@openwop/spec-artifacts 2.35.1 → 2.36.0

package/schemas/v2/workflow-definition.schema.json

@@ -105,14 +105,14 @@
       }
     },
     "configurableSchema": {
-      "description": "Optional JSON Schema 2020-12 declaring which RunOptions.configurable keys this workflow accepts. When present, hosts MUST validate POST /runs `configurable` payloads against this schema and reject mismatches with `validation_error`. Hosts MUST surface this schema on GET /workflows/{workflowId} so clients can pre-flight-validate. See run-options.md \u00a7'Per-workflow configurableSchema'. Additive in v1.1.",
+      "description": "Optional JSON Schema 2020-12 declaring which RunOptions.configurable keys this workflow accepts. When present, hosts MUST validate POST /runs `configurable` payloads against this schema and reject mismatches with `validation_error`. Hosts MUST surface this schema on GET /workflows/{workflowId} so clients can pre-flight-validate. See run-options.md §'Per-workflow configurableSchema'. Additive in v1.1.",
       "type": "object",
       "additionalProperties": true
     },
     "defaults": {
       "type": "object",
       "additionalProperties": false,
-      "description": "RFC 0029 \u00a7B. Workflow-author-controlled per-kind fallback values that apply at resolution chain layer 3 (`workflow-defaults`) per `spec/v1/prompts.md` \u00a7\"Resolution chain (normative)\". Applied when neither the node (layer 1) nor the node's bound agent (layer 2) specifies a value for the kind. Future RFCs MAY add sibling defaults (e.g., `defaults.temperature`, `defaults.modelClass`) without colliding.",
+      "description": "RFC 0029 §B. Workflow-author-controlled per-kind fallback values that apply at resolution chain layer 3 (`workflow-defaults`) per `spec/v1/prompts.md` §\"Resolution chain (normative)\". Applied when neither the node (layer 1) nor the node's bound agent (layer 2) specifies a value for the kind. Future RFCs MAY add sibling defaults (e.g., `defaults.temperature`, `defaults.modelClass`) without colliding.",
       "properties": {
         "promptRefs": {
           "type": "object",
@@ -174,7 +174,7 @@
         "id": {
           "type": "string",
           "minLength": 1,
-          "description": "Node identifier, unique within the workflow. Intentionally has NO `maxLength` \u2014 RFC 0013 chain expansion mints ids of the form `${chainIdSlug}_${expansionId}_${fragmentId}` where `chainIdSlug` is an unbounded reverse-DNS string, so an expanded node id can exceed any short cap. A host MUST NOT reject or truncate a node id by length (no host-imposed `maxLength` stricter than this schema)."
+          "description": "Node identifier, unique within the workflow. Intentionally has NO `maxLength` — RFC 0013 chain expansion mints ids of the form `${chainIdSlug}_${expansionId}_${fragmentId}` where `chainIdSlug` is an unbounded reverse-DNS string, so an expanded node id can exceed any short cap. A host MUST NOT reject or truncate a node id by length (no host-imposed `maxLength` stricter than this schema)."
         },
         "typeId": {
           "$ref": "ids.schema.json#/$defs/typeId",
@@ -202,7 +202,7 @@
         },
         "config": {
           "type": "object",
-          "description": "Node configuration (pre-execution constants). The shape is per-typeId \u2014 node-pack manifests declare each typeId's `configSchema` for install-time validation. By convention, the keys `systemPromptRef`, `userPromptRef`, and `additionalPromptRefs` MAY hold PromptRef values per `spec/v1/prompts.md` \u00a7\"PromptRef\" (RFC 0027). Hosts advertising `capabilities.prompts.supported: true` MUST resolve these keys; hosts without the capability MAY treat them as opaque strings. When both an inline body (e.g., `config.systemPrompt`) and a `*PromptRef` are present, the ref wins and the host MUST emit a `log.appended` warning with `code: \"prompt_ref_supersedes_inline\"` per RFC 0027 \u00a7C.",
+          "description": "Node configuration (pre-execution constants). The shape is per-typeId — node-pack manifests declare each typeId's `configSchema` for install-time validation. By convention, the keys `systemPromptRef`, `userPromptRef`, and `additionalPromptRefs` MAY hold PromptRef values per `spec/v1/prompts.md` §\"PromptRef\" (RFC 0027). Hosts advertising `capabilities.prompts.supported: true` MUST resolve these keys; hosts without the capability MAY treat them as opaque strings. When both an inline body (e.g., `config.systemPrompt`) and a `*PromptRef` are present, the ref wins and the host MUST emit a `log.appended` warning with `code: \"prompt_ref_supersedes_inline\"` per RFC 0027 §C.",
           "additionalProperties": true
         },
         "inputs": {
@@ -225,7 +225,7 @@
             "primary",
             "secondary"
           ],
-          "description": "RFC 0065 \u2014 author hint that this terminal node's output is the workflow's primary deliverable (`primary`) or an auxiliary output (`secondary`). Advisory: hosts MUST execute the workflow identically regardless of value. Tooling MAY use the hint to pick which of N terminal nodes' outputs to surface as the run's canonical artifact. Unknown values + absent values fall back to default behavior (show all terminal outputs)."
+          "description": "RFC 0065 — author hint that this terminal node's output is the workflow's primary deliverable (`primary`) or an auxiliary output (`secondary`). Advisory: hosts MUST execute the workflow identically regardless of value. Tooling MAY use the hint to pick which of N terminal nodes' outputs to surface as the run's canonical artifact. Unknown values + absent values fall back to default behavior (show all terminal outputs)."
         },
         "disabled": {
           "type": "boolean",
@@ -247,22 +247,22 @@
         },
         "artifactType": {
           "type": "string",
-          "description": "Artifact type this node produces or reviews (first-class typed field \u2014 replaces the deprecated config.outputArtifactType bag entry)."
+          "description": "Artifact type this node produces or reviews (first-class typed field — replaces the deprecated config.outputArtifactType bag entry)."
         },
         "cardType": {
           "type": "string",
-          "description": "Explicit chat card type override (first-class typed field \u2014 replaces the deprecated config.chatCard bag entry)."
+          "description": "Explicit chat card type override (first-class typed field — replaces the deprecated config.chatCard bag entry)."
         },
         "outputSensitivity": {
           "type": "object",
           "additionalProperties": {
             "type": "boolean"
           },
-          "description": "Per-output-port sensitivity overrides. Map of port name \u2192 boolean. When true, the engine masks the named output value in `node.completed` event payloads. Layered on top of pack-level `nodes[].outputs[port].sensitive` declarations: workflow-level true takes precedence over pack-level false (and vice versa \u2014 last writer wins, but typically pack defaults are conservative and workflow overrides are explicit). See observability.md \u00a7Privacy classification (closes O5)."
+          "description": "Per-output-port sensitivity overrides. Map of port name → boolean. When true, the engine masks the named output value in `node.completed` event payloads. Layered on top of pack-level `nodes[].outputs[port].sensitive` declarations: workflow-level true takes precedence over pack-level false (and vice versa — last writer wins, but typically pack defaults are conservative and workflow overrides are explicit). See observability.md §Privacy classification (closes O5)."
         },
         "compensation": {
           "type": "object",
-          "description": "RFC 0151 \u00a7B \u2014 the inverse action for this node. OPTIONAL and closed. `nodeTypeId` MUST resolve at registration, so an unwind cannot fail on a typo discovered only during a failure. Inputs MUST derive from RECORDED FACTS: prompt or model regeneration MUST NOT construct a compensation input during replay, because a compensation built from a re-inferred value is not the inverse of what was actually done. A host MUST reject a compensation cycle.",
+          "description": "RFC 0151 §B — the inverse action for this node. OPTIONAL and closed. `nodeTypeId` MUST resolve at registration, so an unwind cannot fail on a typo discovered only during a failure. Inputs MUST derive from RECORDED FACTS: prompt or model regeneration MUST NOT construct a compensation input during replay, because a compensation built from a re-inferred value is not the inverse of what was actually done. A host MUST reject a compensation cycle.",
           "additionalProperties": false,
           "required": [
             "nodeTypeId"
@@ -274,7 +274,7 @@
             },
             "inputMapping": {
               "type": "object",
-              "description": "Derived from recorded facts only \u2014 node outputs and run inputs already in the event log.",
+              "description": "Derived from recorded facts only — node outputs and run inputs already in the event log.",
               "additionalProperties": true
             },
             "retry": {
@@ -293,17 +293,17 @@
             },
             "requiresApproval": {
               "type": "boolean",
-              "description": "RFC 0151 \u00a7C \u2014 an inverse action can itself be harmful (RFC 0147 R9), so it may be gated behind the same approval surface as a forward effect."
+              "description": "RFC 0151 §C — an inverse action can itself be harmful (RFC 0147 R9), so it may be gated behind the same approval surface as a forward effect."
             },
             "waiveRequiresApproval": {
               "type": "boolean",
-              "description": "RFC 0151 \u00a7B/\u00a7E (S36, 2026-08-17) \u2014 OPTIONAL. When true, ABANDONING this inverse action (\u00a7E `skip with justification` or `terminate as uncompensated`) requires an RFC 0051 approval to have resolved `approved` first \u2014 if a human must authorize RUNNING an inverse, a human must authorize deciding it will NEVER run. DEFAULT = the obligation's EFFECTIVE `requiresApproval` (after the policy's `approvalScope` escalation, \u00a7B) \u2014 NOT false \u2014 so the field is purely additive: no existing document changes meaning. Stamped onto the obligation at MINT time like `requiresApproval` (a mid-flight redefinition cannot change who had to authorize). Does NOT apply to `substitute` (still an attempt to undo; a substitution is a new planVersion whose own `requiresApproval` governs it). No policy-level counterpart: because the default inherits the effective value, an `approvalScope` escalation escalates waives with it."
+              "description": "RFC 0151 §B/§E (S36, 2026-08-17) — OPTIONAL. When true, ABANDONING this inverse action (§E `skip with justification` or `terminate as uncompensated`) requires an RFC 0051 approval to have resolved `approved` first — if a human must authorize RUNNING an inverse, a human must authorize deciding it will NEVER run. DEFAULT = the obligation's EFFECTIVE `requiresApproval` (after the policy's `approvalScope` escalation, §B) — NOT false — so the field is purely additive: no existing document changes meaning. Stamped onto the obligation at MINT time like `requiresApproval` (a mid-flight redefinition cannot change who had to authorize). Does NOT apply to `substitute` (still an attempt to undo; a substitution is a new planVersion whose own `requiresApproval` governs it). No policy-level counterpart: because the default inherits the effective value, an `approvalScope` escalation escalates waives with it."
             }
           }
         },
         "irreversibleEffect": {
           "type": "boolean",
-          "description": "RFC 0151 \u00a7B (UQ4, resolved 2026-08-16) \u2014 the author states that this node's committed effect HAS NO INVERSE. OPTIONAL; absent or false means nothing (an undeclared compensator is still not implied). Mutually exclusive with `compensation`: a node declaring both is contradictory and a host MUST reject it at registration (`validation_error`). When true and the node's effect committed before an unwind starts, the plan records the node as `irreversible` (never completed) so the \u00a7D rollup caps at `partial` \u2014 a reader can no longer infer a full undo from a `completed` that quietly skipped it."
+          "description": "RFC 0151 §B (UQ4, resolved 2026-08-16) — the author states that this node's committed effect HAS NO INVERSE. OPTIONAL; absent or false means nothing (an undeclared compensator is still not implied). Mutually exclusive with `compensation`: a node declaring both is contradictory and a host MUST reject it at registration (`validation_error`). When true and the node's effect committed before an unwind starts, the plan records the node as `irreversible` (never completed) so the §D rollup caps at `partial` — a reader can no longer infer a full undo from a `completed` that quietly skipped it."
         }
       },
       "additionalProperties": false,
@@ -385,14 +385,14 @@
             "truthy",
             "falsy"
           ],
-          "description": "Operator. `equals`/`notEquals`/`contains` compare `left` to `right`; `regex` matches `left` against `right`; `expression` evaluates `expression`. RFC 0134: `truthy`/`falsy` test the resolved value at `left` for JS-style truthiness and take NO `right` operand (the edge contributes iff `left` is truthy \u2014 resp. falsy/absent). `left` is required for all operators except `expression`."
+          "description": "Operator. `equals`/`notEquals`/`contains` compare `left` to `right`; `regex` matches `left` against `right`; `expression` evaluates `expression`. RFC 0134: `truthy`/`falsy` test the resolved value at `left` for JS-style truthiness and take NO `right` operand (the edge contributes iff `left` is truthy — resp. falsy/absent). `left` is required for all operators except `expression`."
         },
         "left": {
           "type": "string",
           "description": "Left operand path (e.g., 'status', 'output.approved'). Required for every operator except `expression`."
         },
         "right": {
-          "description": "Right operand value (any JSON value). Meaningless for `truthy`/`falsy` (RFC 0134) \u2014 a host MUST ignore it there, not error."
+          "description": "Right operand value (any JSON value). Meaningless for `truthy`/`falsy` (RFC 0134) — a host MUST ignore it there, not error."
         },
         "expression": {
           "type": "string",
@@ -507,7 +507,7 @@
             "chat-message",
             "channel-write"
           ],
-          "description": "Trigger discriminator. The `channel-write` variant fires a node when a named channel receives a write (closes C2 \u2014 reactive cross-engine pattern). Its `config` shape: `{channel: string, onlyFrom?: 'child'|'parent'|'any', debounceMs?: integer}`. See channels-and-reducers.md \u00a7Distributed reducers."
+          "description": "Trigger discriminator. The `channel-write` variant fires a node when a named channel receives a write (closes C2 — reactive cross-engine pattern). Its `config` shape: `{channel: string, onlyFrom?: 'child'|'parent'|'any', debounceMs?: integer}`. See channels-and-reducers.md §Distributed reducers."
         },
         "name": {
           "type": "string"
@@ -564,12 +564,12 @@
         "sensitive": {
           "type": "boolean",
           "default": false,
-          "description": "When true, the engine masks this variable's value in persisted `variable.changed` events, `state.snapshot` projections, and `RunSnapshot.variables`. Reads inside NodeModule executors work normally; only persistence + external surfaces mask. See observability.md \u00a7Privacy classification (closes O5)."
+          "description": "When true, the engine masks this variable's value in persisted `variable.changed` events, `state.snapshot` projections, and `RunSnapshot.variables`. Reads inside NodeModule executors work normally; only persistence + external surfaces mask. See observability.md §Privacy classification (closes O5)."
         },
         "format": {
           "type": "string",
           "minLength": 1,
-          "description": "RFC 0136 (`Active`). ADVISORY presentational hint for a `type: \"string\"` variable, drawn from the JSON-Schema format vocabulary (`email`, `uri`, `date`, `date-time`, `time`, `duration` are the v1 recognised set). Hosts SHOULD use it to choose an input affordance (e.g. an email keyboard). It is NOT a validation contract: a host MUST NOT reject a run, refuse a variable write, or fail validation because a value does not match, and MUST NOT assume a value matches when reading it. DELIBERATELY NOT AN ENUM \u2014 an unrecognised value MUST round-trip and degrade to plain text rather than error (RFC 0136 requirement 2), which an enum would turn into a hard validation failure on a client-submitted (closed) shape. Ignored when `type` is not `\"string\"`. Orthogonal to `sensitive`: masking hides the VALUE on server-emitted surfaces, `format` describes the FIELD in the definition, so the two compose with no interaction."
+          "description": "RFC 0136 (`Active`). ADVISORY presentational hint for a `type: \"string\"` variable, drawn from the JSON-Schema format vocabulary (`email`, `uri`, `date`, `date-time`, `time`, `duration` are the v1 recognised set). Hosts SHOULD use it to choose an input affordance (e.g. an email keyboard). It is NOT a validation contract: a host MUST NOT reject a run, refuse a variable write, or fail validation because a value does not match, and MUST NOT assume a value matches when reading it. DELIBERATELY NOT AN ENUM — an unrecognised value MUST round-trip and degrade to plain text rather than error (RFC 0136 requirement 2), which an enum would turn into a hard validation failure on a client-submitted (closed) shape. Ignored when `type` is not `\"string\"`. Orthogonal to `sensitive`: masking hides the VALUE on server-emitted surfaces, `format` describes the FIELD in the definition, so the two compose with no interaction."
         }
       },
       "additionalProperties": false
@@ -648,7 +648,7 @@
       "properties": {
         "reducer": {
           "type": "string",
-          "description": "Canonical names: 'replace', 'append', 'merge', 'counter', 'votes', 'feedback', 'message' (Multi-Agent Shift Phase 1 \u2014 append-only + idempotent on `messageId`). Custom reducers MUST use 'vendor.<org>.<name>'.",
+          "description": "Canonical names: 'replace', 'append', 'merge', 'counter', 'votes', 'feedback', 'message' (Multi-Agent Shift Phase 1 — append-only + idempotent on `messageId`). Custom reducers MUST use 'vendor.<org>.<name>'.",
           "pattern": "^(replace|append|merge|counter|votes|feedback|message|vendor\\.[a-z][a-z0-9_-]*\\.[a-z][a-z0-9_-]*)$"
         },
         "schema": {
@@ -664,7 +664,7 @@
           "type": "integer",
           "minimum": 1,
           "maximum": 31536000000,
-          "description": "Optional entry-age TTL in milliseconds (closes C3). Applies to `append` / `votes` / `feedback` reducers; ignored on others. Engine drops entries older than this age (lazy: on read or next write). Range: 1..1 year. Replay-safe \u2014 uses original event timestamps for comparison. See channels-and-reducers.md \u00a7Channel TTL."
+          "description": "Optional entry-age TTL in milliseconds (closes C3). Applies to `append` / `votes` / `feedback` reducers; ignored on others. Engine drops entries older than this age (lazy: on read or next write). Range: 1..1 year. Replay-safe — uses original event timestamps for comparison. See channels-and-reducers.md §Channel TTL."
         },
         "options": {
           "type": "object",
@@ -686,18 +686,18 @@
             "minimum": 1
           },
           "uniqueItems": true,
-          "description": "Older schema versions whose persisted writes are forward-readable under the CURRENT schema. The engine validates each old write against the current schema during fold; pass = include, fail = hard error `channel_schema_breaking_change`. Empty/omitted = no backward compat (any older write trips the breaking-change error). For breaking edits, authors create a new channel name + a copy node \u2014 see channels-and-reducers.md \u00a7Channel schema migration."
+          "description": "Older schema versions whose persisted writes are forward-readable under the CURRENT schema. The engine validates each old write against the current schema during fold; pass = include, fail = hard error `channel_schema_breaking_change`. Empty/omitted = no backward compat (any older write trips the breaking-change error). For breaking edits, authors create a new channel name + a copy node — see channels-and-reducers.md §Channel schema migration."
         },
         "sensitive": {
           "type": "boolean",
           "default": false,
-          "description": "When true, the engine masks `channel.written` event payloads' `value` field. The reduced channel state in `RunSnapshot.channels` is also masked when read via the REST surface. See observability.md \u00a7Privacy classification (closes O5)."
+          "description": "When true, the engine masks `channel.written` event payloads' `value` field. The reduced channel state in `RunSnapshot.channels` is also masked when read via the REST surface. See observability.md §Privacy classification (closes O5)."
         }
       },
       "additionalProperties": false
     },
     "ChannelAccess": {
-      "description": "Per-channel access control. See channels-and-reducers.md \u00a7Channel access control (closes C1). Three forms: 'public' (no restriction; same as omitting), 'private' (lockdown shorthand \u2014 equivalent to {readers: [], writers: []}), or an explicit {readers?, writers?} object where each side is independently scoped (omitted = open, present = strict allowlist).",
+      "description": "Per-channel access control. See channels-and-reducers.md §Channel access control (closes C1). Three forms: 'public' (no restriction; same as omitting), 'private' (lockdown shorthand — equivalent to {readers: [], writers: []}), or an explicit {readers?, writers?} object where each side is independently scoped (omitted = open, present = strict allowlist).",
       "oneOf": [
         {
           "const": "public"
@@ -799,7 +799,7 @@
             "regulated"
           ],
           "default": "public",
-          "description": "Top-level workflow sensitivity tier. Sets the `openwop.compliance_class` span attribute on every span the run produces. Drives default retention / masking / export-gating policy at observability collectors. See observability.md \u00a7Privacy classification (closes O5)."
+          "description": "Top-level workflow sensitivity tier. Sets the `openwop.compliance_class` span attribute on every span the run produces. Drives default retention / masking / export-gating policy at observability collectors. See observability.md §Privacy classification (closes O5)."
         },
         "complianceConfig": {
           "type": "object",
@@ -849,7 +849,7 @@
         },
         "compensation": {
           "$ref": "compensation-policy.schema.json",
-          "description": "RFC 0151 \u00a7B \u2014 the workflow-level compensation policy (WHEN an unwind starts and HOW it runs). OPTIONAL and capability-gated: a host that advertises `capabilities.compensation` MUST validate it at registration; a host that does not MUST refuse the workflow with `capability_required` rather than accept a policy it will never honour. Node-level `nodes[].compensation` declarations remain valid without it \u2014 they describe the inverse action; this key requests the unwind."
+          "description": "RFC 0151 §B — the workflow-level compensation policy (WHEN an unwind starts and HOW it runs). OPTIONAL and capability-gated: a host that advertises `capabilities.compensation` MUST validate it at registration; a host that does not MUST refuse the workflow with `capability_required` rather than accept a policy it will never honour. Node-level `nodes[].compensation` declarations remain valid without it — they describe the inverse action; this key requests the unwind."
         }
       },
       "additionalProperties": false

package/spec/v1/alias-detectors.json

@@ -1,7 +1,7 @@
 {
   "$comment": "RFC 0167 §E — the alias inventory as data. Each detector names a literal token that, while present in the named file, proves an alias or legacy spelling is still in the corpus, and the spec/v1/deprecations.json row that must cover it. scripts/check-alias-coverage.mjs fails when a token is present and its row is missing, or when a row's detector token has disappeared (the alias is gone — retire the detector with the surface). Reviewed, not derived: a grep cannot decide what is an alias; this file records the decision.",
   "version": 1,
-  "updated": "2026-09-18",
+  "updated": "2026-09-22",
   "detectors": [
     {
       "alias": "capabilities wrapper object",
@@ -296,6 +296,18 @@
       "file": "schemas/v2/capabilities.schema.json",
       "token": "testSeams",
       "deprecation": "openwop.deprecation.observability-test-seams-facet"
+    },
+    {
+      "alias": "v2 A2UI delta frame schema (RFC 0114 JSON-Patch transport)",
+      "file": "schemas/v2/a2ui-surface-delta-frame.schema.json",
+      "token": "RFC 0114",
+      "deprecation": "openwop.deprecation.v2-a2ui-delta-frame"
+    },
+    {
+      "alias": "v2 a2uiSurface.deltaTransport facet",
+      "file": "spec/v2/declaration.json",
+      "token": "\"deltaTransport\"",
+      "deprecation": "openwop.deprecation.v2-a2ui-delta-transport-facet"
     }
   ]
 }

package/spec/v1/core-standard-manifest.json

@@ -4,7 +4,7 @@
   "provenance": {
     "suite": {
       "package": "@openwop/openwop-conformance",
-      "version": "2.35.1"
+      "version": "2.36.0"
     },
     "note": "Derived from the corpus at generation time. Regenerate with --write; verify with --check."
   },
@@ -419,5 +419,5 @@
       "$id": "https://openwop.dev/spec/v1/workspace-file.schema.json"
     }
   ],
-  "digest": "2ec98f00720133ca77ff432cd0ede9a6cffb8401e9ab18dc07242ca64dbad88e"
+  "digest": "05353df11a21c56e43e356a53d8c73073461680b548c7b26f8622e6ffaae04d5"
 }

package/spec/v1/deprecations.json

@@ -1,7 +1,7 @@
 {
   "$schema": "./deprecations.schema.json",
   "version": 1,
-  "updated": "2026-09-18",
+  "updated": "2026-09-22",
   "entries": [
     {
       "id": "openwop.deprecation.capabilities-wrapper",
@@ -958,6 +958,50 @@
         }
       ],
       "removalTrigger": "v1-end-of-support"
+    },
+    {
+      "id": "openwop.deprecation.v2-a2ui-delta-frame",
+      "status": "deprecated",
+      "surface": "`schemas/v2/a2ui-surface-delta-frame.schema.json` — the RFC 0114 JSON-Patch transport frame, seeded into v2 and never contracted there",
+      "kind": "artifact",
+      "deprecatedIn": "2.36 (RFC 0209)",
+      "authority": "spec/v2/ext/a2uiSurface/README.md §\"`deltaTransport` (deprecated)\" (RFC 0209 §D.15)",
+      "removeIn": "3.0",
+      "replacement": "schema-version-2 `ui.a2ui-surface` envelopes carrying A2UI `updateComponents` / `updateDataModel`, folded per surface (RFC 0209 §C.9)",
+      "codemod": null,
+      "note": "v2 only; v1 RFC 0114 stands. Removal minor: 2.38 at the earliest (two released minors after the 2.36 deprecation, RFC 0197 §A.2 R2), and only once RFC 0197 is Accepted and its gates (check-v2-retirement.mjs, check-v2-surface-monotone.mjs, a minor-aware check-removal-dates.mjs) are in openwop:check; removeIn moves from 3.0 to that minor in the same PR. Until then 3.0. No committed v2 bundle carries the frame (checked 2026-09-22).",
+      "sources": [
+        {
+          "file": "schemas/v2/a2ui-surface-delta-frame.schema.json",
+          "token": "RFC 0114"
+        }
+      ]
+    },
+    {
+      "id": "openwop.deprecation.v2-a2ui-delta-transport-facet",
+      "status": "deprecated",
+      "surface": "`extensions.<org>.a2uiSurface.deltaTransport` in v2 — the RFC 0114 delta-transport facet",
+      "kind": "discovery-field",
+      "deprecatedIn": "2.36 (RFC 0209)",
+      "authority": "spec/v2/ext/a2uiSurface/README.md §\"`deltaTransport` (deprecated)\" (RFC 0209 §D.15)",
+      "removeIn": "3.0",
+      "replacement": "schema-version-2 `ui.a2ui-surface` envelopes carrying A2UI `updateComponents` / `updateDataModel` (RFC 0209 §C.9); a v2 host SHOULD NOT advertise the facet",
+      "codemod": null,
+      "note": "v2 only; v1 RFC 0114 stands. Removal minor: 2.38 at the earliest, on the same RFC 0197 conditions as openwop.deprecation.v2-a2ui-delta-frame; until then 3.0. No committed v2 bundle advertises the facet (checked 2026-09-22).",
+      "sources": [
+        {
+          "file": "RFCS/0209-v2-a2ui-surfaces-are-a2ui-v0-9.md",
+          "token": "`a2uiSurface.deltaTransport` facet are deprecated for major 2"
+        },
+        {
+          "file": "spec/v2/ext/a2uiSurface/README.md",
+          "token": "`deltaTransport` (deprecated)"
+        },
+        {
+          "file": "spec/v2/declaration.json",
+          "token": "deltaTransport"
+        }
+      ]
     }
   ]
 }

package/spec/v1/deprecations.schema.json

@@ -95,7 +95,7 @@
         "removeIn": {
           "type": "string",
           "pattern": "^[0-9]+\\.[0-9]+$",
-          "description": "Protocol major.minor at which the surface is removed. v1.x deprecations remove no earlier than 2.0 (COMPATIBILITY.md \u00a77)."
+          "description": "Protocol major.minor at which the surface is removed. v1.x deprecations remove no earlier than 2.0 (COMPATIBILITY.md \u00a77). A `v2-minor` row (RFC 0197) instead names the 2.x minor at which the v2 surface is removed; `check-removal-dates.mjs` compares it to `spec/v2/release.json` `version` minor-by-minor, not major-by-major."
         },
         "replacement": {
           "type": "string",
@@ -141,7 +141,8 @@
               "type": "string",
               "enum": [
                 "v2.0-cut",
-                "v1-end-of-support"
+                "v1-end-of-support",
+                "v2-minor"
               ]
             },
             {
@@ -150,14 +151,100 @@
                 "type": "string",
                 "enum": [
                   "v2.0-cut",
-                  "v1-end-of-support"
+                  "v1-end-of-support",
+                  "v2-minor"
                 ]
               },
               "minItems": 1,
               "uniqueItems": true
             }
           ],
-          "description": "RFC 0176 \u00a7C.2: the event(s) that remove the surface. `v2.0-cut` \u2014 absent from the v2 representation from the cut; `v1-end-of-support` \u2014 removed from the v1 representation when every INTEROP-MATRIX host has produced a non-vacuous v2 bundle plus 90 days (charter Phase 0 rule). A SET, because \u00a7C.2 gives one row two independent removal events: the wrapper, the dotted mirror and Capabilities-Etag are absent from v2 at the cut AND removed from v1 at end-of-support, and a scalar could express only one. Until 2026-09-04 those rows carried `v1-end-of-support` alone while `v2-well-known-one-resource` asserted the `v2.0-cut` obligation by name \u2014 the scenario was right about the effect and the data could not say so. A bare string remains valid for rows with one trigger. Optional; removeIn stays the version."
+          "description": "RFC 0176 \u00a7C.2: the event(s) that remove the surface. `v2.0-cut` \u2014 absent from the v2 representation from the cut; `v1-end-of-support` \u2014 removed from the v1 representation when every INTEROP-MATRIX host has produced a non-vacuous v2 bundle plus 90 days (charter Phase 0 rule). A SET, because \u00a7C.2 gives one row two independent removal events: the wrapper, the dotted mirror and Capabilities-Etag are absent from v2 at the cut AND removed from v1 at end-of-support, and a scalar could express only one. Until 2026-09-04 those rows carried `v1-end-of-support` alone while `v2-well-known-one-resource` asserted the `v2.0-cut` obligation by name \u2014 the scenario was right about the effect and the data could not say so. A bare string remains valid for rows with one trigger. Optional; removeIn stays the version. `v2-minor` \u2014 RFC 0197 \u00a7A.2: removed from the v2 representation at `removeIn` (a 2.N minor, inside the major), admitted only when `scripts/check-v2-retirement.mjs` proves predicates R1\u2013R6 for the row. A `v2-minor` row MUST carry `retirement`."
+        },
+        "retirement": {
+          "type": "object",
+          "additionalProperties": false,
+          "description": "RFC 0197 \u00a7A.2 \u2014 the machine-readable retirement record. REQUIRED when `removalTrigger` includes `v2-minor`, and meaningless otherwise. `check-v2-retirement.mjs` reads every field: it is the row\u2019s claim about WHAT is being retired, which the gate then falsifies against the committed bundles, the registry census, the declaration and the public history.",
+          "required": [
+            "class",
+            "family",
+            "deprecatedInMinor"
+          ],
+          "properties": {
+            "class": {
+              "enum": [
+                "family",
+                "facet",
+                "enum-member",
+                "envelope-kind"
+              ],
+              "description": "RFC 0197 R4 \u2014 the four kinds whose ABSENCE the 2.0 contract already defines. A REQUIRED property, an endpoint, an error code\u2019s meaning and a header are never retirable inside the major."
+            },
+            "persistence": {
+              "enum": [
+                "advertised",
+                "persisted"
+              ],
+              "default": "advertised",
+              "description": "`advertised`: the schema drops the member at `removeIn` (a family, a facet, an advertised enum value). `persisted`: the member STAYS in the reader schema, annotated `x-openwop-retired-in`, and only emission is forbidden (RFC 0197 \u00a7A.3)."
+            },
+            "family": {
+              "type": "string",
+              "minLength": 1,
+              "description": "`spec/v2/declaration.json` `families[].key` of the family that ADVERTISES the surface. RFC 0197 R5 reads that row\u2019s `maturity`."
+            },
+            "deprecatedInMinor": {
+              "type": "string",
+              "pattern": "^2\\.[0-9]+$",
+              "description": "The 2.x minor in which the deprecation row was announced. RFC 0197 R2 requires `removeIn` to be at least two minors later; the 30-day leg is read from the public history, never from this field."
+            },
+            "discovery": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": [
+                "path"
+              ],
+              "description": "Where the surface would appear in a host\u2019s v2 discovery document. RFC 0197 R3 scans every committed `evidence/v2-host-bundles/*.json` `discovery.document` at this path.",
+              "properties": {
+                "path": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "Dotted path inside `discovery.document`, e.g. `connections.transports` or `packs.testMode`."
+                },
+                "value": {
+                  "description": "When present, only this value at `path` (or this member of an array at `path`) counts as carrying the surface; when absent, presence of the path is enough."
+                }
+              }
+            },
+            "manifest": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": [
+                "kinds",
+                "path"
+              ],
+              "description": "Where the surface would appear in a PUBLISHED registry manifest. RFC 0197 R3\u2019s registry leg reads the `registryManifestCensus` that `generate-cross-repo-evidence.mjs` writes for this row id.",
+              "properties": {
+                "kinds": {
+                  "type": "array",
+                  "minItems": 1,
+                  "items": {
+                    "type": "string",
+                    "minLength": 1
+                  },
+                  "description": "Manifest kinds to census, e.g. `[\"connection-pack\"]`."
+                },
+                "path": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "Dotted path inside the manifest."
+                },
+                "value": {
+                  "description": "When present, only this value at `path` counts."
+                }
+              }
+            }
+          }
         }
       },
       "allOf": [
@@ -196,6 +283,34 @@
               "note"
             ]
           }
+        },
+        {
+          "$comment": "RFC 0197 \u00a7A.2 \u2014 a `v2-minor` trigger without a `retirement` record is a claim the gate cannot falsify, so the schema refuses it.",
+          "if": {
+            "properties": {
+              "removalTrigger": {
+                "anyOf": [
+                  {
+                    "const": "v2-minor"
+                  },
+                  {
+                    "type": "array",
+                    "contains": {
+                      "const": "v2-minor"
+                    }
+                  }
+                ]
+              }
+            },
+            "required": [
+              "removalTrigger"
+            ]
+          },
+          "then": {
+            "required": [
+              "retirement"
+            ]
+          }
         }
       ]
     }