{
  "protocol": "uhp",
  "protocol_version": "2026-09-12",
  "suite_protocol_version": "2026-09-12",
  "suite_version": "2026.9.12",
  "generated_at": "2026-09-13T21:32:46Z",
  "target": "https://uhp.superqode.dev",
  "target_label": "SuperQode 2.3.1 uhp.superqode.dev",
  "implementation": {
    "name": "superqode",
    "version": "2.3.1",
    "harness": "chrn_superqode_core"
  },
  "requested_class": "full",
  "conformant": false,
  "conformant_with_skips": false,
  "skipped_not_verified": [
    "X-07",
    "F-03",
    "F-04",
    "F-06",
    "P-01",
    "P-02",
    "P-03",
    "P-04",
    "P-05",
    "P-06",
    "P-07",
    "P-08",
    "P-09",
    "P-10",
    "F-07",
    "R-01",
    "R-02",
    "R-03",
    "R-04",
    "R-05",
    "R-06",
    "R-07",
    "R-08"
  ],
  "highest_class_passed": "core",
  "summary": {
    "pass": 42,
    "fail": 9,
    "skip": 23,
    "error": 0,
    "total": 74
  },
  "checks": [
    {
      "id": "D-01",
      "title": "Discovery document is served",
      "class": "core",
      "spec": "protocol/versions/2026-09-12/lifecycle.md#2-capability-discovery",
      "outcome": "pass",
      "detail": "conformance_class=core versions=['2026-09-12', '2026-08-11']"
    },
    {
      "id": "D-02",
      "title": "Discovery is served without authentication",
      "class": "core",
      "spec": "protocol/versions/2026-09-12/lifecycle.md#2-capability-discovery",
      "outcome": "pass",
      "detail": ""
    },
    {
      "id": "D-03",
      "title": "Discovery document matches the schema",
      "class": "core",
      "spec": "protocol/versions/2026-09-12/schema.md",
      "outcome": "pass",
      "detail": ""
    },
    {
      "id": "D-04",
      "title": "default_version is one of versions",
      "class": "core",
      "spec": "protocol/versions/2026-09-12/lifecycle.md#2-capability-discovery",
      "outcome": "pass",
      "detail": ""
    },
    {
      "id": "D-05",
      "title": "conformance_class agrees with capabilities",
      "class": "core",
      "spec": "protocol/versions/2026-09-12/lifecycle.md#2-capability-discovery",
      "outcome": "pass",
      "detail": "class=core"
    },
    {
      "id": "V-01",
      "title": "UHP-Version header on every response",
      "class": "core",
      "spec": "protocol/versions/2026-09-12/lifecycle.md#1-version-negotiation",
      "outcome": "pass",
      "detail": "UHP-Version: 2026-09-12"
    },
    {
      "id": "V-02",
      "title": "A supported version is honoured",
      "class": "core",
      "spec": "protocol/versions/2026-09-12/lifecycle.md#1-version-negotiation",
      "outcome": "pass",
      "detail": ""
    },
    {
      "id": "V-03",
      "title": "An unsupported version is refused, not silently substituted",
      "class": "core",
      "spec": "protocol/versions/2026-09-12/lifecycle.md#1-version-negotiation",
      "outcome": "pass",
      "detail": "supported=['2026-09-12', '2026-08-11']"
    },
    {
      "id": "A-01",
      "title": "Authenticated endpoints reject an absent credential",
      "class": "core",
      "spec": "protocol/versions/2026-09-12/architecture.md#5-authentication",
      "outcome": "pass",
      "detail": ""
    },
    {
      "id": "A-02",
      "title": "Authenticated endpoints reject an invalid credential",
      "class": "core",
      "spec": "protocol/versions/2026-09-12/architecture.md#5-authentication",
      "outcome": "pass",
      "detail": ""
    },
    {
      "id": "E-01",
      "title": "Errors use the structured envelope",
      "class": "core",
      "spec": "protocol/versions/2026-09-12/errors.md#1-the-error-envelope",
      "outcome": "pass",
      "detail": "code=harness_not_found"
    },
    {
      "id": "E-02",
      "title": "Unknown harness reports harness_not_found",
      "class": "core",
      "spec": "protocol/versions/2026-09-12/errors.md#31-request-and-routing",
      "outcome": "pass",
      "detail": ""
    },
    {
      "id": "E-03",
      "title": "Unknown response reports response_not_found",
      "class": "core",
      "spec": "protocol/versions/2026-09-12/errors.md#31-request-and-routing",
      "outcome": "pass",
      "detail": ""
    },
    {
      "id": "E-04",
      "title": "Error messages carry no stack traces",
      "class": "core",
      "spec": "protocol/versions/2026-09-12/errors.md#1-the-error-envelope",
      "outcome": "pass",
      "detail": ""
    },
    {
      "id": "H-01",
      "title": "Harness list is served and well formed",
      "class": "core",
      "spec": "protocol/versions/2026-09-12/harnesses.md#1-discovering-harnesses",
      "outcome": "pass",
      "detail": "1 harness(es)"
    },
    {
      "id": "H-02",
      "title": "A harness can be fetched by id",
      "class": "core",
      "spec": "protocol/versions/2026-09-12/harnesses.md#1-discovering-harnesses",
      "outcome": "pass",
      "detail": ""
    },
    {
      "id": "H-03",
      "title": "Model catalogue is served and availability is a boolean",
      "class": "core",
      "spec": "protocol/versions/2026-09-12/harnesses.md#3-models",
      "outcome": "pass",
      "detail": "1/1 models available"
    },
    {
      "id": "H-04",
      "title": "Per-harness model list is served",
      "class": "core",
      "spec": "protocol/versions/2026-09-12/harnesses.md#3-models",
      "outcome": "pass",
      "detail": ""
    },
    {
      "id": "T-01",
      "title": "A non-streaming task returns a valid Response",
      "class": "core",
      "spec": "protocol/versions/2026-09-12/tasks.md#3-the-response-object",
      "outcome": "pass",
      "detail": "status=completed in 1.1s"
    },
    {
      "id": "T-02",
      "title": "A finished task is in a terminal state",
      "class": "core",
      "spec": "protocol/versions/2026-09-12/lifecycle.md#3-task-lifecycle",
      "outcome": "pass",
      "detail": ""
    },
    {
      "id": "T-03",
      "title": "The response names the model that actually ran",
      "class": "core",
      "spec": "protocol/versions/2026-09-12/tasks.md#13-model-selection-and-substitution",
      "outcome": "pass",
      "detail": "model=gemini-flash-latest"
    },
    {
      "id": "T-04",
      "title": "The response reports its session",
      "class": "core",
      "spec": "protocol/versions/2026-09-12/lifecycle.md#4-session-lifecycle",
      "outcome": "pass",
      "detail": "session_id=hsess6bbb623ca4394a3a"
    },
    {
      "id": "T-05",
      "title": "usage is an object or explicitly null, never fabricated",
      "class": "core",
      "spec": "protocol/versions/2026-09-12/tasks.md#3-the-response-object",
      "outcome": "pass",
      "detail": ""
    },
    {
      "id": "T-06",
      "title": "A stored response can be read back",
      "class": "core",
      "spec": "protocol/versions/2026-09-12/tasks.md#4-reading-a-task-back",
      "outcome": "pass",
      "detail": ""
    },
    {
      "id": "T-07",
      "title": "Response ids are prefixed",
      "class": "core",
      "spec": "protocol/versions/2026-09-12/architecture.md#3-object-model",
      "outcome": "pass",
      "detail": ""
    },
    {
      "id": "S-01",
      "title": "A streaming task emits events",
      "class": "core",
      "spec": "protocol/versions/2026-09-12/streaming.md#1-opening-a-stream",
      "outcome": "pass",
      "detail": "7 events"
    },
    {
      "id": "S-02",
      "title": "Stream content type is text/event-stream",
      "class": "core",
      "spec": "protocol/versions/2026-09-12/streaming.md#1-opening-a-stream",
      "outcome": "pass",
      "detail": ""
    },
    {
      "id": "S-03",
      "title": "Every event validates against the schema",
      "class": "core",
      "spec": "protocol/versions/2026-09-12/schema.md",
      "outcome": "pass",
      "detail": "7 events valid"
    },
    {
      "id": "S-04",
      "title": "sequence_number starts at 0 and has no gaps",
      "class": "core",
      "spec": "protocol/versions/2026-09-12/streaming.md#3-ordering-guarantees",
      "outcome": "pass",
      "detail": ""
    },
    {
      "id": "S-05",
      "title": "The first event is response.created",
      "class": "core",
      "spec": "protocol/versions/2026-09-12/streaming.md#3-ordering-guarantees",
      "outcome": "pass",
      "detail": ""
    },
    {
      "id": "S-06",
      "title": "The stream ends with exactly one terminal event",
      "class": "core",
      "spec": "protocol/versions/2026-09-12/streaming.md#4-terminal-events",
      "outcome": "pass",
      "detail": "terminal=response.completed"
    },
    {
      "id": "S-07",
      "title": "The terminal event carries the complete response",
      "class": "core",
      "spec": "protocol/versions/2026-09-12/streaming.md#4-terminal-events",
      "outcome": "pass",
      "detail": ""
    },
    {
      "id": "S-08",
      "title": "Streaming and non-streaming agree on the result shape",
      "class": "core",
      "spec": "protocol/versions/2026-09-12/streaming.md#6-non-streaming",
      "outcome": "pass",
      "detail": ""
    },
    {
      "id": "S-09",
      "title": "The stream is progressive, not buffered to the end",
      "class": "core",
      "spec": "protocol/versions/2026-09-12/streaming.md#1-opening-a-stream",
      "outcome": "pass",
      "detail": "events spread over 1.1s"
    },
    {
      "id": "C-01",
      "title": "A task can continue a session",
      "class": "core",
      "spec": "protocol/versions/2026-09-12/sessions.md#1-continuing-a-session",
      "outcome": "pass",
      "detail": "session hsess6bbb623ca4394a3a extended"
    },
    {
      "id": "C-02",
      "title": "Cancelling a terminal task succeeds and changes nothing",
      "class": "core",
      "spec": "protocol/versions/2026-09-12/sessions.md#4-cancelling",
      "outcome": "pass",
      "detail": ""
    },
    {
      "id": "C-03",
      "title": "A running task can be cancelled and ends non-running",
      "class": "core",
      "spec": "protocol/versions/2026-09-12/sessions.md#4-cancelling",
      "outcome": "pass",
      "detail": "final status=cancelled"
    },
    {
      "id": "X-01",
      "title": "Sessions can be listed",
      "class": "extended",
      "spec": "protocol/versions/2026-09-12/sessions.md#2-listing-sessions",
      "outcome": "fail",
      "detail": "GET /v1/sessions returned HTTP 404"
    },
    {
      "id": "X-02",
      "title": "Session listing reports the end of pagination explicitly",
      "class": "extended",
      "spec": "protocol/versions/2026-09-12/sessions.md#2-listing-sessions",
      "outcome": "fail",
      "detail": "the listing has no pagination marker, so a client must guess the end from a short page \u2014 a heuristic that is wrong whenever a page is exactly full"
    },
    {
      "id": "X-03",
      "title": "A session can be inspected",
      "class": "extended",
      "spec": "protocol/versions/2026-09-12/sessions.md#3-inspecting-a-session",
      "outcome": "fail",
      "detail": "GET /v1/sessions/{id} returned HTTP 404"
    },
    {
      "id": "X-04",
      "title": "A session's turn history is available, in the specified shape",
      "class": "extended",
      "spec": "protocol/versions/2026-09-12/sessions.md#3-inspecting-a-session",
      "outcome": "fail",
      "detail": "GET /v1/sessions/{id}/turns returned HTTP 404"
    },
    {
      "id": "X-05",
      "title": "A file can be sent as task input",
      "class": "extended",
      "spec": "protocol/versions/2026-09-12/files.md#1-sending-files-in",
      "outcome": "pass",
      "detail": "accepted (the harness did not echo the token, which the protocol does not require)"
    },
    {
      "id": "X-06",
      "title": "Artifacts of a session can be listed",
      "class": "extended",
      "spec": "protocol/versions/2026-09-12/files.md#22-by-listing-the-session",
      "outcome": "fail",
      "detail": "GET /v1/sessions/{id}/files returned HTTP 404"
    },
    {
      "id": "X-07",
      "title": "An artifact downloads as raw bytes with nosniff",
      "class": "extended",
      "spec": "protocol/versions/2026-09-12/files.md#3-downloading",
      "outcome": "skip",
      "detail": "this session produced no artifacts to download"
    },
    {
      "id": "X-08",
      "title": "Artifact ids do not traverse outside their container",
      "class": "extended",
      "spec": "protocol/versions/2026-09-12/files.md#5-retention-and-scope",
      "outcome": "pass",
      "detail": "traversal probes refused"
    },
    {
      "id": "F-01",
      "title": "A harness can be created, updated and deleted",
      "class": "full",
      "spec": "protocol/versions/2026-09-12/harnesses.md#4-managing-harnesses",
      "outcome": "fail",
      "detail": "create returned HTTP 405: b'{\"detail\":\"Method Not Allowed\"}'"
    },
    {
      "id": "F-03",
      "title": "A skill folder round-trips through create and read",
      "class": "full",
      "spec": "protocol/versions/2026-09-12/harnesses.md#42-skills",
      "outcome": "skip",
      "detail": "could not create a harness to configure (HTTP 405)"
    },
    {
      "id": "F-04",
      "title": "An unrelated harness edit does not destroy skill contents",
      "class": "full",
      "spec": "protocol/versions/2026-09-12/harnesses.md#42-skills",
      "outcome": "skip",
      "detail": "could not create a harness to configure (HTTP 405)"
    },
    {
      "id": "F-05",
      "title": "A skill bundle without SKILL.md is refused at config time",
      "class": "full",
      "spec": "protocol/versions/2026-09-12/harnesses.md#42-skills",
      "outcome": "fail",
      "detail": "expected 400/422, got HTTP 405"
    },
    {
      "id": "F-06",
      "title": "MCP servers and disabled tools round-trip",
      "class": "full",
      "spec": "protocol/versions/2026-09-12/harnesses.md#41-mcp-servers",
      "outcome": "skip",
      "detail": "could not create a harness to configure (HTTP 405)"
    },
    {
      "id": "P-01",
      "title": "The plugins capability names the manifest schemas it installs",
      "class": "full",
      "spec": "protocol/versions/2026-09-12/plugins.md#7-discovery",
      "outcome": "skip",
      "detail": "this server reports the plugins capability false or absent, and the Plugins chapter is optional at every class"
    },
    {
      "id": "P-02",
      "title": "A plugin package round-trips, and is derived rather than copied",
      "class": "full",
      "spec": "protocol/versions/2026-09-12/plugins.md#2-the-plugin-object",
      "outcome": "skip",
      "detail": "this server reports the plugins capability false or absent, and the Plugins chapter is optional at every class"
    },
    {
      "id": "P-03",
      "title": "A package without plugin.json is refused at configuration time",
      "class": "full",
      "spec": "protocol/versions/2026-09-12/plugins.md#21-files",
      "outcome": "skip",
      "detail": "this server reports the plugins capability false or absent, and the Plugins chapter is optional at every class"
    },
    {
      "id": "P-04",
      "title": "A component name collision across the harness and a plugin is refused",
      "class": "full",
      "spec": "protocol/versions/2026-09-12/plugins.md#42-one-namespace-checked-at-configuration-time",
      "outcome": "skip",
      "detail": "this server reports the plugins capability false or absent, and the Plugins chapter is optional at every class"
    },
    {
      "id": "P-05",
      "title": "An unrelated harness edit does not destroy plugin contents",
      "class": "full",
      "spec": "protocol/versions/2026-09-12/plugins.md#3-installing-a-plugin",
      "outcome": "skip",
      "detail": "this server reports the plugins capability false or absent, and the Plugins chapter is optional at every class"
    },
    {
      "id": "P-06",
      "title": "A harness exports as a package that installs, without its credentials",
      "class": "full",
      "spec": "protocol/versions/2026-09-12/plugins.md#5-exporting-a-harness-as-a-plugin",
      "outcome": "skip",
      "detail": "this server reports the plugins capability false or absent, and the Plugins chapter is optional at every class"
    },
    {
      "id": "P-07",
      "title": "A component that fails to load is recorded, not silently dropped",
      "class": "full",
      "spec": "protocol/versions/2026-09-12/plugins.md#22-what-the-server-derives",
      "outcome": "skip",
      "detail": "this server reports the plugins capability false or absent, and the Plugins chapter is optional at every class"
    },
    {
      "id": "P-08",
      "title": "A disabled plugin stays installed, and stays disabled",
      "class": "full",
      "spec": "protocol/versions/2026-09-12/plugins.md#3-installing-a-plugin",
      "outcome": "skip",
      "detail": "this server reports the plugins capability false or absent, and the Plugins chapter is optional at every class"
    },
    {
      "id": "P-09",
      "title": "An unsupported manifest schema is refused, naming the supported ones",
      "class": "full",
      "spec": "protocol/versions/2026-09-12/plugins.md#22-what-the-server-derives",
      "outcome": "skip",
      "detail": "this server reports the plugins capability false or absent, and the Plugins chapter is optional at every class"
    },
    {
      "id": "P-10",
      "title": "Two plugins with the same name are refused",
      "class": "full",
      "spec": "protocol/versions/2026-09-12/plugins.md#3-installing-a-plugin",
      "outcome": "skip",
      "detail": "this server reports the plugins capability false or absent, and the Plugins chapter is optional at every class"
    },
    {
      "id": "F-07",
      "title": "Configured harnesses are cleaned up",
      "class": "full",
      "spec": "protocol/versions/2026-09-12/harnesses.md#53-delete",
      "outcome": "skip",
      "detail": "no harnesses were created by earlier checks"
    },
    {
      "id": "F-08",
      "title": "A session can be deleted at the protocol path",
      "class": "full",
      "spec": "protocol/versions/2026-09-12/sessions.md#6-deleting",
      "outcome": "fail",
      "detail": "DELETE /v1/sessions/{id} returned HTTP 405. \u00a76 names this path for session deletion; a server may keep /v1/traces/{id} besides, but the named one must work."
    },
    {
      "id": "F-02",
      "title": "Creating a harness with an unsupported base is refused",
      "class": "full",
      "spec": "protocol/versions/2026-09-12/harnesses.md#41-create",
      "outcome": "fail",
      "detail": "an unsupported base returned HTTP 405; expected it to be refused. A server that accepts a base it cannot run fails at task time instead, after the client has committed."
    },
    {
      "id": "T-08",
      "title": "A request carrying reserved fields is accepted, not rejected",
      "class": "core",
      "spec": "protocol/versions/2026-09-12/tasks.md#11-request-fields",
      "outcome": "pass",
      "detail": "accepted and ran"
    },
    {
      "id": "T-09",
      "title": "Reserved fields are reported in metadata.ignored_fields",
      "class": "core",
      "spec": "protocol/versions/2026-09-12/tasks.md#14-reserved-fields-tools-and-include",
      "outcome": "pass",
      "detail": "ignored_fields=['tools', 'include']"
    },
    {
      "id": "T-10",
      "title": "A task that sends no reserved field is not told one was ignored",
      "class": "core",
      "spec": "protocol/versions/2026-09-12/tasks.md#11-request-fields",
      "outcome": "pass",
      "detail": ""
    },
    {
      "id": "R-01",
      "title": "A shared session is published, and the link alone opens it",
      "class": "full",
      "spec": "protocol/versions/2026-09-12/sessions.md#5-session-sharing",
      "outcome": "skip",
      "detail": "this server reports session_sharing false, and Sessions \u00a75 is a MAY"
    },
    {
      "id": "R-02",
      "title": "The share can be read back from the endpoint that minted it",
      "class": "full",
      "spec": "protocol/versions/2026-09-12/sessions.md#5-session-sharing",
      "outcome": "skip",
      "detail": "this server reports session_sharing false, and Sessions \u00a75 is a MAY"
    },
    {
      "id": "R-03",
      "title": "A share id is not a credential for the API",
      "class": "full",
      "spec": "protocol/versions/2026-09-12/sessions.md#5-session-sharing",
      "outcome": "skip",
      "detail": "this server reports session_sharing false, and Sessions \u00a75 is a MAY"
    },
    {
      "id": "R-04",
      "title": "The shared view is read-only",
      "class": "full",
      "spec": "protocol/versions/2026-09-12/sessions.md#5-session-sharing",
      "outcome": "skip",
      "detail": "this server reports session_sharing false, and Sessions \u00a75 is a MAY"
    },
    {
      "id": "R-05",
      "title": "The shared view exposes no credentials",
      "class": "full",
      "spec": "protocol/versions/2026-09-12/sessions.md#5-session-sharing",
      "outcome": "skip",
      "detail": "this server reports session_sharing false, and Sessions \u00a75 is a MAY"
    },
    {
      "id": "R-06",
      "title": "Revocation kills every link minted for the session",
      "class": "full",
      "spec": "protocol/versions/2026-09-12/sessions.md#5-session-sharing",
      "outcome": "skip",
      "detail": "this server reports session_sharing false, and Sessions \u00a75 is a MAY"
    },
    {
      "id": "R-07",
      "title": "Deleting a session takes its shared view with it",
      "class": "full",
      "spec": "protocol/versions/2026-09-12/sessions.md#6-deleting",
      "outcome": "skip",
      "detail": "could not share the disposable session (HTTP 404)"
    },
    {
      "id": "R-08",
      "title": "A bodyless POST publishes, as \u00a75 says it does",
      "class": "full",
      "spec": "protocol/versions/2026-09-12/sessions.md#5-session-sharing",
      "outcome": "skip",
      "detail": "this server reports session_sharing false, and Sessions \u00a75 is a MAY"
    }
  ]
}