFC 0081 §A) — `aggregateScore >= passScore` AND, when declared, `totalCostUsd <= maxCostUsd` AND the p95 latency bar. The load-bearing flag an RFC 0082 deployment gate may require (`requiredEval`)."
+      "description": "Whether the run cleared the suite's `thresholds` (RFC 0081 \u00a7A) \u2014 `aggregateScore >= passScore` AND, when declared, `totalCostUsd <= maxCostUsd` AND the p95 latency bar. The load-bearing flag an RFC 0082 deployment gate may require (`requiredEval`)."
     },
     "taskCount": {
       "type": "integer",
@@ -60,7 +60,7 @@
     "totalCostUsd": {
       "type": "number",
       "minimum": 0,
-      "description": "MAY. Total cost of the run, summed from the per-task RFC 0026 `provider.usage` events (the scalar only — never a pricing breakdown or rate card; `eval-summary-no-content-leak`)."
+      "description": "MAY. Total cost of the run, summed from the per-task RFC 0026 `provider.usage` events (the scalar only \u2014 never a pricing breakdown or rate card; `eval-summary-no-content-leak`)."
     },
     "tasks": {
       "type": "array",
@@ -83,7 +83,7 @@
             "type": "number",
             "minimum": 0,
             "maximum": 1,
-            "description": "Task score (0.0–1.0)."
+            "description": "Task score (0.0\u20131.0)."
           },
           "passed": {
             "type": "boolean",
@@ -105,7 +105,7 @@
           },
           "safetyFindings": {
             "type": "array",
-            "description": "MAY. Redaction-safe safety findings (primarily `adversarial` mode). Each is a `{kind, severity}` descriptor — NO excerpted content, prompt, or completion text (`eval-summary-no-content-leak`).",
+            "description": "MAY. Redaction-safe safety findings (primarily `adversarial` mode). Each is a `{kind, severity}` descriptor \u2014 NO excerpted content, prompt, or completion text (`eval-summary-no-content-leak`).",
             "items": {
               "type": "object",
               "additionalProperties": false,
@@ -117,7 +117,7 @@
                 "kind": {
                   "type": "string",
                   "minLength": 1,
-                  "description": "Finding category (e.g. `jailbreak`, `pii-leak`, `unsafe-tool-call`) — a category label, not excerpted content."
+                  "description": "Finding category (e.g. `jailbreak`, `pii-leak`, `unsafe-tool-call`) \u2014 a category label, not excerpted content."
                 },
                 "severity": {
                   "type": "string",
@@ -135,6 +135,14 @@
         }
       }
     },
+    "pinnedNodeIds": {
+      "type": "array",
+      "items": {
+        "$ref": "ids.schema.json#/$defs/nodeId"
+      },
+      "uniqueItems": true,
+      "description": "MAY. The node ids whose outputs were PINNED (mocked) for this eval run rather than executed, so a reader knows the verdict's scope. Ids only, never the pinned values: this summary MUST be content-free of task output (runs.md), and a pin IS a task output. The values live on the eval run's own resume snapshot, behind the run's auth, where a reproducer with access can fetch them. Added 2026-09-04 after a tier-1 host proposed `pinned: true` on each node.completed event and asked first \u2014 replay-ness is a run property (replay.md \u00a7Determinism 5, webhooks.md \u00a7Replay), so the per-event flag was refused and the seat moved here: reproducibility of SCOPE on the wire, reproducibility of VALUES behind the boundary."
+    },
     "regression": {
       "type": "object",
       "additionalProperties": false,
@@ -145,15 +153,14 @@
       ],
       "properties": {
         "baselineRunId": {
-          "type": "string",
-          "minLength": 1,
+          "$ref": "ids.schema.json#/$defs/runId",
           "description": "The prior eval run this run is compared against."
         },
         "scoreDelta": {
           "type": "number",
           "minimum": -1,
           "maximum": 1,
-          "description": "`aggregateScore` minus the baseline's (negative ⇒ regression)."
+          "description": "`aggregateScore` minus the baseline's (negative \u21d2 regression)."
         },
         "diffRef": {
           "type": "string",

package/schemas/v2/goal.schema.json

@@ -2,7 +2,7 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://openwop.dev/spec/v2/goal.schema.json",
   "title": "Goal",
-  "description": "RFC 0097 §B. A standing goal — a durable objective with explicit completion criteria, evaluated by a host-side judge (RFC 0090 verifier verdict or an opaque host evaluator), that keeps an agent working across turns and runs until the judge is satisfied, a declared RFC 0058 bound is crossed, or the agent escalates (RFC 0044). Completion MUST be the judge's verdict — a client MUST NOT set `state: satisfied` directly. Continuation MUST be bounded. `objective` and any verdict payload are SR-1 redaction-safe. Gated on the `agents.goals` capability.",
+  "description": "RFC 0097 \u00a7B. A standing goal \u2014 a durable objective with explicit completion criteria, evaluated by a host-side judge (RFC 0090 verifier verdict or an opaque host evaluator), that keeps an agent working across turns and runs until the judge is satisfied, a declared RFC 0058 bound is crossed, or the agent escalates (RFC 0044). Completion MUST be the judge's verdict \u2014 a client MUST NOT set `state: satisfied` directly. Continuation MUST be bounded. `objective` and any verdict payload are SR-1 redaction-safe. Gated on the `agents.goals` capability.",
   "type": "object",
   "additionalProperties": false,
   "required": [
@@ -23,7 +23,7 @@
     },
     "objective": {
       "type": "string",
-      "description": "The standing objective. SR-1 redaction-safe — no secrets/PII."
+      "description": "The standing objective. SR-1 redaction-safe \u2014 no secrets/PII."
     },
     "state": {
       "type": "string",
@@ -67,7 +67,7 @@
           ],
           "default": null,
           "additionalProperties": false,
-          "description": "Most recent judge verdict. Content-free re: objective text. Non-deterministic judge output — MUST be persisted (carried in the `goal.evaluated` event / checkpoint) and never recomputed on replay/fork.",
+          "description": "Most recent judge verdict. Content-free re: objective text. Non-deterministic judge output \u2014 MUST be persisted (carried in the `goal.evaluated` event / checkpoint) and never recomputed on replay/fork.",
           "properties": {
             "satisfied": {
               "type": "boolean"
@@ -147,7 +147,7 @@
         "contributingRunIds": {
           "type": "array",
           "items": {
-            "type": "string"
+            "$ref": "ids.schema.json#/$defs/runId"
           },
           "description": "RFC 0040 causation-compatible."
         }
@@ -159,7 +159,7 @@
       "required": [
         "tenant"
       ],
-      "description": "RFC 0048 identity triple. Redaction-safe — `principal` is an opaque id, never PII or credential material.",
+      "description": "RFC 0048 identity triple. Redaction-safe \u2014 `principal` is an opaque id, never PII or credential material.",
       "properties": {
         "tenant": {
           "type": "string",