@openwop/spec-artifacts 2.42.5 → 2.42.7

package/spec/v2/core/capabilities.md

@@ -1,24 +1,35 @@
 # Discovery and Capabilities
 
-> **Status: Stable · RFC 0169, 0176, 0179.**
+> **Status: Stable.**
 
 ## Why this exists
 
-v2 discovery has one capability record type on a closed root, generated from one declaration file that also mints pack peer-dependency identifiers and the `§` anchors below. Profiles are derived predicates, never a wire field.
+A host advertises what it supports in one discovery document. Every capability family in it is one record type on a closed root, generated from one declaration file. That file also mints the pack peer-dependency identifiers and the `§` anchors below. Profiles are derived predicates, never a wire field.
 
-## 1. One well-known resource (RFC 0176 §C.1)
+## 1. One well-known resource
 
-`/.well-known/openwop` is one resource. Its representation MUST be selected by `OpenWOP-Version` per `versioning.md` §1.3: no header ⇒ the v1 document (with `protocolVersions[]` and `preferredVersion` additive) through the overlap; `OpenWOP-Version: 2` ⇒ the closed v2 root. A single fetch answers the major the client speaks and names the other. A v2 root MUST NOT contain a v1 sub-object; per-major sub-objects in one document are not adopted.
+`/.well-known/openwop` is one resource. Its representation MUST be selected by `OpenWOP-Version`, per [`versioning.md`](versioning.md) §1.3:
+
+- No header ⇒ the v1 document, with `protocolVersions[]` and `preferredVersion` added, through the overlap.
+- `OpenWOP-Version: 2` ⇒ the closed v2 root.
+
+A single fetch answers the major the client speaks and names the other. A v2 root MUST NOT contain a v1 sub-object; one document never carries per-major sub-objects.
 
 ### 1.1 Cache validators
 
-A host MUST emit a standard `ETag` on the discovery document and MUST honor `If-None-Match` with `304`. `Capabilities-Etag` is absent from the v2 representation; the document's bytes are its negotiation identity, and a host that changes semantics without changing bytes is non-conformant.
+A host MUST emit a standard `ETag` on the discovery document and MUST honor `If-None-Match` with `304`. The v2 representation has no `Capabilities-Etag`: the document's bytes are its negotiation identity. A host that changes semantics without changing bytes is non-conformant.
+
+### 1.2 Removal triggers
 
-### 1.2 Removal triggers (RFC 0176 §C.2)
+Each `deprecations.json` row carries a `removalTrigger` (`v2.0-cut | v1-end-of-support`). The following MUST be absent from the v2 representation and MUST be removed from the v1 representation at v1 end-of-support ([`overview.md`](overview.md)):
 
-`deprecations.json` rows carry `removalTrigger` (`v2.0-cut | v1-end-of-support`). The wrapper (`capabilities-wrapper`), the dotted mirror (`host-dotted-mirror`), and `Capabilities-Etag` (`capabilities-etag-header`) MUST be absent from the v2 representation at the cut and MUST be removed from the v1 representation at v1 end-of-support (`overview.md`). The `/.well-known/wop` alias (`well-known-wop-alias`) carries the same trigger.
+- the wrapper (`capabilities-wrapper`);
+- the dotted mirror (`host-dotted-mirror`);
+- `Capabilities-Etag` (`capabilities-etag-header`).
 
-## 2. The capability record (RFC 0169 §A)
+The `/.well-known/wop` alias (`well-known-wop-alias`) carries the same trigger.
+
+## 2. The capability record
 
 Every family at the v2 root is one object:
 
@@ -30,370 +41,426 @@ Every family at the v2 root is one object:
   ...facets }
 ```
 
-| Rule | Requirement |
+| Field | Rule |
 | --- | --- |
-| Required | `status`, `since`, `witness` MUST be present |
+| `status`, `since`, `witness` | MUST be present |
 | `until` | REQUIRED when `status` is `experimental` or `deprecated`; MUST NOT be present when `stable` |
-| `until` in the past | non-conformant; a validator MUST answer `400` `until_in_past` |
-| `witness` | MUST be one of the five wire-legal classes; `unwitnessable` MUST NOT appear on a wire record — such a family lives in `spec/v2/ext/` and is not advertised |
-| `supported` | does not exist; presence of the record is the claim, and a host that does not support a family MUST omit it |
-| facets | the named per-family fields; a facet is advertised by the presence of its key, and a host MUST omit the key for a facet it does not offer, except where the facet's own schema states a meaning for its absence; `aiProviders.providers[]` carries the v1 `supported` list |
+| `until` in the past | Non-conformant; a validator MUST answer `400` `until_in_past` |
+| `witness` | MUST be one of the five wire-legal classes |
+| `supported` | Not a field: the record's presence is the claim, and a host that does not support a family MUST omit it |
+| facets | A facet is advertised by the presence of its key; a host MUST omit the key for a facet it does not offer, except where the facet's own schema states a meaning for its absence |
+
+`unwitnessable` MUST NOT appear on a wire record; such a family lives in `spec/v2/ext/` and is not advertised.
 
-`until` absorbs v1 `tier` / `experimentalUntil`. A family's facets are hand-decided where `spec/v2/facets/<key>.schema.json` exists and otherwise generated from the declaration row.
+A family's facets are hand-decided where `spec/v2/facets/<key>.schema.json` exists, and otherwise generated from the declaration row.
 
-## 3. The closed root (RFC 0169 §A.1a, §A.4)
+## 3. The closed root
 
-The root of `schemas/v2/capabilities.schema.json` is `additionalProperties: false`; `protocolVersions` and `preferredVersion` are REQUIRED. Every root key is one of: a metadata key (§3.1), a core family (§5), an `ext/` family (§6), or `extensions` (§3.2). Any other key MUST fail validation: no dotted key, no wrapper, no mirror, no root `profiles[]`.
+The root of `schemas/v2/capabilities.schema.json` is `additionalProperties: false`, and `protocolVersions` and `preferredVersion` are REQUIRED. Every root key is one of:
 
-### 3.1 Metadata keys (17)
+- a metadata key (§3.1);
+- a core family (§5);
+- an `ext/` family (§6);
+- `extensions` (§3.2).
 
-`protocolVersion`, `protocolVersions`, `preferredVersion`, `extensions`, `implementation`, `engineVersion`, `eventLogSchemaVersion`, `configurable`, `observability`, `minClientVersion`, `runtimeCapabilities`, `testing`, `conformance`, `fixtures`, `compliance`, `discovery`, and `supportedTransports`. Each is declared as metadata with its own schema in `spec/v2/declaration.json`; a metadata key is not a record and carries no `status` or `witness`. `supportedTransports` is declared only to record its deletion (§4). Version-axis metadata are specified in `versioning.md`; `configurable` in `runs.md`. `implementation` (`name`, `version`, `vendor`, `url`) is self-reported: a client SHOULD NOT change behaviour because of it or authorize from it.
+Any other key MUST fail validation: no dotted key, no wrapper, no mirror, no root `profiles[]`.
+
+### 3.1 Metadata keys (18)
+
+`protocolVersion`, `protocolVersions`, `preferredVersion`, `extensions`, `implementation`, `engineVersion`, `eventLogSchemaVersion`, `configurable`, `observability`, `minClientVersion`, `runtimeCapabilities`, `testing`, `conformance`, `fixtures`, `compliance`, `signingKeys`, `discovery`, and `supportedTransports`.
+
+- Each is declared as metadata, with its own schema, in `spec/v2/declaration.json`. A metadata key is not a record and carries no `status` or `witness`.
+- `supportedTransports` is declared only to record its deletion (§4).
+- The version-axis keys are specified in [`versioning.md`](versioning.md); `configurable` in [`runs.md`](runs.md); `signingKeys` in [`conformance.md`](conformance.md).
+- `implementation` (`name`, `version`, `vendor`, `url`) is self-reported: a client SHOULD NOT change behaviour because of it or authorize from it.
 
 ### 3.2 `extensions.<org>.<name>`
 
-Vendor and host extensions live under one key, `extensions`, whose members MUST match `^[a-z][a-z0-9]*(-[a-z0-9]+)*\.[a-z][a-z0-9]*(-[a-z0-9]+)*$` (short-form `<org>.<name>`). The orgs in `spec/v2/declaration.json` `reservedOrgs` — `openwop`, `vendor`, `effect-seams` and `events` — are reserved: a host MUST NOT use any of them. An extension record's shape is the org's own (`additionalProperties: true` inside the record). The 11 v1 extension-class `host.*` families (§6) are advertised as `extensions.openwop-app.*` by the host that serves them. A change to an extension that would break an existing reader MUST ship under a new key; a host MUST NOT read one key's record as another's (A2A §4.6.3).
+Vendor and host extensions live under one key, `extensions`. Its members MUST match `^[a-z][a-z0-9]*(-[a-z0-9]+)*\.[a-z][a-z0-9]*(-[a-z0-9]+)*$` (short form `<org>.<name>`).
+
+- The orgs in `spec/v2/declaration.json` `reservedOrgs` — `openwop`, `vendor`, `effect-seams` and `events` — are reserved: a host MUST NOT use any of them.
+- An extension record's shape is the org's own (`additionalProperties: true` inside the record).
+- An extension family of §6 is advertised as `extensions["<org>.<extensionName>"]`, where `extensionName` is the kebab-case name its declaration row carries (for example `rest-transport`). The family key itself MUST NOT appear at the root.
+- A change to an extension that would break an existing reader MUST ship under a new key.
+- A host MUST NOT read one key's record as another's (A2A §4.6.3).
+
+## 4. Deleted keys
 
-## 4. Deleted keys (RFC 0169 §A.5, §B.3; RFC 0175)
+These keys are not part of the v2 root:
 
 | Key | Why |
 | --- | --- |
-| `contractProvenance` | an advisory self-declaration the wire cannot falsify (RFC 0169 §A.5) |
-| `supportedTransports` | REST is the wire (interop.md; RFC 0175 §B.1) |
-| `grpc` | unwitnessable, so not advertisable (interop.md §gRPC; RFC 0175 §A.1) |
-| `Capabilities-Etag`, `auth.subjectLinking`, `replay.fork`, bare `a2a.supported` / `mcp.supported`, the `openwop-core` alias | absent from the v2 root; rows `C2.1`–`C2.10` in `spec/v1/migrations.json` carry each with its codemod |
-| `host.media`, `host.collaboration` | reserved slots are unrepresentable under a closed root; `host.workspace` is the declared family `workspace` |
+| `contractProvenance` | An advisory self-declaration the wire cannot falsify |
+| `supportedTransports` | REST is the wire ([`interop.md`](interop.md)) |
+| `grpc` | Unwitnessable, so not advertisable ([`interop.md`](interop.md) §gRPC) |
+| `Capabilities-Etag`, `auth.subjectLinking`, `replay.fork`, bare `a2a.supported` / `mcp.supported`, the `openwop-core` alias | Rows `C2.1`–`C2.10` in `spec/v1/migrations.json` give each its codemod |
+| `host.media`, `host.collaboration` | A closed root cannot represent reserved slots |
 
-`minimumSuiteVersion` is retired into the declaration file (`versioning.md` axis 9).
+`host.workspace` is the declared family `workspace`. `minimumSuiteVersion` lives in the declaration file ([`versioning.md`](versioning.md) axis 9).
 
-## 4.1 The declaration file (RFC 0169 §B)
+## 4.1 The declaration file
 
-`spec/v2/declaration.json` (schema `spec/v2/declaration.schema.json`) is the single source for: the generated `schemas/v2/capabilities.schema.json`; each family's `witness` class and maturity; the pack peer-dependency identifier (identical to the root key); the spec anchor (`core/capabilities.md#<key>` or `ext/<key>/`); the floor scenarios and requirement ids that define `openwop-core-standard`; and the profile predicates (§7). It replaces `extensions.json`, `core-standard-manifest.json`, `capability-declaration-classes.json`, and the capabilities half of `operation-path-manifest.json` (the operations half is `spec/v2/path-manifest.json`, `versioning.md`). It is generated from nothing and checked against everything (`scripts/check-declaration.mjs`).
+`spec/v2/declaration.json` (schema `spec/v2/declaration.schema.json`) is the single source for:
+
+- the generated `schemas/v2/capabilities.schema.json`;
+- each family's `witness` class and maturity;
+- the pack peer-dependency identifier, identical to the root key;
+- the spec anchor (`core/capabilities.md#<key>` or `ext/<key>/`);
+- the floor scenarios and requirement ids that define `openwop-core-standard`;
+- the profile predicates (§7).
+
+Operation paths live in `spec/v2/path-manifest.json` ([`versioning.md`](versioning.md)). The declaration is generated from nothing and checked against everything (`scripts/check-declaration.mjs`).
 
 ## 5. Core families (72)
 
-Each heading is a `spec/v2/declaration.json` row with `anchor: core`; `scripts/check-declaration.mjs` MUST fail when a heading here, a root key in the generated schema, or a pack peer-dependency identifier names a family the declaration does not. The peer-dependency identifier is identical to the key (`packs.md`). Maturity axes are §7; the sentence under each heading names the witness class, the owning RFC, and, where `spec/v2/facets/<key>.schema.json` exists, the hand-decided facets.
+Each heading below is a `spec/v2/declaration.json` row with `anchor: core`. `scripts/check-declaration.mjs` MUST fail when a heading here, a root key in the generated schema, or a pack peer-dependency identifier names a family the declaration does not. The peer-dependency identifier is identical to the key ([`packs.md`](packs.md)).
+
+Under each heading: the family's witness class and, where `spec/v2/facets/<key>.schema.json` exists, its hand-decided facets. Maturity axes are §8; the owning RFC is the row's `owningRfc`.
 
 ### § supportedEnvelopes
 
-Witness `witnessable-gated`; owner RFC 0193; facets `kinds`.
+Witness `witnessable-gated`. Facets: `kinds`.
 
 ### § schemaVersions
 
-Witness `witnessable-gated`; owner RFC 0193; facets `kinds`.
+Witness `witnessable-gated`. Facets: `kinds`.
 
 ### § limits
 
-Witness `witnessable-gated`; owner no owning RFC (declaration row).
+Witness `witnessable-gated`.
 
 ### § envelopeStrictness
 
-Witness `claims-check`; owner RFC 0193; facets `mode`.
+Witness `claims-check`. Facets: `mode`.
 
 ### § envelopeContracts
 
-Witness `claims-check`; owner no owning RFC (declaration row).
+Witness `claims-check`.
 
 ### § envelopes
 
-Witness `claims-check`; owner RFC 0030.
+Witness `claims-check`.
 
 ### § prompts
 
-Witness `witnessable-gated`; owner RFC 0027.
+Witness `witnessable-gated`.
 
 ### § nodePackRuntimes
 
-Witness `claims-check`; owner RFC 0008.
+Witness `claims-check`.
 
 ### § secrets
 
-Witness `witnessable-gated`; owner no owning RFC (declaration row).
+Witness `witnessable-gated`.
 
 ### § connections
 
-Witness `witnessable-gated`; owner RFC 0095.
+Witness `witnessable-gated`.
 
 ### § selfHostedRunner
 
-Witness `witnessable-gated`; owner RFC 0122.
+Witness `witnessable-gated`.
 
 ### § purposePropagation
 
-Witness `witnessable-gated`; owner RFC 0128.
+Witness `witnessable-gated`.
 
 ### § dataResidency
 
-Witness `witnessable-gated`; owner RFC 0129.
+Witness `witnessable-gated`.
 
 ### § anonymousActor
 
-Witness `seam-gated`; owner RFC 0132.
+Witness `seam-gated`.
 
 ### § credentials
 
-Witness `witnessable-gated`; owner RFC 0046.
+Witness `witnessable-gated`.
 
 ### § feedback
 
-Witness `witnessable-gated`; owner RFC 0056.
+Witness `witnessable-gated`.
 
 ### § replay
 
-Witness `witnessable-gated`; owner RFC 0140; facets `modes`, `retention`, `effectSeamsManifest`.
+Witness `witnessable-gated`. Facets: `modes`, `retention`, `effectSeamsManifest`.
 
 ### § oauth
 
-Witness `witnessable-gated`; owner RFC 0047.
+Witness `witnessable-gated`.
 
 ### § authorization
 
-Witness `witnessable-gated`; owner RFC 0049.
+Witness `witnessable-gated`.
 
 ### § multiPartyConversation
 
-Witness `witnessable-gated`; owner RFC 0101.
+Witness `witnessable-gated`.
 
 ### § conversationTurnModelProvenance
 
-Witness `witnessable-gated`; owner RFC 0109.
+Witness `witnessable-gated`.
 
 ### § channelPresence
 
-Witness `witnessable-gated`; owner RFC 0110.
+Witness `witnessable-gated`.
 
 ### § multiAgent
 
-Witness `claims-check`; owner RFC 0037.
+Witness `claims-check`.
 
 ### § modelCapabilities
 
-Witness `witnessable-gated`; owner RFC 0031.
+Witness `witnessable-gated`.
 
 ### § providerUsage
 
-Witness `witnessable-gated`; owner RFC 0026.
+Witness `witnessable-gated`.
 
 ### § aiProviders
 
-Witness `witnessable-gated`; owner no owning RFC (declaration row); facets `providers`, `byok`, `selfHosted`, `speechSynthesis`, `imageGeneration`, `videoGeneration`, `realtimeVoice`, `promptPrefixCache`, `maxInlineMediaBytes`, `authModes`, `policies`, `input`.
+Witness `witnessable-gated`. Facets: `providers`, `byok`, `selfHosted`, `speechSynthesis`, `imageGeneration`, `videoGeneration`, `realtimeVoice`, `promptPrefixCache`, `maxInlineMediaBytes`, `authModes`, `policies`, `input`.
 
 ### § agents
 
-Witness `witnessable-gated`; owner RFC 0002.
+Witness `witnessable-gated`.
 
 ### § memory
 
-Witness `witnessable-gated`; owner RFC 0004.
+Witness `witnessable-gated`.
 
 ### § conversationPrimitive
 
-Witness `claims-check`; owner RFC 0005.
+Witness `claims-check`.
 
 ### § subWorkflow
 
-Witness `claims-check`; owner RFC 0007.
+Witness `claims-check`.
 
 ### § fs
 
-Witness `witnessable-gated`; owner RFC 0014.
+Witness `witnessable-gated`.
 
 ### § kvStorage
 
-Witness `witnessable-gated`; owner RFC 0015.
+Witness `witnessable-gated`.
 
 ### § tableStorage
 
-Witness `witnessable-gated`; owner RFC 0016.
+Witness `witnessable-gated`.
 
 ### § queueBus
 
-Witness `witnessable-gated`; owner RFC 0017.
+Witness `witnessable-gated`.
 
 ### § scheduling
 
-Witness `witnessable-gated`; owner RFC 0052.
+Witness `witnessable-gated`.
 
 ### § heartbeat
 
-Witness `witnessable-gated`; owner RFC 0060; facets `minIntervalSec`, `maxRuntimeMs`, `deliveryChannel`.
+Witness `witnessable-gated`. Facets: `minIntervalSec`, `maxRuntimeMs`, `deliveryChannel`.
 
 ### § toolHooks
 
-Witness `witnessable-gated`; owner RFC 0064.
+Witness `witnessable-gated`.
 
 ### § toolCatalog
 
-Witness `witnessable-gated`; owner RFC 0078.
+Witness `witnessable-gated`.
 
 ### § httpClient
 
-Witness `witnessable-gated`; owner RFC 0076.
+Witness `witnessable-gated`.
 
 ### § artifactTypes
 
-Witness `witnessable-gated`; owner RFC 0071.
+Witness `witnessable-gated`.
 
 ### § forms
 
-Witness `claims-check`; owner RFC 0137.
+Witness `claims-check`.
 
 ### § aiEnvelope
 
-Witness `witnessable-gated`; owner RFC 0144.
+Witness `witnessable-gated`.
 
 ### § promptLibrary
 
-Witness `claims-check`; owner RFC 0144.
+Witness `claims-check`.
 
 ### § agentRuntime
 
-Witness `claims-check`; owner RFC 0144.
+Witness `claims-check`.
 
 ### § deadLetter
 
-Witness `witnessable-gated`; owner RFC 0053.
+Witness `witnessable-gated`.
 
 ### § webhooks
 
-Witness `witnessable-gated`; owner RFC 0188; facets `deadLetter`, `retryPolicy`, `secretRotation`, `signatureAlgorithms`.
+Witness `witnessable-gated`. Facets: `deadLetter`, `retryPolicy`, `secretRotation`, `signatureAlgorithms`.
 
 ### § triggerBridge
 
-Witness `witnessable-gated`; owner RFC 0083.
+Witness `witnessable-gated`.
 
 ### § a2a
 
-Witness `seam-gated`; owner RFC 0152; facets `versions`, `preferredVersion`, `minimumVersion`, `refreshedAt`, `profiles`, `agentCardUrl`, `streaming`, `pushNotifications`, `durableTasks`.
+Witness `seam-gated`. Facets: `versions`, `preferredVersion`, `minimumVersion`, `refreshedAt`, `profiles`, `agentCardUrl`, `streaming`, `pushNotifications`, `durableTasks`, `agentCards`.
+
+A facet MAY name a URL on another origin; that is a claim about the facet, not the origin. `agentCardUrl` (and `mcp.serverUrls[]`) are `format: uri` with no origin constraint.
+
+- The advertiser knows where the card is, not that the named origin serves `/.well-known/openwop` or speaks any major.
+- The suite exercises the advertiser only, and certification is per origin.
 
-**A facet MAY name a URL on another origin; that is a claim about the facet, not the origin.** `agentCardUrl` (and `mcp.serverUrls[]`) are `format: uri` with no origin constraint: the advertiser knows where the card is, not that the named origin serves `/.well-known/openwop` or speaks any major; the suite exercises the advertiser only, and certification is per origin. Open gap: whether a facet naming an origin that does not answer SHOULD be withdrawn, and how a client learns that origin's major.
+Open gap: whether a facet naming an origin that does not answer SHOULD be withdrawn, and how a client learns that origin's major.
 
 ### § budget
 
-Witness `witnessable-gated`; owner RFC 0084.
+Witness `witnessable-gated`.
 
 ### § nondeterminismPolicy
 
-Witness `claims-check`; owner RFC 0085.
+Witness `claims-check`.
 
 ### § workspace
 
-Witness `witnessable-gated`; owner RFC 0059.
+Witness `witnessable-gated`.
 
 ### § uiPlugins
 
-Witness `witnessable-gated`; owner RFC 0117.
+Witness `witnessable-gated`.
 
 ### § sql
 
-Witness `witnessable-gated`; owner RFC 0018.
+Witness `witnessable-gated`.
 
 ### § nosql
 
-Witness `claims-check`; owner RFC 0018.
+Witness `claims-check`.
 
 ### § vectorStore
 
-Witness `witnessable-gated`; owner RFC 0018.
+Witness `witnessable-gated`.
 
 ### § searchIndex
 
-Witness `witnessable-gated`; owner RFC 0018.
+Witness `witnessable-gated`.
 
 ### § blobStorage
 
-Witness `witnessable-gated`; owner RFC 0019.
+Witness `witnessable-gated`.
 
 ### § cache
 
-Witness `witnessable-gated`; owner RFC 0019.
+Witness `witnessable-gated`.
 
 ### § workflowChainPacks
 
-Witness `witnessable-gated`; owner RFC 0013; facets `subChains`.
+Witness `witnessable-gated`. Facets: `subChains`.
 
 ### § packs
 
-Witness `claims-check`; owner RFC 0025; facets `testMode`.
+Witness `claims-check`. Facets: `testMode`.
 
 ### § mcp
 
-Witness `seam-gated`; owner RFC 0153; facets `revisions`, `preferredVersion`, `minimumRevision`, `refreshedAt`, `profiles`, `features`, `serverUrls`, `serverMount`, `mrtr`.
+Witness `seam-gated`. Facets: `revisions`, `preferredVersion`, `minimumRevision`, `refreshedAt`, `profiles`, `features`, `serverUrls`, `serverMount`, `mrtr`, `client`.
 
-`serverUrls[]` MAY name other origins; § a2a's off-origin paragraph applies.
+`serverUrls[]` MAY name other origins; the off-origin rule under § a2a applies.
 
 ### § sandbox
 
-Witness `witnessable-gated`; owner RFC 0035; facets `isolationModel`, `allowedHostCalls`, `memoryLimitBytes`, `wallClockLimitMs`.
+Witness `witnessable-gated`. Facets: `isolationModel`, `allowedHostCalls`, `memoryLimitBytes`, `wallClockLimitMs`.
 
 ### § compensation
 
-Witness `seam-gated`; owner RFC 0151.
+Witness `seam-gated`.
 
 ### § idempotency
 
-Witness `witnessable-gated`; owner RFC 0150.
+Witness `witnessable-gated`.
 
 ### § eventLog
 
-Witness `claims-check`; owner RFC 0036.
+Witness `claims-check`.
 
 ### § production
 
-Witness `witnessable-gated`; owner RFC 0009.
+Witness `witnessable-gated`.
 
 ### § auth
 
-Witness `seam-gated`; owner RFC 0154; facets `lanes`, `subjectLinkKey`.
+Witness `seam-gated`. Facets: `lanes`, `subjectLinkKey`.
 
 ### § i18n
 
-Witness `witnessable-gated`; owner no owning RFC (declaration row).
+Witness `witnessable-gated`.
 
 ### § content
 
-Witness `witnessable-gated`; owner RFC 0103.
+Witness `witnessable-gated`.
 
 ### § portability
 
-Witness `witnessable-gated`; owner RFC 0098.
+Witness `witnessable-gated`.
 
 ### § interrupt
 
-Witness `witnessable-gated`; owner RFC 0104; facets `refKinds`, `tokenAlgs`, `callbackDelivery` (RFC 0196).
+Witness `witnessable-gated`. Facets: `refKinds`, `tokenAlgs`, `callbackDelivery`.
 
 ### § runList
 
-Witness `witnessable-gated`; owner RFC 0182; facets `maxPageSize`, `filters` (runs.md §List).
+Witness `witnessable-gated`. Facets: `maxPageSize`, `filters` ([runs.md](runs.md) §List).
+
 
 ## 6. Extension families (13)
 
-Rows with `anchor: ext` are documented under `spec/v2/ext/<key>/` and each document MUST declare `witness` and both maturity axes in its header (`overview.md`): `restTransport`, `a2uiSurface`, `brand`, `canvas`, `chat`, `coordination`, `dataIntegration`, `entities`, `kanban`, `knowledge`, `launchStudio`, `messaging`, `webResearch`. `restTransport` and `a2uiSurface` (`witness: claims-check`) stay in `ext/` unless a behavioral witness lands (RFC 0169 §C.5); the other 11 are the RFC 0144 extension-class families advertised as `extensions.openwop-app.<name>` (§3.2).
+Rows with `anchor: ext` are documented under `spec/v2/ext/<key>/`. Each document MUST declare `witness` and both maturity axes in its header ([`overview.md`](overview.md)). The families are `restTransport`, `a2uiSurface`, `brand`, `canvas`, `chat`, `coordination`, `dataIntegration`, `entities`, `kanban`, `knowledge`, `launchStudio`, `messaging`, `webResearch`.
+
+- Each is advertised under `extensions` (§3.2), never at the root. `a2uiSurface` is the exception: its contract is admitted through `schemaVersions.kinds`, and only its deprecated facet is an `extensions` record.
+- `restTransport` (`witnessable-gated`) and `a2uiSurface` (`seam-gated`) have behavioral witnesses. The other 11 are discovery-only reservations checked by `claims-check`.
+- An ext document's `Draft`/`Stable` label is a predicate over certified evidence ([`../ext/README.md`](../ext/README.md)). Becoming core takes its own RFC.
 
-## 7. Profiles (RFC 0169 §C.1, §C.3)
+## 7. Profiles
 
-A profile is a predicate over the declaration file, published in `spec/v2/profiles.json` (generated): every listed family present as a record and every listed metadata key present. No `profiles[]` exists at the v2 root; a host that emits one MUST fail schema validation (§3). `auth.profiles`, `a2a.profiles`, and `mcp.profiles` are replaced by the facets `auth.lanes[]` (`identity.md`), `a2a.versions[]` and `mcp.revisions[]` (`interop.md`).
+A profile is a predicate over the declaration file, published in `spec/v2/profiles.json` (generated): every listed family is present as a record, and every listed metadata key is present.
 
 | Profile | Predicate |
 | --- | --- |
-| `openwop-discovery-core` | metadata `protocolVersions`, `preferredVersion` |
-| `openwop-core-standard` | families `interrupt`, `replay`, `webhooks`, `idempotency`, `eventLog` plus the 2.0.0 floor scenarios and requirement ids the declaration names |
-| `openwop-conformance-seams-v2` | the seams profile (`conformance.md`); forbidden from the capability namespace |
+| `openwop-discovery-core` | Metadata `protocolVersions`, `preferredVersion` |
+| `openwop-core-standard` | Families `interrupt`, `replay`, `webhooks`, `idempotency`, `eventLog`, plus the 2.0.0 floor scenarios and requirement ids the declaration names |
+| `openwop-conformance-seams-v2` | The seams profile ([`conformance.md`](conformance.md)); forbidden from the capability namespace |
 
-The `openwop-core` alias is deleted (row `C2.3`); the canonical discovery-only id is `openwop-discovery-core`. The claim vocabulary is `overview.md`. The invariant `profile-claim-floor-not-overstated` is registered in `SECURITY/invariants.yaml` with its test.
+- The v2 root has no `profiles[]`; a host that emits one MUST fail schema validation (§3).
+- The facet `auth.lanes[]` ([`identity.md`](identity.md)) replaces `auth.profiles`.
+- `a2a.profiles[]` and `mcp.profiles[]` are facets that admit no `-legacy` id; the offered versions are `a2a.versions[]` and `mcp.revisions[]` ([`interop.md`](interop.md)).
+- The discovery-only id is `openwop-discovery-core`; the `openwop-core` alias is deleted (row `C2.3`).
+- The claim vocabulary is in [`overview.md`](overview.md). The invariant `profile-claim-floor-not-overstated` is registered in `SECURITY/invariants.yaml` with its test.
 
-## 8. Maturity axes (RFC 0169 §C.2)
+## 8. Maturity axes
 
 | Axis | Values | Source |
 | --- | --- | --- |
-| `technical` | `experimental \| stable \| deprecated` | the record's `status`, which MUST NOT exceed the declaration row (RFC 0197) |
-| `adoption` | `none \| single-witness \| multi-witness \| independent` | derived from INTEROP-MATRIX bundle evidence |
+| `technical` | `experimental \| stable \| deprecated` | The record's `status`, which MUST NOT exceed the declaration row |
+| `adoption` | `none \| single-witness \| multi-witness \| independent` | Derived from INTEROP-MATRIX bundle evidence |
+
+- `stable` does not require a tier-3 host; `independent` records whether one exists.
+- There is no cap on the number of families: a family MAY exist at any count if it declares its witness class.
+- `memory.injectionBudget`, `toolCatalog.compactView`, and `aiProviders.promptPrefixCache` keep their families with `adoption: single-witness`.
+
+## 9. Externally-gated
+
+`externally-gated` is the disposition for a surface held on grounds that are neither technical nor adoption, such as a legal citation or a non-steward host tripwire.
 
-`stable` does not require a tier-3 host; `independent` records whether one exists. The RFC 0155 numeric extension budget is repealed: a family MAY exist at any count if it declares its witness class. At the cut, `memory.injectionBudget`, `toolCatalog.compactView`, and `aiProviders.promptPrefixCache` keep their families with `adoption: single-witness` (RFC 0169 §C.5).
+- An externally-gated family MAY be declared with `status: experimental` and an `until` equal to the tripwire review date, or omitted.
+- It MUST NOT be `stable` (`externally-gated-never-stable`).
 
-## 9. Externally-gated (RFC 0169 §C.4)
+`sandbox` is externally gated.
 
-`externally-gated` is the disposition for a surface held on grounds that are neither technical nor adoption (a legal citation, RFC 0121; a non-steward host tripwire, RFC 0035). An externally-gated family MAY be declared with `status: experimental` and an `until` equal to the tripwire review date, or omitted; it MUST NOT be `stable` (`externally-gated-never-stable`, a corpus gate). `sandbox` is the first row.
+## 10. Migration rows
 
-## 10. Migration rows (RFC 0169)
+Rows `C2.1`–`C2.10` are `spec/v1/migrations.json` entries. `openwop.codemod.discovery-document-v2` transforms `C2.2`–`C2.8`: it drops a family with `supported: false` and promotes a dotted-only declared family to its plain key. Certification bundles naming `openwop-core` are never upgraded; they remain valid v1 evidence at their version.
 
-Rows `C2.1`–`C2.10` are `spec/v1/migrations.json` entries. `C2.2`–`C2.8` are transformed by `openwop.codemod.discovery-document-v2`; a family with `supported: false` is dropped, and a dotted-only declared family is promoted to its plain key. Certification bundles naming `openwop-core` are never-upgraded and remain valid v1 evidence at their version.
+*Sources: RFC 0144, RFC 0169, RFC 0175, RFC 0176, RFC 0179, RFC 0197. Each family's owning RFC is its `owningRfc` in [`declaration.json`](../declaration.json).*