[cross-repo from server#350] Conformance blocker: complete child-workflows parity coverage (#666)

Author: durable-workflow-ops

docs/architecture/platform-conformance-suite.md

@@ -18,7 +18,7 @@ The machine-readable mirror of the public authority is
 `Workflow\V2\Support\PlatformConformanceSuite`, exported by the
 standalone `workflow-server` from `GET /api/cluster/info` under
 `platform_conformance_suite`. Schema:
-`durable-workflow.v2.platform-conformance.suite`, version `6`.
+`durable-workflow.v2.platform-conformance.suite`, version `7`.
 
 ## Why one suite
 
@@ -50,10 +50,10 @@ target (the standalone `server` claims `standalone_server` *and*
 
 | Target | Required surface families | Required fixture categories |
 | --- | --- | --- |
-| `standalone_server` | `server_api`, `worker_protocol`, `cluster_info_manifests` | `control_plane_request_response`, `signal_query_runtime_contract`, `namespace_runtime_contract`, `worker_task_lifecycle`, `failure_repair_actionability` |
-| `official_sdk` | `official_sdks` (own row), `worker_protocol`, `history_event_wire_formats` | `control_plane_request_response`, `signal_query_runtime_contract`, `namespace_runtime_contract`, `worker_task_lifecycle`, `history_replay_bundles` |
-| `worker_protocol_implementation` | `worker_protocol`, `history_event_wire_formats` | `worker_task_lifecycle`, `signal_query_runtime_contract`, `namespace_runtime_contract`, `history_replay_bundles` |
-| `cli_json_client` | `cli_json` | `control_plane_request_response` (request side), `signal_query_runtime_contract`, `namespace_runtime_contract`, `cli_json_envelopes` |
+| `standalone_server` | `server_api`, `worker_protocol`, `cluster_info_manifests` | `control_plane_request_response`, `signal_query_runtime_contract`, `namespace_runtime_contract`, `child_workflow_runtime_contract`, `worker_task_lifecycle`, `failure_repair_actionability` |
+| `official_sdk` | `official_sdks` (own row), `worker_protocol`, `history_event_wire_formats` | `control_plane_request_response`, `signal_query_runtime_contract`, `namespace_runtime_contract`, `child_workflow_runtime_contract`, `worker_task_lifecycle`, `history_replay_bundles` |
+| `worker_protocol_implementation` | `worker_protocol`, `history_event_wire_formats` | `worker_task_lifecycle`, `signal_query_runtime_contract`, `namespace_runtime_contract`, `child_workflow_runtime_contract`, `history_replay_bundles` |
+| `cli_json_client` | `cli_json` | `control_plane_request_response` (request side), `signal_query_runtime_contract`, `namespace_runtime_contract`, `child_workflow_runtime_contract`, `cli_json_envelopes` |
 | `waterline_contract_surface` | `waterline_api` | `signal_query_runtime_contract`, `namespace_runtime_contract`, `waterline_observer_envelopes` |
 | `repair_actionability_surface` | `worker_protocol` (failure subset), `server_api` (repair routes) | `failure_repair_actionability` |
 | `mcp_discovery_surface` | `mcp_discovery_results` | `mcp_discovery_envelopes` |
@@ -76,6 +76,7 @@ them from the declared locations.
 | `signal_query_runtime_contract` | `durable-workflow.github.io` | `static/platform-conformance/signal-query-runtime-scenarios.json` | Live published-artifact scenarios for signal delivery and query consistency across PHP and Python workers, CLI and SDK clients, replay timing, terminal runs, malformed payloads, and operator visibility. |
 | `history_replay_bundles` | `durable-workflow.github.io`, `workflow`, `sdk-python` | `static/platform-conformance/replay-runtime-scenarios.json`, `tests/Fixtures/V2/GoldenHistory/`, `tests/fixtures/golden_history/` | Deterministic replay coverage for frozen history bundles, worker restart replay, adversarial refusal, and in-flight signal timing across the official PHP and Python runtimes. |
 | `namespace_runtime_contract` | `durable-workflow.github.io` | `static/platform-conformance/namespace-runtime-scenarios.json` | Live published-artifact scenarios for Temporal-parity namespace isolation, lifecycle cleanup, CLI and SDK namespace selection, PHP worker routing, Waterline visibility, Nexus opt-in crossing, and search-attribute value query isolation. |
+| `child_workflow_runtime_contract` | `durable-workflow.github.io` | `static/platform-conformance/child-workflow-runtime-scenarios.json` | Live published-artifact scenarios for child workflow orchestration across PHP and Python workers, cross-language parent/child execution, failure and cancellation propagation, replay after worker restart, concurrent fan-out, and namespace behavior. |
 | `failure_repair_actionability` | `server`, `workflow` | `docs/contracts/external-task-result.md`, `docs/contracts/replay-verification.md`, fixture pointers therein | Failure objects and repair / actionability shapes for stuck tasks, deterministic failure, and replay-mismatch surfaces. |
 | `cli_json_envelopes` | `cli` | `tests/fixtures/control-plane/`, `schemas/` | The `--output=json` and `--output=jsonl` envelopes that automation depends on. Diagnostic-only fields are listed and excluded from the contract diff. |
 | `waterline_observer_envelopes` | `waterline` | (TBD: `tests/fixtures/observer/`) | The `/waterline/api/v2/*` shapes and operator dashboard JSON envelopes. Status: provisional — fixtures land alongside the next Waterline contract slice. |
@@ -186,6 +187,35 @@ and include:
 - result-record evidence with artifact versions, timestamps, outcomes,
   and routed product findings.
 
+### Child workflow runtime contract
+
+The `child_workflow_runtime_contract` category is stable and
+load-bearing. It must run against published install channels only, pin
+the resolved artifact versions in the result, and name every required
+child workflow scenario as `pass`, `fail`, `unsupported`, `not_covered`,
+or `runner_blocked` with a linked finding. A single parent/child smoke is
+nonconforming until the run covers PHP and Python worker participation,
+same-language and cross-language parent/child execution, typed child
+failure propagation, parent-to-child cancellation, direct child
+cancellation observed by the parent, replay across parent-worker
+restart, concurrent fan-out, and namespace behavior.
+
+Required scenarios are published in the public child workflow scenario
+manifest at `static/platform-conformance/child-workflow-runtime-scenarios.json`
+and include:
+
+- published-artifact install-only evidence for server, CLI, PHP runtime,
+  and Python SDK;
+- Python parent to Python child and PHP parent to PHP child baselines;
+- PHP parent to Python child and Python parent to PHP child
+  cross-language execution;
+- typed child failure round-trip across the parent/child runtime matrix;
+- parent cancellation propagation to a running child and direct child
+  cancellation observed by the parent as a typed cancellation;
+- replay across parent-worker restart while awaiting a child;
+- concurrent child fan-out with aggregate result and timestamp evidence;
+- namespace behavior for parent/child lineage.
+
 ## Pass / fail rules
 
 The harness runs each fixture against the implementation under test and
@@ -213,14 +243,15 @@ emits a structured result. The rules below are normative.
    release does not conform.
 
 5. **Stable runtime scenario coverage.** A stable runtime category such
-   as `signal_query_runtime_contract`, `history_replay_bundles`, or
-   `namespace_runtime_contract` must
-   report every scenario it declares with one of the statuses published
-   by its runtime scenario manifest: `pass`, `fail`, `unsupported`,
-   `not_covered`, or `runner_blocked`. Full conformance requires every
-   required scenario to pass. A smoke-only subset, omitted scenario,
-   unsupported public surface, uncovered cell, or runner-blocked cell is
-   nonconforming and must link the owning finding.
+   as `signal_query_runtime_contract`, `history_replay_bundles`,
+   `namespace_runtime_contract`, or
+   `child_workflow_runtime_contract` must report every scenario it
+   declares with one of the statuses published by its runtime scenario
+   manifest: `pass`, `fail`, `unsupported`, `not_covered`, or
+   `runner_blocked`. Full conformance requires every required scenario
+   to pass. A smoke-only subset, omitted scenario, unsupported public
+   surface, uncovered cell, or runner-blocked cell is nonconforming and
+   must link the owning finding.
 
 6. **Provisional categories warn but do not fail.** A failed fixture in
    a provisional category emits a warning in the harness output. A
@@ -351,6 +382,14 @@ docs. It indexes them under one normative declaration so a single
   `sdk-python/tests/fixtures/golden_history/` are the replay scenario and
   bundle authorities. The suite cites them as the
   `history_replay_bundles` source-of-truth.
+- `durable-workflow.github.io/static/platform-conformance/namespace-runtime-scenarios.json`
+  is the stable public source of truth for the
+  `namespace_runtime_contract` category and the scenario matrix consumed
+  by published artifact harnesses.
+- `durable-workflow.github.io/static/platform-conformance/child-workflow-runtime-scenarios.json`
+  is the stable public source of truth for the
+  `child_workflow_runtime_contract` category and the scenario matrix
+  consumed by published artifact harnesses.
 
 ## Changing this document
 

src/V2/Support/PlatformConformanceSuite.php

@@ -29,7 +29,7 @@ final class PlatformConformanceSuite
 {
     public const SCHEMA = 'durable-workflow.v2.platform-conformance.suite';
 
-    public const VERSION = 6;
+    public const VERSION = 7;
 
     public const RESULT_SCHEMA = 'durable-workflow.v2.platform-conformance.result';
 
@@ -113,6 +113,7 @@ private static function targets(): array
                     'control_plane_request_response',
                     'signal_query_runtime_contract',
                     'namespace_runtime_contract',
+                    'child_workflow_runtime_contract',
                     'worker_task_lifecycle',
                     'failure_repair_actionability',
                 ],
@@ -128,6 +129,7 @@ private static function targets(): array
                     'control_plane_request_response',
                     'signal_query_runtime_contract',
                     'namespace_runtime_contract',
+                    'child_workflow_runtime_contract',
                     'worker_task_lifecycle',
                     'history_replay_bundles',
                 ],
@@ -142,6 +144,7 @@ private static function targets(): array
                     'worker_task_lifecycle',
                     'signal_query_runtime_contract',
                     'namespace_runtime_contract',
+                    'child_workflow_runtime_contract',
                     'history_replay_bundles',
                 ],
             ],
@@ -154,6 +157,7 @@ private static function targets(): array
                     'control_plane_request_response',
                     'signal_query_runtime_contract',
                     'namespace_runtime_contract',
+                    'child_workflow_runtime_contract',
                     'cli_json_envelopes',
                 ],
             ],
@@ -292,6 +296,18 @@ private static function fixtureCatalog(): array
                 'authority_doc' => self::AUTHORITY_URL,
                 'required_scenarios' => self::namespaceRequiredScenarios(),
             ],
+            'child_workflow_runtime_contract' => [
+                'status' => self::CATEGORY_STATUS_STABLE,
+                'description' => 'Live published-artifact scenarios for child workflow orchestration across PHP and Python workers, cross-language parent/child execution, failure and cancellation propagation, replay after worker restart, concurrent fan-out, and namespace behavior.',
+                'sources' => [
+                    [
+                        'repository' => 'durable-workflow.github.io',
+                        'path' => 'static/platform-conformance/child-workflow-runtime-scenarios.json',
+                    ],
+                ],
+                'authority_doc' => self::AUTHORITY_URL,
+                'required_scenarios' => self::childWorkflowRequiredScenarios(),
+            ],
             'failure_repair_actionability' => [
                 'status' => self::CATEGORY_STATUS_STABLE,
                 'description' => 'Failure objects and repair / actionability shapes for stuck tasks, deterministic failure, and replay-mismatch surfaces.',
@@ -381,6 +397,7 @@ private static function passFailRules(): array
                     'signal_query_runtime_contract',
                     'history_replay_bundles',
                     'namespace_runtime_contract',
+                    'child_workflow_runtime_contract',
                 ],
             ],
             'provisional_categories_warn_only' => [
@@ -453,6 +470,26 @@ private static function namespaceRequiredScenarios(): array
         ];
     }
 
+    /**
+     * @return list<string>
+     */
+    private static function childWorkflowRequiredScenarios(): array
+    {
+        return [
+            'published_artifact_install_only',
+            'python_parent_python_child_baseline',
+            'php_parent_php_child_baseline',
+            'php_parent_python_child_cross_language',
+            'python_parent_php_child_cross_language',
+            'child_failure_round_trip_matrix',
+            'parent_cancellation_propagates_to_child',
+            'direct_child_cancellation_observed_by_parent',
+            'worker_restart_replay_preserves_child_outcome',
+            'concurrent_child_fan_out',
+            'child_workflow_namespace_contract',
+        ];
+    }
+
     /**
      * @return array<string, mixed>
      */

tests/Unit/V2/PlatformConformanceSuiteTest.php

@@ -28,7 +28,7 @@ public function testManifestAdvertisesAuthorityIdentity(): void
         $manifest = PlatformConformanceSuite::manifest();
 
         $this->assertSame('durable-workflow.v2.platform-conformance.suite', $manifest['schema']);
-        $this->assertSame(6, $manifest['version']);
+        $this->assertSame(7, $manifest['version']);
         $this->assertSame('docs/platform-conformance.md', $manifest['authority_doc']);
         $this->assertSame(
             'https://durable-workflow.github.io/docs/2.0/platform-conformance',
@@ -110,6 +110,7 @@ public function testFixtureCatalogCoversIssueDeliverables(): void
             'signal_query_runtime_contract',
             'history_replay_bundles',
             'namespace_runtime_contract',
+            'child_workflow_runtime_contract',
             'failure_repair_actionability',
             'cli_json_envelopes',
             'waterline_observer_envelopes',
@@ -382,6 +383,62 @@ public function testNamespaceRuntimeContractNamesFullTemporalParitySurface(): vo
         );
     }
 
+    public function testChildWorkflowRuntimeContractIsRequiredForParentChildSurfaces(): void
+    {
+        $manifest = PlatformConformanceSuite::manifest();
+        $category = $manifest['fixture_catalog']['child_workflow_runtime_contract'];
+
+        $this->assertSame(
+            PlatformConformanceSuite::CATEGORY_STATUS_STABLE,
+            $category['status'],
+            'child workflow parity must be load-bearing, not a single-runtime smoke.',
+        );
+
+        foreach ([
+            'standalone_server',
+            'official_sdk',
+            'worker_protocol_implementation',
+            'cli_json_client',
+        ] as $target) {
+            $this->assertContains(
+                'child_workflow_runtime_contract',
+                $manifest['targets'][$target]['required_fixture_categories'],
+                "$target must be graded against the live child workflow contract",
+            );
+        }
+
+        $this->assertSame(
+            [
+                [
+                    'repository' => 'durable-workflow.github.io',
+                    'path' => 'static/platform-conformance/child-workflow-runtime-scenarios.json',
+                ],
+            ],
+            $category['sources'],
+            'the public child workflow scenario manifest must be the consumable source for full child workflow coverage',
+        );
+
+        foreach ([
+            'published_artifact_install_only',
+            'python_parent_python_child_baseline',
+            'php_parent_php_child_baseline',
+            'php_parent_python_child_cross_language',
+            'python_parent_php_child_cross_language',
+            'child_failure_round_trip_matrix',
+            'parent_cancellation_propagates_to_child',
+            'direct_child_cancellation_observed_by_parent',
+            'worker_restart_replay_preserves_child_outcome',
+            'concurrent_child_fan_out',
+            'child_workflow_namespace_contract',
+        ] as $scenario) {
+            $this->assertContains(
+                $scenario,
+                $category['required_scenarios'],
+                "child workflow conformance must name scenario $scenario",
+            );
+        }
+    }
+
     public function testPassFailRulesNameTheCoreContract(): void
     {
         $manifest = PlatformConformanceSuite::manifest();
@@ -415,6 +472,11 @@ public function testPassFailRulesNameTheCoreContract(): void
             $rules['stable_runtime_scenario_coverage']['applies_to_categories'],
             'smoke-only namespace coverage must not satisfy the stable runtime category',
         );
+        $this->assertContains(
+            'child_workflow_runtime_contract',
+            $rules['stable_runtime_scenario_coverage']['applies_to_categories'],
+            'smoke-only child workflow coverage must not satisfy the stable runtime category',
+        );
         foreach (['pass', 'fail', 'unsupported', 'not_covered', 'runner_blocked'] as $status) {
             $this->assertStringContainsString(
                 $status,