@openwop/spec-artifacts 2.42.9 → 2.43.0

package/spec/v2/ext/canvas/README.md

@@ -8,7 +8,7 @@
 | --- | --- |
 | **witness:** | `claims-check` |
 | **technical:** | `experimental` |
-| **adoption:** | `single-witness` |
+| **adoption:** | `none` |
 | **peer-dependency id** | `canvas` |
 | **advertised as** | `extensions.<org>.canvas` |
 | **declared facets** | none defined |

package/spec/v2/ext/chat/README.md

@@ -1,13 +1,13 @@
 # `chat` extension
 
-> **Status: Draft.**
+> **Status: Stable.**
 
 `chat` names a host service that posts messages and cards into a host-established chat session. It is a discovery-only reservation: v2 defines no portable operations or payload contract for it.
 
 | Field | Value |
 | --- | --- |
 | **witness:** | `claims-check` |
-| **technical:** | `experimental` |
+| **technical:** | `stable` |
 | **adoption:** | `single-witness` |
 | **peer-dependency id** | `chat` |
 | **advertised as** | `extensions.<org>.chat` |

package/spec/v2/ext/coordination/README.md

@@ -8,7 +8,7 @@
 | --- | --- |
 | **witness:** | `claims-check` |
 | **technical:** | `experimental` |
-| **adoption:** | `single-witness` |
+| **adoption:** | `none` |
 | **peer-dependency id** | `coordination` |
 | **advertised as** | `extensions.<org>.coordination` |
 | **declared facets** | none defined |

package/spec/v2/ext/dataIntegration/README.md

@@ -8,7 +8,7 @@
 | --- | --- |
 | **witness:** | `claims-check` |
 | **technical:** | `experimental` |
-| **adoption:** | `single-witness` |
+| **adoption:** | `none` |
 | **peer-dependency id** | `dataIntegration` |
 | **advertised as** | `extensions.<org>.data-integration` |
 | **declared facets** | none defined |

package/spec/v2/ext/entities/README.md

@@ -1,13 +1,13 @@
 # `entities` extension
 
-> **Status: Draft.**
+> **Status: Stable.**
 
 `entities` names generic entity CRUD over projects and workspace assets. It is a discovery-only reservation: v2 defines no portable operations or payload contract for it.
 
 | Field | Value |
 | --- | --- |
 | **witness:** | `claims-check` |
-| **technical:** | `experimental` |
+| **technical:** | `stable` |
 | **adoption:** | `single-witness` |
 | **peer-dependency id** | `entities` |
 | **advertised as** | `extensions.<org>.entities` |

package/spec/v2/ext/kanban/README.md

@@ -1,13 +1,13 @@
 # `kanban` extension
 
-> **Status: Draft.**
+> **Status: Stable.**
 
 `kanban` names board, task, timeline and automation operations. It is a discovery-only reservation: v2 defines no portable operations or payload contract for it.
 
 | Field | Value |
 | --- | --- |
 | **witness:** | `claims-check` |
-| **technical:** | `experimental` |
+| **technical:** | `stable` |
 | **adoption:** | `single-witness` |
 | **peer-dependency id** | `kanban` |
 | **advertised as** | `extensions.<org>.kanban` |

package/spec/v2/ext/knowledge/README.md

@@ -1,13 +1,13 @@
 # `knowledge` extension
 
-> **Status: Draft.**
+> **Status: Stable.**
 
 `knowledge` names knowledge-base retrieval through the host's RAG pipeline. It is a discovery-only reservation: v2 defines no portable operations or payload contract for it.
 
 | Field | Value |
 | --- | --- |
 | **witness:** | `claims-check` |
-| **technical:** | `experimental` |
+| **technical:** | `stable` |
 | **adoption:** | `single-witness` |
 | **peer-dependency id** | `knowledge` |
 | **advertised as** | `extensions.<org>.knowledge` |

package/spec/v2/ext/launchStudio/README.md

@@ -8,7 +8,7 @@
 | --- | --- |
 | **witness:** | `claims-check` |
 | **technical:** | `experimental` |
-| **adoption:** | `single-witness` |
+| **adoption:** | `none` |
 | **peer-dependency id** | `launchStudio` |
 | **advertised as** | `extensions.<org>.launch-studio` |
 | **declared facets** | none defined |

package/spec/v2/ext/messaging/README.md

@@ -8,7 +8,7 @@
 | --- | --- |
 | **witness:** | `claims-check` |
 | **technical:** | `experimental` |
-| **adoption:** | `single-witness` |
+| **adoption:** | `none` |
 | **peer-dependency id** | `messaging` |
 | **advertised as** | `extensions.<org>.messaging` |
 | **declared facets** | none defined |

package/spec/v2/ext/restTransport/README.md

@@ -1,13 +1,13 @@
 # `restTransport` extension
 
-> **Status: Draft.**
+> **Status: Stable.**
 
 `restTransport` names conditional GET and response compression on run reads. The run-snapshot rules are in [`runs.md`](../../core/runs.md) §"Caching and encoding". This page defines the claim and what advertising it adds to those rules.
 
 | Field | Value |
 | --- | --- |
 | **witness:** | `witnessable-gated` |
-| **technical:** | `experimental` |
+| **technical:** | `stable` |
 | **adoption:** | `single-witness` |
 | **peer-dependency id** | `restTransport` |
 | **advertised as** | `extensions.<org>.rest-transport` |

package/spec/v2/ext/webResearch/README.md

@@ -1,13 +1,13 @@
 # `webResearch` extension
 
-> **Status: Draft.**
+> **Status: Stable.**
 
 `webResearch` names search, fetch and research orchestration through the host's search adapter. It is a discovery-only reservation: v2 defines no portable operations or payload contract for it.
 
 | Field | Value |
 | --- | --- |
 | **witness:** | `claims-check` |
-| **technical:** | `experimental` |
+| **technical:** | `stable` |
 | **adoption:** | `single-witness` |
 | **peer-dependency id** | `webResearch` |
 | **advertised as** | `extensions.<org>.web-research` |

package/spec/v2/facets/auditLogIntegrity.schema.json

@@ -0,0 +1,30 @@
+{
+  "$comment": "RFC 0224 §A — the audit-log-integrity family's facets: the checkpoint signing key and algorithm a verifier needs, and the checkpoint cadence the host declares. The record's presence claims the hash chain, so the earlier major's `hashChain: true` has no seat.",
+  "properties": {
+    "checkpointSignatureAlgorithm": {
+      "const": "ed25519",
+      "description": "The checkpoint signature algorithm. Ed25519 over the 32 bytes `merkleRoot` hex-decodes to (RFC 0218 §A.4)."
+    },
+    "checkpointPublicKey": {
+      "type": "string",
+      "pattern": "^MCowBQYDK2VwAyEA[A-Za-z0-9+/]{43}=$",
+      "description": "The audit-signing public key: base64 (RFC 4648 §4, padded) of its DER SubjectPublicKeyInfo, 44 bytes for Ed25519. Every checkpoint `GET /audit/verify` returns MUST verify under it."
+    },
+    "checkpointIntervalEntries": {
+      "type": "integer",
+      "minimum": 1,
+      "description": "The most entries a checkpoint anchors: consecutive checkpoints' atSequence, and the first checkpoint's atSequence from 0, differ by at most this."
+    },
+    "checkpointIntervalSeconds": {
+      "type": "integer",
+      "minimum": 1,
+      "description": "The longest an appended entry waits before a checkpoint anchors it."
+    }
+  },
+  "required": [
+    "checkpointSignatureAlgorithm",
+    "checkpointPublicKey",
+    "checkpointIntervalEntries",
+    "checkpointIntervalSeconds"
+  ]
+}

package/spec/v2/release.json

@@ -1,6 +1,6 @@
 {
   "$comment": "RFC 0172 §D.1 — the one release identity the v2 artifacts derive from. `version` is the next corpus tag `v<version>` (the publish workflow's coordinated-release tag pattern `v*`; RFC 0172's `openwop/v2.<minor>.<patch>` spelling is amended to this at its flip). api/v2/*.yaml info.version, the suite's 2.x version and @openwop/spec-artifacts read it. Bumped by the release PR that cuts the tag, never by hand elsewhere.",
-  "version": "2.42.9",
-  "corpusTag": "v2.42.9",
+  "version": "2.43.0",
+  "corpusTag": "v2.43.0",
   "updated": "2026-09-27"
 }

package/spec/v2/surface-baseline.json

@@ -4,7 +4,7 @@
     "schemas/v2/**/*.json",
     "spec/v2/path-manifest.json"
   ],
-  "release": "2.42.9",
+  "release": "2.43.0",
   "kinds": {
     "union": [
       "channel",
@@ -18,7 +18,7 @@
       "type"
     ]
   },
-  "count": 8504,
+  "count": 8552,
   "surfaces": [
     "schemas/v2/a2a-task-state.schema.json#/contextId|type|string",
     "schemas/v2/a2a-task-state.schema.json#/interruptKind|enum-member|\"approval\"",
@@ -755,15 +755,29 @@
     "schemas/v2/artifact.schema.json#|required|artifactId",
     "schemas/v2/artifact.schema.json#|required|parts",
     "schemas/v2/artifact.schema.json#|type|object",
+    "schemas/v2/audit-verify-result.schema.json#/anomalies/[]/actualPrevHash|type|null",
     "schemas/v2/audit-verify-result.schema.json#/anomalies/[]/actualPrevHash|type|string",
     "schemas/v2/audit-verify-result.schema.json#/anomalies/[]/atSeq|type|integer",
+    "schemas/v2/audit-verify-result.schema.json#/anomalies/[]/checkpoint|type|string",
+    "schemas/v2/audit-verify-result.schema.json#/anomalies/[]/detail|type|string",
+    "schemas/v2/audit-verify-result.schema.json#/anomalies/[]/expectedPrevHash|type|null",
     "schemas/v2/audit-verify-result.schema.json#/anomalies/[]/expectedPrevHash|type|string",
+    "schemas/v2/audit-verify-result.schema.json#/anomalies/[]/kind|enum-member|\"chain-break\"",
+    "schemas/v2/audit-verify-result.schema.json#/anomalies/[]/kind|enum-member|\"hash-mismatch\"",
+    "schemas/v2/audit-verify-result.schema.json#/anomalies/[]/kind|enum-member|\"merkle-mismatch\"",
+    "schemas/v2/audit-verify-result.schema.json#/anomalies/[]/kind|enum-member|\"missing-entry\"",
+    "schemas/v2/audit-verify-result.schema.json#/anomalies/[]/kind|enum-member|\"signature-invalid\"",
+    "schemas/v2/audit-verify-result.schema.json#/anomalies/[]/kind|type|string",
     "schemas/v2/audit-verify-result.schema.json#/anomalies/[]|closed|true",
     "schemas/v2/audit-verify-result.schema.json#/anomalies/[]|property|actualPrevHash",
     "schemas/v2/audit-verify-result.schema.json#/anomalies/[]|property|atSeq",
+    "schemas/v2/audit-verify-result.schema.json#/anomalies/[]|property|checkpoint",
+    "schemas/v2/audit-verify-result.schema.json#/anomalies/[]|property|detail",
     "schemas/v2/audit-verify-result.schema.json#/anomalies/[]|property|expectedPrevHash",
+    "schemas/v2/audit-verify-result.schema.json#/anomalies/[]|property|kind",
     "schemas/v2/audit-verify-result.schema.json#/anomalies/[]|required|actualPrevHash",
     "schemas/v2/audit-verify-result.schema.json#/anomalies/[]|required|atSeq",
+    "schemas/v2/audit-verify-result.schema.json#/anomalies/[]|required|checkpoint",
     "schemas/v2/audit-verify-result.schema.json#/anomalies/[]|required|expectedPrevHash",
     "schemas/v2/audit-verify-result.schema.json#/anomalies/[]|type|object",
     "schemas/v2/audit-verify-result.schema.json#/anomalies|type|array",
@@ -1253,6 +1267,38 @@
     "schemas/v2/capabilities.schema.json#/artifactTypes|required|until",
     "schemas/v2/capabilities.schema.json#/artifactTypes|required|witness",
     "schemas/v2/capabilities.schema.json#/artifactTypes|type|object",
+    "schemas/v2/capabilities.schema.json#/auditLogIntegrity/checkpointIntervalEntries|type|integer",
+    "schemas/v2/capabilities.schema.json#/auditLogIntegrity/checkpointIntervalSeconds|type|integer",
+    "schemas/v2/capabilities.schema.json#/auditLogIntegrity/checkpointPublicKey|type|string",
+    "schemas/v2/capabilities.schema.json#/auditLogIntegrity/checkpointSignatureAlgorithm|enum-member|\"ed25519\"",
+    "schemas/v2/capabilities.schema.json#/auditLogIntegrity/since|type|string",
+    "schemas/v2/capabilities.schema.json#/auditLogIntegrity/status|enum-member|\"deprecated\"",
+    "schemas/v2/capabilities.schema.json#/auditLogIntegrity/status|enum-member|\"experimental\"",
+    "schemas/v2/capabilities.schema.json#/auditLogIntegrity/status|enum-member|\"stable\"",
+    "schemas/v2/capabilities.schema.json#/auditLogIntegrity/until|type|string",
+    "schemas/v2/capabilities.schema.json#/auditLogIntegrity/witness|enum-member|\"claims-check\"",
+    "schemas/v2/capabilities.schema.json#/auditLogIntegrity/witness|enum-member|\"negative-existence\"",
+    "schemas/v2/capabilities.schema.json#/auditLogIntegrity/witness|enum-member|\"seam-gated\"",
+    "schemas/v2/capabilities.schema.json#/auditLogIntegrity/witness|enum-member|\"witnessable-gated\"",
+    "schemas/v2/capabilities.schema.json#/auditLogIntegrity/witness|enum-member|\"witnessable-unaided\"",
+    "schemas/v2/capabilities.schema.json#/auditLogIntegrity|closed|true",
+    "schemas/v2/capabilities.schema.json#/auditLogIntegrity|property|checkpointIntervalEntries",
+    "schemas/v2/capabilities.schema.json#/auditLogIntegrity|property|checkpointIntervalSeconds",
+    "schemas/v2/capabilities.schema.json#/auditLogIntegrity|property|checkpointPublicKey",
+    "schemas/v2/capabilities.schema.json#/auditLogIntegrity|property|checkpointSignatureAlgorithm",
+    "schemas/v2/capabilities.schema.json#/auditLogIntegrity|property|since",
+    "schemas/v2/capabilities.schema.json#/auditLogIntegrity|property|status",
+    "schemas/v2/capabilities.schema.json#/auditLogIntegrity|property|until",
+    "schemas/v2/capabilities.schema.json#/auditLogIntegrity|property|witness",
+    "schemas/v2/capabilities.schema.json#/auditLogIntegrity|required|checkpointIntervalEntries",
+    "schemas/v2/capabilities.schema.json#/auditLogIntegrity|required|checkpointIntervalSeconds",
+    "schemas/v2/capabilities.schema.json#/auditLogIntegrity|required|checkpointPublicKey",
+    "schemas/v2/capabilities.schema.json#/auditLogIntegrity|required|checkpointSignatureAlgorithm",
+    "schemas/v2/capabilities.schema.json#/auditLogIntegrity|required|since",
+    "schemas/v2/capabilities.schema.json#/auditLogIntegrity|required|status",
+    "schemas/v2/capabilities.schema.json#/auditLogIntegrity|required|until",
+    "schemas/v2/capabilities.schema.json#/auditLogIntegrity|required|witness",
+    "schemas/v2/capabilities.schema.json#/auditLogIntegrity|type|object",
     "schemas/v2/capabilities.schema.json#/auth/lanes/[]/delegationProofs/[]|enum-member|\"dpop\"",
     "schemas/v2/capabilities.schema.json#/auth/lanes/[]/delegationProofs/[]|enum-member|\"mtls-key-binding\"",
     "schemas/v2/capabilities.schema.json#/auth/lanes/[]/delegationProofs/[]|enum-member|\"svid-chain\"",
@@ -3576,6 +3622,7 @@
     "schemas/v2/capabilities.schema.json#|property|aiProviders",
     "schemas/v2/capabilities.schema.json#|property|anonymousActor",
     "schemas/v2/capabilities.schema.json#|property|artifactTypes",
+    "schemas/v2/capabilities.schema.json#|property|auditLogIntegrity",
     "schemas/v2/capabilities.schema.json#|property|auth",
     "schemas/v2/capabilities.schema.json#|property|authorization",
     "schemas/v2/capabilities.schema.json#|property|blobStorage",
@@ -5272,6 +5319,7 @@
     "schemas/v2/error-envelope.schema.json#/details|property|supported",
     "schemas/v2/error-envelope.schema.json#/details|property|type",
     "schemas/v2/error-envelope.schema.json#/details|type|object",
+    "schemas/v2/error-envelope.schema.json#/error|enum-member|\"approval_rejected\"",
     "schemas/v2/error-envelope.schema.json#/error|enum-member|\"audience_mismatch\"",
     "schemas/v2/error-envelope.schema.json#/error|enum-member|\"capability_not_provided\"",
     "schemas/v2/error-envelope.schema.json#/error|enum-member|\"capability_required\"",