@openwop/spec-artifacts 2.13.0 → 2.15.0

package/CORPUS-STAMP.json

@@ -1,17 +1,17 @@
 {
   "_comment": "Provenance of @openwop/spec-artifacts (RFC 0168 §D.2). files: SHA-256 per file; the conformance suite compares the installed peer against dist/spec-artifacts.lock.json at start.",
   "package": "@openwop/spec-artifacts",
-  "version": "2.13.0",
-  "corpusTag": "v2.13.0",
+  "version": "2.15.0",
+  "corpusTag": "v2.15.0",
   "files": {
     "api/.redocly.lint-ignore.yaml": "bf5a8350b88a72fa43f59605ed8d903ed24b6cfccda5e45509c9f6ed9ee4e712",
     "api/asyncapi.yaml": "d5ecb9ee6114582be3b1f662c84bfac9ae96dae7bacb853e461168f70a8e1c7d",
     "api/grpc/openwop.proto": "c3e72bb17cba514ee98feb6434e6c9b6ea6795bfd086489ec69fd882dd1ad977",
     "api/openapi.yaml": "39081c59fb696159806b0f2f9a42e7e9ff830d622fcf2ad4159b21357580a955",
     "api/redocly.yaml": "b0604c89b2ca6d5076ec25725c539dad44a741a811fe524439ee6daef8baa09f",
-    "api/seams-v2.yaml": "37cf2ecfc6b5f14138e29f59f197c9c563798225d0df0d4362dfebfbe4b1b5f5",
-    "api/v2/asyncapi.yaml": "fa37177b205eb4c5d5eb98b48ff6fa0da3e4e93d249a608ed669515e2bca1853",
-    "api/v2/openapi.yaml": "1ca7eaedc9f54b88ac6ee4d5018a624b9ce7affbe83493cf81a91e73bb8a653b",
+    "api/seams-v2.yaml": "2d36c5b143c3dbbd7e96f37a3dd135678ea02b3ff8e361ec4b290a21f1c90a59",
+    "api/v2/asyncapi.yaml": "3f6f1f023841bb7d33fff2169a38734e10d1ede267d8cef38f8a94e86d317e45",
+    "api/v2/openapi.yaml": "808f2519d3fbfaa6efd9563ca2990e5bf80f1fff3fc76945d59ce13708ab3016",
     "api/v2/redocly.yaml": "1e66b60e6118ad11a823bb620678be464d99dfe50a40e3e6f93ec9429b88b34c",
     "schemas/README.md": "0c0b737ffcf8f30e7d2809cec8a498232de710f41443212922ad8337cdde0b51",
     "schemas/a2a-task-state.schema.json": "c9365918f993f943b4b619d42551eb066a1ed33a08d895d51b395432a5b1f1bc",
@@ -201,13 +201,13 @@
     "schemas/workspace-file.schema.json": "464de85c2a068243084ee9c1d969bc7cd5d8f7948574e58450d6493c38a0e1e4",
     "spec/v1/alias-detectors.json": "40069d5976eeb6ba1384a648e57e5cfd673db3fce36175115fb8293bee9664d4",
     "spec/v1/capability-declaration-classes.json": "e7729aed5c4b4e1dd02abab0530f14cc95f5d4070fe51fb139e7f5cccefa00c6",
-    "spec/v1/core-standard-manifest.json": "56a6b748b2439227e2a2fdba01481a1bd002a338265d9594ccd457ef7c5c353f",
+    "spec/v1/core-standard-manifest.json": "0478005e74f33a8b5c456805be12b9c34e5e3ab5be80569e007fb616fb29608f",
     "spec/v1/deprecations.json": "307083ce29c23fd406015951f99a30d78d6187ff061d38dc9732f62191b40f3f",
     "spec/v1/deprecations.schema.json": "18c87e78bedc210431f795ae44c5b5d202f2f3317850d5cf86867d4f1fa1cdfb",
     "spec/v1/event-codemap.json": "3da60d884157793a360da532a9fcbbfb5285636db325a74cec94b34622186d97",
     "spec/v1/event-codemap.schema.json": "d05933b2e88103aff51a2f774df97b9bda065e0fc88dbd9b114cc47a32189174",
     "spec/v1/extensions.json": "79a60754aa16cbdbdb604f8e5c00038af535a1690a4d07bd5ff7c38f0256a7bc",
-    "spec/v1/gaps.json": "32e995668775a34a2f9df2dd61f62a20424dc39c1a48b2a490438ed12f277866",
+    "spec/v1/gaps.json": "6e7f30b9413f4f57a97583376372a57d32c51a905e544fabf639ef796b78b269",
     "spec/v1/gaps.schema.json": "8fd83259f556553c9df0f53e7a82ca8c2a4771d471197f69b4e2ae0ceeacfd66",
     "spec/v1/migrations.json": "8839497d6a4830b53fa7867014a8336f0d725ef2346352e54fb580b7947897af",
     "spec/v1/migrations.schema.json": "886779aa6c22e646db097f5df210adb018a4dd14a7b815465a18c8a7056c8f72",
@@ -218,23 +218,23 @@
     "spec/v2/core/conformance.md": "a451c0a2ba79d93c55e540ccef480eba7de9602d59bbb03eead05daafde0beac",
     "spec/v2/core/connection-packs.md": "466bdb9dde79d85615ad8281dacfb7bf923ca22d7fb3ed219749e59574c753ed",
     "spec/v2/core/errors.md": "6b6a1480ed889013172d8ce8c6985e321d2f4f73e1d9fae0bac9b961d0dd1a8c",
-    "spec/v2/core/events.md": "6ab8c727df3ebc5a60de3837c82a0075b4357d6f7e28435c6f80585687d41a76",
+    "spec/v2/core/events.md": "2fbf98662a72035afd7a3f811c30d4fe5f0ac823488a2cc9198a61cf6d27a049",
     "spec/v2/core/form-content-packs.md": "af3517dd7125106088249c0e32220b0b9fc3e9304c10378a6327cc8ad84b6bf1",
     "spec/v2/core/headers.md": "14cdf4ae9ee7d80eebfd426d7c3552e577baea0300915cd4bb3a68e8588195a8",
     "spec/v2/core/idempotency.md": "e4edae1834101fd331379d84de77eaa9cead49383529c31f8bcd18322f67c965",
-    "spec/v2/core/identity.md": "1effd9ecdddd5bdbb13efa4f673e71e0209217f78adf2e5ec1496780a85a6126",
-    "spec/v2/core/interop.md": "c3104f86d57b0e62f4c71de00e3deca3ca604f8723be214624df1f90b7efa49a",
+    "spec/v2/core/identity.md": "e44f34f7c2db1f12babb19ca8ee1e5b1401a89f38fd5c90d0c4b74c95f6e5d42",
+    "spec/v2/core/interop.md": "6bd581556b9ab1a1509c01b9a1ec2bcb9e4a8300e68fb01570704417e70f20b9",
     "spec/v2/core/interrupt.md": "3a926d84b942d4ee7daccc4443c93dc29f6a69f2936ba813182f2c1336db2cbb",
     "spec/v2/core/overview.md": "7dc00ace32d4e4ce929a383651f0029fc4b7091ec87487b1bf26ead1be209e0e",
     "spec/v2/core/packs.md": "cc06de2d49dd08410eececd5c279996ec839680553b332b4f33d6b31989b5757",
     "spec/v2/core/persistence.md": "9e241f84259e38848f4a2ad1c21debb0dffd5f8aafbad26408aa6cc8969bf93b",
     "spec/v2/core/replay.md": "10cc01bf9e4e921fcfac740f3174b2e95cda7ba9a1e13e85cf371c8c2d0fa46a",
-    "spec/v2/core/runs.md": "fe6881ce89d2b494d5458373a01dafa365fc684f4fd2b6f9c541b4839e783238",
-    "spec/v2/core/security-defaults.md": "9ab1d1a88ccd0929f354422b151ec6d3164e8cd3784f8e58bb6f11cb7ee1e7d5",
+    "spec/v2/core/runs.md": "f7641c111a3d6ce225656732515cf2fbd38f1c1455b39ee744a4fd2ad09ba379",
+    "spec/v2/core/security-defaults.md": "5c32c0bf4b47975c1428361b225a066cd3966cb37b023ca70bc30152fcbec33b",
     "spec/v2/core/versioning.md": "27b88cde88f9060567ef7e46f4897b6be8892ade9f4a46c2ab16e314c515eabd",
     "spec/v2/core/webhooks.md": "46c1311c1897236f9bf9db5025c8af31dd84cd19208da3e5e9ff69eec9436965",
     "spec/v2/core/workflow-chain-packs.md": "df78b76dd79f2267fb6b72c08e0911e5f9d5bb1925c6efdd6deda62fe8a51dc8",
-    "spec/v2/declaration.json": "e30b1c90c00e375f0bfcd8254b8c57d30a71ad8b4942ebe8ca7b132ae6e57ac4",
+    "spec/v2/declaration.json": "1e47c155ab36bf0520c759c3aa3e67d2e3737d28a6c6a538cd281bb5a9930b13",
     "spec/v2/declaration.schema.json": "c86e3083fb9789c1958ecb4576cc6f71aa90e6f339521139238543ed08211dd4",
     "spec/v2/errors.json": "aac91b12f954cc90574d310070ae3c651b131055d4389d2c6155242763765195",
     "spec/v2/event-codemap.json": "37869a03cdfd8758b57e6f350641a6ebbd383231cebda51f5473ad85f94ab74c",
@@ -274,8 +274,8 @@
     "spec/v2/path-manifest.json": "c123c9fd77dc1b3f9c2e9346ace80cdae007e6511138894956abda01e61ec1c6",
     "spec/v2/peer-dependency-aliases.json": "d10299280abee08258502925bc327293ee413e0108cd6e6ec75ff6110653308d",
     "spec/v2/profiles.json": "0636f19fceae625390003a347e70ef4797d84766b5c24ce8a02cea52aadebca4",
-    "spec/v2/release.json": "c9bb111a222ba7c65a6b9769c6455e2d8d1469f7dab1648554e7d4b58f11ac3e",
+    "spec/v2/release.json": "172c377ac413214f0d0ce857fdaf030526fd1085434b69e3b755e088b5be08f9",
     "spec/v2/retention-floors.json": "eaf3722d95c79947af1d4269ef85117e126518c588cfcf1a2b21b97269f51624"
   },
-  "corpusCommit": "085bb5d265734dfa836c213e7f0df6605872ad28"
+  "corpusCommit": "a60d21de057c9a096e960c13fb0d83950e037e24"
 }

package/api/seams-v2.yaml

@@ -1,7 +1,7 @@
 openapi: 3.1.0
 info:
   title: OpenWOP conformance seams profile (openwop-conformance-seams-v2)
-  version: 2.13.0
+  version: 2.15.0
   description: 'GENERATED by scripts/derive-v2-api.py. RFC 0168 §C: the seams are a versioned conformance profile with their
     own document and path space (/conformance/seams/…), validated against the canonical v2 schemas with no tolerance path,
     forbidden from the capability namespace (a host advertises the profile, never a testSeams flag). This document carries

package/api/v2/asyncapi.yaml

@@ -1,7 +1,7 @@
 asyncapi: 3.1.0
 info:
   title: OpenWOP v2 event streams
-  version: 2.13.0
+  version: 2.15.0
   description: GENERATED by scripts/derive-v2-api.py (RFC 0171 §E.1, RFC 0172 §C.2). One run-events channel whose address
     is the OpenAPI path key; the server pathname is empty (bare origin). streamMode is a pattern over the closed set and its
     comma-separated combinations (`values` never combines). hostEvents has a real address (RFC 0171 §E.1) — the documented

package/api/v2/openapi.yaml

@@ -1,7 +1,7 @@
 openapi: 3.1.0
 info:
   title: OpenWOP v2 API
-  version: 2.13.0
+  version: 2.15.0
   summary: REST surface for declaring, executing, suspending, resuming, and observing multi-step workflows.
   description: GENERATED by scripts/derive-v2-api.py from api/openapi.yaml and the RFC 0167 children (v2 charter Phase 3,
     P3-C). Bare origin, unversioned path keys, negotiation by `OpenWOP-Version` + `protocolVersions[]` (RFC 0172 §A). No seam

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openwop/spec-artifacts",
-  "version": "2.13.0",
+  "version": "2.15.0",
   "description": "The OpenWOP machine-readable contract: api/ (OpenAPI, AsyncAPI, the seams profile), schemas/ (v1 and v2 JSON Schemas), the spec/v1 and spec/v2 registries (errors, event codemap, declaration, deprecations, migrations, gaps) and CORPUS-STAMP.json — published from the openwop/openwop corpus tag; the peer dependency @openwop/openwop-conformance digest-checks at start (RFC 0168 §D.2).",
   "license": "Apache-2.0",
   "repository": {

package/spec/v1/core-standard-manifest.json

@@ -4,7 +4,7 @@
   "provenance": {
     "suite": {
       "package": "@openwop/openwop-conformance",
-      "version": "2.13.0"
+      "version": "2.15.0"
     },
     "note": "Derived from the corpus at generation time. Regenerate with --write; verify with --check."
   },
@@ -419,5 +419,5 @@
       "$id": "https://openwop.dev/spec/v1/workspace-file.schema.json"
     }
   ],
-  "digest": "4b8444b8f81ea9508b0bda36fcb2a2ddc4fef1c337a486cb71d536ba262a6446"
+  "digest": "4ff5b4a569f1ff03c71f0aec32ce5cb443cb4129a8d8cf5753c7808bd48afe58"
 }

package/spec/v1/gaps.json

@@ -10365,6 +10365,57 @@
         }
       ]
     },
+    {
+      "id": "openwop.gap.0189.5",
+      "rfc": "0189",
+      "local": "G5",
+      "section": "§B(b)/(c)",
+      "surface": "`-`, `_`, `.` and `/` are not word boundaries for a family key, but `namesKey` treated every non-alphanumeric as one — so a key was \"named\" by any token merely CONTAINING it. Measured at 2.13.0, six of the twenty families that satisfied §B(c) did so ONLY through this: `fs` ← \"nodes are `fs-gated`\"; `budget` ← `token_budget_exceeded`; `i18n` ← \"see i18n.md\"; `portability` ← the path `spec/v2/ext/portability/`; `workspace` ← `RunSnapshot.owner.workspace`. A further five matched through plain English homonyms (`cache` the verb, `production` the adjective, `content` in `content-free`).",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "closed",
+      "target": null,
+      "sources": [
+        {
+          "file": "RFCS/registers/0189-normative-home.gaps.md",
+          "token": "G5"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0189.6",
+      "rfc": "0189",
+      "local": "G6",
+      "section": "§B.4",
+      "surface": "`namesFacet`'s qualified form kept the FAMILY key's leading-boundary requirement, so it matched `limits.maxBudgetTokens` but not `Capabilities.limits.maxBudgetTokens` — the canonical spelling in v1 prose. `spec/v1/budget-policy.md` clamps to \"the host ceiling (`Capabilities.limits.maxBudgetTokens` / `maxBudgetCostUsd`)\": one sentence, a coordinated pair, and the gate covered the second and missed the first. G5's own closure note stated the intent correctly — *facet coverage takes the mirror rule* — but the implementation applied a family rule to a facet.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "closed",
+      "target": null,
+      "sources": [
+        {
+          "file": "RFCS/registers/0189-normative-home.gaps.md",
+          "token": "G6"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0189.7",
+      "rfc": "0189",
+      "local": "G7",
+      "section": "§D",
+      "surface": "The end-of-support fallback tested the banner's STATE (a regex matching `Stable` or `FINAL`) rather than whether it CHANGED — and §D's own words are \"deleted or its `Status:` banner changes\". The two differ, and the difference was already live: `spec/v1/multi-agent-execution.md` has read `Status: Draft` since long before `multiAgent` was carried into it in 2.13.0, so on 2026-12-04 the daily job would have gone permanently red on a banner that never changed. Introduced by RFC 0190 §C, which implemented the fallback that RFC 0189 had only printed — one layer down from the defect it was fixing.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "closed",
+      "target": null,
+      "sources": [
+        {
+          "file": "RFCS/registers/0189-normative-home.gaps.md",
+          "token": "G7"
+        }
+      ]
+    },
     {
       "id": "openwop.gap.0190.1",
       "rfc": "0190",

package/spec/v2/core/events.md

@@ -1,6 +1,7 @@
 # Events
 
 > **Status: Stable · RFC 0171 §A, §E; RFC 0176 §A.**
+> **Normative home:** `heartbeat`.
 
 ## Why this exists
 

package/spec/v2/core/identity.md

@@ -1,7 +1,7 @@
 # Identity
 
 > **Status: Stable · RFC 0170, 0165, 0176.**
-> **Normative home:** `auth`.
+> **Normative home:** `auth`, `authorization`.
 
 ## Why this exists
 
@@ -43,6 +43,8 @@ An end user reaching the host through an A2A peer is `kind: anonymous`, `lane: a
 
 Every lane MUST: verify the credential against the lane's trust root; bind the verified identity to the request, never to an asserted header; check audience; resolve to a Subject before any authorization decision; and fail closed. The closed reason vocabulary is the family-wide error set in §6. Every lane is advertised as one member of the `auth.lanes[]` facet (`spec/v2/facets/auth.schema.json`):
 
+`authorization.failClosed` advertises that rule and MUST be `true` when present; it does not gate it (invariant `authorization-fail-closed`). `authorization.roles` is the host role catalog: a request is authorized when any role-derived scope matches the required scope, under the same scope-match semantics this document applies to a credential.
+
 ```json
 { "lane": "oidc", "issuers": ["https://idp.example"], "revocation": "exp-and-recheck",
   "revocationWindowSeconds": 300, "minimumAssurance": "sender-constrained",

package/spec/v2/core/interop.md

@@ -13,7 +13,7 @@ REST and SSE are the wire. A host MUST NOT advertise a transport list; `supporte
 
 ## The facets
 
-A host that speaks either protocol MUST advertise the corresponding facet with every required field (`spec/v2/facets/a2a.schema.json`, `spec/v2/facets/mcp.schema.json`).
+A host that speaks either protocol MUST advertise the corresponding facet — `a2a` or `mcp` — with every required field (`spec/v2/facets/a2a.schema.json`, `spec/v2/facets/mcp.schema.json`).
 
 | Facet field | A2A (`a2a`) | MCP (`mcp`) | Rule |
 | --- | --- | --- | --- |

package/spec/v2/core/runs.md

@@ -1,7 +1,7 @@
 # Runs
 
 > **Status: Stable · RFC 0170 §A, §D.1; RFC 0171 §D; RFC 0176 §B.1.**
-> **Normative home:** `runList`.
+> **Normative home:** `runList`, `limits`.
 
 ## Why this exists
 

package/spec/v2/core/security-defaults.md

@@ -1,6 +1,7 @@
 # Security Defaults
 
 > **Status: Stable · RFC 0173 (§A–§E), 0164 §22, 0170 §B.**
+> **Normative home:** `sandbox`, `compensation`.
 
 ## Why this exists
 
@@ -45,10 +46,14 @@ A host that surfaces `approversList`, or advertises `refKinds` including `group`
 
 A host that executes third-party packs MUST enforce the eight `node-pack-sandbox-*` invariants of `SECURITY/invariants.yaml` (`no-process`, `network-gated`, `fs-gated`, `no-env`, `timeout`, `memory-cap`, `isolated-context`, `no-eval`) and MUST advertise `sandbox.isolationModel ∈ wasm | process | container | vm` (`spec/v2/facets/sandbox.schema.json`). `node:vm` is not a value. A host that cannot isolate MUST NOT execute third-party packs; it MAY register and validate them. The `no-eval` row stays reference-impl in `ext/sandbox-runtime-notes` (§D.1). The `pack-isolation` scenario drives the eight legs.
 
+The remaining `sandbox` facets name the bound each invariant already carries: `allowedHostCalls` is the host-call allowlist `network-gated` and `fs-gated` enforce, `memoryLimitBytes` is the ceiling of `memory-cap`, and `wallClockLimitMs` is the ceiling of `timeout`. An advertised bound MUST be enforced; none of the three gates the invariant, which binds whether or not the facet is advertised.
+
 ### Compensation
 
 A host that advertises `compensation` MUST serve `GET /runs/{runId}/compensation` (`schemas/v2/compensation-projection.schema.json`): `{ runId, status, plan[], attempts[] }`, the plan carrying `{ nodeId, order, policy?, irreversibleEffect? }` and each attempt `{ nodeId, attempt, outcome, at, reason? }`, keyed on the node and attempt the operator family uses. The trichotomy of §D.1 resolves to core obligation with a declared witness; a host that does not advertise `compensation` has no obligation.
 
+The facets bind the policy shape (`schemas/v2/compensation-policy.schema.json`): `compensation.orderingModels` MUST list `reverse-completion` and MAY add `dependency-graph`, and a policy naming a model outside it MUST be refused at registration; `compensation.profileVersion` participates in the inverse-action identity, so a policy naming a different one MUST be refused; `compensation.manualIntervention` is the `manual` status above — a host advertising it records the unwind rather than abandoning it.
+
 ### Layer-2 effect identity
 
 A host that advertises `idempotency` MUST assign a logical effect id once per effect, stable across transport retries, and MUST inject it as the provider's idempotency key (RFC 0150 §B). Where a provider exposes no business key, the v1 activity recipe is the documented fallback. `GET /runs/{runId}/effects` (`schemas/v2/effect-ledger-projection.schema.json`) serves `{ runId, effects[] }`, each `{ effectId, nodeId, attempt, invocationId?, keying: business-identity | activity-recipe, providerKey?, state: claimed | completed | released | escaped, at }`, content-free of provider payloads. Layer-2 retention MUST be at least 14 days (RFC 0170 §D.3). No deployed history holds a v1 recipe key, so no dual-read migration exists (RFC 0147 UQ2).

package/spec/v2/declaration.json

@@ -205,6 +205,7 @@
     {
       "key": "limits",
       "kind": "family",
+      "normativeText": ["spec/v2/core/runs.md", "spec/v1/capabilities.md", "spec/v1/budget-policy.md"],
       "anchor": "core",
       "section": "core/capabilities.md#limits",
       "peerDependencyId": "limits",
@@ -516,6 +517,7 @@
     {
       "key": "oauth",
       "kind": "family",
+      "normativeText": ["spec/v1/host-capabilities.md"],
       "anchor": "core",
       "section": "core/capabilities.md#oauth",
       "peerDependencyId": "oauth",
@@ -535,6 +537,7 @@
     {
       "key": "authorization",
       "kind": "family",
+      "normativeText": ["spec/v2/core/identity.md"],
       "anchor": "core",
       "section": "core/capabilities.md#authorization",
       "peerDependencyId": "authorization",
@@ -897,6 +900,7 @@
     {
       "key": "heartbeat",
       "kind": "family",
+      "normativeText": ["spec/v2/core/events.md", "spec/v1/host-capabilities.md"],
       "anchor": "core",
       "section": "core/capabilities.md#heartbeat",
       "peerDependencyId": "heartbeat",
@@ -1437,6 +1441,7 @@
     {
       "key": "sandbox",
       "kind": "family",
+      "normativeText": ["spec/v2/core/security-defaults.md"],
       "anchor": "core",
       "section": "core/capabilities.md#sandbox",
       "peerDependencyId": "sandbox",
@@ -1461,6 +1466,7 @@
     {
       "key": "compensation",
       "kind": "family",
+      "normativeText": ["spec/v2/core/security-defaults.md"],
       "anchor": "core",
       "section": "core/capabilities.md#compensation",
       "peerDependencyId": "compensation",

package/spec/v2/release.json

@@ -1,6 +1,6 @@
 {
   "$comment": "RFC 0172 §D.1 — the one release identity the v2 artifacts derive from. `version` is the next corpus tag `v<version>` (the publish workflow's coordinated-release tag pattern `v*`; RFC 0172's `openwop/v2.<minor>.<patch>` spelling is amended to this at its flip). api/v2/*.yaml info.version, the suite's 2.x version and @openwop/spec-artifacts read it. Bumped by the release PR that cuts the tag, never by hand elsewhere.",
-  "version": "2.13.0",
-  "corpusTag": "v2.13.0",
+  "version": "2.15.0",
+  "corpusTag": "v2.15.0",
   "updated": "2026-09-18"
 }