@openwop/spec-artifacts 2.3.3 → 2.4.0

package/spec/v1/deprecations.json

@@ -1,7 +1,7 @@
 {
   "$schema": "./deprecations.schema.json",
   "version": 1,
-  "updated": "2026-09-03",
+  "updated": "2026-09-18",
   "entries": [
     {
       "id": "openwop.deprecation.capabilities-wrapper",
@@ -9,7 +9,7 @@
       "surface": "top-level `capabilities` wrapper object in /.well-known/openwop",
       "kind": "discovery-shape",
       "deprecatedIn": "RFC 0073 (v1.1)",
-      "authority": "RFC 0073 \u00a7Proposal; spec/v1/capabilities.md \u00a7Discovery document root (\"deprecated legacy shape, tolerated only by the schema's additionalProperties: true\")",
+      "authority": "RFC 0073 §Proposal; spec/v1/capabilities.md §Discovery document root (\"deprecated legacy shape, tolerated only by the schema's additionalProperties: true\")",
       "removeIn": "2.0",
       "replacement": "capability families at the document root",
       "codemod": null,
@@ -27,7 +27,7 @@
         "v2.0-cut",
         "v1-end-of-support"
       ],
-      "note": " RFC 0176 \u00a7C.2: absent from the v2 representation at the cut; removed from the v1 representation at v1 end-of-support."
+      "note": " RFC 0176 §C.2: absent from the v2 representation at the cut; removed from the v1 representation at v1 end-of-support."
     },
     {
       "id": "openwop.deprecation.host-dotted-mirror",
@@ -35,9 +35,9 @@
       "surface": "host-side `host.<family>` dotted mirror of root capability families",
       "kind": "discovery-shape",
       "deprecatedIn": "RFC 0073 (v1.1)",
-      "authority": "RFC 0073 \u00a73 \"Reference host \u2014 canonical root + deprecated mirror\"; retirement gated on the v2 major (RFC 0073 UQ1/UQ2)",
+      "authority": "RFC 0073 §3 \"Reference host — canonical root + deprecated mirror\"; retirement gated on the v2 major (RFC 0073 UQ1/UQ2)",
       "removeIn": "2.0",
-      "replacement": "one declaration file: document-root key \u2261 pack peer-dependency identifier \u2261 spec section anchor (v2 program C.2)",
+      "replacement": "one declaration file: document-root key ≡ pack peer-dependency identifier ≡ spec section anchor (v2 program C.2)",
       "codemod": null,
       "sources": [
         {
@@ -49,15 +49,15 @@
         "v2.0-cut",
         "v1-end-of-support"
       ],
-      "note": " RFC 0176 \u00a7C.2: absent from the v2 representation at the cut; removed from the v1 representation at v1 end-of-support."
+      "note": " RFC 0176 §C.2: absent from the v2 representation at the cut; removed from the v1 representation at v1 end-of-support."
     },
     {
       "id": "openwop.deprecation.profile-openwop-core-alias",
       "status": "deprecated",
       "surface": "profile id `openwop-core` (alias of `openwop-discovery-core`)",
       "kind": "profile-id",
-      "deprecatedIn": "RFC 0155 \u00a7A (v1.2, 2026-08-16)",
-      "authority": "spec/v1/profiles.md \u00a7`openwop-discovery-core` (canonical) \u2014 alias `openwop-core` (deprecated); RFC 0155 \u00a7A: removal \"no earlier than v2\"",
+      "deprecatedIn": "RFC 0155 §A (v1.2, 2026-08-16)",
+      "authority": "spec/v1/profiles.md §`openwop-discovery-core` (canonical) — alias `openwop-core` (deprecated); RFC 0155 §A: removal \"no earlier than v2\"",
       "removeIn": "2.0",
       "replacement": "openwop-discovery-core",
       "codemod": null,
@@ -74,8 +74,8 @@
       "status": "deprecated",
       "surface": "state-key prefix conventions as a back-compat layer over typed channels",
       "kind": "prose-convention",
-      "deprecatedIn": "spec/v1/channels-and-reducers.md (v1.0; no RFC cited \u2014 the spec text says the conventions are \"a back-compat layer that the spec deprecates over time\")",
-      "authority": "spec/v1/channels-and-reducers.md \u00a7Why this exists",
+      "deprecatedIn": "spec/v1/channels-and-reducers.md (v1.0; no RFC cited — the spec text says the conventions are \"a back-compat layer that the spec deprecates over time\")",
+      "authority": "spec/v1/channels-and-reducers.md §Why this exists",
       "removeIn": "2.0",
       "replacement": "typed channels with explicit reducers",
       "codemod": null,
@@ -93,8 +93,8 @@
       "status": "deprecated",
       "surface": "capabilities.a2a `supported: true` without `protocolVersions[]`",
       "kind": "discovery-field",
-      "deprecatedIn": "RFC 0152 \u00a7A",
-      "authority": "spec/v1/a2a-integration.md \u00a7Discovery: \"`supported: true` without `protocolVersions` is deprecated\"",
+      "deprecatedIn": "RFC 0152 §A",
+      "authority": "spec/v1/a2a-integration.md §Discovery: \"`supported: true` without `protocolVersions` is deprecated\"",
       "removeIn": "2.0",
       "replacement": "non-empty `protocolVersions[]` + `preferredVersion` (v2: a capability facet under the closed root, v2 program C.2)",
       "codemod": null,
@@ -111,8 +111,8 @@
       "status": "deprecated",
       "surface": "capabilities.mcp `supported: true` without `protocolVersions[]`",
       "kind": "discovery-field",
-      "deprecatedIn": "RFC 0153 \u00a7A",
-      "authority": "spec/v1/mcp-integration.md \u00a7Discovery: \"Unqualified `supported: true` is deprecated and cannot substantiate a current-MCP claim\"",
+      "deprecatedIn": "RFC 0153 §A",
+      "authority": "spec/v1/mcp-integration.md §Discovery: \"Unqualified `supported: true` is deprecated and cannot substantiate a current-MCP claim\"",
       "removeIn": "2.0",
       "replacement": "non-empty `protocolVersions[]` (MCP date form) + `preferredVersion`",
       "codemod": null,
@@ -130,7 +130,7 @@
       "surface": "workflow node `config.outputArtifactType` bag entry",
       "kind": "schema-field",
       "deprecatedIn": "schemas/workflow-definition.schema.json (first-class `artifactType` field)",
-      "authority": "schemas/workflow-definition.schema.json \u2014 `artifactType` description: \"replaces the deprecated config.outputArtifactType bag entry\"",
+      "authority": "schemas/workflow-definition.schema.json — `artifactType` description: \"replaces the deprecated config.outputArtifactType bag entry\"",
       "removeIn": "2.0",
       "replacement": "node.artifactType",
       "codemod": null,
@@ -148,7 +148,7 @@
       "surface": "workflow node `config.chatCard` bag entry",
       "kind": "schema-field",
       "deprecatedIn": "schemas/workflow-definition.schema.json (first-class `chatCard` field)",
-      "authority": "schemas/workflow-definition.schema.json \u2014 `chatCard` description: \"replaces the deprecated config.chatCard bag entry\"",
+      "authority": "schemas/workflow-definition.schema.json — `chatCard` description: \"replaces the deprecated config.chatCard bag entry\"",
       "removeIn": "2.0",
       "replacement": "node.chatCard",
       "codemod": null,
@@ -166,7 +166,7 @@
       "surface": "capabilities.auth.subjectLinking",
       "kind": "discovery-field",
       "deprecatedIn": "RFC 0164 (suite 1.151.0, 2026-09-02)",
-      "authority": "RFC 0164 \u00a7A.3: the flag is DERIVED (MUST be true whenever both `openwop-auth-saml` and `openwop-auth-scim` are advertised) and deprecated toward v2; the profile pair carries the obligation",
+      "authority": "RFC 0164 §A.3: the flag is DERIVED (MUST be true whenever both `openwop-auth-saml` and `openwop-auth-scim` are advertised) and deprecated toward v2; the profile pair carries the obligation",
       "removeIn": "2.0",
       "replacement": "the profile pair itself; v2 Subject record with `keyClass` (v2 program C.3)",
       "codemod": null,
@@ -188,7 +188,7 @@
       "surface": "certification bundle format v1 (schemas/conformance-certification-bundle.schema.json, `bundleVersion: \"1\"`)",
       "kind": "artifact",
       "deprecatedIn": "RFC 0148 (suite 1.114.0, 2026-08-12); `--certify` default flipped to v2 at suite 1.152.0",
-      "authority": "COMPATIBILITY.md \u00a72 \"Measurement vs. claim\": v1 remains parseable but ceases to substantiate a new certification after the 90-day window that began 2026-08-12 (ends 2026-11-10)",
+      "authority": "COMPATIBILITY.md §2 \"Measurement vs. claim\": v1 remains parseable but ceases to substantiate a new certification after the 90-day window that began 2026-08-12 (ends 2026-11-10)",
       "removeIn": "2.0",
       "replacement": "certification bundle v2 (schemas/certification-bundle-v2.schema.json); bundle v3 at v2.0 (v2 program C.1)",
       "codemod": null,
@@ -209,8 +209,8 @@
       "status": "deprecated",
       "surface": "`Capabilities-Etag` response header on GET /.well-known/openwop",
       "kind": "header",
-      "deprecatedIn": "RFC 0165 \u00a7C.2 (suite 1.155.0, 2026-09-02)",
-      "authority": "RFC 0165 \u00a7C.2: hosts SHOULD send a standard ETag on /.well-known/openwop and honor If-None-Match; Capabilities-Etag keeps its semantics through v1.x and is removed at 2.0",
+      "deprecatedIn": "RFC 0165 §C.2 (suite 1.155.0, 2026-09-02)",
+      "authority": "RFC 0165 §C.2: hosts SHOULD send a standard ETag on /.well-known/openwop and honor If-None-Match; Capabilities-Etag keeps its semantics through v1.x and is removed at 2.0",
       "removeIn": "2.0",
       "replacement": "standard `ETag` / `If-None-Match` on the discovery document (dual-emitted through v1.x)",
       "codemod": null,
@@ -221,14 +221,14 @@
         },
         {
           "file": "RFCS/0165-v2-preparation-wire-shapes.md",
-          "token": "\u00a7C.2 Discovery cache validator"
+          "token": "§C.2 Discovery cache validator"
         }
       ],
       "removalTrigger": [
         "v2.0-cut",
         "v1-end-of-support"
       ],
-      "note": " RFC 0176 \u00a7C.2: absent from the v2 representation at the cut; removed from the v1 representation at v1 end-of-support."
+      "note": " RFC 0176 §C.2: absent from the v2 representation at the cut; removed from the v1 representation at v1 end-of-support."
     },
     {
       "id": "openwop.deprecation.contract-provenance",
@@ -254,8 +254,8 @@
       "status": "deprecated",
       "surface": "the `X-openwop-*` webhook delivery header family (Webhook-Id, Event-Type, Timestamp, Signature, Signature-Algorithm)",
       "kind": "header",
-      "deprecatedIn": "RFC 0165 \u00a7C.1 (suite 1.155.0, 2026-09-02)",
-      "authority": "RFC 0165 \u00a7C.1: hosts SHOULD dual-emit the `OpenWOP-*` family with identical values; subscribers SHOULD accept either; the `X-openwop-*` family MUST still be sent through v1.x and is removed at 2.0",
+      "deprecatedIn": "RFC 0165 §C.1 (suite 1.155.0, 2026-09-02)",
+      "authority": "RFC 0165 §C.1: hosts SHOULD dual-emit the `OpenWOP-*` family with identical values; subscribers SHOULD accept either; the `X-openwop-*` family MUST still be sent through v1.x and is removed at 2.0",
       "removeIn": "2.0",
       "replacement": "`OpenWOP-Webhook-Id`, `OpenWOP-Event-Type`, `OpenWOP-Timestamp`, `OpenWOP-Signature: sha256={hex}`, `OpenWOP-Signature-Algorithm`",
       "codemod": null,
@@ -267,7 +267,7 @@
         },
         {
           "file": "RFCS/0165-v2-preparation-wire-shapes.md",
-          "token": "\u00a7C.1 Webhook headers"
+          "token": "§C.1 Webhook headers"
         }
       ],
       "removalTrigger": "v2.0-cut"
@@ -298,14 +298,14 @@
     {
       "id": "openwop.deprecation.engine-version-type-split",
       "status": "proposed",
-      "surface": "`engineVersion` typed integer at the discovery root, number on run-snapshot (corrected 2026-09-04 \u2014 the prose MUST requires a number), and string on run-event / three event payloads",
+      "surface": "`engineVersion` typed integer at the discovery root, number on run-snapshot (corrected 2026-09-04 — the prose MUST requires a number), and string on run-event / three event payloads",
       "kind": "schema-field",
       "deprecatedIn": null,
-      "authority": "RFC 0165 \u00a7A.4 (recorded; unification is a v2 C.5 item \u2014 changing either type is a COMPATIBILITY \u00a72.2 break in v1.x)",
+      "authority": "RFC 0165 §A.4 (recorded; unification is a v2 C.5 item — changing either type is a COMPATIBILITY §2.2 break in v1.x)",
       "removeIn": "2.0",
       "replacement": "one integer `engineVersion` on every carrier (v2)",
       "codemod": null,
-      "note": "In v1.x the per-event value is the decimal string rendering of the root integer (version-negotiation.md \u00a7\"Protocol version grammar\").",
+      "note": "In v1.x the per-event value is the decimal string rendering of the root integer (version-negotiation.md §\"Protocol version grammar\").",
       "sources": [
         {
           "file": "spec/v1/version-negotiation.md",
@@ -324,7 +324,7 @@
       "surface": "`since` query parameter on GET /v1/runs/{runId}/events/poll",
       "kind": "discovery-field",
       "deprecatedIn": null,
-      "authority": "v2 charter C.4 (RFC 0167 \u00a7E; version-negotiation.md names `lastSequence` authoritative and `since` back-compat for pre-v1.0 deployments)",
+      "authority": "v2 charter C.4 (RFC 0167 §E; version-negotiation.md names `lastSequence` authoritative and `since` back-compat for pre-v1.0 deployments)",
       "removeIn": "2.0",
       "replacement": "`lastSequence` in v1.x; the v2 C.4 child defines the cursor (RFC 0165 G7)",
       "codemod": null,
@@ -343,7 +343,7 @@
       "surface": "`X-Dedup`, `X-Force-Engine-Version`, `X-Pack-Sha`, `X-Pack-Signing-Method` request headers",
       "kind": "header",
       "deprecatedIn": null,
-      "authority": "v2 charter C.4 (RFC 0167 \u00a7E): `OpenWOP-*` for every non-standard header; RFC 0165 \u00a7C.1 covered only the webhook family",
+      "authority": "v2 charter C.4 (RFC 0167 §E): `OpenWOP-*` for every non-standard header; RFC 0165 §C.1 covered only the webhook family",
       "removeIn": "2.0",
       "replacement": "`OpenWOP-Dedup`, `OpenWOP-Force-Engine-Version` (seam-only, moves to the seams profile), `OpenWOP-Pack-Sha`, `OpenWOP-Pack-Signing-Method`",
       "codemod": null,
@@ -410,7 +410,7 @@
       "surface": "node config `credentialProvider` key",
       "kind": "schema-field",
       "deprecatedIn": "node-packs.md (`provider` is canonical; `credentialProvider` is named as the legacy alias)",
-      "authority": "spec/v1/node-packs.md \u00a7Credential resolution (\"and the legacy alias `credentialProvider`\")",
+      "authority": "spec/v1/node-packs.md §Credential resolution (\"and the legacy alias `credentialProvider`\")",
       "removeIn": "2.0",
       "replacement": "`provider`",
       "codemod": null,
@@ -446,7 +446,7 @@
       "surface": "`approvalRequested` / `clarificationRequested` legacy event payload definitions and the free-text `feedback` field",
       "kind": "schema-field",
       "deprecatedIn": "run-event-payloads.schema.json + interrupt-profiles.md (the interrupt primitive `interrupt.requested {kind}` is canonical)",
-      "authority": "schemas/run-event-payloads.schema.json $defs approvalRequested / clarificationRequested descriptions; spec/v1/interrupt-profiles.md \u00a7Approval",
+      "authority": "schemas/run-event-payloads.schema.json $defs approvalRequested / clarificationRequested descriptions; spec/v1/interrupt-profiles.md §Approval",
       "removeIn": "2.0",
       "replacement": "`interrupt.requested` with `kind: approval | clarification`; `refineFeedback`",
       "codemod": null,
@@ -467,8 +467,8 @@
       "status": "deprecated",
       "surface": "`a2a-0.3-legacy` A2A profile id",
       "kind": "profile-id",
-      "deprecatedIn": "RFC 0152 \u00a7A (A2A 1.0.0 published 2026-03-12; legacy window ends 2027-03-12)",
-      "authority": "spec/v1/a2a-integration.md \u00a7Discovery (\"a host SHOULD NOT advertise `a2a-0.3-legacy`\" after 2027-03-12); RFC 0152 register G1/R1",
+      "deprecatedIn": "RFC 0152 §A (A2A 1.0.0 published 2026-03-12; legacy window ends 2027-03-12)",
+      "authority": "spec/v1/a2a-integration.md §Discovery (\"a host SHOULD NOT advertise `a2a-0.3-legacy`\" after 2027-03-12); RFC 0152 register G1/R1",
       "removeIn": "2.0",
       "replacement": "`a2a-1.0` only; the v2 C.8 child removes the legacy path",
       "codemod": null,
@@ -489,8 +489,8 @@
       "status": "deprecated",
       "surface": "`mcp-2025-06-18-legacy` MCP profile id",
       "kind": "profile-id",
-      "deprecatedIn": "RFC 0153 \u00a7A (current profile accepted 2026-08-12; legacy window ends 2027-08-12)",
-      "authority": "spec/v1/mcp-integration.md \u00a7Discovery; RFC 0153 register G1/R1",
+      "deprecatedIn": "RFC 0153 §A (current profile accepted 2026-08-12; legacy window ends 2027-08-12)",
+      "authority": "spec/v1/mcp-integration.md §Discovery; RFC 0153 register G1/R1",
       "removeIn": "2.0",
       "replacement": "`mcp-2026-07-28` only; the v2 C.8 child removes the legacy path",
       "codemod": null,
@@ -511,8 +511,8 @@
       "status": "deprecated",
       "surface": "`openwop-Webhook-Signature: v1=<hex>` header the pre-1.9.0 SDK helpers read (never in any spec file)",
       "kind": "header",
-      "deprecatedIn": "RFC 0165 \u00a7C.3 (SDK-versus-spec defect; fixed in openwop-sdks TS 1.9.0 / Py 1.7.0 / Go v1.6.0)",
-      "authority": "RFC 0165 \u00a7C.3",
+      "deprecatedIn": "RFC 0165 §C.3 (SDK-versus-spec defect; fixed in openwop-sdks TS 1.9.0 / Py 1.7.0 / Go v1.6.0)",
+      "authority": "RFC 0165 §C.3",
       "removeIn": "2.0",
       "replacement": "`X-openwop-Signature: sha256={hex}` in v1.x; `OpenWOP-Signature` in v2",
       "codemod": null,
@@ -527,10 +527,10 @@
     {
       "id": "openwop.deprecation.undeclared-host-extension-families",
       "status": "proposed",
-      "surface": "the 11 `\u00a7host.*` families RFC 0144 classed `extension` (brand, canvas, chat, coordination, dataIntegration, entities, kanban, knowledge, launchStudio, messaging, webResearch) \u2014 declared in neither the dotted nor the root spelling",
+      "surface": "the 11 `§host.*` families RFC 0144 classed `extension` (brand, canvas, chat, coordination, dataIntegration, entities, kanban, knowledge, launchStudio, messaging, webResearch) — declared in neither the dotted nor the root spelling",
       "kind": "discovery-shape",
       "deprecatedIn": null,
-      "authority": "v2 charter C.2 (RFC 0167 \u00a7E): one declaration file; extensions live under one namespaced key; RFC 0144 \u00a7A classified them deliberately as extension namespaces",
+      "authority": "v2 charter C.2 (RFC 0167 §E): one declaration file; extensions live under one namespaced key; RFC 0144 §A classified them deliberately as extension namespaces",
       "removeIn": "2.0",
       "replacement": "the v2 extension namespace key (C.2 child); the prose sections move to spec/v2/ext/",
       "codemod": null,
@@ -549,9 +549,9 @@
       "surface": "the `/v1/` path-key prefix on every versioned operation",
       "kind": "path",
       "deprecatedIn": null,
-      "authority": "RFC 0172 \u00a7A.2 (v2 operations are unversioned path keys on a bare origin; v1 keys retained through the overlap and removed with the v1 tree at Phase 5)",
+      "authority": "RFC 0172 §A.2 (v2 operations are unversioned path keys on a bare origin; v1 keys retained through the overlap and removed with the v1 tree at Phase 5)",
       "removeIn": "2.0",
-      "replacement": "unversioned path keys + `OpenWOP-Version` negotiation (RFC 0172 \u00a7A)",
+      "replacement": "unversioned path keys + `OpenWOP-Version` negotiation (RFC 0172 §A)",
       "codemod": null,
       "note": "Proposed: the prefix is the v1 wire surface itself and cannot be deprecated inside v1.x; the row exists so the removal has a date and the alias coverage gate sees the surface.",
       "sources": [
@@ -568,11 +568,11 @@
       "surface": "the per-RFC `G<n>` local gap id as the register's ID column",
       "kind": "prose-convention",
       "deprecatedIn": "RFC 0178 (v2.0)",
-      "authority": "RFC 0178 \u00a7B.2 (the `openwop.gap.<rfc>.<n>` id is canonical; `G<n>` is an alias until 2.1)",
+      "authority": "RFC 0178 §B.2 (the `openwop.gap.<rfc>.<n>` id is canonical; `G<n>` is an alias until 2.1)",
       "removeIn": "2.1",
       "replacement": "`openwop.gap.<rfc>.<n>` in the ID column",
       "codemod": null,
-      "note": "Proposed: the alias survives through 2.0 so v1 register citations keep resolving; removed at 2.1. Status flipped proposed\u2192deprecated 2026-09-17: the surface has no occurrence in spec/v2, schemas/v2 or api/v2 (token grep, W7).",
+      "note": "Proposed: the alias survives through 2.0 so v1 register citations keep resolving; removed at 2.1. Status flipped proposed→deprecated 2026-09-17: the surface has no occurrence in spec/v2, schemas/v2 or api/v2 (token grep, W7).",
       "sources": [
         {
           "file": "spec/v1/gaps.schema.json",
@@ -586,7 +586,7 @@
       "surface": "registry version manifest `deprecated` boolean (an advisory version flag that collides with the JSON Schema `deprecated` annotation keyword)",
       "kind": "schema-field",
       "deprecatedIn": null,
-      "authority": "RFC 0178 \u00a7A.1 (renamed so the annotation keyword is unambiguous); the rename rides C.10's registry/v2 re-sign",
+      "authority": "RFC 0178 §A.1 (renamed so the annotation keyword is unambiguous); the rename rides C.10's registry/v2 re-sign",
       "removeIn": "2.0",
       "replacement": "`versionDeprecated`",
       "codemod": null,
@@ -605,7 +605,7 @@
       "surface": "the two-segment interrupt resume token `base64url(payload).hmac` with no scheme id, algorithm, or key id",
       "kind": "artifact",
       "deprecatedIn": null,
-      "authority": "RFC 0170 \u00a7E.1 (`ow2.<alg>.<kid>.<payload>.<mac>`); interrupt.md \u00a7Resume tokens' rotation rule references an algorithm-version discriminator the format does not contain",
+      "authority": "RFC 0170 §E.1 (`ow2.<alg>.<kid>.<payload>.<mac>`); interrupt.md §Resume tokens' rotation rule references an algorithm-version discriminator the format does not contain",
       "removeIn": "2.0",
       "replacement": "`ow2.<alg>.<kid>.<payload>.<mac>`; issued v1 tokens resolvable under `kid: legacy` until their expiry",
       "codemod": null,
@@ -624,7 +624,7 @@
       "surface": "`details.retryAfter`, `details.retryAfterMs`, `details.retryAfterSeconds` on error envelopes (three body spellings beside the `Retry-After` header)",
       "kind": "schema-field",
       "deprecatedIn": null,
-      "authority": "RFC 0171 \u00a7B.2 (retry timing lives in `Retry-After` only)",
+      "authority": "RFC 0171 §B.2 (retry timing lives in `Retry-After` only)",
       "removeIn": "2.0",
       "replacement": "the `Retry-After` header",
       "codemod": null,
@@ -647,7 +647,7 @@
       "surface": "dotted reserved keys in `RunOptions.configurable` (`ai.provider`, `ai.model`, `ai.credentialRef`, `distillation.tokenBudget`) and the open map they live in",
       "kind": "schema-field",
       "deprecatedIn": null,
-      "authority": "RFC 0171 \u00a7D.1 (closed, nested, versioned `configurable`)",
+      "authority": "RFC 0171 §D.1 (closed, nested, versioned `configurable`)",
       "removeIn": "2.0",
       "replacement": "`configurable.ai.*`, `configurable.distillation.*`; vendor keys under `configurable.extensions.<org>`",
       "codemod": "openwop.codemod.configurable-v2",
@@ -666,7 +666,7 @@
       "surface": "discovery flags that gate a security-load-bearing MUST: the fourteen `auth.*` gates, `replay.sideEffectSuppression`, `webhooks.durable`, `interrupt.approverRouting` (as a gate), `sandbox.supported` (as a gate)",
       "kind": "discovery-field",
       "deprecatedIn": null,
-      "authority": "RFC 0173 \u00a7A.1 (an obligation of the surface, never a discovery flag; RFC 0164 \u00a722's ruling applied corpus-wide)",
+      "authority": "RFC 0173 §A.1 (an obligation of the surface, never a discovery flag; RFC 0164 §22's ruling applied corpus-wide)",
       "removeIn": "2.0",
       "replacement": "the obligation binds when the surface is advertised; `auth.lanes[]`, `replay`, `webhooks`, `interrupt.refKinds[]`, `sandbox.isolationModel` stay as facets; relaxations are operator settings recorded in bundle v3 `host.relaxations[]`",
       "codemod": null,
@@ -693,11 +693,11 @@
       "surface": "`supportedTransports[]` at the discovery root (`rest | mcp | a2a | grpc`)",
       "kind": "discovery-field",
       "deprecatedIn": "RFC 0175 (v2.0)",
-      "authority": "RFC 0175 \u00a7B.1 (REST is the wire; A2A and MCP are compositions with first-class facets; gRPC is demoted)",
+      "authority": "RFC 0175 §B.1 (REST is the wire; A2A and MCP are compositions with first-class facets; gRPC is demoted)",
       "removeIn": "2.0",
       "replacement": "none; `a2a.*` and `mcp.*` facets",
       "codemod": "openwop.codemod.discovery-document-v2",
-      "note": "Proposed: nothing in the corpus reads the `mcp` or `a2a` members (profiles.md reads only `rest`). Status flipped proposed\u2192deprecated 2026-09-17: the surface has no occurrence in spec/v2, schemas/v2 or api/v2 (token grep, W7).",
+      "note": "Proposed: nothing in the corpus reads the `mcp` or `a2a` members (profiles.md reads only `rest`). Status flipped proposed→deprecated 2026-09-17: the surface has no occurrence in spec/v2, schemas/v2 or api/v2 (token grep, W7).",
       "sources": [
         {
           "file": "spec/v1/capabilities.md",
@@ -712,7 +712,7 @@
       "surface": "`capabilities.grpc` block and `grpc-transport.md` as a core Stable document with RFC 2119 MUSTs",
       "kind": "discovery-field",
       "deprecatedIn": null,
-      "authority": "RFC 0175 \u00a7A.1 (demoted to `spec/v2/ext/grpc-transport/`, `unwitnessable`, `adoption: none`; the door back into core is named)",
+      "authority": "RFC 0175 §A.1 (demoted to `spec/v2/ext/grpc-transport/`, `unwitnessable`, `adoption: none`; the door back into core is named)",
       "removeIn": "2.0",
       "replacement": "`spec/v2/ext/grpc-transport/` (documented, not advertised)",
       "codemod": "openwop.codemod.discovery-document-v2",
@@ -728,16 +728,16 @@
     {
       "id": "openwop.deprecation.well-known-wop-alias",
       "status": "proposed",
-      "surface": "`/.well-known/wop` served byte-identically with `/.well-known/openwop` (MyndHyve, the wop \u2192 openwop rebrand alias; the C.5 precedent)",
+      "surface": "`/.well-known/wop` served byte-identically with `/.well-known/openwop` (MyndHyve, the wop → openwop rebrand alias; the C.5 precedent)",
       "kind": "path",
       "deprecatedIn": null,
-      "authority": "RFC 0176 \u00a7C.3",
+      "authority": "RFC 0176 §C.3",
       "removeIn": "2.0",
       "removalTrigger": [
         "v2.0-cut",
         "v1-end-of-support"
       ],
-      "replacement": "`/.well-known/openwop` (one resource; RFC 0176 \u00a7C.1)",
+      "replacement": "`/.well-known/openwop` (one resource; RFC 0176 §C.1)",
       "codemod": null,
       "note": "Proposed: the alias exists in one host and was never registered; it is the model RFC 0172 cites for overlap publication.",
       "sources": [
@@ -753,11 +753,11 @@
       "surface": "`engines.openwop` ranges with no upper bound read as open (146 of 282 published versions)",
       "kind": "schema-field",
       "deprecatedIn": null,
-      "authority": "RFC 0177 \u00a7A.1 (absent ceiling \u21d2 `<2.0.0`; `pack_engine_unsupported` at install on every publication path)",
+      "authority": "RFC 0177 §A.1 (absent ceiling ⇒ `<2.0.0`; `pack_engine_unsupported` at install on every publication path)",
       "removeIn": "2.0",
       "replacement": "an explicit `>=x.y.z <M.0.0` range; the v2 schema enforces the grammar",
       "codemod": null,
-      "note": "Proposed: no codemod \u2014 the author declares compatibility; `openwop.codemod.pack-manifest-v2` refuses a manifest with no v2-satisfiable range.",
+      "note": "Proposed: no codemod — the author declares compatibility; `openwop.codemod.pack-manifest-v2` refuses a manifest with no v2-satisfiable range.",
       "sources": [
         {
           "file": "spec/v1/node-packs.md",
@@ -772,7 +772,7 @@
       "surface": "peer-dependency identifiers that are not declaration-file keys: `host.*` dotted twins (`host.fs`/`fs`, `host.queueBus`/`queueBus`), `openwop.agents.memoryBackends`, facet paths (`aiProviders.imageGeneration`, `host.aiEnvelope.await`), the reserved-slot prose list",
       "kind": "schema-field",
       "deprecatedIn": null,
-      "authority": "RFC 0177 \u00a7B.1\u2013\u00a7B.2 (identifier \u2261 declaration-file key; `pack_peer_dependency_undefined` reads against the file; generated alias table)",
+      "authority": "RFC 0177 §B.1–§B.2 (identifier ≡ declaration-file key; `pack_peer_dependency_undefined` reads against the file; generated alias table)",
       "removeIn": "2.0",
       "removalTrigger": "v1-end-of-support",
       "replacement": "`spec/v2/peer-dependency-aliases.json` through the overlap; `peerDependenciesMeta.<family>.facets[]` for facets",
@@ -788,14 +788,14 @@
     {
       "id": "openwop.deprecation.manifest-signing-method",
       "status": "deprecated",
-      "surface": "`signing.method: manual | ed25519 | sigstore` \u2014 two values the schema calls synonymous that the verifier treats as signatures over different bytes",
+      "surface": "`signing.method: manual | ed25519 | sigstore` — two values the schema calls synonymous that the verifier treats as signatures over different bytes",
       "kind": "schema-field",
       "deprecatedIn": "RFC 0177 (v2.0)",
-      "authority": "RFC 0177 \u00a7C.3 (one `signing.scheme: ed25519-canonical-json`)",
+      "authority": "RFC 0177 §C.3 (one `signing.scheme: ed25519-canonical-json`)",
       "removeIn": "2.0",
       "replacement": "`signing.scheme`",
       "codemod": "openwop.codemod.pack-manifest-v2",
-      "note": "Proposed: the codemod refuses `ed25519` and `sigstore` \u2014 those packs are re-signed in `registry/v2/`, never relabeled. Status flipped proposed\u2192deprecated 2026-09-17: the surface has no occurrence in spec/v2, schemas/v2 or api/v2 (token grep, W7).",
+      "note": "Proposed: the codemod refuses `ed25519` and `sigstore` — those packs are re-signed in `registry/v2/`, never relabeled. Status flipped proposed→deprecated 2026-09-17: the surface has no occurrence in spec/v2, schemas/v2 or api/v2 (token grep, W7).",
       "sources": [
         {
           "file": "schemas/registry-version-manifest.schema.json",
@@ -810,7 +810,7 @@
       "surface": "`connection-packs.md` clause 6: an installed pack takes precedence over a built-in of the same `provider.id` when its version is greater-than-or-equal",
       "kind": "prose-convention",
       "deprecatedIn": null,
-      "authority": "RFC 0177 \u00a7D.1 (RFC 0095 UQ4 decided: fail-closed `connection_provider_conflict`; qualified `<packName>#<id>` form)",
+      "authority": "RFC 0177 §D.1 (RFC 0095 UQ4 decided: fail-closed `connection_provider_conflict`; qualified `<packName>#<id>` form)",
       "removeIn": "2.0",
       "replacement": "fail-closed conflict; the qualified form",
       "codemod": null,
@@ -829,11 +829,11 @@
       "surface": "the nine `/v1/host/sample/*`, `/v1/host/workspace/files*` and `/v1/packs-test/*` seam/test operations in `api/openapi.yaml` and `spec/v1/operation-path-manifest.json`, and the `testSeams` discovery-flag proposals",
       "kind": "path",
       "deprecatedIn": "RFC 0168 (v2.0)",
-      "authority": "RFC 0168 \u00a7C (seams are the profile `openwop-conformance-seams-v2` with `api/seams-v2.yaml`; forbidden from the capability namespace)",
+      "authority": "RFC 0168 §C (seams are the profile `openwop-conformance-seams-v2` with `api/seams-v2.yaml`; forbidden from the capability namespace)",
       "removeIn": "2.0",
       "replacement": "`api/seams-v2.yaml`; `profiles[]` membership",
       "codemod": null,
-      "note": "Proposed: a generated document, not a persisted artifact. Status flipped proposed\u2192deprecated 2026-09-17: the surface has no occurrence in spec/v2, schemas/v2 or api/v2 (token grep, W7).",
+      "note": "Proposed: a generated document, not a persisted artifact. Status flipped proposed→deprecated 2026-09-17: the surface has no occurrence in spec/v2, schemas/v2 or api/v2 (token grep, W7).",
       "sources": [
         {
           "file": "spec/v1/operation-path-manifest.json",
@@ -848,7 +848,7 @@
       "surface": "the 29 corpus-coherence scenarios reported `blocked` in every host bundle",
       "kind": "artifact",
       "deprecatedIn": null,
-      "authority": "RFC 0168 \u00a7D.1 (spec-repo CI; never in a bundle)",
+      "authority": "RFC 0168 §D.1 (spec-repo CI; never in a bundle)",
       "removeIn": "2.0",
       "replacement": "`scripts/check-spec-coherence.mjs`",
       "codemod": null,
@@ -867,11 +867,11 @@
       "surface": "the published suite tarball's vendored `api/` and `schemas/` copies (and `src`, suite self-tests)",
       "kind": "artifact",
       "deprecatedIn": null,
-      "authority": "RFC 0168 \u00a7D.2 (`dist`, `fixtures`, `vectors` only; corpus as the digest-checked peer dependency `@openwop/spec-artifacts`)",
+      "authority": "RFC 0168 §D.2 (`dist`, `fixtures`, `vectors` only; corpus as the digest-checked peer dependency `@openwop/spec-artifacts`)",
       "removeIn": "2.0",
       "replacement": "`@openwop/spec-artifacts`",
       "codemod": null,
-      "note": "Proposed: the 1.138.1 mechanism \u2014 one source, no copy.",
+      "note": "Proposed: the 1.138.1 mechanism — one source, no copy.",
       "sources": [
         {
           "file": "conformance/README.md",
@@ -886,7 +886,7 @@
       "surface": "certification bundle v2 (`bundleVersion: \"2\"`, root `additionalProperties: true`, `witnessSha256` absent, unsigned)",
       "kind": "artifact",
       "deprecatedIn": null,
-      "authority": "RFC 0168 \u00a7E (bundle v3: closed root, required witness/build/tier/count, Ed25519 attestation)",
+      "authority": "RFC 0168 §E (bundle v3: closed root, required witness/build/tier/count, Ed25519 attestation)",
       "removeIn": "2.0",
       "removalTrigger": "v1-end-of-support",
       "replacement": "bundle v3 (`schemas/v2/certification-bundle.schema.json`)",
@@ -898,6 +898,24 @@
           "token": "\"const\": \"2\""
         }
       ]
+    },
+    {
+      "id": "openwop.deprecation.bare-webhook-id",
+      "status": "deprecated",
+      "surface": "the bare (opaque-only) spelling of `webhookId` — the `POST /webhooks` response field and every `webhookId` path parameter",
+      "kind": "schema-field",
+      "deprecatedIn": "RFC 0187 (v2.4)",
+      "authority": "RFC 0187 §A.2; spec/v2/core/identity.md §5 (\"Through the overlap the bare form is admitted on a major-2 path parameter — an affordance with an expiry\")",
+      "removeIn": "2.0",
+      "removalTrigger": "v1-end-of-support",
+      "replacement": "the tenant-bound form `<tenantId>/<opaque>`, projected per RFC 0184",
+      "codemod": null,
+      "sources": [
+        {
+          "file": "RFCS/0187-host-found-bindings.md",
+          "token": "A host MUST NOT mint one after this RFC"
+        }
+      ]
     }
   ]
 }