@openwop/spec-artifacts 2.8.3 → 2.9.1

package/CORPUS-STAMP.json

@@ -1,17 +1,17 @@
 {
   "_comment": "Provenance of @openwop/spec-artifacts (RFC 0168 §D.2). files: SHA-256 per file; the conformance suite compares the installed peer against dist/spec-artifacts.lock.json at start.",
   "package": "@openwop/spec-artifacts",
-  "version": "2.8.3",
-  "corpusTag": "v2.8.3",
+  "version": "2.9.1",
+  "corpusTag": "v2.9.1",
   "files": {
     "api/.redocly.lint-ignore.yaml": "bf5a8350b88a72fa43f59605ed8d903ed24b6cfccda5e45509c9f6ed9ee4e712",
     "api/asyncapi.yaml": "d5ecb9ee6114582be3b1f662c84bfac9ae96dae7bacb853e461168f70a8e1c7d",
     "api/grpc/openwop.proto": "c3e72bb17cba514ee98feb6434e6c9b6ea6795bfd086489ec69fd882dd1ad977",
     "api/openapi.yaml": "39081c59fb696159806b0f2f9a42e7e9ff830d622fcf2ad4159b21357580a955",
     "api/redocly.yaml": "b0604c89b2ca6d5076ec25725c539dad44a741a811fe524439ee6daef8baa09f",
-    "api/seams-v2.yaml": "64deea9efd193ce9c885b2e05586fd1cd5c45c5eb1a0ffa075ee3ceaa983c039",
-    "api/v2/asyncapi.yaml": "c9217395cc0acb0acd6e2bc29e3a9beb305b3e6fab08be3214eb18b69856298f",
-    "api/v2/openapi.yaml": "7649ddd91c669937781f2ec7234b4b02345f27e919a8d25258ab74f03a543f4a",
+    "api/seams-v2.yaml": "2714a7e827e4c1dae106bee03662f4ba4707ca87f8846816c878a7a267e8fa35",
+    "api/v2/asyncapi.yaml": "17f9f44ca444434cab2fe273f3f23009ce9f480d0a803d234a6cbed0adaf5e05",
+    "api/v2/openapi.yaml": "d0d9fc04d38c8df99ed7d60a4760a5e9eab0926054ea8874a4745fe086b801ef",
     "api/v2/redocly.yaml": "1e66b60e6118ad11a823bb620678be464d99dfe50a40e3e6f93ec9429b88b34c",
     "schemas/README.md": "0c0b737ffcf8f30e7d2809cec8a498232de710f41443212922ad8337cdde0b51",
     "schemas/a2a-task-state.schema.json": "c9365918f993f943b4b619d42551eb066a1ed33a08d895d51b395432a5b1f1bc",
@@ -201,13 +201,13 @@
     "schemas/workspace-file.schema.json": "464de85c2a068243084ee9c1d969bc7cd5d8f7948574e58450d6493c38a0e1e4",
     "spec/v1/alias-detectors.json": "e90916db12d2297e2e560b2d54d2c4702d6cb3bef7179a575844687a7ec17262",
     "spec/v1/capability-declaration-classes.json": "e7729aed5c4b4e1dd02abab0530f14cc95f5d4070fe51fb139e7f5cccefa00c6",
-    "spec/v1/core-standard-manifest.json": "540b87d21baa032b986e68a13ed07ddc2c62519baf5f16395126d0420e8266ed",
+    "spec/v1/core-standard-manifest.json": "86e60c2f39387e12cd85021ec8a90ac052eb5f271a1e080beaa1c61f1193dfe0",
     "spec/v1/deprecations.json": "c81c8f71460936c8d489d8270477c7661cf4a5d7b7bad86c98899750b5656027",
     "spec/v1/deprecations.schema.json": "18c87e78bedc210431f795ae44c5b5d202f2f3317850d5cf86867d4f1fa1cdfb",
     "spec/v1/event-codemap.json": "3da60d884157793a360da532a9fcbbfb5285636db325a74cec94b34622186d97",
     "spec/v1/event-codemap.schema.json": "d05933b2e88103aff51a2f774df97b9bda065e0fc88dbd9b114cc47a32189174",
     "spec/v1/extensions.json": "79a60754aa16cbdbdb604f8e5c00038af535a1690a4d07bd5ff7c38f0256a7bc",
-    "spec/v1/gaps.json": "d9f21ba6e6822eb6a12fefa9f2ecf52e4c3dc6f812d1c6f6da73f0e663e9dbfd",
+    "spec/v1/gaps.json": "a97c834ac7f0f1429747053b047ffc02a667b49e84b4c40317f141e658b101e5",
     "spec/v1/gaps.schema.json": "8fd83259f556553c9df0f53e7a82ca8c2a4771d471197f69b4e2ae0ceeacfd66",
     "spec/v1/migrations.json": "8839497d6a4830b53fa7867014a8336f0d725ef2346352e54fb580b7947897af",
     "spec/v1/migrations.schema.json": "886779aa6c22e646db097f5df210adb018a4dd14a7b815465a18c8a7056c8f72",
@@ -219,22 +219,22 @@
     "spec/v2/core/connection-packs.md": "2e53c92476f68304139faf0c370874dc27bbba56a127a07e0906ff06edbb8ff1",
     "spec/v2/core/errors.md": "6b6a1480ed889013172d8ce8c6985e321d2f4f73e1d9fae0bac9b961d0dd1a8c",
     "spec/v2/core/events.md": "6ab8c727df3ebc5a60de3837c82a0075b4357d6f7e28435c6f80585687d41a76",
-    "spec/v2/core/form-content-packs.md": "d4c5295dfd28972be205c87c34d0d34ced64f4a2561ebff7f9d24b436d83df25",
+    "spec/v2/core/form-content-packs.md": "967687826d78b8e29e25085769bea97596645036ecb0225fa3ef0ddcf76636d5",
     "spec/v2/core/headers.md": "14cdf4ae9ee7d80eebfd426d7c3552e577baea0300915cd4bb3a68e8588195a8",
-    "spec/v2/core/idempotency.md": "803cd85947b1b2151cd2fb42cf0e0c52c9bcd19cdc6c23dcf34b1eddc600921a",
+    "spec/v2/core/idempotency.md": "6307a98be7e0d44199a66409eb78d249029c997782489f3e50d130134dd63fd7",
     "spec/v2/core/identity.md": "ae24870df315b527dfe9ecf7a4c26582bcc1113da7954f44acf69bf463ac390d",
     "spec/v2/core/interop.md": "8d8f4b040cb3625044c6aa586c8dcf5e9d15797de3d3b1cea631f44b8924701c",
     "spec/v2/core/interrupt.md": "bdb2879a52a2504d84146e46108c4a4c2dd3a6f27865a295c80375b331cced21",
     "spec/v2/core/overview.md": "7dc00ace32d4e4ce929a383651f0029fc4b7091ec87487b1bf26ead1be209e0e",
     "spec/v2/core/packs.md": "3254fd060c2b690cea70ef2b1b1a119711bb04fb5f13bf8936d4d718df9b2322",
-    "spec/v2/core/persistence.md": "e75c6d8cc6a31747f8559931c420ed0debbdec16ae01fed28df5aa79a51e5899",
-    "spec/v2/core/replay.md": "dee513b6ca313a0647c853e713af94a3e077f3e58f71851ddb0ef8adcb3b0afe",
+    "spec/v2/core/persistence.md": "e9e64d0eb7f9cd6ae71a5973ee539ed30966eca309fad523f05e33adc79f9225",
+    "spec/v2/core/replay.md": "13bf1f47573e0688ede28d2b1cc74cefd75e0a5c168ebf5d989f45b2cc2067b7",
     "spec/v2/core/runs.md": "b4c0bb2869077fcbf26e15bc6bbac06819f68b8241944b903a275a37db1c71fa",
     "spec/v2/core/security-defaults.md": "9ab1d1a88ccd0929f354422b151ec6d3164e8cd3784f8e58bb6f11cb7ee1e7d5",
     "spec/v2/core/versioning.md": "27b88cde88f9060567ef7e46f4897b6be8892ade9f4a46c2ab16e314c515eabd",
     "spec/v2/core/webhooks.md": "e08a736fd0bfdc79f5c2309c66f53caf96fac8d9954e0a184c2229de4ce286e9",
     "spec/v2/core/workflow-chain-packs.md": "26bb65721f826285b7d90c3cb62fa7e9fb2414c1bc6e0fd25b33209168c3102e",
-    "spec/v2/declaration.json": "facd8b8466ea86b61325670450a1205c672e844e0dbcd9d9392ef0eb2021cca3",
+    "spec/v2/declaration.json": "c7338923f69aa72200977286b59d579ca797ba5462d2a911f50c24c5485a62f5",
     "spec/v2/declaration.schema.json": "c86e3083fb9789c1958ecb4576cc6f71aa90e6f339521139238543ed08211dd4",
     "spec/v2/errors.json": "aac91b12f954cc90574d310070ae3c651b131055d4389d2c6155242763765195",
     "spec/v2/event-codemap.json": "37869a03cdfd8758b57e6f350641a6ebbd383231cebda51f5473ad85f94ab74c",
@@ -273,8 +273,8 @@
     "spec/v2/path-manifest.json": "c123c9fd77dc1b3f9c2e9346ace80cdae007e6511138894956abda01e61ec1c6",
     "spec/v2/peer-dependency-aliases.json": "d10299280abee08258502925bc327293ee413e0108cd6e6ec75ff6110653308d",
     "spec/v2/profiles.json": "0636f19fceae625390003a347e70ef4797d84766b5c24ce8a02cea52aadebca4",
-    "spec/v2/release.json": "35e41f5f136dacf24a5d14a271e987fc6955b821c9708bd9ff5895ef09ab9324",
+    "spec/v2/release.json": "68384ffc6c06f2fe42ad85d553dc4da6bfa14160074c7746ee23d95bfbe654bb",
     "spec/v2/retention-floors.json": "eaf3722d95c79947af1d4269ef85117e126518c588cfcf1a2b21b97269f51624"
   },
-  "corpusCommit": "9eb4c793dad242f5e0231e168085d1d5e6bc1598"
+  "corpusCommit": "ab69b3aec36effd4597c0f9091acf88fa0f70c25"
 }

package/api/seams-v2.yaml

@@ -1,7 +1,7 @@
 openapi: 3.1.0
 info:
   title: OpenWOP conformance seams profile (openwop-conformance-seams-v2)
-  version: 2.8.3
+  version: 2.9.1
   description: 'GENERATED by scripts/derive-v2-api.py. RFC 0168 §C: the seams are a versioned conformance profile with their
     own document and path space (/conformance/seams/…), validated against the canonical v2 schemas with no tolerance path,
     forbidden from the capability namespace (a host advertises the profile, never a testSeams flag). This document carries

package/api/v2/asyncapi.yaml

@@ -1,7 +1,7 @@
 asyncapi: 3.1.0
 info:
   title: OpenWOP v2 event streams
-  version: 2.8.3
+  version: 2.9.1
   description: GENERATED by scripts/derive-v2-api.py (RFC 0171 §E.1, RFC 0172 §C.2). One run-events channel whose address
     is the OpenAPI path key; the server pathname is empty (bare origin). streamMode is a pattern over the closed set and its
     comma-separated combinations (`values` never combines). hostEvents has a real address (RFC 0171 §E.1) — the documented

package/api/v2/openapi.yaml

@@ -1,7 +1,7 @@
 openapi: 3.1.0
 info:
   title: OpenWOP v2 API
-  version: 2.8.3
+  version: 2.9.1
   summary: REST surface for declaring, executing, suspending, resuming, and observing multi-step workflows.
   description: GENERATED by scripts/derive-v2-api.py from api/openapi.yaml and the RFC 0167 children (v2 charter Phase 3,
     P3-C). Bare origin, unversioned path keys, negotiation by `OpenWOP-Version` + `protocolVersions[]` (RFC 0172 §A). No seam

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openwop/spec-artifacts",
-  "version": "2.8.3",
+  "version": "2.9.1",
   "description": "The OpenWOP machine-readable contract: api/ (OpenAPI, AsyncAPI, the seams profile), schemas/ (v1 and v2 JSON Schemas), the spec/v1 and spec/v2 registries (errors, event codemap, declaration, deprecations, migrations, gaps) and CORPUS-STAMP.json — published from the openwop/openwop corpus tag; the peer dependency @openwop/openwop-conformance digest-checks at start (RFC 0168 §D.2).",
   "license": "Apache-2.0",
   "repository": {

package/spec/v1/core-standard-manifest.json

@@ -4,7 +4,7 @@
   "provenance": {
     "suite": {
       "package": "@openwop/openwop-conformance",
-      "version": "2.8.3"
+      "version": "2.9.1"
     },
     "note": "Derived from the corpus at generation time. Regenerate with --write; verify with --check."
   },
@@ -419,5 +419,5 @@
       "$id": "https://openwop.dev/spec/v1/workspace-file.schema.json"
     }
   ],
-  "digest": "18e2a55ecea063b7e2c1d4c4ac5160499cb6143b7a81e1af914867c41f5e447f"
+  "digest": "30cf52e2e90330d2b62e8a86a420966c01e2949ba127bac8bae33d0a2a3fe337"
 }

package/spec/v1/gaps.json

@@ -10297,6 +10297,57 @@
         }
       ]
     },
+    {
+      "id": "openwop.gap.0189.1",
+      "rfc": "0189",
+      "local": "G1",
+      "section": "§B(c)",
+      "surface": "`namesKey` is a bare token match, so a family key that is a common English noun is satisfied by prose that merely uses the word. Measured against `spec/v2/core/*.md` with the gate's own predicate: `packs` has an obligation paragraph naming it in **7** documents — including `security-defaults.md` and `versioning.md`, which say nothing about the packs family's contract — and `idempotency` in **7**. Paragraph scope narrowed document scope but does not fix a common noun, and five of the families still undeclared (`packs`, `forms`, `replay`, `interrupt`, `connections`) are common nouns. A contributor under burn-down pressure can resolve `packs` against `security-defaults.md` and the gate will applaud.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "carried",
+      "target": "openwop.gap.0189.1",
+      "sources": [
+        {
+          "file": "RFCS/registers/0189-normative-home.gaps.md",
+          "token": "G1"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0189.2",
+      "rfc": "0189",
+      "local": "G2",
+      "section": "§E.2",
+      "surface": "62 families must find v2 homes inside the RFC 0174 §E.2 kernel budget, which `check-core-budget.mjs` reads over `spec/v2/core/*.md` only (non-recursive). At 2.9.0 the budget is **24,695 / 25,000** — 305 words free for 62 families. `spec/v2/ext/**` is a legal home under `homeClass()` and is **not** counted by the budget, and the precedent already exists (`spec/v2/ext/provider-idempotency/README.md` is supporting normative text for the **core** `idempotency` family). Left implicit, 62 authors each discover the escape valve independently and `ext/` silently becomes \"core, but unbudgeted\" — the 25,000-word cap defeated by directory name.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "carried",
+      "target": "openwop.gap.0189.2",
+      "sources": [
+        {
+          "file": "RFCS/registers/0189-normative-home.gaps.md",
+          "token": "G2"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0189.3",
+      "rfc": "0189",
+      "local": "G3",
+      "section": "§D",
+      "surface": "The burn-down decays `open` linearly to zero at v1 end-of-support, and `open = v1Dependent + undeclared` — but `v1Carried` families (`toolHooks`, `toolCatalog`) are explicitly tolerated past end-of-support by §D itself, which fails only if their target is deleted or its `Status:` banner changes. Counting a deliberately-tolerated family in a burn-down that must reach zero asks for work the RFC says is not required.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "carried",
+      "target": "openwop.gap.0189.3",
+      "sources": [
+        {
+          "file": "RFCS/registers/0189-normative-home.gaps.md",
+          "token": "G3"
+        }
+      ]
+    },
     {
       "id": "openwop.gap.spec.a2a-integration.g1",
       "rfc": "0152",

package/spec/v2/core/form-content-packs.md

@@ -15,6 +15,18 @@ A field MAY carry `when: <EdgeCondition>`. The grammar is the `WorkflowEdge.cond
   "when": { "type": "equals", "left": "fields.shipping", "right": "international" } }
 ```
 
+## Instantiation
+
+A form instantiated from a pack advertised through `forms.contentPacks` MUST be
+created through the same path a hand-authored form uses, and MUST remain
+editable afterwards: the pack is a starting point, not a managed object. A host
+MUST degrade an unrecognized field type to plain text rather than failing the
+instantiation, and MUST NOT execute anything carried by the pack. A pack-authored
+string, and any value collected through an instantiated template, is untrusted
+input: when one is interpolated into a prompt, the composed envelope MUST carry
+`meta.contentTrust: "untrusted"`, so a downstream reader can tell authored text
+from pack-supplied text.
+
 ## Localized strings
 
 `label`, `title`, and `description` are localized strings. A host MUST select the rendered language by the locale-selection and fallback rules of i18n.md, and MUST treat every rendered string as untrusted: escaped for the target surface, never interpreted as markup, script, or a template directive.

package/spec/v2/core/idempotency.md

@@ -43,3 +43,16 @@ A host that advertises `idempotency` MUST serve `schemas/v2/effect-ledger-projec
 ## Composition
 
 Layer 1 deduplicates the caller's request; Layer 2 deduplicates the run's effects. A retried provider call inside a run MUST resolve to the same effect record. Effects under replay and fork are in replay.md; identifier grammars are in identity.md.
+
+## Multi-region
+
+`multiRegion` and `crossRegion` are the two region facets of `idempotency`, and
+they claim different things. `crossRegion` names the host's deployment posture
+for this axis and MUST be held constant for the life of an advertisement.
+`multiRegion` is the behavioural claim: when a host advertises it, both layers
+above MUST hold across regions — an `Idempotency-Key` replayed into a second
+region MUST resolve to the first region's response rather than starting new
+work, and effect identity MUST collapse a duplicate effect wherever it is
+observed. A host that does not advertise `multiRegion` makes no cross-region
+promise, and a client MUST NOT infer one from `crossRegion` alone.
+

package/spec/v2/core/persistence.md

@@ -49,6 +49,18 @@ falsify a host's era handling on its own. What falsifies that is the vocabulary
 of the events themselves, which is why the reader and writer rules below carry
 the obligation and this field only reports it.
 
+## The `eventLog` family
+
+`eventLog` is the capability record by which a host advertises the era contract
+above. A host that advertises `eventLog` MUST stamp `eventLogSchemaVersion` on
+every run it creates, MUST serve the cursor contract in events.md §"Poll" over
+that log, and MUST NOT emit an event `type` the codemap does not name. The
+record carries no separate storage claim: it asserts that the era key, the
+codemap and the poll cursor are implemented as written here, which is why its
+floor scenarios are the era-key and cursor witnesses rather than tests of a
+surface of its own. Its `crossEngineOrdering` facet is a replay property and is
+normed in replay.md §"Cross-engine ordering".
+
 ## The reader rule
 
 A v2 host reading a run in era `2` MUST translate every event through the codemap at the storage boundary:

package/spec/v2/core/replay.md

@@ -97,6 +97,18 @@ A host advertising `replay` MUST publish `schemas/v2/effect-seam-manifest.schema
 
 A v2 host MUST fork a run created before the cut (era `2`, persistence.md). The fork's prefix MUST be byte-equivalent to the *translated* parent — the parent as read through the codemap, not its stored bytes — and `run.started` on the fork MUST carry the legacy Subject (`issuer: urn:openwop:legacy`, identity.md) where the parent had none (RFC 0176 §A.5, scenario `fork-a-v1-run`). A backfill of an era-`2` log is permitted only atomically per run with the original preserved, so this obligation stays checkable.
 
+## Cross-engine ordering
+
+When a host advertises both `idempotency.multiRegion` and
+`eventLog.crossEngineOrdering`, a fork served by a region other than the one
+that wrote the run MUST produce the same observable state at the `fromSeq`
+boundary as a fork served by the writing region: `status`, `variables`, and the
+projected event log up to `fromSeq` MUST be byte-equivalent across regions.
+Per-region wall-clock and entropy fields in events AFTER the boundary MAY
+differ. A host that advertises one of the two and not the other keeps the
+single-region contract above; a host that advertises neither is single-region
+and the cross-region claim does not apply.
+
 ## Retention
 
 A host advertising `replay` MUST document retention for source snapshots, source logs, the invocation records replay depends on, and forked runs; `retention.days` MAY advertise the window. When the range `fromSeq` needs has expired, the host MUST reject the fork with `410` or `422`; `details` SHOULD carry `sourceRunId`, `fromSeq`, and the boundary.

package/spec/v2/declaration.json

@@ -1017,6 +1017,9 @@
       "facets": [
         "contentPacks"
       ],
+      "normativeText": [
+        "spec/v2/core/form-content-packs.md"
+      ],
       "floorScenarios": [],
       "requirementIds": [],
       "owningRfc": "0137"
@@ -1484,6 +1487,9 @@
         "multiRegion",
         "crossRegion"
       ],
+      "normativeText": [
+        "spec/v2/core/idempotency.md"
+      ],
       "floorScenarios": [],
       "requirementIds": [],
       "owningRfc": "0150"
@@ -1502,6 +1508,10 @@
       "facets": [
         "crossEngineOrdering"
       ],
+      "normativeText": [
+        "spec/v2/core/persistence.md",
+        "spec/v2/core/replay.md"
+      ],
       "floorScenarios": [],
       "requirementIds": [],
       "owningRfc": "0036"

package/spec/v2/release.json

@@ -1,6 +1,6 @@
 {
   "$comment": "RFC 0172 §D.1 — the one release identity the v2 artifacts derive from. `version` is the next corpus tag `v<version>` (the publish workflow's coordinated-release tag pattern `v*`; RFC 0172's `openwop/v2.<minor>.<patch>` spelling is amended to this at its flip). api/v2/*.yaml info.version, the suite's 2.x version and @openwop/spec-artifacts read it. Bumped by the release PR that cuts the tag, never by hand elsewhere.",
-  "version": "2.8.3",
-  "corpusTag": "v2.8.3",
+  "version": "2.9.1",
+  "corpusTag": "v2.9.1",
   "updated": "2026-09-18"
 }