@openwop/spec-artifacts 2.35.1 → 2.36.0

package/spec/v1/gaps.json

@@ -1,7 +1,7 @@
 {
   "$schema": "./gaps.schema.json",
   "version": 1,
-  "updated": "2026-09-19",
+  "updated": "2026-09-23",
   "witnessClasses": [
     "witnessable-unaided",
     "witnessable-gated",
@@ -3624,8 +3624,8 @@
       "surface": "`localizations` keys + write `locale` use the subset `^[a-z]{2}(-[A-Z]{2})?$`, not the annex's full BCP-47 pattern. Confirm or widen (widening is additive).",
       "witness": "unclassified",
       "requirementId": null,
-      "disposition": "carried",
-      "target": "openwop.gap.0103.5",
+      "disposition": "transferred",
+      "target": "rfc-0206",
       "sources": [
         {
           "file": "RFCS/registers/0103-localized-content-surface.gaps.md",
@@ -4624,7 +4624,7 @@
       "rfc": "0114",
       "local": "G4",
       "section": "Conformance",
-      "surface": "No host advertises `ui.a2ui-surface.deltaUpdates` yet",
+      "surface": "`a2uiSurface.deltaTransport` has one witness (openwop-app, 2026-07-06), now implemented behind an env flag and not advertised on the live host (observed 2026-09-22, INTEROP-MATRIX); no second host advertises it",
       "witness": "unclassified",
       "requirementId": null,
       "disposition": "carried",
@@ -10671,6 +10671,1927 @@
         }
       ]
     },
+    {
+      "id": "openwop.gap.0197.1",
+      "rfc": "0197",
+      "local": "G1",
+      "section": "§C.7",
+      "surface": "MyndHyve's committed v2 bundle (suite 2.35.1, 2026-09-22) advertises 38 families `stable` that `spec/v2/declaration.json` calls `experimental`. §C makes that non-conforming for bundles cut on the first suite release that ships this RFC.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "myndhyve-recut",
+      "sources": [
+        {
+          "file": "RFCS/registers/0197-v2-surfaces-retired-never-reshaped.gaps.md",
+          "token": "G1"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0197.2",
+      "rfc": "0197",
+      "local": "G2",
+      "section": "§A.2 R3",
+      "surface": "The registry leg is only as good as `evidence/cross-repo-manifests.json`, which is generated from a sibling checkout the gate cannot see. A stale checkout undercounts. The local registry checkout is at `d0d4700` with CORPUS_TAG v2.2.3, 30+ minors behind. The 30-day freshness bound limits the damage, but it cannot prove the checkout was current when the census ran.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "scripts/generate-cross-repo-evidence.mjs",
+      "sources": [
+        {
+          "file": "RFCS/registers/0197-v2-surfaces-retired-never-reshaped.gaps.md",
+          "token": "G2"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0197.3",
+      "rfc": "0197",
+      "local": "G3",
+      "section": "§A.1",
+      "surface": "`spec/v2/surface-baseline.json` is regenerated by the release PR. A contributor who regenerates it by hand in a feature PR erases the diff the gate exists to see.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "scripts/check-v2-surface-monotone.mjs",
+      "sources": [
+        {
+          "file": "RFCS/registers/0197-v2-surfaces-retired-never-reshaped.gaps.md",
+          "token": "G3"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0197.4",
+      "rfc": "0197",
+      "local": "G4",
+      "section": "§A.3",
+      "surface": "The host half of \"readers keep accepting retired persisted shapes\" is unwitnessable: a black-box suite cannot put a pre-retirement member into a run log that it creates after the retirement. Only the schema half (the member stays, annotated) is gated.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "api/seams-v2.yaml",
+      "sources": [
+        {
+          "file": "RFCS/registers/0197-v2-surfaces-retired-never-reshaped.gaps.md",
+          "token": "G4"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0197.5",
+      "rfc": "0197",
+      "local": "G5",
+      "section": "§A.2 R4/R5",
+      "surface": "Envelope kinds appear in R4's defined-absence list but are blocked by R5 in practice: every kind is advertised under `supportedEnvelopes`, which is `stable`. The class is listed but empty.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "scripts/check-v2-retirement.mjs",
+      "sources": [
+        {
+          "file": "RFCS/registers/0197-v2-surfaces-retired-never-reshaped.gaps.md",
+          "token": "G5"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0197.6",
+      "rfc": "0197",
+      "local": "G6",
+      "section": "§A.2 R6",
+      "surface": "The tier-3 test reads two sources: the generated EoS clock (from bundles' `claimedProfiles[].evidenceTier`) and the INTEROP-MATRIX v2 table's Evidence-tier column (prose). A tier-3 host listed without a bundle appears only in the prose. Parsing that column is a prose-scrape, which Axiom 4 disfavours.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "scripts/generate-v1-eos-clock.mjs",
+      "sources": [
+        {
+          "file": "RFCS/registers/0197-v2-surfaces-retired-never-reshaped.gaps.md",
+          "token": "G6"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0197.7",
+      "rfc": "0197",
+      "local": "G7",
+      "section": "§A.2 R2",
+      "surface": "\"Two released minors\": whether a minor was released is read from `v2.*` tags. A shallow CI clone has no tags or history, so R2's `git log` anchoring cannot run there.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "scripts/check-v2-retirement.mjs",
+      "sources": [
+        {
+          "file": "RFCS/registers/0197-v2-surfaces-retired-never-reshaped.gaps.md",
+          "token": "G7"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0197.8",
+      "rfc": "0197",
+      "local": "G8",
+      "section": "§B.5",
+      "surface": "The consumer SHOULD (pin the schema version you validate with) has no delivery mechanism for SDK users, whose bundled schemas track the SDK version, not the host's minor.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "openwop-sdks",
+      "sources": [
+        {
+          "file": "RFCS/registers/0197-v2-surfaces-retired-never-reshaped.gaps.md",
+          "token": "G8"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0197.9",
+      "rfc": "0197",
+      "local": "G9",
+      "section": "§A.1 / sequencing",
+      "surface": "**A baseline committed mid-cycle would flag the batch's own in-cycle edits as removals** (RFC 0209's `anyOf` root and `$defs` rename, RFC 0199's `CredentialData` binding), because `spec/v2/release.json` still reads 2.35.0 and the baseline cannot be regenerated without a release bump (`review/arch-impl.md` R5).",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "closed",
+      "target": null,
+      "sources": [
+        {
+          "file": "RFCS/registers/0197-v2-surfaces-retired-never-reshaped.gaps.md",
+          "token": "G9"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0198.1",
+      "rfc": "0198",
+      "local": "G1",
+      "section": "Conformance",
+      "surface": "No v2 host serves an MCP server mount. v2-reference's committed `mcp` record has no `serverMount`, and MyndHyve and openwop-app advertise no `mcp` at major 2. Every behavioural row is therefore `inapplicable`.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "v2-mcp-mount-host",
+      "sources": [
+        {
+          "file": "RFCS/registers/0198-mcp-server-mount-tasks.gaps.md",
+          "token": "G1"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0198.2",
+      "rfc": "0198",
+      "local": "G2",
+      "section": "Compatibility",
+      "surface": "This RFC depends on RFC 0208, which creates `spec/v2/interop-map.json`, homes the mount (`tools/list`, `tools/call`, `mcp.mrtr`) and sets the incorporation and isolation rules §C.6 and §E.7 cite.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "closed",
+      "target": null,
+      "sources": [
+        {
+          "file": "RFCS/registers/0198-mcp-server-mount-tasks.gaps.md",
+          "token": "G2"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0198.3",
+      "rfc": "0198",
+      "local": "G3",
+      "section": "Security",
+      "surface": "The external-effects rule in §G.12 has no invariant. The candidate is `mcp-request-bound-run-no-orphan`: a run owned by a request never outlives that request's cancellation. Its HTTP half is witnessable (`disconnect-cancels-run`). Its stdio half is not, because a network suite cannot drive stdio.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "v2-mcp-mount-host",
+      "sources": [
+        {
+          "file": "RFCS/registers/0198-mcp-server-mount-tasks.gaps.md",
+          "token": "G3"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0198.4",
+      "rfc": "0198",
+      "local": "G4",
+      "section": "§C.5",
+      "surface": "The 128-bit entropy rule binds only runs projected as tasks. `identity.md` §5 fixes the opaque segment's grammar at 16–128 characters of `[A-Za-z0-9._~-]` and says nothing about entropy. A host could therefore mint guessable ids for ordinary runs and random ones for tasked runs, but a run is minted before the host knows whether it will be tasked. In practice every run of an advertising host needs the entropy.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "spec/v2/core/identity.md",
+      "sources": [
+        {
+          "file": "RFCS/registers/0198-mcp-server-mount-tasks.gaps.md",
+          "token": "G4"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0198.5",
+      "rfc": "0198",
+      "local": "G5",
+      "section": "Compatibility",
+      "surface": "V1 disconnect semantics are still undefined. A v1 host that advertises the current MCP profile (`mcp-2026-07-28`) faces the same undefined outcome under the upstream MUST. v1 takes corrections only, and a v1 MUST would need a v1 witness.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "spec/v1/mcp-integration.md",
+      "sources": [
+        {
+          "file": "RFCS/registers/0198-mcp-server-mount-tasks.gaps.md",
+          "token": "G5"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0198.6",
+      "rfc": "0198",
+      "local": "G6",
+      "section": "§B.3",
+      "surface": "§B.3 removes the server's per-request choice between a task and blocking, and that choice is an upstream MAY. An MCP client that declares the extension but prefers blocking for short calls always receives a task when the run is not terminal at answer time.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "implementer-feedback",
+      "sources": [
+        {
+          "file": "RFCS/registers/0198-mcp-server-mount-tasks.gaps.md",
+          "token": "G6"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0198.7",
+      "rfc": "0198",
+      "local": "G7",
+      "section": "§D",
+      "surface": "Interrupt kinds that the MRTR `elicitation/create` form projection cannot carry (nested schemas, `refine`/`edit-accept`/`ask`, artifactData; verify-CD C-F4) are also carried in `input_required.inputRequests`. The URL-mode fallback and the credential kind belong to RFC 0199.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "rfc-0199",
+      "sources": [
+        {
+          "file": "RFCS/registers/0198-mcp-server-mount-tasks.gaps.md",
+          "token": "G7"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0198.8",
+      "rfc": "0198",
+      "local": "G8",
+      "section": "§F.11",
+      "surface": "The TTL rule is unwitnessable in a bounded suite run.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "closed",
+      "target": null,
+      "sources": [
+        {
+          "file": "RFCS/registers/0198-mcp-server-mount-tasks.gaps.md",
+          "token": "G8"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0198.9",
+      "rfc": "0198",
+      "local": "G9",
+      "section": "§A",
+      "surface": "`mcp.features[]` stays open in v2, and `extensions` is reused as the signal. A host that lists `extensions` for some other MCP extension, and does not serve Tasks, is still correct: `server/discover` is the authoritative per-extension statement, and `features ∋ extensions` only says to look there.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "closed",
+      "target": null,
+      "sources": [
+        {
+          "file": "RFCS/registers/0198-mcp-server-mount-tasks.gaps.md",
+          "token": "G9"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0199.1",
+      "rfc": "0199",
+      "local": "G1",
+      "section": "§A, §C",
+      "surface": "**No host witnesses §A or §C today.** MyndHyve is the only `oauth` host (tier-2; nine providers, `evidence/v2-host-bundles/myndhyve.json`). The existing `oauth-authorization-code-roundtrip` seam soft-skips on every committed host. v2-reference advertises no `oauth`.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "oauth-seam-host",
+      "sources": [
+        {
+          "file": "RFCS/registers/0199-outbound-oauth-client-and-credential-interrupt.gaps.md",
+          "token": "G1"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0199.2",
+      "rfc": "0199",
+      "local": "G2",
+      "section": "§A.3, §C.3",
+      "surface": "**The same-Subject check depends on how a host authenticates a browser callback.** The suite plays the user agent with a bearer, while a production callback carries a session cookie. A host that checks the bearer but not the cookie passes the scenario and fails in production.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "SECURITY/threat-model-auth-profiles.md",
+      "sources": [
+        {
+          "file": "RFCS/registers/0199-outbound-oauth-client-and-credential-interrupt.gaps.md",
+          "token": "G2"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0199.3",
+      "rfc": "0199",
+      "local": "G3",
+      "section": "§D.2",
+      "surface": "**No v2 host has an MCP server mount** (`review/arch-P3.md` ground rules; v2-reference is seam-gated with no `serverMount`). Today §D.2 can be exercised only on openwop-app's v1 mount (`/v1/host/openwop-app/mcp`), and a major-1 row can never satisfy `check-accepted-predicate` rule 4.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "rfc-0208",
+      "sources": [
+        {
+          "file": "RFCS/registers/0199-outbound-oauth-client-and-credential-interrupt.gaps.md",
+          "token": "G3"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0199.4",
+      "rfc": "0199",
+      "local": "G4",
+      "section": "§B",
+      "surface": "**The census of published `reach.mcp` connection packs** (§Compatibility C3). If a published pack lacks `provider.auth.issuer`, a schema conditional would reject a document that validates today.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "closed",
+      "target": null,
+      "sources": [
+        {
+          "file": "RFCS/registers/0199-outbound-oauth-client-and-credential-interrupt.gaps.md",
+          "token": "G4"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0199.5",
+      "rfc": "0199",
+      "local": "G5",
+      "section": "§C.6",
+      "surface": "**The author-facing \"no interrupt solicits a secret\" rule is unwitnessable in general**, because whether a string field is a password is semantic. Only the `writeOnly` / `format: \"password\"` subset is checkable, and only at an MCP bridge.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "closed",
+      "target": null,
+      "sources": [
+        {
+          "file": "RFCS/registers/0199-outbound-oauth-client-and-credential-interrupt.gaps.md",
+          "token": "G5"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0199.6",
+      "rfc": "0199",
+      "local": "G6",
+      "section": "§D.2(b)",
+      "surface": "**The client-without-URL-mode answer shape** (Unresolved question 1). MCP 2026-07-28 reserved `-32042`, which leaves no upstream error for \"URL mode required\".",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "rfc-0199-spec-pr",
+      "sources": [
+        {
+          "file": "RFCS/registers/0199-outbound-oauth-client-and-credential-interrupt.gaps.md",
+          "token": "G6"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0199.7",
+      "rfc": "0199",
+      "local": "G7",
+      "section": "§A.4",
+      "surface": "**An issuer-less provider on a single-provider host.** RFC 9700 §4.4.2 waives mix-up defences for a client that talks to one authorization server. §A.4's distinct-redirect rule is then trivially met, which is correct, but the scenario cannot tell such a host from one that shares a redirect URI.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "closed",
+      "target": null,
+      "sources": [
+        {
+          "file": "RFCS/registers/0199-outbound-oauth-client-and-credential-interrupt.gaps.md",
+          "token": "G7"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0199.8",
+      "rfc": "0199",
+      "local": "G8",
+      "section": "Budget",
+      "surface": "**Shared core headroom.** ≈ +162 net words. *Re-measured 2026-09-22 after the #1483 trim:* 24,446 / 29,000, shared with every RFC in the 0197–0209 batch (`review/arch-impl.md` §2; the old 27,275 base is stale).",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "scripts/check-core-budget.mjs",
+      "sources": [
+        {
+          "file": "RFCS/registers/0199-outbound-oauth-client-and-credential-interrupt.gaps.md",
+          "token": "G8"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0199.9",
+      "rfc": "0199",
+      "local": "G9",
+      "section": "§D.1, §D.2",
+      "surface": "**Collision with RFC 0208's registry.** RFC 0208 (filed the same day) moves the v2 mappings into `spec/v2/interop-map.json`. Its first draft gave form mode to every waiting interrupt in `mcp.mrtr` and said \"no forward source\" for `TASK_STATE_AUTH_REQUIRED`, and its totality check keyed `a2a.taskState` on `RunSnapshot.status` alone, while a `credential` interrupt is `waiting-input` yet maps to `AUTH_REQUIRED`.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "closed",
+      "target": null,
+      "sources": [
+        {
+          "file": "RFCS/registers/0199-outbound-oauth-client-and-credential-interrupt.gaps.md",
+          "token": "G9"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0199.10",
+      "rfc": "0199",
+      "local": "G10",
+      "section": "§E.2",
+      "surface": "**Six published packs lack `issuer`** (G4). Under the host-side rule a conforming host refuses to authorize them over MCP reach until they declare it.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "openwop-registry",
+      "sources": [
+        {
+          "file": "RFCS/registers/0199-outbound-oauth-client-and-credential-interrupt.gaps.md",
+          "token": "G10"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0200.1",
+      "rfc": "0200",
+      "local": "G1",
+      "section": "§A, §B",
+      "surface": "**MyndHyve is the only committed v2 host §A/§B bind** (an `oidc` lane with Firebase and Google issuers, `evidence/v2-host-bundles/myndhyve.json`). The row is witnessed only when MyndHyve serves PRM and challenges.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "myndhyve-oidc-prm",
+      "sources": [
+        {
+          "file": "RFCS/registers/0200-host-as-oauth-protected-resource.gaps.md",
+          "token": "G1"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0200.2",
+      "rfc": "0200",
+      "local": "G2",
+      "section": "§A",
+      "surface": "**openwop-app's v2 bundle omits the `oidc` lane that its v1 discovery advertises** (`openwop-auth-oidc-user-bearer`, issuer `securetoken.google.com/openwop-dev`, verify-EF #6). Its v2 advertisement is either incomplete or deliberately narrower.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "openwop-app-v2-oidc-lane",
+      "sources": [
+        {
+          "file": "RFCS/registers/0200-host-as-oauth-protected-resource.gaps.md",
+          "token": "G2"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0200.3",
+      "rfc": "0200",
+      "local": "G3",
+      "section": "§A.3 / UQ1",
+      "surface": "**`resource` (a URL) is not the `oidc` audience** (Firebase `aud` = project id). A PRM consumer that requests `resource=<url>` from Firebase cannot get a token the host accepts. PRM is correct but not *sufficient* for such hosts.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "SECURITY/threat-model-auth-profiles.md",
+      "sources": [
+        {
+          "file": "RFCS/registers/0200-host-as-oauth-protected-resource.gaps.md",
+          "token": "G3"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0200.4",
+      "rfc": "0200",
+      "local": "G4",
+      "section": "§B.3",
+      "surface": "**The list of non-disclosure 404 rules is enumerated by hand.** A future RFC that adds an identical-404 surface has to be added to the no-oracle scenario, or the invariant silently stops covering it.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "conformance/src/scenarios/auth-challenge-no-oracle.test.ts",
+      "sources": [
+        {
+          "file": "RFCS/registers/0200-host-as-oauth-protected-resource.gaps.md",
+          "token": "G4"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0200.5",
+      "rfc": "0200",
+      "local": "G5",
+      "section": "§E",
+      "surface": "**Body-borne credentials and DPoP proofs are unwitnessable in general** (falsifiability table). The canary legs witness only the header subset.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "SECURITY/threat-model-secret-leakage.md",
+      "sources": [
+        {
+          "file": "RFCS/registers/0200-host-as-oauth-protected-resource.gaps.md",
+          "token": "G5"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0200.6",
+      "rfc": "0200",
+      "local": "G6",
+      "section": "§C",
+      "surface": "**Overlap with Phase 2 P2-a** (§C.3). If P2-a's wording already states the wrong-audience rejection as a MUST, §C becomes a pointer, and the \"previously undefined\" framing belongs to P2-a.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "rfc-0200-spec-pr",
+      "sources": [
+        {
+          "file": "RFCS/registers/0200-host-as-oauth-protected-resource.gaps.md",
+          "token": "G6"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0200.7",
+      "rfc": "0200",
+      "local": "G7",
+      "section": "§F",
+      "surface": "**`derive-v2-api.py` has no rule for per-operation `security`** on the three operations it adds itself (`/host/effect-seams`, `/runs/{runId}/compensation`, `/runs/{runId}/effects`), and the scopes are not stated in `rest-endpoints.md`.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "scripts/derive-v2-api.py",
+      "sources": [
+        {
+          "file": "RFCS/registers/0200-host-as-oauth-protected-resource.gaps.md",
+          "token": "G7"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0200.8",
+      "rfc": "0200",
+      "local": "G8",
+      "section": "§F",
+      "surface": "**`deploy:*` and other extension scopes** in `rest-endpoints.md` (`POST /v1/agents/{agentId}/deployments`) are outside `auth.md` §Scopes. The gate needs a documented extension list, not a silent allowlist.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "spec/v1/auth.md",
+      "sources": [
+        {
+          "file": "RFCS/registers/0200-host-as-oauth-protected-resource.gaps.md",
+          "token": "G8"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0200.9",
+      "rfc": "0200",
+      "local": "G9",
+      "section": "Budget",
+      "surface": "≈ +152 net words. *Re-measured 2026-09-22 after the #1483 trim:* the shared base is 24,446 / 29,000 (`review/arch-impl.md` §2), not the old 1,725 headroom.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "scripts/check-core-budget.mjs",
+      "sources": [
+        {
+          "file": "RFCS/registers/0200-host-as-oauth-protected-resource.gaps.md",
+          "token": "G9"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0201.1",
+      "rfc": "0201",
+      "local": "G1",
+      "section": "v2 text",
+      "surface": "**Core word budget.** The v2 half adds about 238 words to `spec/v2/core/webhooks.md` and `headers.md` and homes no family (`webhooks` is already homed in `spec/v2/core/webhooks.md`, and none of the listed v1-dependent families is on this RFC's path). That is under the +300 hard ceiling and over the +0 target. It draws on the ~1,725-word headroom that every Phase 3 RFC shares (architect P3-H5).",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "scripts/check-core-budget.mjs",
+      "sources": [
+        {
+          "file": "RFCS/registers/0201-standard-webhooks-signature-scheme.gaps.md",
+          "token": "G1"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0201.2",
+      "rfc": "0201",
+      "local": "G2",
+      "section": "§D",
+      "surface": "Standard Webhooks 1.0.0 defines **no** endpoint-verification step. The handshake here is OpenWOP's own design, justified by the flooding argument in §Motivation. The only external precedent is the MCP Triggers & Events draft, which RFC 0147 §A.10 forbids citing as alignment.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "docs/WAIVER-RETROSPECTIVE-REGISTER.md",
+      "sources": [
+        {
+          "file": "RFCS/registers/0201-standard-webhooks-signature-scheme.gaps.md",
+          "token": "G2"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0201.3",
+      "rfc": "0201",
+      "local": "G3",
+      "section": "§B.6",
+      "surface": "Requiring a **client-supplied** `whsec_` secret for opted-in subscriptions differs from v1's host-minted, returned-once secret. It is the only way the endpoint can authenticate the synchronous challenge. Hosts that mint secrets from a KMS may object.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "host-report",
+      "sources": [
+        {
+          "file": "RFCS/registers/0201-standard-webhooks-signature-scheme.gaps.md",
+          "token": "G3"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0201.4",
+      "rfc": "0201",
+      "local": "G4",
+      "section": "§C.10",
+      "surface": "\"Identical across a host restart\" can only be witnessed through the RFC 0158 test hook, and no production host mounts it (openwop-app records `inapplicable`).",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "closed",
+      "target": null,
+      "sources": [
+        {
+          "file": "RFCS/registers/0201-standard-webhooks-signature-scheme.gaps.md",
+          "token": "G4"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0201.5",
+      "rfc": "0201",
+      "local": "G5",
+      "section": "v1 OpenAPI drift (pre-existing)",
+      "surface": "`api/openapi.yaml` `registerWebhook` omits the `tenantId` body field that `spec/v1/webhooks.md` §Register requires, and its `201` omits `secret`/`secretFingerprint`, which the prose returns. RFC 0201's v1 body edit touches the same schema.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "phase-2-parity-correction",
+      "sources": [
+        {
+          "file": "RFCS/registers/0201-standard-webhooks-signature-scheme.gaps.md",
+          "token": "G5"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0201.6",
+      "rfc": "0201",
+      "local": "G6",
+      "section": "§E",
+      "surface": "The post-overlap retirement leg cannot run in a bounded suite when `overlapSeconds` is large. It records `partial-witness:`, not `executed-pass`.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "closed",
+      "target": null,
+      "sources": [
+        {
+          "file": "RFCS/registers/0201-standard-webhooks-signature-scheme.gaps.md",
+          "token": "G6"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0201.7",
+      "rfc": "0201",
+      "local": "G7",
+      "section": "Process",
+      "surface": "The architect pass (P3) recommended that Phase 3 **not** repeat the RFC 0147 §A.6 override. The authoring rules for this batch instruct `Draft → Active` under the override.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "closed",
+      "target": null,
+      "sources": [
+        {
+          "file": "RFCS/registers/0201-standard-webhooks-signature-scheme.gaps.md",
+          "token": "G7"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0202.1",
+      "rfc": "0202",
+      "local": "G1",
+      "section": "§Normative text",
+      "surface": "`agents` is not homed in v2. Its declared home is six v1 documents and 19 facets; the card rule written here is an `a2a` obligation in `interop.md`, which is already homed, so this RFC costs **+214** core words with no cap grant. A token v2 document naming 19 facets would pass the home gate and be the dishonest resolution RFC 0189's Motivation exists to end.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "docs/normative-home-baseline.json",
+      "sources": [
+        {
+          "file": "RFCS/registers/0202-per-agent-a2a-agent-cards.gaps.md",
+          "token": "G1"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0202.2",
+      "rfc": "0202",
+      "local": "G2",
+      "section": "§Compatibility",
+      "surface": "V1 gets no per-agent card. v1 `a2a-integration.md` §C and §E would carry the same rules, but every v1 MUST needs a v1 witness and no v1 host serves A2A 1.0 with a tenant-scoped inventory.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "spec/v1/a2a-integration.md",
+      "sources": [
+        {
+          "file": "RFCS/registers/0202-per-agent-a2a-agent-cards.gaps.md",
+          "token": "G2"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0202.3",
+      "rfc": "0202",
+      "local": "G3",
+      "section": "§C",
+      "surface": "Roster entries (RFC 0086) are the more natural A2A agent — their `workflows[]` portfolio is `skills[]` — but they are not covered.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "spec/v1/agent-roster.md",
+      "sources": [
+        {
+          "file": "RFCS/registers/0202-per-agent-a2a-agent-cards.gaps.md",
+          "token": "G3"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0202.4",
+      "rfc": "0202",
+      "local": "G4",
+      "section": "§B.2",
+      "surface": "\"`R` MUST NOT encode a tenant, workspace, or principal\" is only partly witnessable: the suite can look for identifiers the host discloses, not for ones it keeps private.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "conformance/src/scenarios/v2-a2a-agent-cards.test.ts",
+      "sources": [
+        {
+          "file": "RFCS/registers/0202-per-agent-a2a-agent-cards.gaps.md",
+          "token": "G4"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0202.5",
+      "rfc": "0202",
+      "local": "G5",
+      "section": "§Invariant",
+      "surface": "`agent-card-no-tenant-leak` is named, not registered: registration waits for a committed bundle with `.identical-refusal` at `executed-pass`.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "SECURITY/invariants.yaml",
+      "sources": [
+        {
+          "file": "RFCS/registers/0202-per-agent-a2a-agent-cards.gaps.md",
+          "token": "G5"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0202.6",
+      "rfc": "0202",
+      "local": "G6",
+      "section": "§D.7",
+      "surface": "No v2 host advertises both `a2a` and `agents`. The cross-tenant legs also need an operator-provisioned second principal and an agent only tenant B has.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "host-work",
+      "sources": [
+        {
+          "file": "RFCS/registers/0202-per-agent-a2a-agent-cards.gaps.md",
+          "token": "G6"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0202.7",
+      "rfc": "0202",
+      "local": "G7",
+      "section": "§D.7",
+      "surface": "Identical bodies are not identical latency; a timing channel remains. A2A v1.0.1 §13.1 is silent on it.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "SECURITY/threat-model-interop.md",
+      "sources": [
+        {
+          "file": "RFCS/registers/0202-per-agent-a2a-agent-cards.gaps.md",
+          "token": "G7"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0203.1",
+      "rfc": "0203",
+      "local": "G1",
+      "section": "§A.2",
+      "surface": "The subset is pinned to `server.json` `2025-12-11`. The registry's next dated release (a Draft already widens `url` to a leading template variable) may add members or loosen patterns; our closed subset then lags, and a publisher copying a newer record verbatim is refused.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "schemas/v2/node-pack-manifest.schema.json",
+      "sources": [
+        {
+          "file": "RFCS/registers/0203-remote-runtime-mcp-registry-record.gaps.md",
+          "token": "G1"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0203.2",
+      "rfc": "0203",
+      "local": "G2",
+      "section": "§Compatibility",
+      "surface": "V1 manifests do not gain `mcpServer`. The v1 tree is frozen through the overlap (`packs.md` §\"The registry tree\"), and a v1 field would need a v1 witness.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "schemas/node-pack-manifest.schema.json",
+      "sources": [
+        {
+          "file": "RFCS/registers/0203-remote-runtime-mcp-registry-record.gaps.md",
+          "token": "G2"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0203.3",
+      "rfc": "0203",
+      "local": "G3",
+      "section": "§C.7",
+      "surface": "The restated `wasm` MUSTs have witnesses only at major 1 (`wasm-pack-abi-version-rejection`, `-memory-cap`, `-load`, … in `conformance/scenario-majors.json`). The v2 home is now honest prose over a family whose behavioural witnesses do not run against v2 hosts.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "conformance/scripts/generate-scenario-majors.mjs",
+      "sources": [
+        {
+          "file": "RFCS/registers/0203-remote-runtime-mcp-registry-record.gaps.md",
+          "token": "G3"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0203.4",
+      "rfc": "0203",
+      "local": "G4",
+      "section": "§A",
+      "surface": "How a node `typeId` binds to an MCP tool `name` on the named server is unspecified in v1 and v2.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "spec/v2/core/node-pack-runtimes.md",
+      "sources": [
+        {
+          "file": "RFCS/registers/0203-remote-runtime-mcp-registry-record.gaps.md",
+          "token": "G4"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0203.5",
+      "rfc": "0203",
+      "local": "G5",
+      "section": "§B.5",
+      "surface": "\"SHOULD NOT treat `name` as a verified identity\" is a SHOULD because a host's trust decisions are not observable; a MUST here would be an unwitnessable core MUST, which RFC 0174 §E.2 sends to `ext/`.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "SECURITY/threat-model-node-packs.md",
+      "sources": [
+        {
+          "file": "RFCS/registers/0203-remote-runtime-mcp-registry-record.gaps.md",
+          "token": "G5"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0203.6",
+      "rfc": "0203",
+      "local": "G6",
+      "section": "§Implementation notes",
+      "surface": "No known host loads `remote` packs, so no host bundle will carry this RFC's rows; `Accepted` rests on the corpus and the registry validator.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "remote-runtime-host",
+      "sources": [
+        {
+          "file": "RFCS/registers/0203-remote-runtime-mcp-registry-record.gaps.md",
+          "token": "G6"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0204.1",
+      "rfc": "0204",
+      "local": "G1",
+      "section": "§Normative text",
+      "surface": "Net core cost is **+245** (445 added, one family homed), inside the +300 ceiling but not self-funding. `mcp` is already homed, so the `ctx.mcp` section grants nothing; homing `httpClient` would not help, because its v1 contract (six facets, `safeFetch`, the egress policy) costs more to restate than the 200-word grant it earns.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "scripts/check-core-budget.mjs",
+      "sources": [
+        {
+          "file": "RFCS/registers/0204-host-mcp-client-returns-mcp-results.gaps.md",
+          "token": "G1"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0204.2",
+      "rfc": "0204",
+      "local": "G2",
+      "section": "§A.7",
+      "surface": "V2 names the method `callTool`, while the v1 name `invokeTool` is what pack authors know. A host keeping `invokeTool` for ported packs is permitted (MAY) but not specified.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "../openwop-sdks/sdk/typescript",
+      "sources": [
+        {
+          "file": "RFCS/registers/0204-host-mcp-client-returns-mcp-results.gaps.md",
+          "token": "G2"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0204.3",
+      "rfc": "0204",
+      "local": "G3",
+      "section": "§D.10",
+      "surface": "The restated `toolCatalog` MUSTs are witnessed only at major 1 (`tool-catalog-projection`, `tool-catalog-compact-projection`, `tool-descriptor-shape` in `conformance/scenario-majors.json`).",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "conformance/scripts/generate-scenario-majors.mjs",
+      "sources": [
+        {
+          "file": "RFCS/registers/0204-host-mcp-client-returns-mcp-results.gaps.md",
+          "token": "G3"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0204.4",
+      "rfc": "0204",
+      "local": "G4",
+      "section": "§A",
+      "surface": "No v2 host exposes `ctx.mcp` to packs through a fixture: v2-reference advertises `mcp` seam-gated with no pack-facing client; MyndHyve advertises `toolCatalog` but not `mcp` in v2; openwop-app neither.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "host-work",
+      "sources": [
+        {
+          "file": "RFCS/registers/0204-host-mcp-client-returns-mcp-results.gaps.md",
+          "token": "G4"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0204.5",
+      "rfc": "0204",
+      "local": "G5",
+      "section": "§D.12",
+      "surface": "`annotations-derived` is vacuous on a host that emits no `annotations`, and the row says so (`inapplicable`). Nothing requires a host to emit them.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "spec/v2/core/tool-catalog.md",
+      "sources": [
+        {
+          "file": "RFCS/registers/0204-host-mcp-client-returns-mcp-results.gaps.md",
+          "token": "G5"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0204.6",
+      "rfc": "0204",
+      "local": "G6",
+      "section": "§D.11",
+      "surface": "\"Not classified\" is host-internal: the suite can only drive it with a tool the host cannot have seen before (the fake server's `conformance_readonly_claim`). A host that pre-classifies suite tools by name could pass without the default being real.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "conformance/src/scenarios/v2-tool-catalog-annotations.test.ts",
+      "sources": [
+        {
+          "file": "RFCS/registers/0204-host-mcp-client-returns-mcp-results.gaps.md",
+          "token": "G6"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0204.7",
+      "rfc": "0204",
+      "local": "G7",
+      "section": "§C",
+      "surface": "`fetchMCP` stays defined in v1 with its own result convention; the note supersedes it for new packs but nothing retires it.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "spec/v2/ext/dataIntegration/README.md",
+      "sources": [
+        {
+          "file": "RFCS/registers/0204-host-mcp-client-returns-mcp-results.gaps.md",
+          "token": "G7"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0205.1",
+      "rfc": "0205",
+      "local": "G1",
+      "section": "§C.12 / §E",
+      "surface": "The v2 `artifactTypes` family is still homed in `spec/v1/artifact-type-packs.md`, so §C is written there and binds both majors. A full v2 home needs about 700 words: store/render/export/types, the binding, validate-before-emit, the schema `$id` namespace and bounded compilation. It is granted 200 words of cap.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "spec/v2/declaration.json",
+      "sources": [
+        {
+          "file": "RFCS/registers/0205-run-artifacts-and-turns-speak-a2a-parts.gaps.md",
+          "token": "G1"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0205.2",
+      "rfc": "0205",
+      "local": "G2",
+      "section": "Conformance",
+      "surface": "No host implements `getArtifact` end-to-end. `artifact-auth.test.ts`'s header says so, and no conformance fixture emits `artifact.created` with a readable id. `0205.artifact-a2a-shape` and `.artifact-id-matches-path` therefore stay `inapplicable` everywhere until a host ships both.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "artifact-producing-fixture",
+      "sources": [
+        {
+          "file": "RFCS/registers/0205-run-artifacts-and-turns-speak-a2a-parts.gaps.md",
+          "token": "G2"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0205.3",
+      "rfc": "0205",
+      "local": "G3",
+      "section": "§A.3",
+      "surface": "`0205.artifact-url-part-scoped` needs a host that emits `url` Parts and a second-tenant credential. Any host that emits only `data`/`text`/`raw` Parts makes the row vacuously inapplicable, which is honest but witnesses nothing.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "host-emitting-url-parts",
+      "sources": [
+        {
+          "file": "RFCS/registers/0205-run-artifacts-and-turns-speak-a2a-parts.gaps.md",
+          "token": "G3"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0205.4",
+      "rfc": "0205",
+      "local": "G4",
+      "section": "§B.5",
+      "surface": "A `system` turn has no A2A `Role`, so a turn with `role: system` and `parts` is A2A-*shaped* but not A2A-*projectable*.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "rfc-0208",
+      "sources": [
+        {
+          "file": "RFCS/registers/0205-run-artifacts-and-turns-speak-a2a-parts.gaps.md",
+          "token": "G4"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0205.5",
+      "rfc": "0205",
+      "local": "G5",
+      "section": "Forward path",
+      "surface": "The later emission MUST needs a gating facet. `getArtifact` belongs to no family, and minting a facet here would be premature, because no host has asked to advertise it.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "phase-4-content-must-rfc",
+      "sources": [
+        {
+          "file": "RFCS/registers/0205-run-artifacts-and-turns-speak-a2a-parts.gaps.md",
+          "token": "G5"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0205.6",
+      "rfc": "0205",
+      "local": "G6",
+      "section": "§B.8",
+      "surface": "The v1 turn gains no `parts`, so a v1 → v2 fork of a v1 run carries no A2A-shaped turns. That is correct because nothing is synthesized, but a cross-major replay is still unrenderable.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "spec/v1/migrations.json",
+      "sources": [
+        {
+          "file": "RFCS/registers/0205-run-artifacts-and-turns-speak-a2a-parts.gaps.md",
+          "token": "G6"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0205.7",
+      "rfc": "0205",
+      "local": "G7",
+      "section": "§D",
+      "surface": "The schemas are transcribed from `a2a.proto` by hand. Nothing detects a future A2A minor that adds a `Part` or `Artifact` field. The closed v2 objects would then reject a field a peer legitimately sends.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "conformance/fixtures/upstream/a2a-v1.0.1",
+      "sources": [
+        {
+          "file": "RFCS/registers/0205-run-artifacts-and-turns-speak-a2a-parts.gaps.md",
+          "token": "G7"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0205.8",
+      "rfc": "0205",
+      "local": "G8",
+      "section": "§C.9",
+      "surface": "Media-type parameters (`text/csv; charset=utf-8`) are refused by the pattern. A format that exists only as a parameterized type cannot be named.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "pack-needs-media-type-parameters",
+      "sources": [
+        {
+          "file": "RFCS/registers/0205-run-artifacts-and-turns-speak-a2a-parts.gaps.md",
+          "token": "G8"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0206.1",
+      "rfc": "0206",
+      "local": "G1",
+      "section": "§D / Compatibility",
+      "surface": "The v2 `content` and `i18n` families are still homed in `spec/v1/` (`spec/v2/declaration.json` `normativeText`). This RFC edits those v1 documents and writes no v2 core prose, so the v2 homing debt is unchanged and the core-word delta is 0. A full v2 home needs roughly 600 words: the §A coherence constraints, the section shape, `resolveSection`, the delivery endpoints and the §F security rules for `content`; `Accept-Language`, fallback and advertisement for `i18n`. The two families grant 400 words of cap, so homing both nets about +200.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "spec/v2/declaration.json",
+      "sources": [
+        {
+          "file": "RFCS/registers/0206-locale-keys-accept-negotiated-bcp47.gaps.md",
+          "token": "G1"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0206.2",
+      "rfc": "0206",
+      "local": "G2",
+      "section": "§A.2",
+      "surface": "The grammar excludes RFC 5646 variants (`de-CH-1996`, `ca-ES-valencia`), extensions (`-u-ca-buddhist`), private use (`-x-`), `extlang` (`zh-yue`) and grandfathered tags. A host that negotiates one of these still cannot author content for it.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "host-needs-variant-tags",
+      "sources": [
+        {
+          "file": "RFCS/registers/0206-locale-keys-accept-negotiated-bcp47.gaps.md",
+          "token": "G2"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0206.3",
+      "rfc": "0206",
+      "local": "G3",
+      "section": "§C.6",
+      "surface": "`capabilities.{i18n,content}` keep the case-insensitive pattern `^[a-zA-Z]{2,3}(-[a-zA-Z0-9]{2,8}){0,3}$`. A non-canonical advertisement such as `pt-br` validates and can never be a `localizations` key. The SHOULD makes the hazard visible but does not remove it.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "COMPATIBILITY.md",
+      "sources": [
+        {
+          "file": "RFCS/registers/0206-locale-keys-accept-negotiated-bcp47.gaps.md",
+          "token": "G3"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0206.4",
+      "rfc": "0206",
+      "local": "G4",
+      "section": "Conformance",
+      "surface": "`openwop.requirement.0206.delivery-extended-locale` is gated on a host advertising a content locale outside the old subset. No committed bundle does: openwop-app and MyndHyve both advertise `es`, `pt-BR` and `fr`.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "host-extended-content-locale",
+      "sources": [
+        {
+          "file": "RFCS/registers/0206-locale-keys-accept-negotiated-bcp47.gaps.md",
+          "token": "G4"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0206.5",
+      "rfc": "0206",
+      "local": "G5",
+      "section": "§B.4",
+      "surface": "`resolveSection` is \"shared verbatim\" between the spec pseudocode and the suite's TypeScript copy (`localized-content-delivery.test.ts:60`). Nothing mechanically checks that the two stay equivalent, and this RFC edits both.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "conformance/src/lib",
+      "sources": [
+        {
+          "file": "RFCS/registers/0206-locale-keys-accept-negotiated-bcp47.gaps.md",
+          "token": "G5"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0206.6",
+      "rfc": "0206",
+      "local": "G6",
+      "section": "§A.1",
+      "surface": "`seo.ogLocaleAlternates[]` is typed as a BCP 47 tag, but Open Graph's `og:locale` convention is `language_TERRITORY` (underscore). The old grammar also rejected underscores, so the mismatch is not new.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "spec/v1/localized-content.md",
+      "sources": [
+        {
+          "file": "RFCS/registers/0206-locale-keys-accept-negotiated-bcp47.gaps.md",
+          "token": "G6"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0206.7",
+      "rfc": "0206",
+      "local": "G7",
+      "section": "Implementation",
+      "surface": "The eight `spec-artifacts/` mirrors are exact-pinned by the conformance suite (`conformance/package.json`, `dist/spec-artifacts.lock.json`), so this change ships only in a coordinated `@openwop/spec-artifacts` + suite release. npm publish needs the steward's go.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "steward-release-go",
+      "sources": [
+        {
+          "file": "RFCS/registers/0206-locale-keys-accept-negotiated-bcp47.gaps.md",
+          "token": "G7"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0207.1",
+      "rfc": "0207",
+      "local": "G1",
+      "section": "§Compatibility, §A",
+      "surface": "**Which carrier does MyndHyve emit today?** MyndHyve is the only host advertising `multiAgent.executionModel.version >= 3`.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "closed",
+      "target": null,
+      "sources": [
+        {
+          "file": "RFCS/registers/0207-trace-context-across-mcp-and-a2a.gaps.md",
+          "token": "G1"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0207.2",
+      "rfc": "0207",
+      "local": "G2",
+      "section": "§C.11",
+      "surface": "`schemas/v2/debug-bundle.schema.json` is an orphan: there is no v2 operation, no path-manifest entry and no major-2 scenario. The `production` family still declares a `debugBundle` facet with no read behind it.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "/cleanup",
+      "sources": [
+        {
+          "file": "RFCS/registers/0207-trace-context-across-mcp-and-a2a.gaps.md",
+          "token": "G2"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0207.3",
+      "rfc": "0207",
+      "local": "G3",
+      "section": "v2 text",
+      "surface": "**`multiAgent` is not homed.** The v2 carrier text is written in `interop.md` (the `a2a`/`mcp` home), not as `multiAgent` v2 text. Homing `multiAgent` means porting a 5,507-word v1 document. A small stub would claim the RFC 0190 budget grant without carrying the family's contract.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "scripts/check-v2-normative-home.mjs",
+      "sources": [
+        {
+          "file": "RFCS/registers/0207-trace-context-across-mcp-and-a2a.gaps.md",
+          "token": "G3"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0207.4",
+      "rfc": "0207",
+      "local": "G4",
+      "section": "Conformance",
+      "surface": "No v2 host drives an outbound MCP tool call or A2A message from a run against the suite's fake peers. v2-reference advertises `a2a`/`mcp` (seam-gated), but its tree has no `traceparent` handling, and no v2 fixture equivalent to `conformance-mcp-tool-roundtrip` is known to exist.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "v2-reference-trace-fixture",
+      "sources": [
+        {
+          "file": "RFCS/registers/0207-trace-context-across-mcp-and-a2a.gaps.md",
+          "token": "G4"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0207.5",
+      "rfc": "0207",
+      "local": "G5",
+      "section": "§C",
+      "surface": "No committed host emits a non-empty debug-bundle `spans[]`: all three v1 reference hosts return `[]`. `.debug-bundle-span-trace` is therefore `inapplicable` everywhere today.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "host-emits-debug-spans",
+      "sources": [
+        {
+          "file": "RFCS/registers/0207-trace-context-across-mcp-and-a2a.gaps.md",
+          "token": "G5"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0207.6",
+      "rfc": "0207",
+      "local": "G6",
+      "section": "§D",
+      "surface": "Upstream `mcp.session.id` is still defined against 2025-06-18 sessions, and upstream issue `open-telemetry/semantic-conventions-genai#437` is realigning it (review slice D F3). The §D MUST NOT on emitting it for 2026-07-28 exchanges may need revisiting if upstream redefines the attribute.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "otel-semconv-mcp-stability",
+      "sources": [
+        {
+          "file": "RFCS/registers/0207-trace-context-across-mcp-and-a2a.gaps.md",
+          "token": "G6"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0207.7",
+      "rfc": "0207",
+      "local": "G7",
+      "section": "§A.3",
+      "surface": "The inbound (host-as-MCP-server) leg needs an MCP server mount **and** OTLP export reaching the suite. No v2 host advertises `mcp.serverMount` today (architect P3), and hosts in a separate network namespace cannot call back (`REQUIRES_HOST_CALLBACK`).",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "closed",
+      "target": null,
+      "sources": [
+        {
+          "file": "RFCS/registers/0207-trace-context-across-mcp-and-a2a.gaps.md",
+          "token": "G7"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0207.8",
+      "rfc": "0207",
+      "local": "G8",
+      "section": "Dependency",
+      "surface": "Phase 1 P1-C corrects `debug-bundle.md`'s \"16-byte hex\" `spanId` prose in the same bullet list that §C.9 edits.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "closed",
+      "target": null,
+      "sources": [
+        {
+          "file": "RFCS/registers/0207-trace-context-across-mcp-and-a2a.gaps.md",
+          "token": "G8"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0208.1",
+      "rfc": "0208",
+      "local": "G1",
+      "section": "§A, Compatibility",
+      "surface": "The registry carries about 1,470 words of normative `rule` text in `spec/v2/interop-map.json`, and `check-core-budget.mjs` does not measure it, because the gate counts `.md` only. The practice has precedent (`errors.json`, `event-codemap.json`), but those rows are mostly enumerations, while these rows carry RFC 2119 sentences.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "closed",
+      "target": null,
+      "sources": [
+        {
+          "file": "RFCS/registers/0208-v2-a2a-mcp-operation-mappings.gaps.md",
+          "token": "G1"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0208.2",
+      "rfc": "0208",
+      "local": "G2",
+      "section": "Compatibility",
+      "surface": "The dual-major hazard. One A2A interface serves every OpenWOP major. v1 §D.2 requires `TaskNotFoundError` for a terminal task and v1 §D.7 pins the 1.0.0 statuses, while this RFC requires `UnsupportedOperationError` and 1.0.1. A dual-major host cannot satisfy both.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "closed",
+      "target": null,
+      "sources": [
+        {
+          "file": "RFCS/registers/0208-v2-a2a-mcp-operation-mappings.gaps.md",
+          "token": "G2"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0208.3",
+      "rfc": "0208",
+      "local": "G3",
+      "section": "Conformance",
+      "surface": "No v2 host serves an A2A interface or an MCP server mount. Committed bundles show v2-reference advertising `a2a` and `mcp` for seam-driven negotiation only (no `agentCardUrl`, `profiles` or `serverMount`); MyndHyve and openwop-app advertise neither family at major 2. Every behavioural row is `inapplicable` today.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "v2-a2a-mcp-interface-host",
+      "sources": [
+        {
+          "file": "RFCS/registers/0208-v2-a2a-mcp-operation-mappings.gaps.md",
+          "token": "G3"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0208.4",
+      "rfc": "0208",
+      "local": "G4",
+      "section": "§B, Conformance",
+      "surface": "The six v1 current-profile MCP scenarios (`mcp-2026-07-28-discover`, `mcp-stateless-request`, `mcp-mrtr-roundtrip`, `mcp-cache-tenant-scope`, `mcp-extension-opacity`, `mcp-current-auth-boundary`) and the A2A 1.0 scenarios are major-1 only, and they cannot join `BOTH_MAJORS` because they gate on `.supported` seats. The invariants those scenarios witness (`mcp-cache-tenant-scoped`, `mcp-extension-no-authority`, `mcp-peer-no-authority-escalation`, `mcp-header-body-consistent`, `a2a-card-runtime-consistent`, `a2a-peer-no-authority-escalation`) have no major-2 test.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "conformance/src/scenarios/v2-mcp-mount-map.test.ts",
+      "sources": [
+        {
+          "file": "RFCS/registers/0208-v2-a2a-mcp-operation-mappings.gaps.md",
+          "token": "G4"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0208.5",
+      "rfc": "0208",
+      "local": "G5",
+      "section": "Compatibility",
+      "surface": "No v1-dependent family can be homed to offset the +297 words. `a2a` and `mcp` are already resolved (their home is `interop.md`). The nearest candidate, `multiAgent`, whose facet is `executionModel`, is unrelated to A2A/MCP composition, and homing it would add its own text. The net stays at +297, under the +300 ceiling.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "closed",
+      "target": null,
+      "sources": [
+        {
+          "file": "RFCS/registers/0208-v2-a2a-mcp-operation-mappings.gaps.md",
+          "token": "G5"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0208.6",
+      "rfc": "0208",
+      "local": "G6",
+      "section": "§C",
+      "surface": "`ListTasks` binds to `listRuns`'s result set, and `listRuns` scopes by tenant segment only (RFC 0182 §A.2). A2A §13.1 allows finer, principal-level models. A host whose authorization is finer than tenant would expose more through `ListTasks` than its own model allows, while still satisfying the letter of §C.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "SECURITY/threat-model-interop.md",
+      "sources": [
+        {
+          "file": "RFCS/registers/0208-v2-a2a-mcp-operation-mappings.gaps.md",
+          "token": "G6"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0208.7",
+      "rfc": "0208",
+      "local": "G7",
+      "section": "§A (`a2a.card`)",
+      "surface": "Per-agent Agent Cards for the `/agents` inventory (RFC 0072/0074) carry their own isolation rules (public card vs tenant-scoped inventory). This RFC homes only the host card.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "rfc-0202",
+      "sources": [
+        {
+          "file": "RFCS/registers/0208-v2-a2a-mcp-operation-mappings.gaps.md",
+          "token": "G7"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0208.8",
+      "rfc": "0208",
+      "local": "G8",
+      "section": "§E",
+      "surface": "The gRPC column of `a2a.errors` is unwitnessable. The suite ships no gRPC client (`interop.md` §gRPC), so the column is registry data with no probe.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "grpc-client-contributor",
+      "sources": [
+        {
+          "file": "RFCS/registers/0208-v2-a2a-mcp-operation-mappings.gaps.md",
+          "token": "G8"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0208.9",
+      "rfc": "0208",
+      "local": "G9",
+      "section": "§D",
+      "surface": "\"Retained\" versus \"purged\" is host retention policy. The suite cannot purge a run, so the `TaskNotFoundError`-after-purge half is unwitnessable.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "retention-test-hook",
+      "sources": [
+        {
+          "file": "RFCS/registers/0208-v2-a2a-mcp-operation-mappings.gaps.md",
+          "token": "G9"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0208.10",
+      "rfc": "0208",
+      "local": "G10",
+      "section": "§A (`mcp.meta`)",
+      "surface": "The `traceparent` / `tracestate` / `baggage` row homes only the existing v1 named mapping (propagated; never used for authorization). The outbound carrier rule and the A2A carrier belong to RFC 0207.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "rfc-0207",
+      "sources": [
+        {
+          "file": "RFCS/registers/0208-v2-a2a-mcp-operation-mappings.gaps.md",
+          "token": "G10"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0208.11",
+      "rfc": "0208",
+      "local": "G11",
+      "section": "§A (`mcp.mrtr`, `a2a.taskState`)",
+      "surface": "RFC 0199 (filed the same day) adds the `credential` interrupt, which projects to A2A `TASK_STATE_AUTH_REQUIRED` and to MCP URL-mode elicitation, and forbids form-mode secrets. Before this pass the draft map gave form mode to every waiting interrupt and said \"no forward source\" for `AUTH_REQUIRED`.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "rfc-0199",
+      "sources": [
+        {
+          "file": "RFCS/registers/0208-v2-a2a-mcp-operation-mappings.gaps.md",
+          "token": "G11"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0209.1",
+      "rfc": "0209",
+      "local": "G1",
+      "section": "Conformance",
+      "surface": "Three things are missing before the four seam-gated rows (`version-selects-branch`, `fold-guarded`, `legacy-readable`, `taint-sticky`) can be witnessed. There is no v2 emit-surface seam: v1's lives in `host-sample-test-seams.md` and is major-1, and `api/seams-v2.yaml` has no A2UI seam. No v2 host renders or emits A2UI. And no committed v2 bundle carries the kind.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "v2-a2ui-emit-seam",
+      "sources": [
+        {
+          "file": "RFCS/registers/0209-v2-a2ui-surfaces-are-a2ui-v0-9.gaps.md",
+          "token": "G1"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0209.2",
+      "rfc": "0209",
+      "local": "G2",
+      "section": "§B.6",
+      "surface": "The profile excludes `Icon`, `List` (templated children), `Tabs`, `Modal`, `Slider`, and every `FunctionCall` except `required`. Some real surfaces will want these.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "surface-author-demand",
+      "sources": [
+        {
+          "file": "RFCS/registers/0209-v2-a2ui-surfaces-are-a2ui-v0-9.gaps.md",
+          "token": "G2"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0209.3",
+      "rfc": "0209",
+      "local": "G3",
+      "section": "§C.9",
+      "surface": "\"Exactly one `root` before render\" and \"no action before finalization\" are render-side rules that the server-oriented suite cannot see.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "openwop-app:frontend/react/src/chat/a2ui/__tests__/a2ui-render-invariants.test.tsx",
+      "sources": [
+        {
+          "file": "RFCS/registers/0209-v2-a2ui-surfaces-are-a2ui-v0-9.gaps.md",
+          "token": "G3"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0209.4",
+      "rfc": "0209",
+      "local": "G4",
+      "section": "§D.14",
+      "surface": "`ui` and `media` are still not listed in `spec/v2/declaration.json` `reservedOrgs`, so a vendor could apply to register either one and collide with the core kind families.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "spec/v2/declaration.json",
+      "sources": [
+        {
+          "file": "RFCS/registers/0209-v2-a2ui-surfaces-are-a2ui-v0-9.gaps.md",
+          "token": "G4"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0209.5",
+      "rfc": "0209",
+      "local": "G5",
+      "section": "§D.15",
+      "surface": "The deprecation row can say only `removeIn: \"3.0\"` until RFC 0197 adds a `v2-minor` removal trigger. `check-removal-dates.mjs` compares majors only (arch-P4 finding 5).",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "rfc-0197",
+      "sources": [
+        {
+          "file": "RFCS/registers/0209-v2-a2ui-surfaces-are-a2ui-v0-9.gaps.md",
+          "token": "G5"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0209.6",
+      "rfc": "0209",
+      "local": "G6",
+      "section": "§C.10",
+      "surface": "The v1 `field.select` resume value is a string. The v0.9 `ChoicePicker` binds to a string array. So a workflow migrated through the informative codemap receives `[\"eu\"]` where it received `\"eu\"`.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "closed",
+      "target": null,
+      "sources": [
+        {
+          "file": "RFCS/registers/0209-v2-a2ui-surfaces-are-a2ui-v0-9.gaps.md",
+          "token": "G6"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0209.7",
+      "rfc": "0209",
+      "local": "G7",
+      "section": "§B.4",
+      "surface": "The profile is pinned to the bytes a2ui.org served on 2026-09-22, which include the 0.9.1 patch and differ from the repository's `v0.9` git tag. If a2ui.org changes those files in place, the vendored copies drift from what upstream serves.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "conformance/fixtures/upstream/a2ui-v0.9",
+      "sources": [
+        {
+          "file": "RFCS/registers/0209-v2-a2ui-surfaces-are-a2ui-v0-9.gaps.md",
+          "token": "G7"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0209.8",
+      "rfc": "0209",
+      "local": "G8",
+      "section": "Unresolved Q3",
+      "surface": "A2A peers exchanging A2UI (`mediaType: \"application/a2ui+json\"` data Parts, the A2UI A2A extension URI) are outside this RFC.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "rfc-0208",
+      "sources": [
+        {
+          "file": "RFCS/registers/0209-v2-a2ui-surfaces-are-a2ui-v0-9.gaps.md",
+          "token": "G8"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0210.1",
+      "rfc": "0210",
+      "local": "G1",
+      "section": "§D.10",
+      "surface": "`identity.md` §2.2's `anonymous` row has `—` in the `revocation` column, while `auth.schema.json` REQUIRES `revocation` on every lane member. An `anonymous` lane therefore must advertise a value the table does not name; openwop-app advertises `next-request` (`evidence/v2-host-bundles/openwop-workflow-engine.json`). The §D.9 leg leaves `anonymous` unconstrained for exactly this reason, which is a hole in an assertion whose whole point is to have no holes.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "spec/v2/core/identity.md",
+      "sources": [
+        {
+          "file": "RFCS/registers/0210-lane-revocation-rule-is-measured.gaps.md",
+          "token": "G1"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0210.2",
+      "rfc": "0210",
+      "local": "G2",
+      "section": "§E.11",
+      "surface": "`revocation` has **no registry file**. Unlike `spec/v2/errors.json` and `spec/v2/event-codemap.json` it lives inline in the facet schema, so `overview.md` §0's \"adding a row to its registry and regenerating\" has no literal referent, and the unknown-member tolerance rule attaches to it only by RFC 0197 §A.2 R4's wording \"registry-backed **or advertised** enum\". §E.11 states the rule explicitly to close that reading; it does not create the file.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "spec/v2/facets/auth.schema.json",
+      "sources": [
+        {
+          "file": "RFCS/registers/0210-lane-revocation-rule-is-measured.gaps.md",
+          "token": "G2"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0210.3",
+      "rfc": "0210",
+      "local": "G3",
+      "section": "Unresolved question 2",
+      "surface": "`revocationWindowSeconds` is not conditionally REQUIRED by `auth.schema.json` — only by `identity.md` §2.2's prose and by one suite leg. A lane advertising `exp-and-recheck` with no window is schema-valid today and is caught only by the suite. This RFC does not fix it, for the same reason it keeps the full lane → rule binding out of the schema.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "COMPATIBILITY.md",
+      "sources": [
+        {
+          "file": "RFCS/registers/0210-lane-revocation-rule-is-measured.gaps.md",
+          "token": "G3"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0210.4",
+      "rfc": "0210",
+      "local": "G4",
+      "section": "§B.4 / Conformance",
+      "surface": "The `v2-lane-exp-only-bound` legs need an issuer the suite controls, so it can mint a correctly signed token with an arbitrary `iat`/`exp` pair against a JWKS the host trusts. That is the existing `OPENWOP_TEST_OIDC_ISSUER_URL` harness seam, which means the four §B rows are **harness-gated**, never unaided. A host that does not run the harness records them `inapplicable`.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "host-runs-oidc-issuer-harness",
+      "sources": [
+        {
+          "file": "RFCS/registers/0210-lane-revocation-rule-is-measured.gaps.md",
+          "token": "G4"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0210.5",
+      "rfc": "0210",
+      "local": "G5",
+      "section": "§F.13",
+      "surface": "MyndHyve's committed bundle (`evidence/v2-host-bundles/myndhyve.json:488`) advertises `short-lived` / 3600 on `oidc` while the host performs no revocation re-check, and `INTEROP-MATRIX.md` row 18 certifies that bundle for `openwop-discovery-core` **and** `openwop-core-standard`. The §D.9 leg fails that advertisement from the suite minor that ships it, so MyndHyve's next cut is red until the host is corrected.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "myndhyve-revocation-correction",
+      "sources": [
+        {
+          "file": "RFCS/registers/0210-lane-revocation-rule-is-measured.gaps.md",
+          "token": "G5"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0210.6",
+      "rfc": "0210",
+      "local": "G6",
+      "section": "§Motivation 2",
+      "surface": "openwop-app advertises `openwop-auth-oidc-user-bearer` at v1 (`routes/discovery.ts:436–442`) and omits the `oidc` lane at v2 — a **capability that disappears between majors on a truthful host**. `exp-only` removes the cause, but nothing in the corpus notices a v1 profile with no v2 lane, so the next vocabulary gap produces the same regression silently.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "conformance/src/scenarios",
+      "sources": [
+        {
+          "file": "RFCS/registers/0210-lane-revocation-rule-is-measured.gaps.md",
+          "token": "G6"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0210.7",
+      "rfc": "0210",
+      "local": "G7",
+      "section": "§B.7",
+      "surface": "The SHOULD ceiling of one hour is a judgement, not a derivation: no upstream document states a maximum access-token lifetime (RFC 9068, OAuth 2.1, MCP and RFC 9728 were read in full for one). One hour is Firebase's ID-token lifetime and the number both hosts would advertise, which makes it a description of current practice rather than a standard.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "closed",
+      "target": null,
+      "sources": [
+        {
+          "file": "RFCS/registers/0210-lane-revocation-rule-is-measured.gaps.md",
+          "token": "G7"
+        }
+      ]
+    },
     {
       "id": "openwop.gap.spec.a2a-integration.g1",
       "rfc": "0152",