@openwop/spec-artifacts 2.8.2 → 2.9.0

package/CORPUS-STAMP.json

@@ -1,17 +1,17 @@
 {
   "_comment": "Provenance of @openwop/spec-artifacts (RFC 0168 §D.2). files: SHA-256 per file; the conformance suite compares the installed peer against dist/spec-artifacts.lock.json at start.",
   "package": "@openwop/spec-artifacts",
-  "version": "2.8.2",
-  "corpusTag": "v2.8.2",
+  "version": "2.9.0",
+  "corpusTag": "v2.9.0",
   "files": {
     "api/.redocly.lint-ignore.yaml": "bf5a8350b88a72fa43f59605ed8d903ed24b6cfccda5e45509c9f6ed9ee4e712",
     "api/asyncapi.yaml": "d5ecb9ee6114582be3b1f662c84bfac9ae96dae7bacb853e461168f70a8e1c7d",
     "api/grpc/openwop.proto": "c3e72bb17cba514ee98feb6434e6c9b6ea6795bfd086489ec69fd882dd1ad977",
     "api/openapi.yaml": "39081c59fb696159806b0f2f9a42e7e9ff830d622fcf2ad4159b21357580a955",
     "api/redocly.yaml": "b0604c89b2ca6d5076ec25725c539dad44a741a811fe524439ee6daef8baa09f",
-    "api/seams-v2.yaml": "296a5283690fc422d525815abc780eacd3b6ab7c0fe04e3d4ea72f460f9fabb6",
-    "api/v2/asyncapi.yaml": "21407d943fd706afe9e5c4b5703e453fbd86a8594428014d49b71eb35b937d7c",
-    "api/v2/openapi.yaml": "704e81cd815e8aab818e0dd7dba1b744499e3e9d1f2ad4d7d528161d34a671ae",
+    "api/seams-v2.yaml": "e28d9ddf072ce85863f933b187e3ef137d3907221d5cedc1f7de097926a01ae2",
+    "api/v2/asyncapi.yaml": "0e87a296904970958dc15c862fd913929263fa5aef5c71dc82fcb079f9ad15cd",
+    "api/v2/openapi.yaml": "02491c98c88a6e66939ae66bbe1b5e31c7a67223f15f6f64168564b6e9f21c5f",
     "api/v2/redocly.yaml": "1e66b60e6118ad11a823bb620678be464d99dfe50a40e3e6f93ec9429b88b34c",
     "schemas/README.md": "0c0b737ffcf8f30e7d2809cec8a498232de710f41443212922ad8337cdde0b51",
     "schemas/a2a-task-state.schema.json": "c9365918f993f943b4b619d42551eb066a1ed33a08d895d51b395432a5b1f1bc",
@@ -141,7 +141,7 @@
     "schemas/v2/envelopes/schema.request.schema.json": "be2c5f7aa881cdd252ccff47ac02193659e1393633a1541f4297383205d384a2",
     "schemas/v2/envelopes/schema.response.schema.json": "d049a081267c06c28879c331b147f3ed821b14ccfd93005c67aff64db0a8c68e",
     "schemas/v2/envelopes/ui.a2ui-surface.schema.json": "0a06fbbdc8ba797a6818c79336a98e211ac5ba5747945b4e4098072cd3974d79",
-    "schemas/v2/error-envelope.schema.json": "9c8f747e5bea81943d70e0930bc7d26586a4c3a3d90be77f46359b19b7e56cbe",
+    "schemas/v2/error-envelope.schema.json": "b2c6b673c14dd7c0603d0862f4bf0dad00e401c88c418914753bcd744d8400f5",
     "schemas/v2/eval-summary.schema.json": "9d31025752d0f67ad3b8a32e82a5314972c530ef9f780dd82e484ae8c5131198",
     "schemas/v2/export-bundle.schema.json": "bd28905a7729437ab7f2ad8bb33e13a371b2bf5605a7eb2962a0d246de312d69",
     "schemas/v2/form-content-pack-manifest.schema.json": "461529e4287ec3b15a9fbcde57226a1c6f17ea3ae71b33b418e6f595ff0619fe",
@@ -201,7 +201,7 @@
     "schemas/workspace-file.schema.json": "464de85c2a068243084ee9c1d969bc7cd5d8f7948574e58450d6493c38a0e1e4",
     "spec/v1/alias-detectors.json": "e90916db12d2297e2e560b2d54d2c4702d6cb3bef7179a575844687a7ec17262",
     "spec/v1/capability-declaration-classes.json": "e7729aed5c4b4e1dd02abab0530f14cc95f5d4070fe51fb139e7f5cccefa00c6",
-    "spec/v1/core-standard-manifest.json": "c6d57dec530f5b37f0f1db857db923d1cbd88606cf8ae6b6cbebdb54e35aa950",
+    "spec/v1/core-standard-manifest.json": "79a0281db9c7198c3aaabdc43bc617168385ddb6fd6feeaad5cc7196dfd12c21",
     "spec/v1/deprecations.json": "c81c8f71460936c8d489d8270477c7661cf4a5d7b7bad86c98899750b5656027",
     "spec/v1/deprecations.schema.json": "18c87e78bedc210431f795ae44c5b5d202f2f3317850d5cf86867d4f1fa1cdfb",
     "spec/v1/event-codemap.json": "3da60d884157793a360da532a9fcbbfb5285636db325a74cec94b34622186d97",
@@ -217,26 +217,26 @@
     "spec/v2/core/capabilities.md": "9e81d578e177f9875499677d22207df909e59e3d4ddaa3d90f18a7035cfb31f4",
     "spec/v2/core/conformance.md": "a451c0a2ba79d93c55e540ccef480eba7de9602d59bbb03eead05daafde0beac",
     "spec/v2/core/connection-packs.md": "2e53c92476f68304139faf0c370874dc27bbba56a127a07e0906ff06edbb8ff1",
-    "spec/v2/core/errors.md": "c3ac131dff970ab7574629d72735ace52cc56cd4a7ab5d1206ce91f382bc9a68",
+    "spec/v2/core/errors.md": "6b6a1480ed889013172d8ce8c6985e321d2f4f73e1d9fae0bac9b961d0dd1a8c",
     "spec/v2/core/events.md": "6ab8c727df3ebc5a60de3837c82a0075b4357d6f7e28435c6f80585687d41a76",
-    "spec/v2/core/form-content-packs.md": "d4c5295dfd28972be205c87c34d0d34ced64f4a2561ebff7f9d24b436d83df25",
+    "spec/v2/core/form-content-packs.md": "967687826d78b8e29e25085769bea97596645036ecb0225fa3ef0ddcf76636d5",
     "spec/v2/core/headers.md": "14cdf4ae9ee7d80eebfd426d7c3552e577baea0300915cd4bb3a68e8588195a8",
-    "spec/v2/core/idempotency.md": "803cd85947b1b2151cd2fb42cf0e0c52c9bcd19cdc6c23dcf34b1eddc600921a",
+    "spec/v2/core/idempotency.md": "6307a98be7e0d44199a66409eb78d249029c997782489f3e50d130134dd63fd7",
     "spec/v2/core/identity.md": "ae24870df315b527dfe9ecf7a4c26582bcc1113da7954f44acf69bf463ac390d",
     "spec/v2/core/interop.md": "8d8f4b040cb3625044c6aa586c8dcf5e9d15797de3d3b1cea631f44b8924701c",
     "spec/v2/core/interrupt.md": "bdb2879a52a2504d84146e46108c4a4c2dd3a6f27865a295c80375b331cced21",
     "spec/v2/core/overview.md": "7dc00ace32d4e4ce929a383651f0029fc4b7091ec87487b1bf26ead1be209e0e",
     "spec/v2/core/packs.md": "3254fd060c2b690cea70ef2b1b1a119711bb04fb5f13bf8936d4d718df9b2322",
-    "spec/v2/core/persistence.md": "e75c6d8cc6a31747f8559931c420ed0debbdec16ae01fed28df5aa79a51e5899",
-    "spec/v2/core/replay.md": "dee513b6ca313a0647c853e713af94a3e077f3e58f71851ddb0ef8adcb3b0afe",
+    "spec/v2/core/persistence.md": "e9e64d0eb7f9cd6ae71a5973ee539ed30966eca309fad523f05e33adc79f9225",
+    "spec/v2/core/replay.md": "13bf1f47573e0688ede28d2b1cc74cefd75e0a5c168ebf5d989f45b2cc2067b7",
     "spec/v2/core/runs.md": "b4c0bb2869077fcbf26e15bc6bbac06819f68b8241944b903a275a37db1c71fa",
     "spec/v2/core/security-defaults.md": "9ab1d1a88ccd0929f354422b151ec6d3164e8cd3784f8e58bb6f11cb7ee1e7d5",
     "spec/v2/core/versioning.md": "27b88cde88f9060567ef7e46f4897b6be8892ade9f4a46c2ab16e314c515eabd",
     "spec/v2/core/webhooks.md": "e08a736fd0bfdc79f5c2309c66f53caf96fac8d9954e0a184c2229de4ce286e9",
     "spec/v2/core/workflow-chain-packs.md": "26bb65721f826285b7d90c3cb62fa7e9fb2414c1bc6e0fd25b33209168c3102e",
-    "spec/v2/declaration.json": "facd8b8466ea86b61325670450a1205c672e844e0dbcd9d9392ef0eb2021cca3",
+    "spec/v2/declaration.json": "c7338923f69aa72200977286b59d579ca797ba5462d2a911f50c24c5485a62f5",
     "spec/v2/declaration.schema.json": "c86e3083fb9789c1958ecb4576cc6f71aa90e6f339521139238543ed08211dd4",
-    "spec/v2/errors.json": "4ff032033f02d7e3fb4204581456408ba5e7642b438c1f349bbd1c264e63e419",
+    "spec/v2/errors.json": "aac91b12f954cc90574d310070ae3c651b131055d4389d2c6155242763765195",
     "spec/v2/event-codemap.json": "37869a03cdfd8758b57e6f350641a6ebbd383231cebda51f5473ad85f94ab74c",
     "spec/v2/event-codemap.schema.json": "b173f2a9bcc0bf9b62a474ce3b91e1431d597e64fd1560fc58662cd8606eaf9c",
     "spec/v2/ext/README.md": "ff91a503e0795e1b898e37d9e445add2d5975529723f7b32b2599b60a24c1ae3",
@@ -273,8 +273,8 @@
     "spec/v2/path-manifest.json": "c123c9fd77dc1b3f9c2e9346ace80cdae007e6511138894956abda01e61ec1c6",
     "spec/v2/peer-dependency-aliases.json": "d10299280abee08258502925bc327293ee413e0108cd6e6ec75ff6110653308d",
     "spec/v2/profiles.json": "0636f19fceae625390003a347e70ef4797d84766b5c24ce8a02cea52aadebca4",
-    "spec/v2/release.json": "0bcbacf7697213dced197b2bc0cf8ee0af61786db4518eb39aad9524c1a74d80",
+    "spec/v2/release.json": "baf9c2f508873df954f6fd2c3fe459c8f429d43ce0de77c790e9761c95f4c357",
     "spec/v2/retention-floors.json": "eaf3722d95c79947af1d4269ef85117e126518c588cfcf1a2b21b97269f51624"
   },
-  "corpusCommit": "ae9a19cf3e20a12f2d0ab08eb194f191c1609613"
+  "corpusCommit": "032b7c4ea6bb9f34d1d5890fca792ea2dc838c1e"
 }

package/api/seams-v2.yaml

@@ -1,7 +1,7 @@
 openapi: 3.1.0
 info:
   title: OpenWOP conformance seams profile (openwop-conformance-seams-v2)
-  version: 2.8.2
+  version: 2.9.0
   description: 'GENERATED by scripts/derive-v2-api.py. RFC 0168 §C: the seams are a versioned conformance profile with their
     own document and path space (/conformance/seams/…), validated against the canonical v2 schemas with no tolerance path,
     forbidden from the capability namespace (a host advertises the profile, never a testSeams flag). This document carries

package/api/v2/asyncapi.yaml

@@ -1,7 +1,7 @@
 asyncapi: 3.1.0
 info:
   title: OpenWOP v2 event streams
-  version: 2.8.2
+  version: 2.9.0
   description: GENERATED by scripts/derive-v2-api.py (RFC 0171 §E.1, RFC 0172 §C.2). One run-events channel whose address
     is the OpenAPI path key; the server pathname is empty (bare origin). streamMode is a pattern over the closed set and its
     comma-separated combinations (`values` never combines). hostEvents has a real address (RFC 0171 §E.1) — the documented

package/api/v2/openapi.yaml

@@ -1,7 +1,7 @@
 openapi: 3.1.0
 info:
   title: OpenWOP v2 API
-  version: 2.8.2
+  version: 2.9.0
   summary: REST surface for declaring, executing, suspending, resuming, and observing multi-step workflows.
   description: GENERATED by scripts/derive-v2-api.py from api/openapi.yaml and the RFC 0167 children (v2 charter Phase 3,
     P3-C). Bare origin, unversioned path keys, negotiation by `OpenWOP-Version` + `protocolVersions[]` (RFC 0172 §A). No seam

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openwop/spec-artifacts",
-  "version": "2.8.2",
+  "version": "2.9.0",
   "description": "The OpenWOP machine-readable contract: api/ (OpenAPI, AsyncAPI, the seams profile), schemas/ (v1 and v2 JSON Schemas), the spec/v1 and spec/v2 registries (errors, event codemap, declaration, deprecations, migrations, gaps) and CORPUS-STAMP.json — published from the openwop/openwop corpus tag; the peer dependency @openwop/openwop-conformance digest-checks at start (RFC 0168 §D.2).",
   "license": "Apache-2.0",
   "repository": {

package/schemas/v2/error-envelope.schema.json

@@ -2,7 +2,7 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://openwop.dev/spec/v2/error-envelope.schema.json",
   "title": "ErrorEnvelope (v2)",
-  "description": "GENERATED from spec/v2/errors.json by scripts/generate-error-envelope.mjs (RFC 0171 §B.1). 98 registered codes; vendor codes match ^(?!openwop\\.)[a-z][a-z0-9]*(-[a-z0-9]+)*\\.[a-z][a-z0-9_]*$. Consumers MUST accept an unknown registered member and MUST NOT act on it (RFC 0171 §A.5).",
+  "description": "GENERATED from spec/v2/errors.json by scripts/generate-error-envelope.mjs (RFC 0171 §B.1). 99 registered codes; vendor codes match ^(?!openwop\\.)[a-z][a-z0-9]*(-[a-z0-9]+)*\\.[a-z][a-z0-9_]*$. Consumers MUST accept an unknown registered member and MUST NOT act on it (RFC 0171 §A.5).",
   "type": "object",
   "additionalProperties": false,
   "required": [
@@ -52,6 +52,7 @@
             "sender_constraint_missing",
             "unauthenticated",
             "credential_forbidden",
+            "credential_scope_forbidden",
             "delegation_scope_amplified",
             "forbidden",
             "force_engine_version_forbidden",
@@ -240,6 +241,7 @@
     "sender_constraint_missing": 401,
     "unauthenticated": 401,
     "credential_forbidden": 403,
+    "credential_scope_forbidden": 403,
     "delegation_scope_amplified": 403,
     "forbidden": 403,
     "force_engine_version_forbidden": 403,

package/spec/v1/core-standard-manifest.json

@@ -4,7 +4,7 @@
   "provenance": {
     "suite": {
       "package": "@openwop/openwop-conformance",
-      "version": "2.8.2"
+      "version": "2.9.0"
     },
     "note": "Derived from the corpus at generation time. Regenerate with --write; verify with --check."
   },
@@ -419,5 +419,5 @@
       "$id": "https://openwop.dev/spec/v1/workspace-file.schema.json"
     }
   ],
-  "digest": "2d5e2eb843ab9d9c6affb0d9219cfd08e43e4c7bd0a091617613d04d43e993ee"
+  "digest": "0a651f89a0a8e6bf593244e8800623274c33b32e036be84d432c96d345605bf1"
 }

package/spec/v2/core/errors.md

@@ -8,7 +8,7 @@ Every error a v2 host returns is a row in one registry. A client routes on `erro
 
 ## The registry
 
-`spec/v2/errors.json` holds one row per code: `{ code, httpStatus, retriable, details, since, deprecated? }` plus the provenance fields `statusSource` and `source`. It registers **98** codes. `schemas/v2/error-envelope.schema.json` is GENERATED from it and MUST NOT be edited by hand.
+`spec/v2/errors.json` holds one row per code: `{ code, httpStatus, retriable, details, since, deprecated? }` plus the provenance fields `statusSource` and `source`. It registers **99** codes. `schemas/v2/error-envelope.schema.json` is GENERATED from it and MUST NOT be edited by hand.
 
 A host MUST return a registered code, or a vendor code, in every error response. A vendor code MUST match `^(?!openwop\.)[a-z][a-z0-9]*(-[a-z0-9]+)*\.[a-z][a-z0-9_]*$` with its first segment an org registered in `spec/v2/declaration.json`; `openwop.` is reserved. The registry grows by the closed-enum rule in overview.md §0: a producer MUST NOT emit an unregistered member, and a consumer MUST accept an unknown registered member and MUST NOT act on it.
 
@@ -28,7 +28,7 @@ An interrupt has one code per state: a token or run-scoped resolve against an in
 
 ## Codes by HTTP status
 
-Generated from `spec/v2/errors.json` (98 codes; `retriable` and `statusSource` are in the registry).
+Generated from `spec/v2/errors.json` (99 codes; `retriable` and `statusSource` are in the registry).
 
 Code | Status
 --- | ---
@@ -69,6 +69,7 @@ Code | Status
 `sender_constraint_missing` | 401
 `unauthenticated` | 401
 `credential_forbidden` | 403
+`credential_scope_forbidden` | 403
 `delegation_scope_amplified` | 403
 `forbidden` | 403
 `force_engine_version_forbidden` | 403
@@ -96,22 +97,22 @@ Code | Status
 `replay_diverged_at_refusal` | 409
 `replay_memory_snapshot_unavailable` | 409
 `run_already_active` | 409
-`run_terminal` | 409
 `run_state_conflict` | 409
+`run_terminal` | 409
 `version_conflict` | 409
 `workspace_conflict` | 409
 `interrupt_cancelled` | 410
 `interrupt_expired` | 410
-`workspace_too_large` | 413
 `payload_too_large` | 413
+`workspace_too_large` | 413
 `unsupported_media_type` | 415
 `capability_not_provided` | 422
 `capability_required` | 422
 `credential_required` | 422
 `envelope_invalid` | 422
 `envelope_refusal` | 422
-`fork_point_invalid` | 422
 `envelope_truncation_unrecoverable` | 422
+`fork_point_invalid` | 422
 `loop_limit_exceeded` | 422
 `mcp_mrtr_rounds_exceeded` | 422
 `pack_runtime_requirement_unmet` | 422
@@ -125,8 +126,8 @@ Code | Status
 `rate_limited` | 429
 `event_type_unmapped` | 500
 `internal_error` | 500
-`payload_unprojectable` | 500
 `pack_load_failure` | 500
+`payload_unprojectable` | 500
 `credential_unavailable` | 501
 `pack_registry_unreachable` | 503
-`runner_unavailable` | 503
+`runner_unavailable` | 503

package/spec/v2/core/form-content-packs.md

@@ -15,6 +15,18 @@ A field MAY carry `when: <EdgeCondition>`. The grammar is the `WorkflowEdge.cond
   "when": { "type": "equals", "left": "fields.shipping", "right": "international" } }
 ```
 
+## Instantiation
+
+A form instantiated from a pack advertised through `forms.contentPacks` MUST be
+created through the same path a hand-authored form uses, and MUST remain
+editable afterwards: the pack is a starting point, not a managed object. A host
+MUST degrade an unrecognized field type to plain text rather than failing the
+instantiation, and MUST NOT execute anything carried by the pack. A pack-authored
+string, and any value collected through an instantiated template, is untrusted
+input: when one is interpolated into a prompt, the composed envelope MUST carry
+`meta.contentTrust: "untrusted"`, so a downstream reader can tell authored text
+from pack-supplied text.
+
 ## Localized strings
 
 `label`, `title`, and `description` are localized strings. A host MUST select the rendered language by the locale-selection and fallback rules of i18n.md, and MUST treat every rendered string as untrusted: escaped for the target surface, never interpreted as markup, script, or a template directive.

package/spec/v2/core/idempotency.md

@@ -43,3 +43,16 @@ A host that advertises `idempotency` MUST serve `schemas/v2/effect-ledger-projec
 ## Composition
 
 Layer 1 deduplicates the caller's request; Layer 2 deduplicates the run's effects. A retried provider call inside a run MUST resolve to the same effect record. Effects under replay and fork are in replay.md; identifier grammars are in identity.md.
+
+## Multi-region
+
+`multiRegion` and `crossRegion` are the two region facets of `idempotency`, and
+they claim different things. `crossRegion` names the host's deployment posture
+for this axis and MUST be held constant for the life of an advertisement.
+`multiRegion` is the behavioural claim: when a host advertises it, both layers
+above MUST hold across regions — an `Idempotency-Key` replayed into a second
+region MUST resolve to the first region's response rather than starting new
+work, and effect identity MUST collapse a duplicate effect wherever it is
+observed. A host that does not advertise `multiRegion` makes no cross-region
+promise, and a client MUST NOT infer one from `crossRegion` alone.
+

package/spec/v2/core/persistence.md

@@ -49,6 +49,18 @@ falsify a host's era handling on its own. What falsifies that is the vocabulary
 of the events themselves, which is why the reader and writer rules below carry
 the obligation and this field only reports it.
 
+## The `eventLog` family
+
+`eventLog` is the capability record by which a host advertises the era contract
+above. A host that advertises `eventLog` MUST stamp `eventLogSchemaVersion` on
+every run it creates, MUST serve the cursor contract in events.md §"Poll" over
+that log, and MUST NOT emit an event `type` the codemap does not name. The
+record carries no separate storage claim: it asserts that the era key, the
+codemap and the poll cursor are implemented as written here, which is why its
+floor scenarios are the era-key and cursor witnesses rather than tests of a
+surface of its own. Its `crossEngineOrdering` facet is a replay property and is
+normed in replay.md §"Cross-engine ordering".
+
 ## The reader rule
 
 A v2 host reading a run in era `2` MUST translate every event through the codemap at the storage boundary:

package/spec/v2/core/replay.md

@@ -97,6 +97,18 @@ A host advertising `replay` MUST publish `schemas/v2/effect-seam-manifest.schema
 
 A v2 host MUST fork a run created before the cut (era `2`, persistence.md). The fork's prefix MUST be byte-equivalent to the *translated* parent — the parent as read through the codemap, not its stored bytes — and `run.started` on the fork MUST carry the legacy Subject (`issuer: urn:openwop:legacy`, identity.md) where the parent had none (RFC 0176 §A.5, scenario `fork-a-v1-run`). A backfill of an era-`2` log is permitted only atomically per run with the original preserved, so this obligation stays checkable.
 
+## Cross-engine ordering
+
+When a host advertises both `idempotency.multiRegion` and
+`eventLog.crossEngineOrdering`, a fork served by a region other than the one
+that wrote the run MUST produce the same observable state at the `fromSeq`
+boundary as a fork served by the writing region: `status`, `variables`, and the
+projected event log up to `fromSeq` MUST be byte-equivalent across regions.
+Per-region wall-clock and entropy fields in events AFTER the boundary MAY
+differ. A host that advertises one of the two and not the other keeps the
+single-region contract above; a host that advertises neither is single-region
+and the cross-region claim does not apply.
+
 ## Retention
 
 A host advertising `replay` MUST document retention for source snapshots, source logs, the invocation records replay depends on, and forked runs; `retention.days` MAY advertise the window. When the range `fromSeq` needs has expired, the host MUST reject the fork with `410` or `422`; `details` SHOULD carry `sourceRunId`, `fromSeq`, and the boundary.

package/spec/v2/declaration.json

@@ -1017,6 +1017,9 @@
       "facets": [
         "contentPacks"
       ],
+      "normativeText": [
+        "spec/v2/core/form-content-packs.md"
+      ],
       "floorScenarios": [],
       "requirementIds": [],
       "owningRfc": "0137"
@@ -1484,6 +1487,9 @@
         "multiRegion",
         "crossRegion"
       ],
+      "normativeText": [
+        "spec/v2/core/idempotency.md"
+      ],
       "floorScenarios": [],
       "requirementIds": [],
       "owningRfc": "0150"
@@ -1502,6 +1508,10 @@
       "facets": [
         "crossEngineOrdering"
       ],
+      "normativeText": [
+        "spec/v2/core/persistence.md",
+        "spec/v2/core/replay.md"
+      ],
       "floorScenarios": [],
       "requirementIds": [],
       "owningRfc": "0036"

package/spec/v2/errors.json

@@ -2,7 +2,7 @@
   "$schema": "https://openwop.dev/spec/v2/errors.schema.json",
   "$comment": "RFC 0171 §B.1 — the error registry: one row per code {code, httpStatus, retriable, details, since, deprecated?}. schemas/v2/error-envelope.schema.json is GENERATED from it (scripts/generate-error-envelope.mjs). Retry timing lives in Retry-After only (§B.2). statusSource records whether the status was stated in v1 prose, a v1 convention, or decided here. details is null until a code's details schema is registered (a null row means details is an open object for that code — closure over details is the RFC 0171 Phase 3 follow-up G-row).",
   "version": "2.0",
-  "updated": "2026-09-17",
+  "updated": "2026-09-18",
   "vendorCodePattern": "^(?!openwop\\.)[a-z][a-z0-9]*(-[a-z0-9]+)*\\.[a-z][a-z0-9_]*$",
   "rows": [
     {
@@ -360,6 +360,15 @@
       "since": "1.0",
       "source": "spec/v1/rest-endpoints.md §Error response shape"
     },
+    {
+      "code": "credential_scope_forbidden",
+      "httpStatus": 403,
+      "statusSource": "v1 prose",
+      "retriable": false,
+      "details": null,
+      "since": "1.0",
+      "source": "spec/v1/capabilities.md §B.8"
+    },
     {
       "code": "delegation_scope_amplified",
       "httpStatus": 403,

package/spec/v2/release.json

@@ -1,6 +1,6 @@
 {
   "$comment": "RFC 0172 §D.1 — the one release identity the v2 artifacts derive from. `version` is the next corpus tag `v<version>` (the publish workflow's coordinated-release tag pattern `v*`; RFC 0172's `openwop/v2.<minor>.<patch>` spelling is amended to this at its flip). api/v2/*.yaml info.version, the suite's 2.x version and @openwop/spec-artifacts read it. Bumped by the release PR that cuts the tag, never by hand elsewhere.",
-  "version": "2.8.2",
-  "corpusTag": "v2.8.2",
+  "version": "2.9.0",
+  "corpusTag": "v2.9.0",
   "updated": "2026-09-18"
 }