@openwop/spec-artifacts 2.6.1 → 2.7.0

package/CORPUS-STAMP.json

@@ -1,17 +1,17 @@
 {
   "_comment": "Provenance of @openwop/spec-artifacts (RFC 0168 §D.2). files: SHA-256 per file; the conformance suite compares the installed peer against dist/spec-artifacts.lock.json at start.",
   "package": "@openwop/spec-artifacts",
-  "version": "2.6.1",
-  "corpusTag": "v2.6.1",
+  "version": "2.7.0",
+  "corpusTag": "v2.7.0",
   "files": {
     "api/.redocly.lint-ignore.yaml": "bf5a8350b88a72fa43f59605ed8d903ed24b6cfccda5e45509c9f6ed9ee4e712",
     "api/asyncapi.yaml": "d5ecb9ee6114582be3b1f662c84bfac9ae96dae7bacb853e461168f70a8e1c7d",
     "api/grpc/openwop.proto": "c3e72bb17cba514ee98feb6434e6c9b6ea6795bfd086489ec69fd882dd1ad977",
     "api/openapi.yaml": "39081c59fb696159806b0f2f9a42e7e9ff830d622fcf2ad4159b21357580a955",
     "api/redocly.yaml": "b0604c89b2ca6d5076ec25725c539dad44a741a811fe524439ee6daef8baa09f",
-    "api/seams-v2.yaml": "daa6cb47c2fb29b8c1ff596c7c00a494a9a48c795ddd0485f9d89e3a1656baf6",
-    "api/v2/asyncapi.yaml": "29f449a6b3386b4d6db141bc3cf0342f45850a9b3cc74dcf999bbdc5d8d1a57d",
-    "api/v2/openapi.yaml": "a09adf882b9ac3a344caf16d1ea916cc1795a38544eb2e5df923f84129e86c6f",
+    "api/seams-v2.yaml": "0a44c26467543367068e89db69a0e01f3e95c7f5e41708bc18c625d252c6091e",
+    "api/v2/asyncapi.yaml": "5a431c280d7a7f3eeaabc5a6ee404762336d9cb4e615154fdc898f2b6a6ab557",
+    "api/v2/openapi.yaml": "ad75daf10c3f9bfb909f496c75a9480c967f699fbdd6ca1c722aef577c5c5319",
     "api/v2/redocly.yaml": "1e66b60e6118ad11a823bb620678be464d99dfe50a40e3e6f93ec9429b88b34c",
     "schemas/README.md": "0c0b737ffcf8f30e7d2809cec8a498232de710f41443212922ad8337cdde0b51",
     "schemas/a2a-task-state.schema.json": "c9365918f993f943b4b619d42551eb066a1ed33a08d895d51b395432a5b1f1bc",
@@ -115,7 +115,7 @@
     "schemas/v2/artifact-type-pack-manifest.schema.json": "85630d1b760d0b41cf5a6fad2acfada39abaf7f0befd95cc4334e1e883e9615d",
     "schemas/v2/audit-verify-result.schema.json": "a748dfadb5155adfde8a91045e76b0db6695005fe559035d71670fdd55edb3ba",
     "schemas/v2/budget-policy.schema.json": "c7449daeb6e1d95e7a047b8c2814d3d54748697c27046972834874867d9b5f4c",
-    "schemas/v2/capabilities.schema.json": "fa9b80a9107fc322ecadbac808e7fbe5e16ccf0af1a6bf673181faa8379dde33",
+    "schemas/v2/capabilities.schema.json": "5c6c6a70c73cb9cd0d61594e205a9bc2fd7905c41c7d0f43ae7e50523fdd85a9",
     "schemas/v2/certification-bundle.schema.json": "0bcf8f297266505ca39d30eea8100e3c0fb048f2651717fd746da8129fcb7920",
     "schemas/v2/channel-presence-payload.schema.json": "1c20ad810cb311d47aa0b95d928490826b2468fd161f884cd29e867053e6782f",
     "schemas/v2/channel-written-payload.schema.json": "ccecff3c71a3275ad8db035ac0e04db25e6f8d23cf091ddbcd5a60d1be1cbb6b",
@@ -187,6 +187,7 @@
     "schemas/v2/trigger-subscription-registration.schema.json": "04bc314a07c7e8b565577cb8df5821d968ce2af915900dfdccd4a24e928d20db",
     "schemas/v2/trigger-subscription.schema.json": "c887d4b9a12be0133f8c9dfd3a8bafcb518e27ecc2e800447ebc4d1fef111503",
     "schemas/v2/ui-plugin-message.schema.json": "879d65867c01656b3962d64283e66364dcb8f626ad26c5fcf2d2d55a79ae0ce9",
+    "schemas/v2/webhook-dead-letter-page.schema.json": "543f5ccc26d8f777684a037172ab7b9fdf70735e5394eeb42e5fa6569503f528",
     "schemas/v2/webhook-delivery.schema.json": "4e8ab3b722ad1731adf0548c1217f0de62da40de14e8abf77533aee4ace4c079",
     "schemas/v2/workflow-chain-pack-manifest.schema.json": "b61cc945b4df1c7093a1058fa71ee59ef10bacb3433ae4d7ae7536136e616cc2",
     "schemas/v2/workflow-definition.schema.json": "9aafddec32b84eb6aec3185be024850f1b9444c6193568771b0b636595fef136",
@@ -200,7 +201,7 @@
     "schemas/workspace-file.schema.json": "464de85c2a068243084ee9c1d969bc7cd5d8f7948574e58450d6493c38a0e1e4",
     "spec/v1/alias-detectors.json": "e90916db12d2297e2e560b2d54d2c4702d6cb3bef7179a575844687a7ec17262",
     "spec/v1/capability-declaration-classes.json": "e7729aed5c4b4e1dd02abab0530f14cc95f5d4070fe51fb139e7f5cccefa00c6",
-    "spec/v1/core-standard-manifest.json": "530dedda95648cf9eedd160bf8c0e582ec2a1b8daccbfe81b884d90e4eb81eec",
+    "spec/v1/core-standard-manifest.json": "bbb35b8db5c1670f08ac1948f75112344f1200ae935ae7d19db33f8d9ed94f65",
     "spec/v1/deprecations.json": "c81c8f71460936c8d489d8270477c7661cf4a5d7b7bad86c98899750b5656027",
     "spec/v1/deprecations.schema.json": "18c87e78bedc210431f795ae44c5b5d202f2f3317850d5cf86867d4f1fa1cdfb",
     "spec/v1/event-codemap.json": "3da60d884157793a360da532a9fcbbfb5285636db325a74cec94b34622186d97",
@@ -219,7 +220,7 @@
     "spec/v2/core/errors.md": "c3ac131dff970ab7574629d72735ace52cc56cd4a7ab5d1206ce91f382bc9a68",
     "spec/v2/core/events.md": "6ab8c727df3ebc5a60de3837c82a0075b4357d6f7e28435c6f80585687d41a76",
     "spec/v2/core/form-content-packs.md": "d4c5295dfd28972be205c87c34d0d34ced64f4a2561ebff7f9d24b436d83df25",
-    "spec/v2/core/headers.md": "6c5eb48d998c141b5f0cb61fea926833a072748fdc4034e1a90a4dfe5448659c",
+    "spec/v2/core/headers.md": "14cdf4ae9ee7d80eebfd426d7c3552e577baea0300915cd4bb3a68e8588195a8",
     "spec/v2/core/idempotency.md": "803cd85947b1b2151cd2fb42cf0e0c52c9bcd19cdc6c23dcf34b1eddc600921a",
     "spec/v2/core/identity.md": "ae24870df315b527dfe9ecf7a4c26582bcc1113da7954f44acf69bf463ac390d",
     "spec/v2/core/interop.md": "8d8f4b040cb3625044c6aa586c8dcf5e9d15797de3d3b1cea631f44b8924701c",
@@ -231,9 +232,9 @@
     "spec/v2/core/runs.md": "b4c0bb2869077fcbf26e15bc6bbac06819f68b8241944b903a275a37db1c71fa",
     "spec/v2/core/security-defaults.md": "9ab1d1a88ccd0929f354422b151ec6d3164e8cd3784f8e58bb6f11cb7ee1e7d5",
     "spec/v2/core/versioning.md": "27b88cde88f9060567ef7e46f4897b6be8892ade9f4a46c2ab16e314c515eabd",
-    "spec/v2/core/webhooks.md": "ecec4d22a35aeafd34276bb0579ae28610e79ab8850ebf42188cb51bc946a093",
+    "spec/v2/core/webhooks.md": "e08a736fd0bfdc79f5c2309c66f53caf96fac8d9954e0a184c2229de4ce286e9",
     "spec/v2/core/workflow-chain-packs.md": "26bb65721f826285b7d90c3cb62fa7e9fb2414c1bc6e0fd25b33209168c3102e",
-    "spec/v2/declaration.json": "a09bac61c1b825e4a77b5abc0f86f1f8c20c381e0650eb08c2f6d0ef0aaec1dc",
+    "spec/v2/declaration.json": "0a5119e69983ea74adea739a4ca2aa206be7d1d4e32373c739b53fd0ae6d98d8",
     "spec/v2/declaration.schema.json": "c86e3083fb9789c1958ecb4576cc6f71aa90e6f339521139238543ed08211dd4",
     "spec/v2/errors.json": "4ff032033f02d7e3fb4204581456408ba5e7642b438c1f349bbd1c264e63e419",
     "spec/v2/event-codemap.json": "37869a03cdfd8758b57e6f350641a6ebbd383231cebda51f5473ad85f94ab74c",
@@ -266,13 +267,13 @@
     "spec/v2/facets/replay.schema.json": "0a5aefb0108c708c6794fadd533cf256709704c4f16dbf44cd63fa8980c78018",
     "spec/v2/facets/runList.schema.json": "6223e1baaebbb9f4faa71bfe968f8d22b4aa88046d0e43e8d5f56409e7f86e90",
     "spec/v2/facets/sandbox.schema.json": "e75f54486d387b2d089791aa93b5093cd1450f1920753a0f97fc23acdfe978ed",
-    "spec/v2/facets/webhooks.schema.json": "0b766033ef4b4c6c2ac6f9979a19843ba024d3a1d1576972dcb55aaba52f1b9a",
+    "spec/v2/facets/webhooks.schema.json": "4bf3f8eb3161a43910efac4c44ccaf9567060c9da52d4cf09bcf3888d1b92192",
     "spec/v2/id-field-bindings.json": "e73c06f3055ad30173507ac817a458b96362c8f26209ba105c53653292cf63d3",
-    "spec/v2/path-manifest.json": "a6f4e652e866889e8bde815874062f62929aee95dc8e58e7152c56adee262163",
+    "spec/v2/path-manifest.json": "c123c9fd77dc1b3f9c2e9346ace80cdae007e6511138894956abda01e61ec1c6",
     "spec/v2/peer-dependency-aliases.json": "d10299280abee08258502925bc327293ee413e0108cd6e6ec75ff6110653308d",
     "spec/v2/profiles.json": "0636f19fceae625390003a347e70ef4797d84766b5c24ce8a02cea52aadebca4",
-    "spec/v2/release.json": "5f3133ef7b959b76bb72c6b8e0fc7249bd93744c0b2431bdacb5fab43e4ae4a7",
+    "spec/v2/release.json": "fe784abdffc2089df66c6eda874d61a50b45912f8817b90051a91dc9c624380f",
     "spec/v2/retention-floors.json": "eaf3722d95c79947af1d4269ef85117e126518c588cfcf1a2b21b97269f51624"
   },
-  "corpusCommit": "11c348ccb11f58a9bdb413030ab9d0366f71642d"
+  "corpusCommit": "35659ff7e741cc827a52f41140cac72aa0a4abeb"
 }

package/api/seams-v2.yaml

@@ -1,7 +1,7 @@
 openapi: 3.1.0
 info:
   title: OpenWOP conformance seams profile (openwop-conformance-seams-v2)
-  version: 2.6.1
+  version: 2.7.0
   description: 'GENERATED by scripts/derive-v2-api.py. RFC 0168 §C: the seams are a versioned conformance profile with their
     own document and path space (/conformance/seams/…), validated against the canonical v2 schemas with no tolerance path,
     forbidden from the capability namespace (a host advertises the profile, never a testSeams flag). This document carries

package/api/v2/asyncapi.yaml

@@ -1,7 +1,7 @@
 asyncapi: 3.1.0
 info:
   title: OpenWOP v2 event streams
-  version: 2.6.1
+  version: 2.7.0
   description: GENERATED by scripts/derive-v2-api.py (RFC 0171 §E.1, RFC 0172 §C.2). One run-events channel whose address
     is the OpenAPI path key; the server pathname is empty (bare origin). streamMode is a pattern over the closed set and its
     comma-separated combinations (`values` never combines). hostEvents has a real address (RFC 0171 §E.1) — the documented

package/api/v2/openapi.yaml

@@ -1,7 +1,7 @@
 openapi: 3.1.0
 info:
   title: OpenWOP v2 API
-  version: 2.6.1
+  version: 2.7.0
   summary: REST surface for declaring, executing, suspending, resuming, and observing multi-step workflows.
   description: GENERATED by scripts/derive-v2-api.py from api/openapi.yaml and the RFC 0167 children (v2 charter Phase 3,
     P3-C). Bare origin, unversioned path keys, negotiation by `OpenWOP-Version` + `protocolVersions[]` (RFC 0172 §A). No seam
@@ -3067,6 +3067,60 @@ paths:
           $ref: '#/components/responses/NotFound'
       parameters:
       - $ref: '#/components/parameters/OpenWOPVersion'
+  /webhooks/{webhookId}/dead-letters:
+    get:
+      tags:
+      - Webhooks
+      operationId: listWebhookDeadLetters
+      summary: A subscription's dead-lettered deliveries (RFC 0188 §A.1)
+      description: 'The read that makes `webhooks.md` §Durability observable. A delivery whose retries are exhausted, or a
+        `payload_unprojectable` delivery dead-lettered on its first attempt, appears here until `retentionDays` elapse. Gated
+        on the `webhooks.deadLetter` facet: a host that does not advertise it answers `404 not_found`. **Content-free (RFC
+        0188 §B.1):** the record NAMES a delivery and never carries the delivered bytes, the request headers, or the subscription
+        secret — a dead-letter read is a diagnostic surface, not a payload-replay surface.'
+      parameters:
+      - name: webhookId
+        in: path
+        required: true
+        schema:
+          $ref: ../../schemas/v2/ids.schema.json#/$defs/subscriptionId
+        description: The subscription, tenant-bound (`identity.md` §5, RFC 0187 §A.1) and carried as ONE path segment — `~`-projected
+          per RFC 0184, or percent-encoded.
+      - name: limit
+        in: query
+        required: false
+        schema:
+          type: integer
+          minimum: 1
+        description: Page size; clamped to `webhooks.deadLetter.maxPageSize`.
+      - name: cursor
+        in: query
+        required: false
+        schema:
+          type: string
+          minLength: 1
+          maxLength: 2048
+        description: Opaque cursor from a previous page's `nextCursor`. A cursor minted for another subscription MUST be refused
+          `400 validation_error`.
+      - $ref: '#/components/parameters/OpenWOPVersion'
+      responses:
+        '200':
+          description: One page of dead-lettered deliveries, newest first.
+          content:
+            application/json:
+              schema:
+                $ref: ../../schemas/v2/webhook-dead-letter-page.schema.json
+          headers:
+            OpenWOP-Version:
+              $ref: '#/components/headers/OpenWOPVersion'
+        '400':
+          $ref: '#/components/responses/ValidationError'
+        '401':
+          $ref: '#/components/responses/Unauthenticated'
+        '403':
+          $ref: '#/components/responses/Forbidden'
+        '404':
+          $ref: '#/components/responses/NotFound'
   /host/events:
     get:
       tags:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openwop/spec-artifacts",
-  "version": "2.6.1",
+  "version": "2.7.0",
   "description": "The OpenWOP machine-readable contract: api/ (OpenAPI, AsyncAPI, the seams profile), schemas/ (v1 and v2 JSON Schemas), the spec/v1 and spec/v2 registries (errors, event codemap, declaration, deprecations, migrations, gaps) and CORPUS-STAMP.json — published from the openwop/openwop corpus tag; the peer dependency @openwop/openwop-conformance digest-checks at start (RFC 0168 §D.2).",
   "license": "Apache-2.0",
   "repository": {

package/schemas/v2/capabilities.schema.json

@@ -5146,6 +5146,28 @@
             }
           },
           "description": "spec/v2/core/webhooks.md §Delivery — the policy a host retries a failed attempt under. The webhooks family carries it at v2; `triggerBridge.retryPolicy` is the v1 carrier and stays through the overlap."
+        },
+        "deadLetter": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "retentionDays",
+            "maxPageSize"
+          ],
+          "description": "RFC 0188 §A.5 — the DELIVERY dead-letter sink, advertised only by a host that serves `GET /webhooks/{webhookId}/dead-letters`. **Distinct from the top-level `deadLetter` FAMILY (RFC 0053), which is the RUN sink** and whose own `retentionDays` governs a dead-lettered run's fork-eligibility window. Three documents previously routed delivery dead-letters to RFC 0053, which is run-scoped and says so twice; this facet is where the delivery sink actually lives.",
+          "properties": {
+            "retentionDays": {
+              "type": "integer",
+              "minimum": 1,
+              "description": "How long a dead-lettered delivery stays readable. Observable: a record's `expiresAt − deadLetteredAt` matches it."
+            },
+            "maxPageSize": {
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 1000,
+              "description": "Ceiling the host clamps `limit` to (RFC 0182 §A.3 page-ceiling idiom)."
+            }
+          }
         }
       },
       "allOf": [
@@ -5183,7 +5205,7 @@
           }
         }
       ],
-      "description": "core/capabilities.md#webhooks — witness: witnessable-gated; maturity experimental/none",
+      "description": "core/capabilities.md#webhooks — witness: witnessable-gated; maturity experimental/none; RFC 0188",
       "x-openwop-facets-from": "spec/v2/facets/webhooks.schema.json"
     },
     "triggerBridge": {

package/schemas/v2/webhook-dead-letter-page.schema.json

@@ -0,0 +1,53 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://openwop.dev/spec/v2/webhook-dead-letter-page.schema.json",
+  "title": "WebhookDeadLetterPage",
+  "description": "RFC 0188 §A.1 — one page of dead-lettered deliveries for a subscription. This is the read that makes `webhooks.md` §Durability observable: before it, the corpus asserted that an exhausted delivery is routed to a sink `inspectable for retentionDays` and served no endpoint that could see it, so every host's bundle recorded `exhaustion was observed, routing to the sink was not`. The record NAMES a delivery; it never carries the delivered bytes.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["deliveries"],
+  "properties": {
+    "deliveries": {
+      "type": "array",
+      "description": "Dead-lettered deliveries, newest first. Empty when the subscription has none within `retentionDays`.",
+      "items": { "$ref": "#/$defs/deadLetteredDelivery" }
+    },
+    "nextCursor": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 2048,
+      "description": "Opaque continuation cursor; absent on the last page. A cursor minted by one subscription MUST NOT be accepted on another (RFC 0182 §A.3 cursor discipline)."
+    }
+  },
+  "$defs": {
+    "deadLetteredDelivery": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["deliveryId", "webhookId", "runId", "eventId", "eventType", "attempts", "deadLetteredAt", "expiresAt", "reason"],
+      "description": "One delivery that will not be retried again. **Content-free by construction (RFC 0188 §B.1):** no request body, no delivery headers, no subscription secret. A dead-letter read is a diagnostic surface, not a payload-replay surface, and a record that carried the body would hand an attacker with read scope every event the subscriber ever failed to receive.",
+      "properties": {
+        "deliveryId": {
+          "$ref": "ids.schema.json#/$defs/deliveryId",
+          "description": "The delivery attempt's tenant-bound id. This is the seat that makes the `deliveryId` KIND witnessable: `identity.md` §5 bound it and, until this read existed, no v2 surface returned one, so `v2-bound-id-kinds` recorded a CORPUS gap rather than a host one."
+        },
+        "webhookId": { "$ref": "ids.schema.json#/$defs/subscriptionId", "description": "The subscription the delivery was for. Equals the path segment." },
+        "runId": { "$ref": "ids.schema.json#/$defs/runId", "description": "The run whose event was being delivered." },
+        "eventId": { "$ref": "ids.schema.json#/$defs/eventId", "description": "The event that was being delivered." },
+        "eventType": { "type": "string", "minLength": 1, "description": "The event type, in the spelling the subscription's contract major renders (RFC 0187 §B)." },
+        "attempts": { "type": "integer", "minimum": 1, "description": "How many delivery attempts were made before the host gave up. `1` for `payload_unprojectable`, which is dead-lettered on first attempt." },
+        "deadLetteredAt": { "type": "string", "format": "date-time", "description": "When the host routed the delivery to the sink." },
+        "expiresAt": {
+          "type": "string",
+          "format": "date-time",
+          "description": "When this record ages out. **This is what makes `retentionDays` observable rather than merely advertised:** a reader can check `expiresAt − deadLetteredAt` against the advertised facet, which no surface could do before."
+        },
+        "reason": {
+          "type": "string",
+          "enum": ["retries_exhausted", "payload_unprojectable"],
+          "description": "Why it will not be retried. `retries_exhausted`: the retry policy ran out. `payload_unprojectable`: the event could not be rendered into the subscription's contract major, which `webhooks.md` dead-letters on the FIRST attempt because retrying cannot change the outcome."
+        },
+        "lastStatus": { "type": "integer", "description": "The HTTP status of the final attempt, when there was a response. Absent when every attempt failed to connect." }
+      }
+    }
+  }
+}

package/spec/v1/core-standard-manifest.json

@@ -4,7 +4,7 @@
   "provenance": {
     "suite": {
       "package": "@openwop/openwop-conformance",
-      "version": "2.6.1"
+      "version": "2.7.0"
     },
     "note": "Derived from the corpus at generation time. Regenerate with --write; verify with --check."
   },
@@ -419,5 +419,5 @@
       "$id": "https://openwop.dev/spec/v1/workspace-file.schema.json"
     }
   ],
-  "digest": "2752bd707ded939b2fc724e7f0523636d57836e3102dbd5a94fdb21d3ff242a8"
+  "digest": "ad097f5a97036bd42ca27c49119a4251e5b485a8f3075a4d96c9bda21a7e56b9"
 }

package/spec/v2/core/headers.md

@@ -16,7 +16,7 @@ RFC 0171 §C.1: every non-standard header is `OpenWOP-<Name>` and every header i
 | `Last-Event-ID` | 1 | Resume from sequence after this ID. |
 | `OpenWOP-Dedup` | 1 | When set, server cross-host claim system rejects duplicate `(tenantId, scopeId)` pairs with `409 Conflict`. |
 | `OpenWOP-Force-Engine-Version` | 1 | **Test-keys-only.** When set, the server emits events for this run AS IF it |
-| `OpenWOP-Version` | 52 | RFC 0172 §A.3 — selects a listed major.minor; absent ⇒ the host's `preferredVersion`; unlisted ⇒ 406 protocol_version_unsupported. |
+| `OpenWOP-Version` | 53 | RFC 0172 §A.3 — selects a listed major.minor; absent ⇒ the host's `preferredVersion`; unlisted ⇒ 406 protocol_version_unsupported. |
 
 ## Response headers
 
@@ -28,7 +28,7 @@ RFC 0171 §C.1: every non-standard header is `OpenWOP-<Name>` and every header i
 | `ETag` | 3 | Optional probe handle for mid-session capability change detection. Deprecated toward v2 (RFC 0165 §C.2). |
 | `Location` | 1 | Canonical URI of the new template. |
 | `OpenWOP-Idempotent-Replay` | 1 | Set when the response was served from the idempotency cache. |
-| `OpenWOP-Version` | 52 | RFC 0172 §A.4 — the contract that produced this response; MUST equal the one used. |
+| `OpenWOP-Version` | 53 | RFC 0172 §A.4 — the contract that produced this response; MUST equal the one used. |
 | `Retry-After` | 1 | Seconds until the active claim is stale-eligible. |
 
 ## Webhook delivery headers

package/spec/v2/core/webhooks.md

@@ -51,7 +51,7 @@ A host advertising both majors MUST send, on every delivery, the `X-openwop-*` f
 Durable delivery is an obligation of the `webhooks` surface (RFC 0173 §B; security-defaults.md). A host MUST:
 
 - retry a failed attempt per its advertised `retryPolicy` (`maxAttempts`, `backoff ∈ none | fixed | exponential`) with backoff between attempts;
-- route a delivery whose retries are exhausted to the dead-letter sink, inspectable for `retentionDays`, rather than drop it;
+- route a delivery whose retries are exhausted to the dead-letter sink, rather than drop it. A host advertising `webhooks.deadLetter` MUST serve `GET /webhooks/{webhookId}/dead-letters` (RFC 0188), and that record MUST NOT carry the delivered body, the delivery headers, or the subscription secret — a dead-letter read names a delivery, it does not replay one. This sink is the DELIVERY sink; the `deadLetter` family (RFC 0053) is the RUN sink and is a different thing;
 - deliver each matching event at least once; a receiver MAY observe the same event more than once;
 - dead-letter a `payload_unprojectable` delivery (events.md §Era-2) on the first attempt, never retry it.
 

package/spec/v2/declaration.json

@@ -25,12 +25,12 @@
       "note": "Never assignable to a real vendor (RFC 2606 precedent). A conformance scenario needs one registered org whose events no host owns, so the positive half of the vendor rule is drivable; without it the registry could only ever say no."
     },
     "openwop-app": {
-      "name": "openwop-app — the reference application host (app.openwop.dev), steward-affiliated; github.com/openwop/openwop-app",
+      "name": "openwop-app \u2014 the reference application host (app.openwop.dev), steward-affiliated; github.com/openwop/openwop-app",
       "registered": "2026-09-11",
       "note": "Ships vendor event types (e.g. openwop-app.conversation.recall_used), vendor error codes, and the /host/openwop-app/ path namespace (RFC 0181). Registered by the steward on the host's application over the steward bus, 2026-09-10."
     },
     "myndhyve": {
-      "name": "MyndHyve — workflow-runtime host (api.myndhyve.ai), steward-affiliated sibling",
+      "name": "MyndHyve \u2014 workflow-runtime host (api.myndhyve.ai), steward-affiliated sibling",
       "registered": "2026-09-11",
       "note": "Ships vendor event types and error codes under myndhyve.* and the /host/myndhyve/ path namespace (RFC 0181). Registered by the steward on the host's application over the steward bus, 2026-09-10."
     }
@@ -1095,12 +1095,13 @@
         "adoption": "none"
       },
       "facets": [
+        "deadLetter",
         "retryPolicy",
         "signatureAlgorithms"
       ],
       "floorScenarios": [],
       "requirementIds": [],
-      "owningRfc": null,
+      "owningRfc": "0188",
       "facetsFrom": "spec/v2/facets/webhooks.schema.json"
     },
     {

package/spec/v2/facets/webhooks.schema.json

@@ -1,5 +1,5 @@
 {
-  "$comment": "RFC 0173 §B — durable delivery binds with webhooks; no durable flag; retryPolicy is the v2 carrier of the delivery obligation (was triggerBridge.retryPolicy at v1)",
+  "$comment": "RFC 0173 \u00a7B \u2014 durable delivery binds with webhooks; no durable flag; retryPolicy is the v2 carrier of the delivery obligation (was triggerBridge.retryPolicy at v1)",
   "properties": {
     "signatureAlgorithms": {
       "type": "array",
@@ -32,7 +32,29 @@
           ]
         }
       },
-      "description": "spec/v2/core/webhooks.md §Delivery — the policy a host retries a failed attempt under. The webhooks family carries it at v2; `triggerBridge.retryPolicy` is the v1 carrier and stays through the overlap."
+      "description": "spec/v2/core/webhooks.md \u00a7Delivery \u2014 the policy a host retries a failed attempt under. The webhooks family carries it at v2; `triggerBridge.retryPolicy` is the v1 carrier and stays through the overlap."
+    },
+    "deadLetter": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "retentionDays",
+        "maxPageSize"
+      ],
+      "description": "RFC 0188 \u00a7A.5 \u2014 the DELIVERY dead-letter sink, advertised only by a host that serves `GET /webhooks/{webhookId}/dead-letters`. **Distinct from the top-level `deadLetter` FAMILY (RFC 0053), which is the RUN sink** and whose own `retentionDays` governs a dead-lettered run's fork-eligibility window. Three documents previously routed delivery dead-letters to RFC 0053, which is run-scoped and says so twice; this facet is where the delivery sink actually lives.",
+      "properties": {
+        "retentionDays": {
+          "type": "integer",
+          "minimum": 1,
+          "description": "How long a dead-lettered delivery stays readable. Observable: a record's `expiresAt \u2212 deadLetteredAt` matches it."
+        },
+        "maxPageSize": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 1000,
+          "description": "Ceiling the host clamps `limit` to (RFC 0182 \u00a7A.3 page-ceiling idiom)."
+        }
+      }
     }
   },
   "required": [

package/spec/v2/path-manifest.json

@@ -261,6 +261,11 @@
       "path": "/webhooks/{webhookId}",
       "operationId": "unregisterWebhook"
     },
+    {
+      "method": "GET",
+      "path": "/webhooks/{webhookId}/dead-letters",
+      "operationId": "listWebhookDeadLetters"
+    },
     {
       "method": "GET",
       "path": "/workflows/{workflowId}",
@@ -278,7 +283,7 @@
     }
   ],
   "counts": {
-    "operations": 52,
+    "operations": 53,
     "channels": 2
   }
 }

package/spec/v2/release.json

@@ -1,6 +1,6 @@
 {
   "$comment": "RFC 0172 §D.1 — the one release identity the v2 artifacts derive from. `version` is the next corpus tag `v<version>` (the publish workflow's coordinated-release tag pattern `v*`; RFC 0172's `openwop/v2.<minor>.<patch>` spelling is amended to this at its flip). api/v2/*.yaml info.version, the suite's 2.x version and @openwop/spec-artifacts read it. Bumped by the release PR that cuts the tag, never by hand elsewhere.",
-  "version": "2.6.1",
-  "corpusTag": "v2.6.1",
+  "version": "2.7.0",
+  "corpusTag": "v2.7.0",
   "updated": "2026-09-18"
 }