borgmcp-shared 0.14.0 → 1.0.0

package/docs/compatibility.md

@@ -97,6 +97,15 @@ per-recipient acknowledgement timestamps and separate advisory claims. A v10
 peer and a v11 peer reject each other during credential-free preflight before
 either peer dispatches the new query.
 
+`borgmcp-shared@1.0.0` carries protocol v12. It adds cursorless exact-entry
+lookup by canonical UUID or unique eight-hex prefix, with typed unknown and
+ambiguous-prefix refusals. Every append request must also choose exactly one
+explicit audience through `to: "broadcast"` or a non-empty recipient-selector
+array. The public append request has no `visibility` or `recipientDroneIds`,
+message taxonomy classifies prefixes and lifecycle only, and routing never falls
+open. A v11 peer and a v12 peer reject each other during credential-free
+preflight before either new contract is dispatched.
+
 Removing or reinterpreting an existing field is a protocol-breaking change even
 when TypeScript permits it. Implementations must not infer compatibility from a
 successful build alone — they must run the shared conformance suite against the

package/docs/release-records.json

@@ -229,5 +229,19 @@
     "verify_job_id": null,
     "publish_job_id": null,
     "artifact_integrity": "sha512-AT5xOpd99U1Xd2waRJs01i2fz9ApMzd+NXQh0WMwTUknSsHpaQaEtGjcxtEDZG6MbB6nWfhoWG1ZZm9Fdkoytg=="
+  },
+  {
+    "outcome": "published",
+    "version": "0.14.0",
+    "tag": "v0.14.0",
+    "tag_object": "4ecd4e54bbf5a3dd719855ccc4d6f9db3939800f",
+    "commit": "a69926023d53268131e95b63efd141a17c634e2d",
+    "tree": "9074b05b687178fadc6d7cb40e55d8e5cf9cf248",
+    "workflow_run_id": 31957839605,
+    "workflow_run_attempt": 1,
+    "workflow_conclusion": "success",
+    "verify_job_id": null,
+    "publish_job_id": null,
+    "artifact_integrity": "sha512-rKRMxnxTnW+o3WOqtAFoih9IeRKCZw/lltqz7CbjC1riNq52CsZ871o1Fo7Fdk0WqwuzdFQmRJ7qOzPi08Q/QA=="
   }
 ]

package/docs/releases/1.0.0.md

@@ -0,0 +1,11 @@
+This major release introduces the protocol v12 trustworthy-messaging contracts
+used by the matching Borg MCP server and client major releases.
+
+- Every append requires an explicit audience: scalar `"broadcast"` or a non-empty array of recipient selectors.
+- Omitted, null, empty, malformed, and retired addressing inputs refuse before persistence; classification never supplies an audience or falls open.
+- Public append requests no longer expose `visibility` or `recipientDroneIds`; stored and read entries retain resolved visibility and recipient IDs.
+- Message taxonomy retains class, prefixes, and lifecycle only. Every bundled template and playbook requires explicit `to`, including `to: "broadcast"` for cube-wide messages.
+- Routing echoes contain only the resolved class and recipients.
+- Cursorless entry lookup accepts a canonical full UUID or one unique eight-hex prefix and returns the complete enriched log entry.
+- Unknown or inaccessible entries return `NOT_FOUND`; ambiguous prefixes return `LOG_ENTRY_PREFIX_AMBIGUOUS` without selecting an arbitrary match.
+- Entry lookup conformance proves no unread, acknowledgement, claim, log, or authority-state mutation.

package/docs/template-lifecycle.md

@@ -48,7 +48,7 @@ Existing cubes are snapshots with local ownership, not replicas. They do not aut
 
 Use the existing focused controls; do not add a second template lifecycle mechanism:
 
-- `test/templates.test.ts` pins the built-in set, expected software-development roles and flags, host-neutral presentation copy, authority/scope language, role-size budgets, Builder minimum-sufficient-change ordering, taxonomy routing, generated/source equality, and no-clobber resolution.
+- `test/templates.test.ts` pins the built-in set, expected software-development roles and flags, host-neutral presentation copy, authority/scope language, role-size budgets, Builder minimum-sufficient-change ordering, classification-only taxonomy, explicit log addressing, generated/source equality, and no-clobber resolution.
 - `test/role-section.test.ts` pins plain-label parsing, byte-identical parse/serialize for real template roles, and single-section replacement/insertion/deletion without clobbering unrelated text.
 - `test/packed-artifact.test.ts` installs the packed package and verifies the public named-template creation contract and shipped role text from the consumer surface.
 - `CUBE_TEMPLATE_ACCEPTANCE_CONFORMANCE` pins the closed accepted template-name set and invalid-name rejection. Stateful create vectors pin template identity to retry behavior.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "borgmcp-shared",
-  "version": "0.14.0",
+  "version": "1.0.0",
   "description": "Shared protocol, domain, templates, and conformance contracts for Borg MCP implementations.",
   "type": "module",
   "main": "./dist/index.js",

package/src/conformance/adapter.ts

@@ -7,6 +7,7 @@ import {
   decodeDeleteCubeResponseEnvelope,
   decodeAppendLogResultEnvelope,
   decodeAckStatusResultEnvelope,
+  decodeEntryQueryResultEnvelope,
   decodeDecisionResultEnvelope,
   decodeDecisionsResultEnvelope,
   decodeEnrollmentExchangeResponseEnvelope,
@@ -41,6 +42,7 @@ import {
   type StreamEvent,
   type DroneRuntimeMetadata,
   type CubeDocument,
+  type EnrichedStreamEntry,
 } from '../protocol/index.js';
 import {
   APPEND_LOG_IDEMPOTENCY_CONFORMANCE,
@@ -122,6 +124,7 @@ export interface ConformanceAuthorityState {
   enrollment_claims: number;
   activity_acknowledgements: number;
   activity_claims: number;
+  activity_log_entries: number;
   cubes: number;
   roles: number;
   grants: number;
@@ -217,12 +220,7 @@ export interface ConformanceAdmin {
     readonly isDefault?: boolean;
     readonly isMandatory?: boolean;
   }): Promise<ConformanceRole>;
-  referenceRoleFromTaxonomy(cube: ConformanceCube, role: ConformanceRole): Promise<void>;
-  configureMessageClassRouting(
-    cube: ConformanceCube,
-    className: string,
-    recipientDroneIds: readonly string[],
-  ): Promise<void>;
+  replaceLogEntryId(cube: ConformanceCube, currentId: string, replacementId: string): Promise<void>;
   createDrone(
     principal: ConformancePrincipal,
     cube: ConformanceCube,
@@ -302,6 +300,11 @@ export interface ConformanceOperations {
     cube: ConformanceCube,
     request: unknown,
   ): Promise<ConformanceHttpResponse>;
+  entryQuery(
+    credential: string,
+    cube: ConformanceCube,
+    request: unknown,
+  ): Promise<ConformanceHttpResponse>;
   ack(
     credential: string,
     cube: ConformanceCube,
@@ -387,6 +390,8 @@ export const ADAPTER_CONFORMANCE_FIXTURES = [
   { id: 'security.oversize-request', area: 'security' },
   { id: 'security.cross-cube-isolation', area: 'security' },
   { id: 'log.append-idempotency', area: 'log' },
+  { id: 'log.mandatory-addressing', area: 'log' },
+  { id: 'log.entry-query', area: 'log' },
   { id: 'log.read-cursor-tuple', area: 'cursor' },
   { id: 'sse.replay-live-transition', area: 'sse' },
   { id: 'cursor.explicit-expiry', area: 'cursor' },
@@ -1477,6 +1482,7 @@ export async function runAdapterConformance(
       documentCube,
       createProtocolEnvelope('document-foreign-citation', {
         post_id: '00000000-0000-4000-8000-00000000031f',
+        to: 'broadcast',
         message: 'Foreign evidence must remain hidden.',
         documents: [foreignDocument.id],
       }),
@@ -1518,6 +1524,7 @@ export async function runAdapterConformance(
       documentCube,
       createProtocolEnvelope('document-citation', {
         post_id: '00000000-0000-4000-8000-000000000320',
+        to: 'broadcast',
         message: 'See the document evidence.',
         documents: [created.id, successor.id],
       }),
@@ -1530,6 +1537,7 @@ export async function runAdapterConformance(
       documentCube,
       createProtocolEnvelope('document-citation-conflict', {
         post_id: '00000000-0000-4000-8000-000000000320',
+        to: 'broadcast',
         message: 'See the document evidence.',
         documents: [successor.id],
       }),
@@ -1637,14 +1645,14 @@ export async function runAdapterConformance(
       documentCredential,
       documentCube,
       createProtocolEnvelope('document-unknown-citation', {
-        post_id: '00000000-0000-4000-8000-000000000321', message: 'Unknown.', documents: ['unknown_full_id'],
+        post_id: '00000000-0000-4000-8000-000000000321', message: 'Unknown.', to: 'broadcast', documents: ['unknown_full_id'],
       }),
     ), 404, ErrorCode.DOCUMENT_NOT_FOUND, 'Unknown document citation');
     const longAccepted = await environment.operations.append(
       documentCredential,
       documentCube,
       createProtocolEnvelope('document-advisory', {
-        post_id: '00000000-0000-4000-8000-000000000322', message: 'x'.repeat(1025),
+        post_id: '00000000-0000-4000-8000-000000000322', message: 'x'.repeat(1025), to: 'broadcast',
       }),
     );
     expectStatus(longAccepted, 201, 'Advisory log append');
@@ -1653,7 +1661,7 @@ export async function runAdapterConformance(
       documentCredential,
       documentCube,
       createProtocolEnvelope('document-hard-cap', {
-        post_id: '00000000-0000-4000-8000-000000000323', message: 'x'.repeat(4097),
+        post_id: '00000000-0000-4000-8000-000000000323', message: 'x'.repeat(4097), to: 'broadcast',
       }),
     ), 413, ErrorCode.CONTENT_TOO_LARGE, 'Hard-cap log append');
     const citedRead = decodeReadLogResultEnvelope((await environment.operations.read(
@@ -1680,6 +1688,7 @@ export async function runAdapterConformance(
     const injectedBody = JSON.stringify(
       createProtocolEnvelope('inject-b1', {
         post_id: '00000000-0000-4000-8000-000000000301',
+        to: 'broadcast',
         message: injectedMessage,
       }),
     );
@@ -1702,6 +1711,7 @@ export async function runAdapterConformance(
       cubeB,
       createProtocolEnvelope('inject-b2', {
         post_id: '00000000-0000-4000-8000-000000000302',
+        to: 'broadcast',
         message: 'post-injection-sentinel',
       }),
     );
@@ -1752,6 +1762,7 @@ export async function runAdapterConformance(
     const baseBody = JSON.stringify(
       createProtocolEnvelope('oversize-a1', {
         post_id: '00000000-0000-4000-8000-000000000303',
+        to: 'broadcast',
         message: 'must-not-persist',
       }),
     );
@@ -1784,6 +1795,7 @@ export async function runAdapterConformance(
       createProtocolEnvelope('append-b1', {
         post_id: '00000000-0000-4000-8000-000000000304',
         message: 'principal-b-secret',
+        to: 'broadcast',
       }),
     );
     expectStatus(secretAppend, 201, 'Principal B append');
@@ -1810,16 +1822,12 @@ export async function runAdapterConformance(
     });
     const firstRecipient = await environment.admin.createDrone(principal, cube, role);
     const secondRecipient = await environment.admin.createDrone(principal, cube, role);
-    await environment.admin.configureMessageClassRouting(cube, 'conformance-review', [firstRecipient.id]);
-    await environment.admin.configureMessageClassRouting(cube, 'conformance-security', [firstRecipient.id]);
     const postId = '00000000-0000-4000-8000-000000000313';
     const initialPayload = {
       post_id: postId,
       message: 'once',
-      visibility: 'direct' as const,
-      recipientDroneIds: [firstRecipient.id],
+      to: [firstRecipient.id],
       class: 'review',
-      to: ['Coordinator'],
     };
     const first = await environment.operations.append(
       credential,
@@ -1830,32 +1838,12 @@ export async function runAdapterConformance(
     const firstResult = decodeAppendLogResultEnvelope(first.body).payload;
     invariant(!firstResult.deduplicated, 'Initial append was reported as deduplicated.');
     for (const [index, vector] of APPEND_LOG_IDEMPOTENCY_CONFORMANCE.entries()) {
-      const classRouting = vector.mutation === 'resolved_class_routing';
-      const vectorPostId = classRouting
-        ? '00000000-0000-4000-8000-000000000314'
-        : postId;
-      if (classRouting) {
-        const baseline = await environment.operations.append(
-          credential,
-          cube,
-          createProtocolEnvelope('append-idempotency-class-baseline', {
-            post_id: vectorPostId,
-            message: 'once',
-            class: 'conformance-review',
-          }),
-        );
-        expectStatus(baseline, 201, 'Resolved class-routing baseline');
-      }
-      const payload = classRouting ? {
-        post_id: vectorPostId,
-        message: 'once',
-        class: 'conformance-security',
-      } : {
+      const payload = {
         ...initialPayload,
         ...(vector.mutation === 'message' ? { message: 'changed' } : {}),
-        ...(vector.mutation === 'visibility' ? { visibility: 'broadcast' as const } : {}),
-        ...(vector.mutation === 'recipient_set' ? { recipientDroneIds: [secondRecipient.id] } : {}),
-        ...(vector.mutation === 'ignored_request_shape' ? { class: 'security', to: ['Security Auditor'] } : {}),
+        ...(vector.mutation === 'audience' ? { to: 'broadcast' as const } : {}),
+        ...(vector.mutation === 'recipient_set' ? { to: [secondRecipient.id] } : {}),
+        ...(vector.mutation === 'classification' ? { class: 'security' } : {}),
       };
       const response = await environment.operations.append(
         vector.actor === 'same' ? credential : otherCredential,
@@ -1883,10 +1871,207 @@ export async function runAdapterConformance(
     );
     expectStatus(read, 200, 'Idempotent append read');
     invariant(
-      decodeReadLogResultEnvelope(read.body).payload.entries.length === 3,
+      decodeReadLogResultEnvelope(read.body).payload.entries.length === 2,
       'Append collision controls persisted the wrong number of entries.',
     );
-    return { persisted_entries: 3, stable_entry: true, deduplicated: true, conflicts: 4, cross_author_created: true };
+    return { persisted_entries: 2, stable_entry: true, deduplicated: true, conflicts: 3, cross_author_created: true };
+  });
+
+  await record('log.mandatory-addressing', async () => {
+    const cube = await environment.admin.createCube('mandatory-addressing-cube');
+    await environment.admin.grantCube(principalA, cube);
+    const role = await environment.admin.createRole(cube, {
+      roleClass: 'worker',
+      isHumanSeat: false,
+      name: 'Structured Recipient',
+    });
+    const recipient = await environment.admin.createDrone(principalA, cube, role);
+    const message = 'START NOW exact slice';
+    const before = await environment.admin.observeAuthorityState();
+    expectError(
+      await environment.operations.append(
+        credentialA,
+        cube,
+        createProtocolEnvelope('mandatory-addressing-omitted', {
+          post_id: '30000000-0000-4000-8000-000000000001',
+          message,
+        }),
+      ),
+      400,
+      ErrorCode.INVALID_INPUT,
+      'Omitted mandatory addressing',
+    );
+    assertStateDelta(before, await environment.admin.observeAuthorityState(), {}, 'Mandatory-addressing refusal');
+
+    const broadcast = await environment.operations.append(
+      credentialA,
+      cube,
+      createProtocolEnvelope('mandatory-addressing-broadcast', {
+        post_id: '30000000-0000-4000-8000-000000000002',
+        message,
+        to: 'broadcast',
+      }),
+    );
+    expectStatus(broadcast, 201, 'Explicit broadcast addressing');
+    const broadcastResult = decodeAppendLogResultEnvelope(broadcast.body).payload;
+    invariant(broadcastResult.entry.visibility === 'broadcast', 'Scalar broadcast did not produce broadcast visibility.');
+    invariant(
+      (broadcastResult.entry.recipient_drone_ids?.length ?? 0) === 0,
+      'Scalar broadcast unexpectedly resolved direct recipients.',
+    );
+    const directed = await environment.operations.append(
+      credentialA,
+      cube,
+      createProtocolEnvelope('mandatory-addressing-directed', {
+        post_id: '30000000-0000-4000-8000-000000000003',
+        message,
+        to: [recipient.id],
+        class: 'cube-wide',
+      }),
+    );
+    expectStatus(directed, 201, 'Recipient-selector union branch');
+    const directedResult = decodeAppendLogResultEnvelope(directed.body).payload;
+    invariant(directedResult.entry.visibility === 'direct', 'Explicit recipient selectors did not produce direct visibility.');
+    invariant(
+      directedResult.entry.recipient_drone_ids?.includes(recipient.id) === true,
+      'Explicit recipient selectors did not resolve the named recipient.',
+    );
+    invariant(
+      directedResult.entry.recipient_drone_ids?.length === 1,
+      'Classification changed or fell open the explicit recipient set.',
+    );
+    return { refused_status: 400, code: ErrorCode.INVALID_INPUT, persisted: false, broadcast: true, union: true, no_fall_open: true };
+  });
+
+  await record('log.entry-query', async () => {
+    const cube = await environment.admin.createCube('entry-query-cube');
+    await environment.admin.grantCube(principalA, cube);
+    const role = await environment.admin.createRole(cube, {
+      roleClass: 'worker',
+      isHumanSeat: false,
+      name: 'Entry Query Worker',
+    });
+    const acknowledgedRecipient = await environment.admin.createDrone(principalA, cube, role);
+    const claimingRecipient = await environment.admin.createDrone(principalA, cube, role);
+    const acknowledgedCredential = await environment.admin.issueManagedDroneSession(acknowledgedRecipient);
+    const claimingCredential = await environment.admin.issueManagedDroneSession(claimingRecipient);
+    const ids = [
+      '11111111-0000-4000-8000-000000000001',
+      '22222222-0000-4000-8000-000000000001',
+      '22222222-0000-4000-8000-000000000002',
+    ];
+    const entries: EnrichedStreamEntry[] = [];
+    for (const [index, id] of ids.entries()) {
+      const response = await environment.operations.append(
+        credentialA,
+        cube,
+        createProtocolEnvelope(`entry-query-append-${index}`, {
+          post_id: `40000000-0000-4000-8000-00000000000${index}`,
+          to: [acknowledgedRecipient.id, claimingRecipient.id],
+          message: `entry-query-${index}`,
+        }),
+      );
+      expectStatus(response, 201, `Entry-query fixture append ${index}`);
+      const entry = decodeAppendLogResultEnvelope(response.body).payload.entry;
+      await environment.admin.replaceLogEntryId(cube, entry.id, id);
+      entries.push({ ...entry, id });
+    }
+
+    expectStatus(
+      await environment.operations.ack(
+        acknowledgedCredential,
+        cube,
+        createProtocolEnvelope('entry-query-seed-ack', { entry_id: ids[0], kind: 'ack' }),
+      ),
+      204,
+      'Entry-query acknowledgement seed',
+    );
+    expectStatus(
+      await environment.operations.ack(
+        claimingCredential,
+        cube,
+        createProtocolEnvelope('entry-query-seed-claim', { entry_id: ids[1], kind: 'claim' }),
+      ),
+      204,
+      'Entry-query claim seed',
+    );
+
+    const before = await environment.admin.observeAuthorityState();
+    for (const [requestId, selector, expectedId] of [
+      ['entry-query-full', ids[1], ids[1]],
+      ['entry-query-prefix', '11111111', ids[0]],
+    ] as const) {
+      const response = await environment.operations.entryQuery(
+        credentialA,
+        cube,
+        createProtocolEnvelope(requestId, { entry_id: selector }),
+      );
+      expectStatus(response, 200, requestId);
+      const result = decodeEntryQueryResultEnvelope(response.body).payload;
+      invariant(result.entry.id === expectedId, `${requestId} returned the wrong entry.`);
+    }
+    expectError(
+      await environment.operations.entryQuery(
+        credentialA,
+        cube,
+        createProtocolEnvelope('entry-query-unknown', { entry_id: 'ffffffff' }),
+      ),
+      404,
+      ErrorCode.NOT_FOUND,
+      'Unknown entry query',
+    );
+    expectError(
+      await environment.operations.entryQuery(
+        credentialA,
+        cube,
+        createProtocolEnvelope('entry-query-ambiguous', { entry_id: '22222222' }),
+      ),
+      409,
+      ErrorCode.LOG_ENTRY_PREFIX_AMBIGUOUS,
+      'Ambiguous entry query',
+    );
+    assertStateDelta(before, await environment.admin.observeAuthorityState(), {}, 'Entry query');
+    const acknowledgementStatus = decodeAckStatusResultEnvelope((await environment.operations.ackStatus(
+      credentialA,
+      cube,
+      createProtocolEnvelope('entry-query-ack-status', { entry_id: ids[0] }),
+    )).body).payload;
+    const claimStatus = decodeAckStatusResultEnvelope((await environment.operations.ackStatus(
+      credentialA,
+      cube,
+      createProtocolEnvelope('entry-query-claim-status', { entry_id: ids[1] }),
+    )).body).payload;
+    invariant(
+      acknowledgementStatus.recipients.some((recipient) =>
+        recipient.drone_id === acknowledgedRecipient.id && recipient.acknowledged_at !== null
+      ),
+      'Entry query removed the seeded acknowledgement.',
+    );
+    invariant(
+      claimStatus.claims.some((claim) => claim.drone_id === claimingRecipient.id),
+      'Entry query removed the seeded claim.',
+    );
+    const unreadResponse = await environment.operations.read(
+      credentialA,
+      cube,
+      createProtocolEnvelope('entry-query-unread', { cursor: null, limit: 10 }),
+    );
+    expectStatus(unreadResponse, 200, 'Entry-query unread read');
+    const unread = decodeReadLogResultEnvelope(unreadResponse.body).payload;
+    invariant(
+      unread.entries.length === entries.length && entries.every((entry) => unread.entries.some((item) => item.id === entry.id)),
+      'Entry query consumed or advanced unread activity.',
+    );
+    return {
+      full_uuid: true,
+      unique_prefix: true,
+      ambiguous_code: ErrorCode.LOG_ENTRY_PREFIX_AMBIGUOUS,
+      unknown_code: ErrorCode.NOT_FOUND,
+      unread_entry_available: true,
+      acknowledgement_preserved: true,
+      claim_preserved: true,
+      mutation: 'none',
+    };
   });
 
   const entries: Array<{ id: string; created_at: string; message: string }> = [];
@@ -1898,6 +2083,7 @@ export async function runAdapterConformance(
         cubeA,
         createProtocolEnvelope(`append-a${index + 1}`, {
           post_id: `00000000-0000-4000-8000-${String(305 + index).padStart(12, '0')}`,
+          to: 'broadcast',
           message,
         }),
       );
@@ -1935,6 +2121,7 @@ export async function runAdapterConformance(
         cubeA,
         createProtocolEnvelope('append-a4', {
           post_id: '00000000-0000-4000-8000-000000000308',
+          to: 'broadcast',
           message: 'delta',
         }),
       );
@@ -1962,6 +2149,7 @@ export async function runAdapterConformance(
         cubeA,
         createProtocolEnvelope('append-a5', {
           post_id: '00000000-0000-4000-8000-000000000309',
+          to: 'broadcast',
           message: 'epsilon',
         }),
       );
@@ -2020,9 +2208,8 @@ export async function runAdapterConformance(
       cube,
       createProtocolEnvelope('ack-status-append', {
         post_id: '00000000-0000-4000-8000-000000000310',
+        to: [acknowledgedRecipient.id, claimingRecipient.id],
         message: 'START NOW acknowledgement status fixture',
-        visibility: 'direct',
-        recipientDroneIds: [acknowledgedRecipient.id, claimingRecipient.id],
       }),
     );
     expectStatus(append, 201, 'Acknowledgement-status fixture append');
@@ -2614,8 +2801,7 @@ export async function runAdapterConformance(
         createProtocolEnvelope('evict-direct-target', {
           message: 'must-not-fan-out',
           post_id: '00000000-0000-4000-8000-000000000310',
-          visibility: 'direct',
-          recipientDroneIds: [evictedDrone.id],
+          to: [evictedDrone.id],
         }),
       ),
       404,
@@ -2695,12 +2881,6 @@ export async function runAdapterConformance(
       isHumanSeat: true,
       name: 'Human Seat',
     });
-    const referencedRole = await environment.admin.createRole(roleContractCube, {
-      roleClass: 'worker',
-      isHumanSeat: false,
-      name: 'Routed Reviewer',
-    });
-    await environment.admin.referenceRoleFromTaxonomy(roleContractCube, referencedRole);
     const activeRole = await environment.admin.createRole(roleContractCube, {
       roleClass: 'worker',
       isHumanSeat: false,
@@ -2712,7 +2892,6 @@ export async function runAdapterConformance(
       [defaultRole, ErrorCode.DEFAULT_ROLE_REQUIRED, 'default role'],
       [mandatoryRole, ErrorCode.ROLE_REQUIRED, 'mandatory role'],
       [humanRole, ErrorCode.ROLE_REQUIRED, 'human-seat role'],
-      [referencedRole, ErrorCode.ROLE_REFERENCED, 'taxonomy-referenced role'],
       [activeRole, ErrorCode.ROLE_IN_USE, 'active-drone role'],
     ] as const;
     for (const [index, [role, code, label]] of refusals.entries()) {
@@ -2805,6 +2984,7 @@ export async function runAdapterConformance(
       roleContractCube,
       createProtocolEnvelope('role-delete-attribution', {
         post_id: '00000000-0000-4000-8000-000000000311',
+        to: 'broadcast',
         message: 'attribution survives',
       }),
     );
@@ -2846,7 +3026,6 @@ export async function runAdapterConformance(
         ErrorCode.ROLE_IN_USE,
         ErrorCode.DEFAULT_ROLE_REQUIRED,
         ErrorCode.ROLE_REQUIRED,
-        ErrorCode.ROLE_REFERENCED,
       ],
       in_use_message_actionable: true,
       evicted_drone_retargeted: true,
@@ -3472,6 +3651,7 @@ export async function runAdapterConformance(
       cube,
       createProtocolEnvelope('delete-log', {
         post_id: '00000000-0000-4000-8000-000000000312',
+        to: 'broadcast',
         message: 'deleted with cube',
       }),
     );