@openwop/spec-artifacts 2.45.9 → 2.45.10

package/CORPUS-STAMP.json

@@ -1,19 +1,19 @@
 {
   "_comment": "Provenance of @openwop/spec-artifacts (RFC 0168 §D.2). files: SHA-256 per file; the conformance suite compares the installed peer against dist/spec-artifacts.lock.json at start.",
   "package": "@openwop/spec-artifacts",
-  "version": "2.45.9",
-  "corpusTag": "v2.45.9",
+  "version": "2.45.10",
+  "corpusTag": "v2.45.10",
   "files": {
     "api/.redocly.lint-ignore.yaml": "bf5a8350b88a72fa43f59605ed8d903ed24b6cfccda5e45509c9f6ed9ee4e712",
     "api/asyncapi.yaml": "d5ecb9ee6114582be3b1f662c84bfac9ae96dae7bacb853e461168f70a8e1c7d",
     "api/grpc/openwop.proto": "c3e72bb17cba514ee98feb6434e6c9b6ea6795bfd086489ec69fd882dd1ad977",
-    "api/openapi.yaml": "ad37a5a5c732ad46100fc03c3f4243fdd4f2976e330f02a8791b6b5b10a8a0c1",
+    "api/openapi.yaml": "ac6de5303872664b78ff419c035915593e01599e02835e777a0123de1baeb398",
     "api/redocly.yaml": "b0604c89b2ca6d5076ec25725c539dad44a741a811fe524439ee6daef8baa09f",
-    "api/seams-v2.yaml": "1a3d28d791ba5316741a2863a04fc73aab2b00c6959964658ff1e3ad8523820f",
-    "api/v2/asyncapi.yaml": "8e6f4c64c5f06409f926d5cfc78c503e3733885ab09f5d563ade7143f071530f",
-    "api/v2/openapi.yaml": "da7e2a67630d825530726bcd2f170cf99735351c9f4872750bf179dd283cf1f2",
+    "api/seams-v2.yaml": "448d60e189059fe6bd4953b8c47f6941f89053707f45621d4e32b8bef0773670",
+    "api/v2/asyncapi.yaml": "8db5aa748cd4f6481055d48d0a6d66d596f20e712d2004aa86de79b4c34e9bd9",
+    "api/v2/openapi.yaml": "e3b1ed5954b8e9acd6c68cd2a924603afcebb686d07fb5a26e929b01b7f6599b",
     "api/v2/redocly.yaml": "1e66b60e6118ad11a823bb620678be464d99dfe50a40e3e6f93ec9429b88b34c",
-    "schemas/README.md": "0c0b737ffcf8f30e7d2809cec8a498232de710f41443212922ad8337cdde0b51",
+    "schemas/README.md": "bd1c00fae7b6fda506a75aff841bbdc438d4ce092642a72041203bee999b88de",
     "schemas/a2a-task-state.schema.json": "75d5049dea8bd873ff0e7546f1c60c8d36c219bec7084264360be54a8be30ae1",
     "schemas/a2ui-surface-delta-frame.schema.json": "970d434e4fdcb925de64aaace91eb83bfbcfd8f76757a9ce9f339eda5fb3f4e8",
     "schemas/agent-deployment-transition.schema.json": "1ac987fed0f380fa5b4e9a40e8e13316e5ae42d03a0ff42db4be6273e1bfe9f4",
@@ -31,7 +31,7 @@
     "schemas/artifact-type-pack-manifest.schema.json": "60342fcb15eb7f3ab46271f0641409a30d3a4a8f318b1020c53070886b191252",
     "schemas/audit-verify-result.schema.json": "0d3a3088ac1c32f9df66d346c33d7adbd8037940dba040e14ea847565a1a14bd",
     "schemas/budget-policy.schema.json": "3d4fe30ae129fe136ab9ece395f2a2a42a76360786b1b9a1d5f1cbc753eb5b39",
-    "schemas/capabilities.schema.json": "a7e5910bf10e6d8238e909fee5b81e405846f91688cccf1bb0d13fb081336a33",
+    "schemas/capabilities.schema.json": "195a9bdfaeb8f3d425eaee3400bb3edca90a510f4c34b2fcb81a5685ada307ad",
     "schemas/certification-bundle-v2.schema.json": "2f85530dd04824a15810c94e96869362dee1e78396eca21fdd18e5501416bb7d",
     "schemas/channel-presence-payload.schema.json": "f9d0ef4219814c2b765baf3e68cbe5eea2cb42379f516a93a0459dcd5f7db47e",
     "schemas/channel-written-payload.schema.json": "54723a56bc5a35232f64544ca686ac1ac959a5fb05b32b2401facca6b3ef51a3",
@@ -82,7 +82,7 @@
     "schemas/residency.schema.json": "b45fdc91ae88091251914dbd6787a1e2ce687580b91d31a759217b7a1f0010c0",
     "schemas/run-ancestry-response.schema.json": "963a5763b03216aa72fc2854560c778e53994f8cb06ea9a4053e541273c87f5c",
     "schemas/run-diff-response.schema.json": "d9d196730b5d5d8a04a591d21a8fc6b44be7fa134f11827ff7e4f1a86d47e83d",
-    "schemas/run-event-payloads.schema.json": "2094f19da1189f93392df6e728d7e17ad5bb1257b5fc44bb5e2036537658f12c",
+    "schemas/run-event-payloads.schema.json": "0812a7e89c37990f4e3d26a63b9c821ef1612893164f0378554bb702672f8513",
     "schemas/run-event.schema.json": "c70c06932b9831295042836213e617c8e946f20ddd49cf4e889b74d89d2175a8",
     "schemas/run-options.schema.json": "f8241ece6ddc6527de9160d811d42c231b4f77b935f2e107b3c05608545c59ab",
     "schemas/run-orchestrator-decided-event.schema.json": "17a43a3c44680a24d411141357a867b3caed6107d56de88fe2e062eaf93fa2c1",
@@ -94,9 +94,10 @@
     "schemas/subject.schema.json": "89679e35c7ec586adf6dd4adaff0bfa5453648d067fb2a43d7a2f7b2d016e10c",
     "schemas/suspend-request.schema.json": "7a90b622d5c619e3ffb5da696d272d6505e2780ab92ab631ac1b900f5daea908",
     "schemas/tool-descriptor.schema.json": "7f6adbae63003c1f1311f6a436f7f286542be62aa19a27b46730f2c2810857f7",
+    "schemas/trigger-dead-letter-page.schema.json": "1a471a975d66839f0a79f0a6d733de92cdbe2ac7111ff867d084b7795a9bc842",
     "schemas/trigger-event.schema.json": "59d63b79dca3593f45d281776cbfe43ae4d85ee25519b82ad59f162a9efb592c",
     "schemas/trigger-subscription-registration.schema.json": "2ca680ca6ffdb3cfc5de7bb8b8db8c3ec8eab4b88b7c9f7fe5edaecc7cf61ad0",
-    "schemas/trigger-subscription.schema.json": "4f7b067f20032073b140c4bb15dc9a9914c4f6421a252ff1ff261cbdd8edf270",
+    "schemas/trigger-subscription.schema.json": "e8cddab88f73a7a79bb3b78a60a480a00e16966b76f0e18c21a2aef09b6420ac",
     "schemas/ui-plugin-message.schema.json": "346638babf1f8ea7b161cde75c0038b518cd2cc5bf0631772e20a9b74c96b5dd",
     "schemas/v2/a2a-task-state.schema.json": "1810363e2d9bddb5997923bdac4044cc17c6f46ec5a40515d2ff21d9c82c1ad9",
     "schemas/v2/a2ui-surface-delta-frame.schema.json": "6889c5da3fe7e76cb614038c0eea6774776fa640448558b258eb87fb50cb9b64",
@@ -116,7 +117,7 @@
     "schemas/v2/artifact.schema.json": "85b9dc284d39b99d2a66fa8cbf47f2dd3d8526d3bd6cc411ad315b372de38975",
     "schemas/v2/audit-verify-result.schema.json": "14af8e9283510f0a40e48a2059c929ee44e0fc9fa3cc66a95bfbe90b17c48297",
     "schemas/v2/budget-policy.schema.json": "1de68095db0beb5c7a4be629de26e79f62ebbe748a88d46f36e768edfd1f0d68",
-    "schemas/v2/capabilities.schema.json": "8d151a098a3cf7285fcadec8c1f192bed963ed6da3146e62d25155eb18afba9a",
+    "schemas/v2/capabilities.schema.json": "4503d383c2b5efff532a79dabc79d17b5f6494c88d5b385bd3ca5f1a4e3f7647",
     "schemas/v2/certification-bundle.schema.json": "82ce31a1ed6c7e21b0ba88ff62a7b8b768fc3b176b1d06fce023203830b94725",
     "schemas/v2/channel-presence-payload.schema.json": "4eeb224910e6f7eee3ab5e7c3899559c25c83a26d0022e0ad195c4672611977a",
     "schemas/v2/channel-written-payload.schema.json": "ccecff3c71a3275ad8db035ac0e04db25e6f8d23cf091ddbcd5a60d1be1cbb6b",
@@ -171,7 +172,7 @@
     "schemas/v2/residency.schema.json": "3fd23c9732beb140504e81560fc426eb6764d547e56da5fb92c5a5c7bf04db3a",
     "schemas/v2/run-ancestry-response.schema.json": "334c17f2062dea62726ca1d07b8be3f169cdc422af843c1def5fb317039814c9",
     "schemas/v2/run-diff-response.schema.json": "8bdb2045c274580038bd74781f7d062f5049839797c164a89de4ed89edc53a74",
-    "schemas/v2/run-event-payloads.schema.json": "b2aa55840c0817c703417fd746ba85f72be7268b92f450143dfc1faf2f8fa119",
+    "schemas/v2/run-event-payloads.schema.json": "fc1af4245dec98f7be86d20ad339e3409d0b2aaaa301dace083f734999c470b7",
     "schemas/v2/run-event.schema.json": "2f0d7416bd376c56affe97b6b2b49981532e8e9ff45c0a162cf806c78b3e7fb7",
     "schemas/v2/run-list-response.schema.json": "c2dbc34768dcf64528914a213aa3cb55952e8e3e90a64b04a9423b2a19749d38",
     "schemas/v2/run-options.schema.json": "f0e9f494d80086c2ed2cf9fe87df54e5b4e66601699c4a1089f4edbc7ba58867",
@@ -185,9 +186,10 @@
     "schemas/v2/subject.schema.json": "094e981fb20052a911393e219ea5f2065d8b8417b65080a70c5ea99fd960a8fe",
     "schemas/v2/suspend-request.schema.json": "368d9932efb08f85b4520cac44b3c553876209f55bada93b5fcac93cc890b411",
     "schemas/v2/tool-descriptor.schema.json": "8c98fb5e93bc649dff859d3d1dde8075db929efd6c49c496252d0a88cccc73e1",
+    "schemas/v2/trigger-dead-letter-page.schema.json": "571f8c39b64571bff20d391a6e6e829d4ce470ab790b2b7f810cc4aa40edcbc1",
     "schemas/v2/trigger-event.schema.json": "710ecca8b3ecdad3a532a96768177f062192b24a589a4f798c7eb24bab64b30a",
     "schemas/v2/trigger-subscription-registration.schema.json": "5f7959f3e13f49399783e47f73101d6af95e5abccea1af2f0014ccbe3e51006c",
-    "schemas/v2/trigger-subscription.schema.json": "1f5c286f68577d531ef9445ab2493f8d69ac9ee42313d28d758a0f00dd0fab36",
+    "schemas/v2/trigger-subscription.schema.json": "06abe021712a4bfc5a107a067053cd3cc9704f47ae7066d8449a508c368a0ab2",
     "schemas/v2/ui-plugin-message.schema.json": "879d65867c01656b3962d64283e66364dcb8f626ad26c5fcf2d2d55a79ae0ce9",
     "schemas/v2/webhook-dead-letter-page.schema.json": "543f5ccc26d8f777684a037172ab7b9fdf70735e5394eeb42e5fa6569503f528",
     "schemas/v2/webhook-delivery.schema.json": "4e8ab3b722ad1731adf0548c1217f0de62da40de14e8abf77533aee4ace4c079",
@@ -204,17 +206,17 @@
     "schemas/workspace-file.schema.json": "464de85c2a068243084ee9c1d969bc7cd5d8f7948574e58450d6493c38a0e1e4",
     "spec/v1/alias-detectors.json": "0b2f28808ffe0b9d98a187775038c3406bb70919747a788a6e4f866e293ae6d3",
     "spec/v1/capability-declaration-classes.json": "e7729aed5c4b4e1dd02abab0530f14cc95f5d4070fe51fb139e7f5cccefa00c6",
-    "spec/v1/core-standard-manifest.json": "f1e9f2551bd9695a8e16bb070e7180281378f4822921fa1aab7adcc60a5cca10",
+    "spec/v1/core-standard-manifest.json": "819828fb2f978fa9e4a994652bbe16c797d36a8c4393d57d1432c8a53f2120ab",
     "spec/v1/deprecations.json": "a3293072ea951857395d05f0437264e88965f1e9019ff61c55bacfa9c1aaa17c",
     "spec/v1/deprecations.schema.json": "3e393c405d2a41b467d8c5e3c468549078df1ce6a6d2588fc488097b95d9b55b",
     "spec/v1/event-codemap.json": "3da60d884157793a360da532a9fcbbfb5285636db325a74cec94b34622186d97",
     "spec/v1/event-codemap.schema.json": "d05933b2e88103aff51a2f774df97b9bda065e0fc88dbd9b114cc47a32189174",
     "spec/v1/extensions.json": "79a60754aa16cbdbdb604f8e5c00038af535a1690a4d07bd5ff7c38f0256a7bc",
-    "spec/v1/gaps.json": "fa1b564fe59db6a708b9488d15aab445919fcc3621e8cf8121901b90b7b4c234",
+    "spec/v1/gaps.json": "7eab313ec80c40285e3290113f5d3fea90ea6f8bc385ef6fd15d415f52540035",
     "spec/v1/gaps.schema.json": "8fd83259f556553c9df0f53e7a82ca8c2a4771d471197f69b4e2ae0ceeacfd66",
     "spec/v1/migrations.json": "4c50760be70cb644d02427bcaf5749606700edf4513f423903cf3b1d12f5c300",
     "spec/v1/migrations.schema.json": "886779aa6c22e646db097f5df210adb018a4dd14a7b815465a18c8a7056c8f72",
-    "spec/v1/operation-path-manifest.json": "fada0342815fb129c1ae61f1829bd6e34417717408ce86fcc54280f373c19e74",
+    "spec/v1/operation-path-manifest.json": "f988f7ebf58ff192e999e2a71192066052f837acc03c91d047d6050ca21a83b0",
     "spec/v1/spec-gaps.json": "ea9612af55bea9dae3e82223d4f714243f8f590b0193f1188257b13491a38afc",
     "spec/v2/README.md": "ddea90d7cf14aefffe1a43eeeecd4222dadad1d1e5ac64dceb073990eb93d9ef",
     "spec/v2/core/artifact-type-packs.md": "f734740cc3963f86c9f273a7dace26291bba2855161ddd3540618131a2c8d13e",
@@ -226,7 +228,7 @@
     "spec/v2/core/events.md": "c1a20e3aa6736119ea07aa2cf66faa808a1874d2cde4933033b65506d1742883",
     "spec/v2/core/execution.md": "8a0c9db1bbfb97c008ab9328b7333c1cc3318196e78bfbefb49e781bdf4f9d44",
     "spec/v2/core/form-content-packs.md": "02931227899676fd4581a27017be2a6c4953904717be9b81c29d12f87ab3917d",
-    "spec/v2/core/headers.md": "21d6c8220c3ac75b10e31c4cf6179abb539e2558af5006e40228d8c383ed5c92",
+    "spec/v2/core/headers.md": "1e601c31d2c8bcb7628b7efe2b65fb53d9c79db2a60a4235c333cf85290bb0c0",
     "spec/v2/core/host-services.md": "73f26ea32891044131d63f9861d2cbddccb5d08bf76e29e47afef9bb5b646791",
     "spec/v2/core/i18n.md": "882904b7d59f992ab1e5f7346167161a54cf665b8fee47e64a3862cf9133a580",
     "spec/v2/core/idempotency.md": "adbd317a6ebb57c2759c076297b31f67def9e391576bccd0bbea787b13e85872",
@@ -245,11 +247,11 @@
     "spec/v2/core/storage.md": "dc94b985847c1341c7a064f04a6010f0fdbe6c3ab3e555d4362878c81d764c18",
     "spec/v2/core/tool-catalog.md": "d16a9004418719c48301804aefa4d7ab6f41112a4ed83727f552aa1b92b418b0",
     "spec/v2/core/versioning.md": "b7acb0d8b77425cb53ea700e47ba790bf7506de600c398690e6ec5bb9c7a220e",
-    "spec/v2/core/webhooks.md": "b0c08a3511b9319da7b0f7d83cddb15758acfc92e4c58c3604ac0f6b1ab13242",
+    "spec/v2/core/webhooks.md": "daf6ec03092f4b3fde1eb74a5e2e801ec48db5139a13fcc0fd7fb4a004635ae3",
     "spec/v2/core/workflow-chain-packs.md": "fdce7a8477e269950a2bac05ee6eddbd66eb0b670b464d00054f7196ec05d29c",
     "spec/v2/corrections.json": "3a8d93e33865b692d26a3b6bfd3819766e206b2e0c2a69669baa4bf833d05a49",
     "spec/v2/corrections.schema.json": "46bbffb954d13bd9995aebc912ceeb2544f7064331abf25fd6ab85c81a5cec94",
-    "spec/v2/declaration.json": "45ca70a0d74fdade13192565cb3b35e446ffab537f2caaf23da73a4050b3c6ac",
+    "spec/v2/declaration.json": "8e5eab46ea448725b806a2395f80f5c36fa582a308f80eb09931a633a595eae1",
     "spec/v2/declaration.schema.json": "ef951633e4070899f64828f5cf1b5f4870270a0360f81dbb49b5b4d6cd407550",
     "spec/v2/errors.json": "83f048b0a06952b4af6f125fb66c4212acab51056b411390f1010acd6ab9cdc0",
     "spec/v2/errors.schema.json": "47404ad53e6147cf9017b813483712466573e419fb33e6c4b6c12d3e7deba1bc",
@@ -295,17 +297,17 @@
     "spec/v2/generated/error-codes.md": "f171c0ca1be40221f9b4fbfcbce73c728c315a1e8feb8dd6bf738d6ca9e29526",
     "spec/v2/harness-trust-anchors.json": "6007b92eae16a070fbc3777424efb0abfe865fda89d096963109b96282b91205",
     "spec/v2/harness-trust-anchors.schema.json": "372b5d92337c893d3449eff3f6bfd009ac09fdac285296d8bdbe0a08fff9e34c",
-    "spec/v2/id-field-bindings.json": "9f6fd280250447e26a6704811c352bb8f2ff6c4bd242befe3da0ba38962370e9",
+    "spec/v2/id-field-bindings.json": "cc315f9a7aa5ec552860c1a790e105502fb737dc10b57aa5641bdd7405d6b638",
     "spec/v2/interop-map.json": "02255dafe7eb55f61ca7f9ae7c21f079d1848a6756991343088975ac9d184b8d",
     "spec/v2/interop-map.schema.json": "0017c882df34ee215e2e0729de051490e09d43aac3d2c949285698ed51832f12",
     "spec/v2/migrations.json": "651954938a1e154c0b6f1e3dd6e105889d30de3bb65789f21de7f77a12869e9e",
     "spec/v2/migrations.schema.json": "b91ade6320ad1b1185c9495b9424f3aa63438ed8e412c45171c227d82c0afd86",
-    "spec/v2/path-manifest.json": "27c2307b84376b2f22bea4e2213fc7e33ef3bf8fd1d18039f7955edb00dc9c9a",
+    "spec/v2/path-manifest.json": "36363105280139dad095dc4f64b5b272121e9759cdcf6de011358dd1c1a90540",
     "spec/v2/peer-dependency-aliases.json": "d10299280abee08258502925bc327293ee413e0108cd6e6ec75ff6110653308d",
     "spec/v2/profiles.json": "180beb9ef2d161766fa23b2987e7e829851e3d316273147cf6a4a3f324befd6b",
-    "spec/v2/release.json": "db1ff3ccb0a8e5446734924122582f7909b7860eb0e097b8275753ff97681d37",
+    "spec/v2/release.json": "044530e75b4cdec6747c1bcebe799ebc62f1f6c2a1e722369b35b2854e54049f",
     "spec/v2/retention-floors.json": "eaf3722d95c79947af1d4269ef85117e126518c588cfcf1a2b21b97269f51624",
-    "spec/v2/surface-baseline.json": "3cc12012d8f0437b2dd8280e18ac472063afffb30af25d1f1a126e20f9aee674"
+    "spec/v2/surface-baseline.json": "99ddcf9eb0d06967879ce7f6e54c49fe19bfabc9ee50f00f78699b401108bfd5"
   },
-  "corpusCommit": "458e139f76c2469f90f187ee41ae1d7070748adf"
+  "corpusCommit": "8817d7c027047bbf1aa8d9385122137396f1bdca"
 }

package/api/openapi.yaml

@@ -654,6 +654,59 @@ paths:
               schema:
                 $ref: '../schemas/error-envelope.schema.json'
 
+  # RFC 0232 — a trigger subscription's dead-lettered deliveries. A dead-lettered
+  # delivery started no run, so it is on no run's log; this read is where the
+  # host's content-free record of it is visible (trigger-bridge.md §C). Gated on
+  # `capabilities.triggerBridge.deadLetter`; distinct from the RFC 0053 run sink.
+  /v1/trigger-subscriptions/{subscriptionId}/dead-letters:
+    get:
+      tags: [triggers]
+      summary: List a trigger subscription's dead-lettered deliveries (RFC 0232).
+      description: |
+        Lists the subscription's dead-lettered deliveries, newest first, for
+        `triggerBridge.deadLetter.retentionDays`. Each record carries the fields
+        of the dead-lettered `trigger.delivery.attempted` payload and, when the
+        dead-lettering changed the subscription's state, the
+        `trigger.subscription.state.changed` payload. A delivery refused by a
+        `required` verification check appears with `reason: "verification_failed"`
+        and no `stateChange`. A record MUST NOT carry the inbound body, the
+        inbound headers, the signature, the signing secret, or any credential.
+        Gated on `triggerBridge.deadLetter`: a host that does not advertise it
+        answers `404 not_found`. Another tenant's subscription id answers
+        `404 not_found`, exactly as an id the host never minted.
+      operationId: listTriggerDeadLetters
+      security:
+        - ApiKeyAuth: ['webhooks:manage']
+        - OAuth2: ['webhooks:manage']
+        - OpenIdConnect: ['webhooks:manage']
+      parameters:
+        - name: subscriptionId
+          in: path
+          required: true
+          schema: { type: string, minLength: 1 }
+          description: The trigger subscription, as returned by `createTriggerSubscription`.
+        - name: limit
+          in: query
+          required: false
+          schema: { type: integer, minimum: 1 }
+          description: Page size; clamped to `triggerBridge.deadLetter.maxPageSize`.
+        - name: cursor
+          in: query
+          required: false
+          schema: { type: string, minLength: 1, maxLength: 2048 }
+          description: Opaque cursor from a previous page's `nextCursor`. A cursor minted for another subscription MUST be refused `400 validation_error`.
+      responses:
+        '200':
+          description: One page of dead-lettered deliveries, newest first.
+          content:
+            application/json:
+              schema:
+                $ref: '../schemas/trigger-dead-letter-page.schema.json'
+        '400': { $ref: '#/components/responses/ValidationError' }
+        '401': { $ref: '#/components/responses/Unauthenticated' }
+        '403': { $ref: '#/components/responses/Forbidden' }
+        '404': { $ref: '#/components/responses/NotFound' }
+
   # ── Localized content surface (RFC 0103) ─────────────────────────────
   # Public, cacheable delivery + tenant-scoped admin CRUD for authored
   # localized content (pages → sections). Locale on the public path is

package/api/seams-v2.yaml

@@ -1,7 +1,7 @@
 openapi: 3.1.0
 info:
   title: OpenWOP conformance seams profile (openwop-conformance-seams-v2)
-  version: 2.45.9
+  version: 2.45.10
   description: 'The OpenWOP conformance seams profile (`openwop-conformance-seams-v2`): test-only operations in their own
     path space, `/conformance/seams/…`. The profile is versioned and validated against the canonical v2 schemas with no tolerance
     path. It is not a capability: a host advertises the profile, never a `testSeams` flag.

package/api/v2/asyncapi.yaml

@@ -1,7 +1,7 @@
 asyncapi: 3.1.0
 info:
   title: OpenWOP v2 event streams
-  version: 2.45.9
+  version: 2.45.10
   description: 'OpenWOP v2 event streams over SSE. The run-events channel''s address is the OpenAPI path key, and the server
     pathname is empty (bare origin). `streamMode` is a stream mode from the closed set, or a comma-separated combination of
     them; `values` never combines. `hostEvents` has a default address, `/host/events`; a host MAY declare another under `heartbeat.deliveryChannel`.

package/api/v2/openapi.yaml

@@ -1,7 +1,7 @@
 openapi: 3.1.0
 info:
   title: OpenWOP v2 API
-  version: 2.45.9
+  version: 2.45.10
   summary: REST surface for declaring, executing, suspending, resuming, and observing multi-step workflows.
   description: 'The OpenWOP v2 REST API. Paths are unversioned and served at the bare origin; a client selects a version with
     the `OpenWOP-Version` header from the host''s `protocolVersions[]`. Conformance seams and test-mode operations are not
@@ -811,6 +811,70 @@ paths:
           $ref: '#/components/responses/Forbidden'
         '404':
           $ref: '#/components/responses/NotFound'
+  /trigger-subscriptions/{subscriptionId}/dead-letters:
+    get:
+      tags:
+      - triggers
+      summary: List a trigger subscription's dead-lettered deliveries.
+      description: 'Lists the subscription''s dead-lettered deliveries, newest first, for `triggerBridge.deadLetter.retentionDays`.
+        Each record carries the fields of the dead-lettered `trigger.delivery-attempted` payload and, when the dead-lettering
+        changed the subscription''s state, the `trigger.subscription-state-changed` payload. A delivery refused by a `required`
+        verification check appears with `reason: "verification_failed"` and no `stateChange`. A record MUST NOT carry the
+        inbound body, the inbound headers, the signature, the signing secret, or any credential. Gated on `triggerBridge.deadLetter`:
+        a host that does not advertise it answers `404 not_found`. Another tenant''s subscription id answers `404 not_found`,
+        exactly as an id the host never minted.'
+      operationId: listTriggerDeadLetters
+      security:
+      - ApiKeyAuth:
+        - webhooks:manage
+      - OAuth2:
+        - webhooks:manage
+      - OpenIdConnect:
+        - webhooks:manage
+      parameters:
+      - name: subscriptionId
+        in: path
+        required: true
+        schema:
+          $ref: ../../schemas/v2/ids.schema.json#/$defs/subscriptionId
+        description: 'The trigger subscription, tenant-bound (`identity.md` §5) and carried as one path segment: `~`-projected
+          or percent-encoded.'
+      - name: limit
+        in: query
+        required: false
+        schema:
+          type: integer
+          minimum: 1
+        description: Page size; clamped to `triggerBridge.deadLetter.maxPageSize`.
+      - name: cursor
+        in: query
+        required: false
+        schema:
+          type: string
+          minLength: 1
+          maxLength: 2048
+        description: Opaque cursor from a previous page's `nextCursor`. A cursor minted for another subscription MUST be refused
+          `400 validation_error`.
+      - $ref: '#/components/parameters/OpenWOPVersion'
+      - $ref: '#/components/parameters/OpenWOPClientVersion'
+      responses:
+        '200':
+          description: One page of dead-lettered deliveries, newest first.
+          content:
+            application/json:
+              schema:
+                $ref: ../../schemas/v2/trigger-dead-letter-page.schema.json
+          headers:
+            OpenWOP-Version:
+              $ref: '#/components/headers/OpenWOPVersion'
+        '400':
+          $ref: '#/components/responses/ValidationError'
+        '401':
+          $ref: '#/components/responses/Unauthenticated'
+        '403':
+          $ref: '#/components/responses/Forbidden'
+        '404':
+          $ref: '#/components/responses/NotFound'
   /content/pages/{slug}:
     get:
       tags:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openwop/spec-artifacts",
-  "version": "2.45.9",
+  "version": "2.45.10",
   "description": "The OpenWOP machine-readable contract: api/ (OpenAPI, AsyncAPI, the seams profile), schemas/ (v1 and v2 JSON Schemas), the spec/v1 and spec/v2 registries (errors, event codemap, declaration, deprecations, migrations, gaps) and CORPUS-STAMP.json — published from the openwop/openwop corpus tag; the peer dependency @openwop/openwop-conformance digest-checks at start (RFC 0168 §D.2).",
   "license": "Apache-2.0",
   "repository": {

package/schemas/README.md

@@ -78,6 +78,7 @@
 | `trigger-subscription.schema.json` | `trigger-bridge.md` (RFC 0083) | Durable inbound-trigger subscription record — `subscriptionId`/`source`/`state` (active/paused/failed/dead-lettered) + `dedupEnabled`/`retryPolicy` + the webhooks.md register keys. Backs the `openwop-trigger-bridge` profile; content-free of inbound payloads (SR-1). |
 | `trigger-event.schema.json` | `trigger-bridge.md` §F (RFC 0099) | The normalized external-event envelope handed to a started run as `ctx.triggerData` (webhook/email/form). In-run only — never event-logged; `trigger.delivery.attempted` stays content-free. Per-source one-of; `contentTrust: "untrusted"`; `AttachmentRef.ref` is a host-internal handle, never a fetchable URL (`trigger-ingestion-ssrf` / `trigger-ingestion-content-redaction`). |
 | `trigger-subscription-registration.schema.json` | `trigger-bridge.md` §F (RFC 0099) | The `POST /v1/trigger-subscriptions` create request — binds an external `source` to a `workflowId` with a dedup config + a source-authenticity `verification` policy. The portable create surface RFC 0083 UQ1 left per-source. |
+| `trigger-dead-letter-page.schema.json` | `trigger-bridge.md` §C (RFC 0232) | One page of `listTriggerDeadLetters`: a trigger subscription's dead-lettered deliveries, newest first. Each record carries the dead-lettered attempt's payload fields, the state change it caused if any, `reason`, `deadLetteredAt` and `expiresAt`; never inbound content or credentials. |
 | `a2a-task-state.schema.json` | `a2a-integration.md` §"Async / durable Tasks" (RFC 0100) | The durable, persisted projection of an A2A `Task` an OpenWOP host keeps per backing run when `a2a.durableTasks: true` — `taskId == runId`, lowercase-hyphen `state`, `interruptKind`, optional SSRF-guarded `PushConfig`. Content-free of run inputs/outputs/artifacts (SR-1 / `a2a-push-egress-ssrf`). |
 | `self-hosted-runner-dispatch-frame.schema.json` | `self-hosted-runner.md` (RFC 0122) | DRAFT — one model/tool dispatch STEP the host routes to a registered runner over the runner↔host channel: `{runId, stepId, seq, kind, provider?/model?/tool?, inputs}`. `seq` is the per-runner monotonic dispatch cursor (distinct from the event-log sequence). `inputs` carries NO credential material (`runner-credential-non-transit`). |
 | `self-hosted-runner-result-frame.schema.json` | `self-hosted-runner.md` (RFC 0122) | DRAFT — the runner's answer to a dispatch: `{runId, stepId, seq, output}`, persisted as a normal step record (replay reads persistence, never re-dispatches). Closed shape (`runner-credential-non-transit`); `output` is fenced `<UNTRUSTED>` before re-entering an agent loop (`runner-output-untrusted-transport`). |

package/schemas/capabilities.schema.json

@@ -2932,6 +2932,28 @@
               "description": "`true` ⇒ the host serves `POST /v1/trigger-subscriptions` (RFC 0099 §F.2) for portable external-event subscription creation."
             }
           }
+        },
+        "deadLetter": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "retentionDays",
+            "maxPageSize"
+          ],
+          "description": "RFC 0232 §A (additive). The trigger DELIVERY dead-letter sink, advertised only by a host that serves `GET /v1/trigger-subscriptions/{subscriptionId}/dead-letters` (`listTriggerDeadLetters`). A dead-lettered trigger delivery started no run, so it is on no run's log; this read is where the host's content-free record of it is visible (`trigger-bridge.md` §C). **Distinct from the top-level `deadLetter` family (RFC 0053), which is the RUN sink**, and from `webhooks.deadLetter` (RFC 0188), which holds OUTBOUND deliveries.",
+          "properties": {
+            "retentionDays": {
+              "type": "integer",
+              "minimum": 1,
+              "description": "How long a dead-lettered delivery stays readable. Observable: a record's `expiresAt − deadLetteredAt` matches it."
+            },
+            "maxPageSize": {
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 1000,
+              "description": "The ceiling the host clamps `limit` to."
+            }
+          }
         }
       }
     },

package/schemas/run-event-payloads.schema.json

@@ -3876,7 +3876,7 @@
             "retrying",
             "dead-lettered"
           ],
-          "description": "`delivered`: the run started; `retrying`: failed, will retry per policy; `dead-lettered`: retries exhausted, routed to the RFC 0053 sink (no run)."
+          "description": "`delivered`: the run started; `retrying`: failed, will retry per policy; `dead-lettered`: retries exhausted, no run started; the subscription keeps the record (`trigger-bridge.md` §C, RFC 0232), not the RFC 0053 run sink."
         },
         "runId": {
           "type": "string",

package/schemas/trigger-dead-letter-page.schema.json

@@ -0,0 +1,90 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://openwop.dev/spec/v1/trigger-dead-letter-page.schema.json",
+  "title": "TriggerDeadLetterPage",
+  "description": "RFC 0232 §B — one page of a trigger subscription's dead-lettered deliveries, the answer to `listTriggerDeadLetters`. A dead-lettered delivery started no run, so it is on no run's log; this read is where the host's content-free record of it is visible (`trigger-bridge.md` §C).",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "deliveries"
+  ],
+  "properties": {
+    "deliveries": {
+      "type": "array",
+      "description": "Dead-lettered deliveries, newest first. Empty when the subscription has none within `retentionDays`.",
+      "items": {
+        "$ref": "#/$defs/deadLetteredTriggerDelivery"
+      }
+    },
+    "nextCursor": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 2048,
+      "description": "Opaque continuation cursor; absent on the last page. A cursor minted for another subscription MUST be refused `400 validation_error`."
+    }
+  },
+  "$defs": {
+    "deadLetteredTriggerDelivery": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "subscriptionId",
+        "attemptEventId",
+        "attempt",
+        "reason",
+        "deadLetteredAt",
+        "expiresAt"
+      ],
+      "description": "RFC 0232 §C — one dead-lettered trigger delivery. **Content-free:** no inbound body, no inbound headers, no signature, no signing secret, no credential. A record names a delivery; it never carries what was delivered.",
+      "properties": {
+        "subscriptionId": {
+          "type": "string",
+          "minLength": 1,
+          "description": "The trigger subscription. Equals the path segment."
+        },
+        "attemptEventId": {
+          "type": "string",
+          "minLength": 1,
+          "description": "The id of the dead-lettered `trigger.delivery.attempted`. Where the host also shows that event (a test seam), this is its `eventId`."
+        },
+        "attempt": {
+          "allOf": [
+            {
+              "$ref": "run-event-payloads.schema.json#/$defs/triggerDeliveryAttempted"
+            },
+            {
+              "properties": {
+                "outcome": {
+                  "const": "dead-lettered"
+                }
+              }
+            }
+          ],
+          "description": "The dead-lettered attempt: the fields of the `trigger.delivery.attempted` payload for this delivery, and no others. Where the host also shows the event, the two MUST agree."
+        },
+        "stateChange": {
+          "$ref": "run-event-payloads.schema.json#/$defs/triggerSubscriptionStateChanged",
+          "description": "The `trigger.subscription.state.changed` payload this dead-lettering caused, when it caused one. Absent for a delivery refused by verification, which MUST NOT change the subscription's state."
+        },
+        "reason": {
+          "type": "string",
+          "enum": [
+            "verification_failed",
+            "retries_exhausted"
+          ],
+          "description": "Why the delivery was dead-lettered. `verification_failed`: a `required` verification check refused it. `retries_exhausted`: the retry policy ran out."
+        },
+        "deadLetteredAt": {
+          "type": "string",
+          "format": "date-time",
+          "description": "When the host dead-lettered the delivery."
+        },
+        "expiresAt": {
+          "type": "string",
+          "format": "date-time",
+          "description": "When this record ages out. `expiresAt − deadLetteredAt` matches `triggerBridge.deadLetter.retentionDays`."
+        }
+      }
+    }
+  }
+}

package/schemas/trigger-subscription.schema.json

@@ -9,12 +9,12 @@
   "properties": {
     "subscriptionId": { "type": "string", "minLength": 1, "description": "Stable host-unique id for the subscription. Correlates the §C delivery events + the management surface." },
     "source": { "type": "string", "enum": ["webhook", "schedule", "queue", "email", "form", "stream", "change"], "description": "Which trigger source backs the subscription. Channels beyond these (Slack/Discord/SMS) bridge as a vendor extension by registering a subscription of the closest source kind (§E)." },
-    "state": { "type": "string", "enum": ["active", "paused", "failed", "dead-lettered"], "description": "The §B state. `active`: accepting + delivering; `paused`: retained, not delivering (operator-held); `failed`: delivery failing past policy (the webhooks.md circuit-breaker generalized); `dead-lettered`: terminal, deliveries routed to the RFC 0053 sink." },
+    "state": { "type": "string", "enum": ["active", "paused", "failed", "dead-lettered"], "description": "The §B state. `active`: accepting + delivering; `paused`: retained, not delivering (operator-held); `failed`: delivery failing past policy (the webhooks.md circuit-breaker generalized); `dead-lettered`: terminal, deliveries dead-lettered by the subscription (`trigger-bridge.md` §C), not held by the RFC 0053 run sink." },
     "dedupEnabled": { "type": "boolean", "description": "When true, the host de-duplicates inbound events by `dedupKey` within the retention window (§C-1; the idempotency.md Layer-1 model applied to inbound triggers)." },
     "retryPolicy": {
       "type": "object",
       "additionalProperties": false,
-      "description": "Delivery retry policy (§C-2). On exhaustion the subscription/delivery transitions to `dead-lettered` (RFC 0053).",
+      "description": "Delivery retry policy (§C-2). On exhaustion the subscription/delivery transitions to `dead-lettered`.",
       "properties": {
         "maxAttempts": { "type": "integer", "minimum": 1, "description": "Maximum delivery attempts before dead-lettering." },
         "backoff": { "type": "string", "enum": ["none", "fixed", "exponential"], "description": "Backoff strategy between attempts." }

package/schemas/v2/capabilities.schema.json

@@ -5594,6 +5594,28 @@
               "description": "`true` ⇒ the host serves `POST /trigger-subscriptions` (RFC 0099 §F.2) for portable external-event subscription creation."
             }
           }
+        },
+        "deadLetter": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "retentionDays",
+            "maxPageSize"
+          ],
+          "description": "RFC 0232 §A (additive). The trigger DELIVERY dead-letter sink, advertised only by a host that serves `GET /trigger-subscriptions/{subscriptionId}/dead-letters` (`listTriggerDeadLetters`). A dead-lettered trigger delivery started no run, so it is on no run's log; this read is where the host's content-free record of it is visible (`trigger-bridge.md` §C). **Distinct from the top-level `deadLetter` family (RFC 0053), which is the RUN sink**, and from `webhooks.deadLetter` (RFC 0188), which holds OUTBOUND deliveries.",
+          "properties": {
+            "retentionDays": {
+              "type": "integer",
+              "minimum": 1,
+              "description": "How long a dead-lettered delivery stays readable. Observable: a record's `expiresAt − deadLetteredAt` matches it."
+            },
+            "maxPageSize": {
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 1000,
+              "description": "The ceiling the host clamps `limit` to."
+            }
+          }
         }
       },
       "allOf": [

package/schemas/v2/run-event-payloads.schema.json

@@ -3702,7 +3702,7 @@
             "retrying",
             "dead-lettered"
           ],
-          "description": "`delivered`: the run started; `retrying`: failed, will retry per policy; `dead-lettered`: retries exhausted, routed to the RFC 0053 sink (no run)."
+          "description": "`delivered`: the run started; `retrying`: failed, will retry per policy; `dead-lettered`: retries exhausted, no run started; the subscription keeps the record (`webhooks.md` §Inbound triggers), not the run sink."
         },
         "runId": {
           "$ref": "ids.schema.json#/$defs/runId",

package/schemas/v2/trigger-dead-letter-page.schema.json

@@ -0,0 +1,88 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://openwop.dev/spec/v2/trigger-dead-letter-page.schema.json",
+  "title": "TriggerDeadLetterPage",
+  "description": "RFC 0232 §B — one page of a trigger subscription's dead-lettered deliveries, the answer to `listTriggerDeadLetters`. A dead-lettered delivery started no run, so it is on no run's log; this read is where the host's content-free record of it is visible (`webhooks.md` §Inbound triggers).",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "deliveries"
+  ],
+  "properties": {
+    "deliveries": {
+      "type": "array",
+      "description": "Dead-lettered deliveries, newest first. Empty when the subscription has none within `retentionDays`.",
+      "items": {
+        "$ref": "#/$defs/deadLetteredTriggerDelivery"
+      }
+    },
+    "nextCursor": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 2048,
+      "description": "Opaque continuation cursor; absent on the last page. A cursor minted for another subscription MUST be refused `400 validation_error`."
+    }
+  },
+  "$defs": {
+    "deadLetteredTriggerDelivery": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "subscriptionId",
+        "attemptEventId",
+        "attempt",
+        "reason",
+        "deadLetteredAt",
+        "expiresAt"
+      ],
+      "description": "RFC 0232 §C — one dead-lettered trigger delivery. **Content-free:** no inbound body, no inbound headers, no signature, no signing secret, no credential. A record names a delivery; it never carries what was delivered.",
+      "properties": {
+        "subscriptionId": {
+          "$ref": "ids.schema.json#/$defs/subscriptionId",
+          "description": "The trigger subscription. Equals the path segment."
+        },
+        "attemptEventId": {
+          "$ref": "ids.schema.json#/$defs/eventId",
+          "description": "The id of the dead-lettered `trigger.delivery.attempted`. Where the host also shows that event (a test seam), this is its `eventId`."
+        },
+        "attempt": {
+          "allOf": [
+            {
+              "$ref": "run-event-payloads.schema.json#/$defs/triggerDeliveryAttempted"
+            },
+            {
+              "properties": {
+                "outcome": {
+                  "const": "dead-lettered"
+                }
+              }
+            }
+          ],
+          "description": "The dead-lettered attempt: the fields of the `trigger.delivery.attempted` payload for this delivery, and no others. Where the host also shows the event, the two MUST agree."
+        },
+        "stateChange": {
+          "$ref": "run-event-payloads.schema.json#/$defs/triggerSubscriptionStateChanged",
+          "description": "The `trigger.subscription.state.changed` payload this dead-lettering caused, when it caused one. Absent for a delivery refused by verification, which MUST NOT change the subscription's state."
+        },
+        "reason": {
+          "type": "string",
+          "enum": [
+            "verification_failed",
+            "retries_exhausted"
+          ],
+          "description": "Why the delivery was dead-lettered. `verification_failed`: a `required` verification check refused it. `retries_exhausted`: the retry policy ran out."
+        },
+        "deadLetteredAt": {
+          "type": "string",
+          "format": "date-time",
+          "description": "When the host dead-lettered the delivery."
+        },
+        "expiresAt": {
+          "type": "string",
+          "format": "date-time",
+          "description": "When this record ages out. `expiresAt − deadLetteredAt` matches `triggerBridge.deadLetter.retentionDays`."
+        }
+      }
+    }
+  }
+}

package/schemas/v2/trigger-subscription.schema.json

@@ -36,7 +36,7 @@
         "failed",
         "dead-lettered"
       ],
-      "description": "The §B state. `active`: accepting + delivering; `paused`: retained, not delivering (operator-held); `failed`: delivery failing past policy (the webhooks.md circuit-breaker generalized); `dead-lettered`: terminal, deliveries routed to the RFC 0053 sink."
+      "description": "The §B state. `active`: accepting + delivering; `paused`: retained, not delivering (operator-held); `failed`: delivery failing past policy (the webhooks.md circuit-breaker generalized); `dead-lettered`: terminal, deliveries dead-lettered by the subscription (`webhooks.md` §Inbound triggers), not held by the run sink."
     },
     "dedupEnabled": {
       "type": "boolean",
@@ -45,7 +45,7 @@
     "retryPolicy": {
       "type": "object",
       "additionalProperties": false,
-      "description": "Delivery retry policy (§C-2). On exhaustion the subscription/delivery transitions to `dead-lettered` (RFC 0053).",
+      "description": "Delivery retry policy (§C-2). On exhaustion the subscription/delivery transitions to `dead-lettered`.",
       "properties": {
         "maxAttempts": {
           "type": "integer",

package/spec/v1/core-standard-manifest.json

@@ -4,7 +4,7 @@
   "provenance": {
     "suite": {
       "package": "@openwop/openwop-conformance",
-      "version": "2.45.9"
+      "version": "2.45.10"
     },
     "note": "Derived from the corpus at generation time. Regenerate with --write; verify with --check."
   },
@@ -75,6 +75,7 @@
     "listContentPages",
     "listPromptTemplates",
     "listTools",
+    "listTriggerDeadLetters",
     "listWorkspaceFiles",
     "pauseRun",
     "pollRunEvents",
@@ -384,6 +385,10 @@
       "file": "schemas/tool-descriptor.schema.json",
       "$id": "https://openwop.dev/spec/v1/tool-descriptor.schema.json"
     },
+    {
+      "file": "schemas/trigger-dead-letter-page.schema.json",
+      "$id": "https://openwop.dev/spec/v1/trigger-dead-letter-page.schema.json"
+    },
     {
       "file": "schemas/trigger-event.schema.json",
       "$id": "https://openwop.dev/spec/v1/trigger-event.schema.json"
@@ -421,5 +426,5 @@
       "$id": "https://openwop.dev/spec/v1/workspace-file.schema.json"
     }
   ],
-  "digest": "a16a433ba77884afb8add02799c6776feb1db260c3221dbde3417b23f089e0b1"
+  "digest": "177bc294edbc8d2ed1171b26b132cf40e04b53ea1d17238a78e47a46c6d3182a"
 }

package/spec/v1/gaps.json

@@ -13918,6 +13918,125 @@
         }
       ]
     },
+    {
+      "id": "openwop.gap.0232.1",
+      "rfc": "0232",
+      "local": "G1",
+      "section": "§E",
+      "surface": "How leg 4 is scored on a host where only the read is available: split the requirement and record the state-change half `inapplicable` without a seam (a), split and move that half out of the floor (b), or keep one id (c). Unresolved question 1.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "closed",
+      "target": null,
+      "sources": [
+        {
+          "file": "RFCS/registers/0232-trigger-dead-letter-read.gaps.md",
+          "token": "G1"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0232.2",
+      "rfc": "0232",
+      "local": "G2",
+      "section": "§C, Falsifiability",
+      "surface": "A `stateChange` record's content-freeness cannot be witnessed on a host without seams: no wire surface causes a subscription state change.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "trigger-subscription-pause-surface",
+      "sources": [
+        {
+          "file": "RFCS/registers/0232-trigger-dead-letter-read.gaps.md",
+          "token": "G2"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0232.3",
+      "rfc": "0232",
+      "local": "G3",
+      "section": "§B",
+      "surface": "No host serves the read, so none of the §E rows has a witness.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "openwop-app-serves-trigger-dead-letters",
+      "sources": [
+        {
+          "file": "RFCS/registers/0232-trigger-dead-letter-read.gaps.md",
+          "token": "G3"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0232.4",
+      "rfc": "0232",
+      "local": "G4",
+      "section": "§D",
+      "surface": "Whether any host routes dead-lettered trigger deliveries to the RFC 0053 run sink, which §D's correction would change for it.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "closed",
+      "target": null,
+      "sources": [
+        {
+          "file": "RFCS/registers/0232-trigger-dead-letter-read.gaps.md",
+          "token": "G4"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0232.5",
+      "rfc": "0232",
+      "local": "G5",
+      "section": "§C, Unresolved question 4",
+      "surface": "The corpus requires a host to emit `trigger.delivery.attempted` and `trigger.subscription.state.changed` for run-less transitions but names no log or channel for them. openwop-app emits neither in production for a dead-lettered delivery; only its seam does.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "closed",
+      "target": null,
+      "sources": [
+        {
+          "file": "RFCS/registers/0232-trigger-dead-letter-read.gaps.md",
+          "token": "G5"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0232.6",
+      "rfc": "0232",
+      "local": "G6",
+      "section": "§B",
+      "surface": "`listTriggerDeadLetters` is a new v1 operation, so `openwop-sdks` owes a parity entry. That repository vendors a published corpus tag.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "openwop-sdks-revendors-a-tag-carrying-listTriggerDeadLetters",
+      "sources": [
+        {
+          "file": "RFCS/registers/0232-trigger-dead-letter-read.gaps.md",
+          "token": "G6"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0232.7",
+      "rfc": "0232",
+      "local": "G7",
+      "section": "§D",
+      "surface": "`trigger-bridge.md` §D and `profiles.md` still say the profile needs \"a `deadLetter` sink for exhausted deliveries\". The predicate reads the RFC 0053 run family, which after §D holds no trigger delivery.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "TODO.md",
+      "sources": [
+        {
+          "file": "RFCS/registers/0232-trigger-dead-letter-read.gaps.md",
+          "token": "G7"
+        }
+      ]
+    },
     {
       "id": "openwop.gap.spec.a2a-integration.g1",
       "rfc": "0152",

package/spec/v1/operation-path-manifest.json

@@ -435,6 +435,14 @@
       "tag": "triggers",
       "class": "canonical"
     },
+    {
+      "operationId": "listTriggerDeadLetters",
+      "method": "GET",
+      "pathKey": "/v1/trigger-subscriptions/{subscriptionId}/dead-letters",
+      "resolvedPath": "/v1/trigger-subscriptions/{subscriptionId}/dead-letters",
+      "tag": "triggers",
+      "class": "canonical"
+    },
     {
       "operationId": "registerWebhook",
       "method": "POST",
@@ -469,10 +477,10 @@
     }
   ],
   "counts": {
-    "total": 58,
-    "canonical": 49,
+    "total": 59,
+    "canonical": 50,
     "hostExtension": 5,
     "testCatalog": 4
   },
-  "digest": "ab5e46df62da2401d3e119accef5378b564b0b3d679a5b05cc131d483b84762a"
+  "digest": "c461a49d47b4b7836611def8d9954f7f0e65ebf660cb2b1f6a6e730c0edf7848"
 }

package/spec/v2/core/headers.md

@@ -16,10 +16,10 @@ Standard headers keep their standard names: `Idempotency-Key`, `ETag`, `If-None-
 | `Idempotency-Key` | 15 | Per-mutation idempotency token (`idempotency.md` Layer 1). The server caches `(tenantId, endpoint, key)` → response for ≥24h. A duplicate request returns the cached response with `OpenWOP-Idempotent-Replay: true`. |
 | `If-None-Match` | 2 | Conditional request on the discovery document (capabilities.md §1) and the run snapshot (runs.md §Snapshot). A value matching the `ETag` the host sent MUST yield `304 Not Modified` with no body. The 304 carries `OpenWOP-Version` like every response (versioning.md §1.4). |
 | `Last-Event-ID` | 1 | Resume from sequence after this ID. |
-| `OpenWOP-Client-Version` | 55 | The protocol version the client implements (versioning.md §1.5). Compared with `minClientVersion` on major.minor. A malformed value is treated as absent and MUST NOT produce a 400. Never selects a contract. |
+| `OpenWOP-Client-Version` | 56 | The protocol version the client implements (versioning.md §1.5). Compared with `minClientVersion` on major.minor. A malformed value is treated as absent and MUST NOT produce a 400. Never selects a contract. |
 | `OpenWOP-Dedup` | 1 | When set, the host's cross-host claim system rejects a duplicate `(tenantId, scopeId)` pair with `409 Conflict`. |
 | `OpenWOP-Force-Engine-Version` | 1 | Test keys only. The server emits this run's events as if it ran the given engine version, which must be within `Capabilities.testing.forceEngineVersionRange`. Servers MUST reject it on production API keys with `403 force_engine_version_forbidden`. |
-| `OpenWOP-Version` | 55 | Selects one of the host's listed major.minor versions. Absent, `/.well-known/openwop` uses `preferredVersion` and every other unversioned path is v2; an unlisted value is 406 protocol_version_unsupported. |
+| `OpenWOP-Version` | 56 | Selects one of the host's listed major.minor versions. Absent, `/.well-known/openwop` uses `preferredVersion` and every other unversioned path is v2; an unlisted value is 406 protocol_version_unsupported. |
 
 ## Cross-origin preflight
 
@@ -35,9 +35,9 @@ A host that answers a CORS preflight for an operation by granting the requesting
 | `ETag` | 3 | Standard HTTP validator (RFC 9110 §8.8.3). The obligation is per operation: MUST on the discovery document (capabilities.md §1), SHOULD on the run snapshot (runs.md §Snapshot), a content hash on a prompt template (getPromptTemplate); see each operation. |
 | `Location` | 1 | Canonical URI of the new template. |
 | `OpenWOP-Idempotent-Replay` | 1 | Set when the response was served from the idempotency cache. |
-| `OpenWOP-Version` | 55 | The contract that produced this response. It MUST equal the one used. |
+| `OpenWOP-Version` | 56 | The contract that produced this response. It MUST equal the one used. |
 | `Retry-After` | 1 | Seconds until the active claim is stale-eligible. |
-| `WWW-Authenticate` | 48 | A `Bearer` challenge. On a host with an oauth2 or oidc lane it carries `resource_metadata` and `error="invalid_token"`. Never sent on a non-disclosure 404. |
+| `WWW-Authenticate` | 49 | A `Bearer` challenge. On a host with an oauth2 or oidc lane it carries `resource_metadata` and `error="invalid_token"`. Never sent on a non-disclosure 404. |
 
 ## Webhook delivery headers
 

package/spec/v2/core/webhooks.md

@@ -129,7 +129,7 @@ A host advertising `triggerBridge` runs inbound work through subscriptions (`sch
 - `active`;
 - `paused` — not delivering; a schedule skips ticks;
 - `failed`;
-- `dead-lettered` — deliveries are in the `deadLetter` sink.
+- `dead-lettered` — terminal; its deliveries are dead-lettered (below), not held by the `deadLetter` run sink.
 
 On an `active` subscription the host:
 
@@ -145,7 +145,14 @@ A host whose `triggerBridge.ingestion.inboundSigning` lists `standard-webhooks-1
 - `webhook-id` is the identity dedup keys on;
 - the ingest answers `202` (delivered, `runId`), `200` (duplicate, prior `runId`), `401 signature_invalid`, or `409 subscription_not_active`.
 
-A source in `triggerBridge.sources` MUST move through these states and emit `trigger.subscription-state-changed` and `trigger.delivery-attempted`. These events MUST NOT carry inbound content or credentials (`schemas/v2/run-event-payloads.schema.json`).
+A source in `triggerBridge.sources` MUST move through these states and emit `trigger.subscription-state-changed` and `trigger.delivery-attempted`. These events MUST NOT carry inbound content or credentials (`schemas/v2/run-event-payloads.schema.json`). A dead-lettered attempt or a state change belongs to no run; for it, emit means the host keeps a content-free record of that payload.
+
+A host advertising `triggerBridge.deadLetter` MUST serve `GET /trigger-subscriptions/{subscriptionId}/dead-letters`:
+
+- a record carries the dead-lettered attempt's payload fields and, if the dead-lettering changed the subscription's state, that state change;
+- a record MUST NOT carry the inbound body, headers, signature, or secret;
+- a delivery refused by a `required` check appears with `reason: "verification_failed"` and no state change;
+- a cursor minted for another subscription MUST be refused `400 validation_error`.
 
 With `triggerBridge.ingestion`, each `externalSources` entry MUST turn an external event into a `TriggerEvent` (`schemas/v2/trigger-event.schema.json`, whose rules bind) and start a run. The host:
 
@@ -155,4 +162,4 @@ With `triggerBridge.ingestion`, each `externalSources` entry MUST turn an extern
 - MUST refuse private, link-local and loopback targets and cap the body on any ingestion fetch, and never hand the run a URL (invariant `trigger-ingestion-ssrf`);
 - SHOULD key `stream` by topic, partition and offset, `change` by table and changelog id; a key MUST survive broker redelivery.
 
-*Sources: RFCs 0053, 0083, 0099, 0127, 0165, 0171, 0173, 0176, 0188, 0196, 0201, 0215, 0217, 0230.*
+*Sources: RFCs 0053, 0083, 0099, 0127, 0165, 0171, 0173, 0176, 0188, 0196, 0201, 0215, 0217, 0230, 0232.*

package/spec/v2/declaration.json

@@ -1182,7 +1182,8 @@
         "dedup",
         "retryPolicy",
         "sources",
-        "ingestion"
+        "ingestion",
+        "deadLetter"
       ],
       "floorScenarios": [],
       "requirementIds": [],

package/spec/v2/id-field-bindings.json

@@ -4,6 +4,7 @@
   "bindings": {
     "agentId": "agentId",
     "artifactTypeId": "typeId",
+    "attemptEventId": "eventId",
     "baselineRunId": "runId",
     "cardTypeId": "typeId",
     "causationId": "eventId",

package/spec/v2/path-manifest.json

@@ -575,6 +575,17 @@
       "authenticated": true,
       "requestBody": true
     },
+    {
+      "method": "GET",
+      "path": "/trigger-subscriptions/{subscriptionId}/dead-letters",
+      "operationId": "listTriggerDeadLetters",
+      "requestHeaders": [
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": false
+    },
     {
       "method": "POST",
       "path": "/webhooks",
@@ -644,7 +655,7 @@
     }
   ],
   "counts": {
-    "operations": 55,
+    "operations": 56,
     "channels": 2
   }
 }

package/spec/v2/release.json

@@ -1,6 +1,6 @@
 {
   "$comment": "RFC 0172 §D.1 — the one release identity the v2 artifacts derive from. `version` is the next corpus tag `v<version>` (the publish workflow's coordinated-release tag pattern `v*`; RFC 0172's `openwop/v2.<minor>.<patch>` spelling is amended to this at its flip). api/v2/*.yaml info.version, the suite's 2.x version and @openwop/spec-artifacts read it. Bumped by the release PR that cuts the tag, never by hand elsewhere.",
-  "version": "2.45.9",
-  "corpusTag": "v2.45.9",
-  "updated": "2026-10-02"
+  "version": "2.45.10",
+  "corpusTag": "v2.45.10",
+  "updated": "2026-10-03"
 }

package/spec/v2/surface-baseline.json

@@ -4,7 +4,7 @@
     "schemas/v2/**/*.json",
     "spec/v2/path-manifest.json"
   ],
-  "release": "2.45.9",
+  "release": "2.45.10",
   "kinds": {
     "union": [
       "channel",
@@ -18,7 +18,7 @@
       "type"
     ]
   },
-  "count": 8608,
+  "count": 8647,
   "surfaces": [
     "schemas/v2/a2a-task-state.schema.json#/contextId|type|string",
     "schemas/v2/a2a-task-state.schema.json#/interruptKind|enum-member|\"approval\"",
@@ -3374,6 +3374,14 @@
     "schemas/v2/capabilities.schema.json#/toolHooks|required|until",
     "schemas/v2/capabilities.schema.json#/toolHooks|required|witness",
     "schemas/v2/capabilities.schema.json#/toolHooks|type|object",
+    "schemas/v2/capabilities.schema.json#/triggerBridge/deadLetter/maxPageSize|type|integer",
+    "schemas/v2/capabilities.schema.json#/triggerBridge/deadLetter/retentionDays|type|integer",
+    "schemas/v2/capabilities.schema.json#/triggerBridge/deadLetter|closed|true",
+    "schemas/v2/capabilities.schema.json#/triggerBridge/deadLetter|property|maxPageSize",
+    "schemas/v2/capabilities.schema.json#/triggerBridge/deadLetter|property|retentionDays",
+    "schemas/v2/capabilities.schema.json#/triggerBridge/deadLetter|required|maxPageSize",
+    "schemas/v2/capabilities.schema.json#/triggerBridge/deadLetter|required|retentionDays",
+    "schemas/v2/capabilities.schema.json#/triggerBridge/deadLetter|type|object",
     "schemas/v2/capabilities.schema.json#/triggerBridge/dedup|type|boolean",
     "schemas/v2/capabilities.schema.json#/triggerBridge/ingestion/externalSources/[]|enum-member|\"change\"",
     "schemas/v2/capabilities.schema.json#/triggerBridge/ingestion/externalSources/[]|enum-member|\"email\"",
@@ -3434,6 +3442,7 @@
     "schemas/v2/capabilities.schema.json#/triggerBridge/witness|enum-member|\"witnessable-gated\"",
     "schemas/v2/capabilities.schema.json#/triggerBridge/witness|enum-member|\"witnessable-unaided\"",
     "schemas/v2/capabilities.schema.json#/triggerBridge|closed|true",
+    "schemas/v2/capabilities.schema.json#/triggerBridge|property|deadLetter",
     "schemas/v2/capabilities.schema.json#/triggerBridge|property|dedup",
     "schemas/v2/capabilities.schema.json#/triggerBridge|property|ingestion",
     "schemas/v2/capabilities.schema.json#/triggerBridge|property|retryPolicy",
@@ -7620,6 +7629,35 @@
     "schemas/v2/tool-descriptor.schema.json#|required|source",
     "schemas/v2/tool-descriptor.schema.json#|required|toolId",
     "schemas/v2/tool-descriptor.schema.json#|type|object",
+    "schemas/v2/trigger-dead-letter-page.schema.json#/deliveries/[]/attempt/outcome|enum-member|\"dead-lettered\"",
+    "schemas/v2/trigger-dead-letter-page.schema.json#/deliveries/[]/attempt|property|outcome",
+    "schemas/v2/trigger-dead-letter-page.schema.json#/deliveries/[]/deadLetteredAt|type|string",
+    "schemas/v2/trigger-dead-letter-page.schema.json#/deliveries/[]/expiresAt|type|string",
+    "schemas/v2/trigger-dead-letter-page.schema.json#/deliveries/[]/reason|enum-member|\"retries_exhausted\"",
+    "schemas/v2/trigger-dead-letter-page.schema.json#/deliveries/[]/reason|enum-member|\"verification_failed\"",
+    "schemas/v2/trigger-dead-letter-page.schema.json#/deliveries/[]/reason|type|string",
+    "schemas/v2/trigger-dead-letter-page.schema.json#/deliveries/[]|closed|true",
+    "schemas/v2/trigger-dead-letter-page.schema.json#/deliveries/[]|property|attempt",
+    "schemas/v2/trigger-dead-letter-page.schema.json#/deliveries/[]|property|attemptEventId",
+    "schemas/v2/trigger-dead-letter-page.schema.json#/deliveries/[]|property|deadLetteredAt",
+    "schemas/v2/trigger-dead-letter-page.schema.json#/deliveries/[]|property|expiresAt",
+    "schemas/v2/trigger-dead-letter-page.schema.json#/deliveries/[]|property|reason",
+    "schemas/v2/trigger-dead-letter-page.schema.json#/deliveries/[]|property|stateChange",
+    "schemas/v2/trigger-dead-letter-page.schema.json#/deliveries/[]|property|subscriptionId",
+    "schemas/v2/trigger-dead-letter-page.schema.json#/deliveries/[]|required|attempt",
+    "schemas/v2/trigger-dead-letter-page.schema.json#/deliveries/[]|required|attemptEventId",
+    "schemas/v2/trigger-dead-letter-page.schema.json#/deliveries/[]|required|deadLetteredAt",
+    "schemas/v2/trigger-dead-letter-page.schema.json#/deliveries/[]|required|expiresAt",
+    "schemas/v2/trigger-dead-letter-page.schema.json#/deliveries/[]|required|reason",
+    "schemas/v2/trigger-dead-letter-page.schema.json#/deliveries/[]|required|subscriptionId",
+    "schemas/v2/trigger-dead-letter-page.schema.json#/deliveries/[]|type|object",
+    "schemas/v2/trigger-dead-letter-page.schema.json#/deliveries|type|array",
+    "schemas/v2/trigger-dead-letter-page.schema.json#/nextCursor|type|string",
+    "schemas/v2/trigger-dead-letter-page.schema.json#|closed|true",
+    "schemas/v2/trigger-dead-letter-page.schema.json#|property|deliveries",
+    "schemas/v2/trigger-dead-letter-page.schema.json#|property|nextCursor",
+    "schemas/v2/trigger-dead-letter-page.schema.json#|required|deliveries",
+    "schemas/v2/trigger-dead-letter-page.schema.json#|type|object",
     "schemas/v2/trigger-event.schema.json#/change/changelogId|type|string",
     "schemas/v2/trigger-event.schema.json#/change/op|enum-member|\"delete\"",
     "schemas/v2/trigger-event.schema.json#/change/op|enum-member|\"insert\"",
@@ -8607,6 +8645,7 @@
     "spec/v2/path-manifest.json#|operation|GET /runs/{runId}:diff",
     "spec/v2/path-manifest.json#|operation|GET /tools",
     "spec/v2/path-manifest.json#|operation|GET /tools/{toolId}",
+    "spec/v2/path-manifest.json#|operation|GET /trigger-subscriptions/{subscriptionId}/dead-letters",
     "spec/v2/path-manifest.json#|operation|GET /webhooks/{webhookId}/dead-letters",
     "spec/v2/path-manifest.json#|operation|GET /workflows/{workflowId}",
     "spec/v2/path-manifest.json#|operation|POST /agents/{agentId}/deployments",