@openwop/spec-artifacts 2.44.5 → 2.44.7

package/spec/v1/gaps.json

@@ -7279,8 +7279,8 @@
       "surface": "`openwop.requirement.replay.suppression-execution-ordinal` (openwop#1718) has no witness on any host, positive or negative. `conformance-replay-ordinal-loop` needs a host that both runs cycles and suppresses a side-effecting node in replay. The v2 reference host does neither for this fixture: it does not loop, it does not execute `core.conformance.side-effect`, and its `effectOutcome` (`store.ts:586` at openwop-examples `f56f092`) selects the latest outcome regardless of ordinal, which would fail the row if it looped. openwop-app does not index by ordinal (`nodeAttempts` is never reset), and MyndHyve does not seed `replaySourceOutcomes` from the prefix.",
       "witness": "unclassified",
       "requirementId": null,
-      "disposition": "externally-gated",
-      "target": "host-loops-with-replay-suppression",
+      "disposition": "closed",
+      "target": null,
       "sources": [
         {
           "file": "RFCS/registers/0140-replay-side-effect-suppression.gaps.md",
@@ -10688,6 +10688,23 @@
         }
       ]
     },
+    {
+      "id": "openwop.gap.0189.17",
+      "rfc": "0189",
+      "local": "G17",
+      "section": "—",
+      "surface": "`spec/v1/multi-agent-execution.md` (RFC 0039 MAE-2) names an opt-in `memoryScopeIsolation: \"isolated\"` field on the dispatch config, but no v1 schema ever defined it. Found while restating `multiAgent` levels 2–6 in `execution.md` (#1802).",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "closed",
+      "target": null,
+      "sources": [
+        {
+          "file": "RFCS/registers/0189-normative-home.gaps.md",
+          "token": "G17"
+        }
+      ]
+    },
     {
       "id": "openwop.gap.0190.1",
       "rfc": "0190",
@@ -13433,8 +13450,8 @@
       "surface": "*(Renumbered from a second `G9` on 2026-09-28: two rows shared the local ID, so `spec/v1/gaps.json` carried `openwop.gap.0223.9` twice.)* `openwop.requirement.0223.reject-loopback-reasks` (openwop #1697) has no positive witness on any host. The v2 reference host does not run cycles. MyndHyve runs request-changes loops over condition edges on a successful gate output, and does not route a failed node over `any_failed` (its Cloud Run executor has no `triggerRule` handling), so the row stays `inapplicable` there. openwop-app rejects cycles. The row exists and is negatively controlled: registering the fixture on a host that does not loop records `executed-fail`.",
       "witness": "unclassified",
       "requirementId": null,
-      "disposition": "externally-gated",
-      "target": "host-routes-failed-gate-over-cycle",
+      "disposition": "closed",
+      "target": null,
       "sources": [
         {
           "file": "RFCS/registers/0223-approval-reject-disposition.gaps.md",
@@ -13510,6 +13527,23 @@
         }
       ]
     },
+    {
+      "id": "openwop.gap.0227.1",
+      "rfc": "0227",
+      "local": "G1",
+      "section": "§A",
+      "surface": "Other registries with generated restatements inside `spec/v2/core/` (for example `headers.md`, which `derive-v2-api.py` writes) are not moved by this RFC.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "closed",
+      "target": null,
+      "sources": [
+        {
+          "file": "RFCS/registers/0227-generated-registry-tables-outside-the-budget.gaps.md",
+          "token": "G1"
+        }
+      ]
+    },
     {
       "id": "openwop.gap.0228.1",
       "rfc": "0228",
@@ -13519,7 +13553,7 @@
       "witness": "unclassified",
       "requirementId": null,
       "disposition": "externally-gated",
-      "target": "rfc-0228-active",
+      "target": "myndhyve-host-cut",
       "sources": [
         {
           "file": "RFCS/registers/0228-v1-host-service-error-codes.gaps.md",
@@ -13536,7 +13570,7 @@
       "witness": "unclassified",
       "requirementId": null,
       "disposition": "externally-gated",
-      "target": "rfc-0228-active",
+      "target": "v2-reference-recut",
       "sources": [
         {
           "file": "RFCS/registers/0228-v1-host-service-error-codes.gaps.md",
@@ -13553,7 +13587,7 @@
       "witness": "unclassified",
       "requirementId": null,
       "disposition": "externally-gated",
-      "target": "rfc-0228-active",
+      "target": "openwop-app-host-cut",
       "sources": [
         {
           "file": "RFCS/registers/0228-v1-host-service-error-codes.gaps.md",
@@ -13570,7 +13604,7 @@
       "witness": "unclassified",
       "requirementId": null,
       "disposition": "externally-gated",
-      "target": "rfc-0228-active",
+      "target": "v2-host-service-ports",
       "sources": [
         {
           "file": "RFCS/registers/0228-v1-host-service-error-codes.gaps.md",
@@ -13604,7 +13638,7 @@
       "witness": "unclassified",
       "requirementId": null,
       "disposition": "externally-gated",
-      "target": "rfc-0228-active",
+      "target": "openwop-app-host-cut",
       "sources": [
         {
           "file": "RFCS/registers/0228-v1-host-service-error-codes.gaps.md",
@@ -13621,7 +13655,7 @@
       "witness": "unclassified",
       "requirementId": null,
       "disposition": "externally-gated",
-      "target": "rfc-0228-active",
+      "target": "myndhyve-host-cut",
       "sources": [
         {
           "file": "RFCS/registers/0228-v1-host-service-error-codes.gaps.md",
@@ -13637,8 +13671,8 @@
       "surface": "`api/v2/openapi.yaml` is derived from the v1 document by `scripts/derive-v2-api.py`, which copies v1's `501` responses and the descriptions naming unregistered codes.",
       "witness": "unclassified",
       "requirementId": null,
-      "disposition": "externally-gated",
-      "target": "rfc-0228-active",
+      "disposition": "closed",
+      "target": null,
       "sources": [
         {
           "file": "RFCS/registers/0228-v1-host-service-error-codes.gaps.md",

package/spec/v1/migrations.json

@@ -1,7 +1,7 @@
 {
   "$schema": "./migrations.schema.json",
   "version": 1,
-  "updated": "2026-09-03",
+  "updated": "2026-09-29",
   "rows": [
     {
       "id": "openwop.migration.C2.1",
@@ -485,6 +485,44 @@
       "deprecationId": null,
       "note": "A host emitting it fails v2 schema validation; MyndHyve drops it in its Phase 4 leg."
     },
+    {
+      "id": "openwop.migration.C2.11",
+      "child": "C2",
+      "kind": "retype",
+      "v1": {
+        "surface": "`aiProviders.selfHosted[]`, `realtimeVoice.{transcription, synthesis, turnDetection, bargeIn}`, `promptPrefixCache.{supported, providers[]}`, per-provider `authModes` map",
+        "path": "spec/v1/capabilities.md"
+      },
+      "v2": {
+        "surface": "`selfHosted`, `realtimeVoice`, `promptPrefixCache` booleans; `authModes` one list of modes (spec/v2/core/host-services.md §aiProviders)",
+        "path": "schemas/v2/capabilities.schema.json"
+      },
+      "codemod": "openwop.codemod.ai-providers-v2-narrow",
+      "persistedData": "not-persisted",
+      "requirementIds": [],
+      "gapIds": [],
+      "deprecationId": "openwop.deprecation.ai-providers-per-provider-facets",
+      "note": "Recorded 2026-09-28: v2 accepts the narrowing. Seven v1 rules with no v2 seat retire: `selfHosted[]` ⊆ `supported[]` (capabilities.md A.1); per-provider `authModes` rules 1, 2, 3, 5 and 7 (keys ⊆ `supported`, `apiKey` and `subscription` ⇒ `byok`, `[\"none\"]` ⇒ not `byok`, the absent-map defaults); the `promptPrefixCache.providers` list (v2: per routed provider); and the `realtimeVoice` sub-flags (v2: one boolean)."
+    },
+    {
+      "id": "openwop.migration.C2.12",
+      "child": "C2",
+      "kind": "rename",
+      "v1": {
+        "surface": "`aiProviders.supported` (the providers the host's AI proxy routes to)",
+        "path": "spec/v1/capabilities.md"
+      },
+      "v2": {
+        "surface": "`aiProviders.providers` (spec/v2/core/host-services.md §aiProviders)",
+        "path": "schemas/v2/capabilities.schema.json"
+      },
+      "codemod": "openwop.codemod.ai-providers-v2-narrow",
+      "persistedData": "not-persisted",
+      "requirementIds": [],
+      "gapIds": [],
+      "deprecationId": "openwop.deprecation.ai-providers-supported-rename",
+      "note": "Recorded 2026-09-29: the v2 facet renamed the list without a row. Same values, same meaning; `byok` stays a subset of it. The codemod refuses a record carrying both names with different values."
+    },
     {
       "id": "openwop.migration.C5.3",
       "child": "C5",
@@ -1057,6 +1095,24 @@
       "deprecationId": "openwop.deprecation.interrupt-locale-field",
       "note": "Recorded 2026-09-27: the v2 schema closure (C4.9) left the v1 field no place, and it is dropped rather than re-added. A v1 `interrupt.requested` event carrying `data.locale` is read through the C.9 adapter like any other extra key."
     },
+    {
+      "id": "openwop.migration.C4.18",
+      "child": "C4",
+      "kind": "remove",
+      "v1": {
+        "surface": "`RunSnapshot.parentRunId` and `RunSnapshot.parentNodeId` on a `core.subWorkflow` child run (node-packs.md §Parent linkage)",
+        "path": "spec/v1/node-packs.md"
+      },
+      "v2": {
+        "surface": "none on the child snapshot — `parentRunId` is fork lineage; the child's parent is `getRunAncestry` `parent.runId` with `cause: \"core.subWorkflow\"` (spec/v2/core/execution.md §subWorkflow)"
+      },
+      "codemod": "openwop.codemod.subworkflow-parent-link-drop",
+      "persistedData": "translated",
+      "requirementIds": [],
+      "gapIds": [],
+      "deprecationId": "openwop.deprecation.subworkflow-parent-link-fields",
+      "note": "Recorded 2026-09-28. Ancestry names the parent run, not the dispatching node; that node is the one whose `node.completed` carries the child's id in `outputs.childRunId`. A host migrating a persisted v1 child keeps the link in whatever backs its ancestry answer before the codemod drops the fields."
+    },
     {
       "id": "openwop.migration.C6.1",
       "child": "C6",

package/spec/v2/core/artifact-type-packs.md

@@ -16,7 +16,11 @@ The schema at `schemaRef`, inside the signed tarball, is the source of truth. It
 - A host advertising `artifactTypes` SHOULD serve each installed type's schema there, and MUST for a host-registered type whose `schemaVersion` it advertises.
 - A tarball copy and a served copy of one `(artifactTypeId, schemaVersion)` MUST be byte-identical.
 
-At registry publish and at install, a host MUST reject, with `pack_validation_failed`, an artifact schema exceeding its bounds on serialized size, `$ref` depth or keyword/subschema count, and MUST compile under a wall-clock timeout. It SHOULD reject a `pattern` it cannot evaluate in linear time (invariant `artifact-schema-compile-bounded`).
+At registry publish and at install, a host (invariant `artifact-schema-compile-bounded`):
+
+- MUST reject, with `pack_validation_failed`, an artifact schema exceeding its bounds on serialized size, `$ref` depth or keyword/subschema count;
+- MUST compile it under a wall-clock timeout;
+- SHOULD reject a `pattern` it cannot evaluate in linear time.
 
 ## Registration
 

package/spec/v2/core/capabilities.md

@@ -115,15 +115,15 @@ Operation paths live in `spec/v2/path-manifest.json` ([`versioning.md`](versioni
 
 Each heading below is a `spec/v2/declaration.json` row with `anchor: core`. `scripts/check-declaration.mjs` MUST fail when a heading here, a root key in the generated schema, or a pack peer-dependency identifier names a family the declaration does not. The peer-dependency identifier is identical to the key ([`packs.md`](packs.md)).
 
-Under each heading: the family's witness class and, where `spec/v2/facets/<key>.schema.json` exists, its hand-decided facets. Maturity axes are §8; the owning RFC is the row's `owningRfc`.
+Under each heading: the family's witness class. Its facets are named in its normative home (§2 says where they are decided). Maturity axes are §8; the owning RFC is the row's `owningRfc`.
 
 ### § supportedEnvelopes
 
-Witness `witnessable-gated`. Facets: `kinds`.
+Witness `witnessable-gated`.
 
 ### § schemaVersions
 
-Witness `witnessable-gated`. Facets: `kinds`.
+Witness `witnessable-gated`.
 
 ### § limits
 
@@ -131,7 +131,7 @@ Witness `witnessable-gated`.
 
 ### § envelopeStrictness
 
-Witness `claims-check`. Facets: `mode`.
+Witness `claims-check`.
 
 ### § envelopeContracts
 
@@ -183,7 +183,7 @@ Witness `witnessable-gated`.
 
 ### § replay
 
-Witness `witnessable-gated`. Facets: `modes`, `retention`, `effectSeamsManifest`.
+Witness `witnessable-gated`.
 
 ### § oauth
 
@@ -219,7 +219,7 @@ Witness `witnessable-gated`.
 
 ### § aiProviders
 
-Witness `witnessable-gated`. Facets: `providers`, `byok`, `selfHosted`, `speechSynthesis`, `imageGeneration`, `videoGeneration`, `realtimeVoice`, `promptPrefixCache`, `maxInlineMediaBytes`, `authModes`, `policies`, `input`.
+Witness `witnessable-gated`.
 
 ### § agents
 
@@ -259,7 +259,7 @@ Witness `witnessable-gated`.
 
 ### § heartbeat
 
-Witness `witnessable-gated`. Facets: `minIntervalSec`, `maxRuntimeMs`, `deliveryChannel`.
+Witness `witnessable-gated`.
 
 ### § toolHooks
 
@@ -299,7 +299,7 @@ Witness `witnessable-gated`.
 
 ### § webhooks
 
-Witness `witnessable-gated`. Facets: `deadLetter`, `retryPolicy`, `secretRotation`, `signatureAlgorithms`.
+Witness `witnessable-gated`.
 
 ### § triggerBridge
 
@@ -307,7 +307,7 @@ Witness `witnessable-gated`.
 
 ### § a2a
 
-Witness `seam-gated`. Facets: `versions`, `preferredVersion`, `minimumVersion`, `refreshedAt`, `profiles`, `agentCardUrl`, `streaming`, `pushNotifications`, `durableTasks`, `agentCards`.
+Witness `seam-gated`.
 
 A facet MAY name a URL on another origin; that is a claim about the facet, not the origin. `agentCardUrl` (and `mcp.serverUrls[]`) are `format: uri` with no origin constraint.
 
@@ -358,21 +358,21 @@ Witness `witnessable-gated`.
 
 ### § workflowChainPacks
 
-Witness `witnessable-gated`. Facets: `subChains`.
+Witness `witnessable-gated`.
 
 ### § packs
 
-Witness `claims-check`. Facets: `testMode`.
+Witness `claims-check`.
 
 ### § mcp
 
-Witness `seam-gated`. Facets: `revisions`, `preferredVersion`, `minimumRevision`, `refreshedAt`, `profiles`, `features`, `serverUrls`, `serverMount`, `mrtr`, `client`.
+Witness `seam-gated`.
 
 `serverUrls[]` MAY name other origins; the off-origin rule under § a2a applies.
 
 ### § sandbox
 
-Witness `witnessable-gated`. Facets: `isolationModel`, `allowedHostCalls`, `memoryLimitBytes`, `wallClockLimitMs`.
+Witness `witnessable-gated`.
 
 ### § compensation
 
@@ -392,11 +392,11 @@ Witness `witnessable-gated`.
 
 ### § auth
 
-Witness `seam-gated`. Facets: `lanes`, `subjectLinkKey`.
+Witness `seam-gated`.
 
 ### § auditLogIntegrity
 
-Witness `witnessable-gated`. Facets: `checkpointSignatureAlgorithm`, `checkpointPublicKey`, `checkpointIntervalEntries`, `checkpointIntervalSeconds` ([security-defaults.md](security-defaults.md) §Audit-log integrity).
+Witness `witnessable-gated`; see [security-defaults.md](security-defaults.md) §Audit-log integrity.
 
 ### § i18n
 
@@ -412,11 +412,11 @@ Witness `witnessable-gated`.
 
 ### § interrupt
 
-Witness `witnessable-gated`. Facets: `refKinds`, `tokenAlgs`, `callbackDelivery`.
+Witness `witnessable-gated`.
 
 ### § runList
 
-Witness `witnessable-gated`. Facets: `maxPageSize`, `filters` ([runs.md](runs.md) §List).
+Witness `witnessable-gated`; see [runs.md](runs.md) §List.
 
 
 ## 6. Extension families (13)
@@ -438,10 +438,8 @@ A profile is a predicate over the declaration file, published in `spec/v2/profil
 | `openwop-conformance-seams-v2` | The seams profile ([`conformance.md`](conformance.md)); forbidden from the capability namespace |
 
 - The v2 root has no `profiles[]`; a host that emits one MUST fail schema validation (§3).
-- The facet `auth.lanes[]` ([`identity.md`](identity.md)) replaces `auth.profiles`.
-- `a2a.profiles[]` and `mcp.profiles[]` are facets that admit no `-legacy` id; the offered versions are `a2a.versions[]` and `mcp.revisions[]` ([`interop.md`](interop.md)).
-- The discovery-only id is `openwop-discovery-core`; the `openwop-core` alias is deleted (row `C2.3`).
-- The claim vocabulary is in [`overview.md`](overview.md). The invariant `profile-claim-floor-not-overstated` is registered in `SECURITY/invariants.yaml` with its test.
+- The facet `auth.lanes[]` ([`identity.md`](identity.md)) replaces `auth.profiles`. `a2a.profiles[]` and `mcp.profiles[]` are facets too ([`interop.md`](interop.md)).
+- The claim vocabulary is in [`overview.md`](overview.md) (invariant `profile-claim-floor-not-overstated`).
 
 ## 8. Maturity axes
 
@@ -465,6 +463,6 @@ A profile is a predicate over the declaration file, published in `spec/v2/profil
 
 ## 10. Migration rows
 
-Rows `C2.1`–`C2.10` are `spec/v1/migrations.json` entries. `openwop.codemod.discovery-document-v2` transforms `C2.2`–`C2.8`: it drops a family with `supported: false` and promotes a dotted-only declared family to its plain key. Certification bundles naming `openwop-core` are never upgraded; they remain valid v1 evidence at their version.
+Rows `C2.1`–`C2.10` are `spec/v1/migrations.json` entries. `openwop.codemod.discovery-document-v2` transforms `C2.2`–`C2.8`: it drops a family with `supported: false` and promotes a dotted-only declared family to its plain key.
 
 *Sources: RFCs 0144, 0169, 0175, 0176, 0179, 0197. Each family's owning RFC is its `owningRfc` in [`declaration.json`](../declaration.json).*

package/spec/v2/core/conformance.md

@@ -1,10 +1,11 @@
 # Conformance
 
 > **Status: Stable.**
+> **Normative home:** `production`.
 
 ## Why this exists
 
-The v2 evidence contract: how a requirement is asserted, how every requirement declares what can witness it, how the seams are mounted, what the suite ships, and what a bundle proves. Profiles are in [overview.md](overview.md); the capability vocabulary the suite gates on is in [capabilities.md](capabilities.md).
+The v2 evidence contract: how a requirement is asserted and witnessed, how the seams are mounted, what the suite ships, and what a bundle proves. Profiles are in [overview.md](overview.md); the capability vocabulary the suite gates on is in [capabilities.md](capabilities.md).
 
 ## Requirement ids
 
@@ -46,7 +47,7 @@ Every family in `spec/v2/declaration.json`, every requirement in `conformance/re
 
 ## The seams profile
 
-Test seams are the profile `openwop-conformance-seams-v2` (`spec/v2/profiles.json`), described by `api/seams-v2.yaml` with schemas under `schemas/v2/seams/`, in the path space `/conformance/seams/…`. The seam schemas `$ref` the canonical error and event schemas with no tolerance path. The profile is versioned with the suite (`seams-v2` for 2.x).
+Test seams are the profile `openwop-conformance-seams-v2` (`spec/v2/profiles.json`), described by `api/seams-v2.yaml` with schemas under `schemas/v2/seams/`, at `/conformance/seams/…`. The seam schemas `$ref` the canonical error and event schemas with no tolerance path. The profile is versioned with the suite (`seams-v2` for 2.x).
 
 - A host that mounts the seams MUST advertise the profile as `conformance.seamsProfile: "openwop-conformance-seams-v2"` at the discovery root (the closed root has no `profiles[]`; [capabilities.md](capabilities.md) §3).
 - A host MUST NOT advertise a `testSeams` capability flag.
@@ -87,7 +88,7 @@ A certification bundle validates against `schemas/v2/certification-bundle.schema
 - A verifier MUST resolve `keyId` there — in the discovery document of the host the bundle is *about* — and MUST verify the attestation under the published key.
 - A retired key MUST stay listed.
 
-A signature that cannot be resolved to a published key attests **integrity only**, and the bundle MUST NOT be read as attributable evidence. A gate MUST distinguish three outcomes that a presence check collapses into one: *no discovery document was read*, *read and the key is not published*, and *the attestation does not verify*.
+A signature that cannot be resolved to a published key attests **integrity only**, and the bundle MUST NOT be read as attributable evidence. A gate MUST distinguish three outcomes: *no discovery document was read*, *read and the key is not published*, and *the attestation does not verify*.
 
 `evidenceTier: independent` MUST carry a `verifierKeyId` distinct from the host's signing key. The verifier MUST refuse, not warn, on a missing or self-signed independent claim.
 
@@ -101,7 +102,7 @@ A signature that cannot be resolved to a published key attests **integrity only*
 
 ### Colocated companion
 
-A *colocated companion* is the served host's image run beside the suite, so it can trust a suite-held trust anchor.
+A *colocated companion* is the served host's image run beside the suite, trusting a suite-held trust anchor.
 
 - A bundle cut from one MUST carry `host.deployment: "colocated-companion"`, which the preimage covers (§"Canonical JSON").
 - A host serving production traffic MUST NOT list a suite-held trust anchor among the trust roots it advertises.
@@ -126,7 +127,7 @@ The value MUST be I-JSON (RFC 7493):
 
 ### Recovery evidence
 
-Recovery evidence rides on rows: a row's `evidence` enters `witnessSha256` only when present.
+A row's `evidence` enters `witnessSha256` only when present.
 
 | Row | `evidence` member |
 | --- | --- |
@@ -139,10 +140,26 @@ Recovery evidence rides on rows: a row's `evidence` enters `witnessSha256` only
 
 `durability.rung` is outside the attestation, so a verifier MUST re-derive it and MUST reject (`rung-not-derivable`) a claim it cannot derive. Derivation requires every row of the rung to be `executed-pass`, and each kill row's `class` to name a declared entry whose `bound` equals its `boundMs` and is not exceeded by its `observedMs`. Only `durable-single-instance` is derivable in this revision; a higher claim is refused.
 
-This proves the arithmetic and that recovery ran once inside the bound. It does not prove the kill landed in the class it names; killing only once the execution claim is held is the host's obligation.
+The evidence does not prove the kill landed in the class it names; killing only once the execution claim is held is the host's obligation.
+
+## Production profile
+
+`production` is the operational bar for a public host. A host claiming it:
+
+- MUST pass `openwop-core-standard`, publish the suite version and command used, and document every optional profile it claims;
+- MUST serve the events channel or poll, and SHOULD serve both;
+- MUST persist run state and event logs outside process memory, replayable after restart, including stale-claim recovery;
+- MUST tolerate at least five retries of one `Idempotency-Key` within its retention;
+- MUST log run id, tenant or project id, terminal status, error code and correlation id, and SHOULD export the `openwop.*` OTel spans and metrics.
+
+Its facets:
+
+- **`backpressure`.** At capacity it MUST answer `503 service_unavailable` with `Retry-After`. A hold beyond 24 hours SHOULD omit the header.
+- **`retention`.** It MUST document event-log retention, at least 7 days for snapshots and events unless labelled development-only. An expired run MUST answer `404 not_found` or `410 run_expired`, and SHOULD answer `410` when expiry is known.
+- **`debugBundle`.** A debug bundle (`schemas/v2/debug-bundle.schema.json`) MUST redact secrets and tokens and MUST mark truncation explicitly; the host MUST document its truncation limits.
 
 ## Corpus-gate evidence
 
 An RFC whose acceptance criteria are corpus gates rather than host scenarios records the evidence label **corpus gate — no host tier** in its `Updated` line. For such an RFC the accepted-predicate check reads `(corpus)` rows from `evidence/corpus-ledger.json` and MUST NOT require a host bundle.
 
-*Sources: RFCs 0158, 0168, 0212, 0216.*
+*Sources: RFCs 0009, 0158, 0168, 0212, 0216, 0228.*

package/spec/v2/core/errors.md

@@ -8,7 +8,7 @@ Every error a v2 host returns is a row in one registry. A client routes on `erro
 
 ## The registry
 
-`spec/v2/errors.json` holds one row per code, defined by `spec/v2/errors.schema.json`. It registers **111** codes. `schemas/v2/error-envelope.schema.json` is GENERATED from it and MUST NOT be edited by hand.
+`spec/v2/errors.json` holds one row per code, defined by `spec/v2/errors.schema.json`. It registers **120** codes. `schemas/v2/error-envelope.schema.json` is GENERATED from it and MUST NOT be edited by hand.
 
 - A host MUST emit a registered code, or a vendor code, wherever it emits an error code: the `error` of every error response, and `error.code` on `run.failed`, `node.failed` and the snapshot's `error` (overview.md §0). A recorded event re-emitted by replay or `:fork` is carried as recorded ([replay.md](replay.md)).
 - A vendor code MUST match `^(?!openwop\.)[a-z][a-z0-9]*(-[a-z0-9]+)*\.[a-z][a-z0-9_]*$`, with its first segment an org registered in `spec/v2/declaration.json`. `openwop.` is reserved.
@@ -32,7 +32,7 @@ Retry timing lives in the `Retry-After` header only.
 - A host MUST NOT emit `details.retryAfter`, `details.retryAfterMs` or `details.retryAfterSeconds`.
 - A `429 rate_limited` response MUST set `Retry-After`.
 
-The retriable rows are `residency_unavailable`, `rate_limited`, `internal_error`, `pack_registry_unreachable`, `runner_unavailable`.
+The retriable rows are `residency_unavailable`, `rate_limited`, `internal_error`, `pack_registry_unreachable`, `runner_unavailable`, `service_unavailable`, `upstream_unavailable`.
 
 ## One code per state
 
@@ -45,122 +45,20 @@ An interrupt has one code per state ([interrupt.md](interrupt.md), [identity.md]
 
 The idempotency mismatch code is `idempotency_key_mismatch` only ([idempotency.md](idempotency.md)).
 
+## Host-service refusals
+
+A `ctx.*` call that rejects MUST use a registered or vendor code. A host MAY carry an uncaught rejection unchanged as the `node.failed` code.
+
+- A generic code (`not_found`, `forbidden`, `validation_error`, `rate_limited`, `credential_not_found`, `credential_forbidden`) MUST carry `details.service`, the family key.
+- `details.reason` MAY name a finer cause in lower-kebab. A client MUST NOT route on it.
+- A vendor code MUST NOT stand for a state a registered code names.
+
+## Unadvertised operations
+
+An operation gated on a family or facet the host does not advertise MUST answer `404 not_found`.
+
 ## Codes by HTTP status
 
-Generated from `spec/v2/errors.json` (111 codes; `retriable` and `statusSource` are in the registry).
-
-Code | Status
---- | ---
-`connection_provider_unresolved` | 400
-`connector_action_unresolved` | 400
-`credential_scope_unsupported` | 400
-`delegation_chain_cyclic` | 400
-`delegation_chain_too_long` | 400
-`idempotency_key_invalid` | 400
-`interop_version_unsupported` | 400
-`oauth_provider_unsupported` | 400
-`oauth_scope_unsupported` | 400
-`pack_dependency_cycle` | 400
-`pack_engine_unsupported` | 400
-`pack_integrity_failure` | 400
-`pack_kind_invalid` | 400
-`pack_lockfile_incomplete` | 400
-`pack_peer_dependency_missing` | 400
-`pack_peer_dependency_undefined` | 400
-`pack_signature_invalid` | 400
-`pack_validation_failed` | 400
-`protocol_version_mismatch` | 400
-`schedule_horizon_exceeded` | 400
-`sub_chain_cycle` | 400
-`sub_chain_depth_exceeded` | 400
-`unsupported_runtime` | 400
-`unsupported_stream_mode` | 400
-`until_in_past` | 400
-`validation_error` | 400
-`webhook_endpoint_unverified` | 400
-`webhook_url_rejected` | 400
-`audience_mismatch` | 401
-`connector_auth_declined` | 401
-`connector_auth_expired` | 401
-`credential_lifetime_exceeded` | 401
-`credential_revoked` | 401
-`delegation_expired` | 401
-`identity_unresolvable` | 401
-`identity_unverified` | 401
-`interrupt_token_invalid` | 401
-`key_revoked` | 401
-`sender_constraint_missing` | 401
-`unauthenticated` | 401
-`credential_forbidden` | 403
-`credential_scope_forbidden` | 403
-`delegation_scope_amplified` | 403
-`forbidden` | 403
-`force_engine_version_forbidden` | 403
-`id_tenant_mismatch` | 403
-`mock_provider_forbidden` | 403
-`pack_namespace_unauthorized` | 403
-`run_forbidden` | 403
-`sandbox_capability_denied` | 403
-`sandbox_escape_attempt` | 403
-`workspace_membership_required` | 403
-`credential_not_found` | 404
-`interrupt_not_found` | 404
-`not_found` | 404
-`pack_version_not_found` | 404
-`replay_source_missing` | 404
-`signature_not_available` | 404
-`protocol_version_unsupported` | 406
-`connection_provider_conflict` | 409
-`envelope_correlation_conflict` | 409
-`idempotency_in_flight` | 409
-`idempotency_key_mismatch` | 409
-`interrupt_already_resolved` | 409
-`pack_dependency_conflict` | 409
-`pack_integrity_mismatch` | 409
-`replay_context_summary_unavailable` | 409
-`replay_diverged_at_refusal` | 409
-`replay_memory_snapshot_unavailable` | 409
-`run_already_active` | 409
-`run_state_conflict` | 409
-`run_terminal` | 409
-`version_conflict` | 409
-`workspace_conflict` | 409
-`interrupt_cancelled` | 410
-`interrupt_expired` | 410
-`payload_too_large` | 413
-`workspace_too_large` | 413
-`unsupported_media_type` | 415
-`approval_rejected` | 422
-`capability_not_provided` | 422
-`capability_required` | 422
-`connection_auth_metadata_mismatch` | 422
-`credential_required` | 422
-`envelope_invalid` | 422
-`envelope_refusal` | 422
-`envelope_truncation_unrecoverable` | 422
-`fork_point_invalid` | 422
-`loop_limit_exceeded` | 422
-`mcp_mrtr_rounds_exceeded` | 422
-`node_config_invalid` | 422
-`pack_runtime_requirement_unmet` | 422
-`recursion_limit_exceeded` | 422
-`residency_unavailable` | 422
-`run_timeout` | 422
-`sandbox_invocation_error` | 422
-`sandbox_memory_exceeded` | 422
-`sandbox_timeout` | 422
-`token_budget_exceeded` | 422
-`unknown_envelope_kind` | 422
-`unknown_schema_version` | 422
-`client_version_unsupported` | 426
-`rate_limited` | 429
-`event_type_unmapped` | 500
-`internal_error` | 500
-`pack_load_failure` | 500
-`payload_unprojectable` | 500
-`credential_unavailable` | 501
-`mcp_error` | 502
-`pack_registry_unreachable` | 503
-`runner_unavailable` | 503
-
-*Sources: RFCs 0171, 0213.*
+Every registered code, by HTTP status, is listed in [error-codes.md](../generated/error-codes.md), generated from `spec/v2/errors.json` (120 codes).
+
+*Sources: RFCs 0171, 0213, 0227, 0228.*

package/spec/v2/core/events.md

@@ -123,7 +123,7 @@ With `bufferMs` (0..5000) the host accumulates events into one `event: batch` fr
 
 ### Host events
 
-`hostEvents` carries the heartbeat messages (`schemas/v2/heartbeat-evaluated.schema.json`, `schemas/v2/heartbeat-state-changed.schema.json`) at `/host/events` (`streamHostEvents`), the documented default. A host MAY declare another address under `heartbeat.deliveryChannel` ([capabilities.md](capabilities.md)). The channel is content-free of run data. There is no channel without an address.
+`hostEvents` carries the heartbeat messages (`schemas/v2/heartbeat-evaluated.schema.json`, `schemas/v2/heartbeat-state-changed.schema.json`) at the default address `/host/events` (`streamHostEvents`). A host MAY declare another address under `heartbeat.deliveryChannel` ([capabilities.md](capabilities.md)); every channel has an address. The channel carries no run data.
 
 #### `heartbeat`
 
@@ -131,7 +131,7 @@ A heartbeat evaluates a predicate on an interval (at least `minIntervalSec`) and
 
 - skip, not queue, a tick while the prior evaluation still runs;
 - bound the evaluation by `maxRuntimeMs`, itself capped by `limits.maxRunDurationMs`, terminating an overrun with `status: timeout`;
-- pass the predicate the prior tick's state, and perform no side effect itself; the predicate MUST be a pure function of observed and prior state;
+- pass the predicate the prior tick's state, and perform no side effect itself. The predicate MUST be a pure function of observed and prior state;
 - emit `heartbeat.evaluated`;
 - on a transition only, emit `heartbeat.stateChanged` and, if the predicate asks, call `createRun`; never on an unchanged tick.
 
@@ -196,15 +196,12 @@ An absent `kinds` is not an empty catalog and is not an unrestricted one: a host
 
 ## Envelope, feedback and usage facets
 
-- **`envelopes.tierOneSubsetCompliance`** advertises that the host accepts the Tier 1 structured-output subset shared across major providers. A host advertising it MUST accept an envelope restricted to that subset from any provider it advertises, rather than refusing on provider-specific grounds.
-- **`feedback.targets`** names the resources an annotation may be attached to. A host MUST refuse an annotation whose target is outside the advertised set, and MUST NOT write it to the replayable run event log.
-- **`providerUsage.costEstimates`** advertises that the host stamps a derived cost on the `provider.usage` event. That figure is an estimate from the host's own rate table; a consumer MUST NOT treat it as a billed amount.
-
 ### `feedback`
 
-`feedback.signals` lists the signal kinds a host accepts; absent means all four. A host advertising `feedback` MUST:
+`feedback.signals` lists the signal kinds a host accepts; absent means all four. `feedback.targets` names the resources an annotation may be attached to. A host advertising `feedback` MUST:
 
 - accept an annotation on a terminal run;
+- refuse an annotation whose target is outside the advertised `targets`, and MUST NOT write it to the replayable run event log;
 - keep annotations visible only within the run's tenant (invariant `annotation-cross-tenant-isolation`);
 - redact secret-shaped material in `signal.correction` and `note` before persistence, listing and export (invariant `annotation-content-redaction`);
 - audit-log each recording with the acting principal.
@@ -214,11 +211,14 @@ An absent `kinds` is not an empty catalog and is not an unrestricted one: a host
 A host advertising `providerUsage` MUST emit exactly one `provider.usage` per LLM provider invocation, before that node's `node.completed`. A host that does not advertise it omits the event.
 
 - `inputTokens` and `outputTokens` MUST replay identically; `costEstimateUsd` MAY be omitted on replay.
+- **`providerUsage.costEstimates`** advertises that the host stamps a derived cost on the event. That figure is an estimate from the host's own rate table; a consumer MUST NOT treat it as a billed amount.
 - The payload MUST NOT carry credential refs, hashed credential identifiers, or prompt or response text (invariant `provider-usage-no-credential-leak`).
 - `providerUsage.currency` is the ISO 4217 currency of `costEstimateUsd`; absent means USD.
 
 ### `envelopes`
 
+**`envelopes.tierOneSubsetCompliance`** advertises that the host accepts the Tier 1 structured-output subset shared across major providers. A host advertising it MUST accept an envelope restricted to that subset from any provider it advertises, rather than refusing on provider-specific grounds.
+
 `envelopes.reasoning` advertises the host's prompt posture for the optional payload field `reasoning`.
 
 - `reasoning` SHOULD be the first property where the schema dialect orders properties. A vendor kind whose payload needs multi-step reasoning SHOULD declare it as optional.