[bokelley]

Summary

The 3.2.x backport of the working group decision of 2026-11-09: 3.x opens the schemas that were meant to be open. A 3.2 validator should not reject a newer 3.x payload just because a schema was closed.

• additionalProperties goes from false to true at 674 of the 775 closed locations in static/schemas/source/ on 3.2.x.
• 101 locations stay closed, matching the keep-closed list approved for 3.3.
• Where closure was the only thing rejecting a specific field, the opened schema now rejects that field by name (not). This follows fix(schemas): reopen the 3.2 proposal-flow schemas closed against DR-0019 #8531's canonical-product precedent. Each such node says in its description what it rejects and why.
• Patch changeset. 3.2.10 was cut on 2026-11-10 (Version Packages #8886) without this PR, so it targets 3.2.11. The branch is rebased onto the current 3.2.x tip, 8558eef55d (fix(compliance): 3.2.x backport - functional-dispatch signing key (#8889) and enforced_policies gate for policy_backed_rejections (#8850) #8938).

Source of truth: #8866 (3.3, merged into main as 2dc672e316) owns the classification and the named rejections, including Konstantin Mirin's review of it. This PR mirrors #8866's final state node by node.

Approval: Brian approved the keep-closed (b) list as the 3.3 inventory had it on 2026-11-09, relayed by the release-planning agent. The review changes below were decided on #8866 and mirrored here.

Important

Ready for review. Brian merges (gated schema paths). No auto-merge. Hold the 3.2.11 Version Packages PR #8942 until this PR has merged and release.yml has regenerated #8942 to include this changeset.

Classification on 3.2.x

The tree was inventoried with the same inventory.py/classify.py as 3.3 and classified by the same rules.

	Count
Closed locations on 3.2.x before this PR	775 in 342 files
Opened (class a)	674
Kept closed (class b)	101 in 48 files
Locations shared with #8866 (747 open / 112 closed)	772: every one has the same class
oneof_risk pairs on 3.2.x	4 (a2ui/bound-value 0/4 and 3/4, brand.json 1/3 and 2/4), all inside the kept-closed set

Kept closed, by reason:

Reason	Locations	Files
oneOf disjointness	9	a2ui/bound-value.json, brand.json
Join keys (metric qualifiers, forecast dimensions)	21	canonical-metric-qualifier, the qualifier objects, forecast-dimension-*
Signature envelope	1	response-payload-jws-envelope
Privacy boundary	20	TMP identity-match-request / context-match-request, catalog-item-reference-not-found-error, agent-permission-denied, billing-not-permitted-for-agent, get-principal-response (recognized, unconfigured, failed), sync-principal-response (failed), get-reporting-status-response (unavailable lookup)
Credential-free reporting destinations	10	agent-reporting-destination, reporting-write-destination, reporting-dataset-share-destination
No free text to agents	1	agent-reporting-destination-state setup
No key material or markup	8	placement-presentation
Maps keyed by identifier (patternProperties)	5	creative-asset, creative-manifest, creative-localization, creative-localization-readback, list-creatives-response
Held closed until 4.0 (commercial terms; a hold, not a structural reason)	26	commercial-terms, product-purchase, change-term, change-term-constraints, sla-window, canonical-measurement-terms, canonical-performance-standard, canonical-reporting-commitment, canonical-pricing-option, canonical-budget-allocation, bidding-policy, proposal-budget-constraint

Named rejections

Of #8866's 64 not clauses (unchanged through its merge as 2dc672e316), 46 apply on 3.2.x and are present at the same pointers with the same value. The other 18 target schemas or nodes that 3.2.x does not have: media-buy issues, reporting subscriptions, proposal webhooks, signal-delivery-method, canonical-installment, proposal holds, asset sizes, the merge assignment op, the vendor_metric goal, capabilities implementation, and timezone_cutovers. No rejection on 3.2.x is absent from #8866.

They cover only names the protocol defines elsewhere or forbids there. Following the #8866 review, step, gpc_honored, political, threshold_rate and per_ad_spend are not rejected, and list-application receipts reject auth_token alone. access_token on the delivery-ready webhook stays as a credential clamp.

Key-presence unions. Each branch rejects its sibling's keys by name:

• account-ref and canonical-account-ref: account_id vs the natural key (brand, operator, operator_unit, currency, timezone, sandbox);
• geo-region requirement and support countries: all_values vs values;
• image bleed: uniform vs per-side;
• postal-area: the deprecated fused-system form has no country;
• sync_reporting_receipts results: receipt vs adjustment_receipt, and a failed result neither.

Descriptions. Every node or union with a named rejection says what it rejects and why. Two sentences are worded for 3.2.x:

• the sync_creatives assignment one, because 3.2.x has no merge op;
• the closed lookup_unavailable branch's statement of its clamp.

#8866's description cleanups are ported too, so opened schemas no longer claim to be closed.

sync_plans reserved names. The opened plan item rejects version, status, syncedAt, revisionHistory, committedBudget and committedByType. They are the governance agent's bookkeeping names, which the plan_hash profile strips from its preimage, so a buyer value under one of them would sit outside the hash. The list matches 3.2's closed "Excluded fields" list. This is ported from #8866 fa7aefacfe, with tests/sync-plans-reserved-names.test.cjs.

Principal results. The get_principal current branch and the sync_principal applied and validated branches open, as on #8866. The validated (dry-run) branch rejects destination_ref and configuration_version.

3.2.x-only deltas

Location	On 3.2.x	Why
media-buy/get-reporting-status-response.json /oneOf/1/oneOf/0 (unavailable lookup)	stays closed	Its caller-isolation text requires one identical lookup_unavailable shape for unknown and unauthorized identifiers. On 3.2.x the branch is closed with the envelope redeclared, because the envelope-composition backport was reverted in #8612. 3.3 enforces the same clamp differently: under #8547's envelope rule the branch is open there, with a closed adcp_error/errors[], a const message, and named rejections of ledger_snapshot_id, ledger_as_of and account_id.
media-buy/get-reporting-status-response.json /oneOf/1/oneOf/1 (operational failure)	opens	Not a privacy shape. The required failure_kind const keeps the two branches disjoint. Already open on main.
brand.json /definitions/identity_relying_party	opens	An inline object on 3.2.x. On main it is a $ref alias to core/identity-relying-party.json, which is class (a).
core/targeting-overlay-requirements.json description	partial port	Only the "request shape" → "request schema" wording is ported. The boolean-demographics deprecation (x-deprecated-in: 3.3.0) and the gender-targeting wording in #8866 are 3.3 content and stay out.
core/canonical-installment-ref.json, trust/v1/trust.json	n/a	Not present on 3.2.x. They are kept closed on 3.3.

Other changes

• MCP model-context projection. stripModelContextAnnotations now drops boolean additionalProperties, true as well as false. This is the projector change from f5c56db on main. It also omits a named rejection beside declared properties, as it omits bounds, which comes from fix(schemas): open the 3.3 schemas that were meant to be open #8866. Model-context budgets are unchanged. PARITY_COMPILE_LIMIT is also unchanged on 3.2.x; it does not trip.
• training-agent. The product-discovery tools/list schemas omit additionalProperties: true inside bundled definitions (9c1c52d). Its sync_principal part does not apply, because the 3.2 training agent does not implement sync_principal.
• Tests mirror fix(schemas): open the 3.3 schemas that were meant to be open #8866's edits for the test files 3.2.x has, citing DR-0009 because DR-0036 is not on 3.2.x:
  • generic unknown-key probes, including those for the dropped rejections, now expect the key to validate;
  • account-ref, canonical-account-ref and image-bleed tests are wired into test:schemas. They load the source schemas, as 3.2.x tests do, because scripts/built-schemas.cjs is not on 3.2.x;
  • the MCP legacy-graph check walks the parsed schema and skips not and descriptions;
  • product-discovery-schema-parity compares openness rather than the literal keyword.

Verification

Head 600458f51d, base 8558eef55d:

• Parity with merged fix(schemas): open the 3.3 schemas that were meant to be open #8866 (2dc672e316): all 64 of its not clauses are unchanged since fa7aefacfe, and 46 apply here, all identical. Of 3.2.x's 775 originally closed locations, all exist on main, and the only open/closed difference is the agreed lookup_unavailable override. fix(schemas): open the 3.3 schemas that were meant to be open #8866's follow-up commits after fa7aefacfe:
  • 7d4dd1b289 (refinement heading) is ported;
  • 55ac5a5d76 (lint-additive-minor wording) doesn't apply, because those files are not on 3.2.x;
  • 06dc420d0c (3.3 docs) doesn't apply, because neither its whats-new page, its experimental-status row nor its release-notes section exists on 3.2.x.
    Other schema text that differs between fa7aefacfe and 2dc672e316 came from unrelated main PRs merged into fix(schemas): open the 3.3 schemas that were meant to be open #8866's branch (for example fix(schema): loosen over-specified URL patterns to ^https:// (#8398) #8792, feat(schema): add 3gp, mpeg and m4v to video containers (#8107) #8668, feat(schema): add card_image_sizes to image_carousel #8937), not from the opening.
• The closed set left in the tree is exactly the 101 kept-closed locations (inventory.py re-run). All 772 locations shared with fix(schemas): open the 3.3 schemas that were meant to be open #8866 have the same class, and fix(schemas): open the 3.3 schemas that were meant to be open #8866's named rejections match as described above.
• 11 test files local run: account-ref, image-bleed, canonical-account-ref, targeting-aware-discovery, seller-governance-policy-surfaces, mcp-schema-projection/analysis, outcome-target, principal-contract, trusted-match-context-merge and geo-region pass (125/125), plus composed-schema-validation (481/481) and example validation (79/79).
• After the rebase the closed set and named rejections are unchanged, because the new base touched only static/schemas/source/index.json's version. The docs checks (lint:schema-links, docs-nav) pass.
• CI on 600458f51d: 48 checks pass, 3 skipped (code_review, record, Mintlify Deployment), and the PR is mergeable. That covers all four canonical shards, server unit and integration, CodeQL, Dependency Review, and every storyboard tenant, current and 3.0-compat. Ladon's verdict is escalate to human review: gated schema paths, and no Critical, High or Medium findings.

Docs. Two separate docs commits correct the closure statements:

• the refine[] scope branches (refinement.mdx, with the error the opened schema actually gives) and governance policy entries (content-standards/index.mdx) are described as open;
• the sync_plans plan item (governance/campaign/specification.mdx) is open, so the governance agent's bookkeeping fields are simply undeclared there;
• the AccountRef variants (protocol/calling-an-agent.mdx) are told apart by named rejections rather than additionalProperties: false.

The wording matches #8866's.

🤖 Generated with Claude Code

[aao-secretariat]

Ladon verdict: Escalate to human review

Escalate — gated schema paths require human/CODEOWNERS review.

This PR is a 332-file 3.2.x backport mirroring #8866's open-closed-schema decision (ratified WG 2026-11-09), opening additionalProperties: false→true in 674 of 775 locations while keeping 101 closed. The reviewer verified the load-bearing cases hold (fail-closed privacy clamps, not-based oneOf disjointness, schema↔docs coherence, changeset present, no dist/** mutation) and surfaced no Critical/High/Medium findings.

However, the PR touches hundreds of files under static/schemas/source/**, which are under a hard, deterministic approval gate (gated_paths: true), and review_decision is unknown/none — not APPROVED. Per decision-table row 2, a gated-paths PR cannot be approved until a real human/CODEOWNERS approval satisfies the gate. Additionally, the repo's constitution treats this protocol-surface wire-shape change as a governance/ratification call (patch-eligibility and Breaking-class classification are human acts), reinforcing that a human must sign off.

No blocking code defects were found, so this is not request-changes — it is a clean diff awaiting the required human review on gated protocol-surface files.

Why human review

• Gated paths touched (static/schemas/source/** — 332 protocol-surface schema files) and review_decision is not APPROVED; human/CODEOWNERS approval required before merge (decision-table row 2).
• Protocol wire-shape change (open-closed-schema backport) is a governance/ratification call per the constitution's Breaking-class hard gate — ratification is a human act.
• This PR touches a path under a hard, non-overridable approval gate (static/schemas/source/aao/agent-publishers.json (modified) matches static/schemas/source/**; static/schemas/source/account/sync-governance-request.json (modified) matches static/schemas/source/**; static/schemas/source/account/sync-governance-response.json (modified) matches static/schemas/source/**; static/schemas/source/brand.json (modified) matches static/schemas/source/**; static/schemas/source/collection/base-collection-source.json (modified) matches static/schemas/source/**; static/schemas/source/collection/collection-list-changed-webhook.json (modified) matches static/schemas/source/**; static/schemas/source/collection/collection-list-filters.json (modified) matches static/schemas/source/**; static/schemas/source/collection/collection-list.json (modified) matches static/schemas/source/**; static/schemas/source/collection/get-collection-list-request.json (modified) matches static/schemas/source/**; static/schemas/source/collection/get-collection-list-response.json (modified) matches static/schemas/source/**; static/schemas/source/compliance/comply-test-controller-request.json (modified) matches static/schemas/source/**; static/schemas/source/compliance/comply-test-controller-response.json (modified) matches static/schemas/source/**; static/schemas/source/content-standards/get-media-buy-artifacts-request.json (modified) matches static/schemas/source/**; static/schemas/source/core/account-change-recorded-webhook.json (modified) matches static/schemas/source/**; static/schemas/source/core/account-identity-change-preview.json (modified) matches static/schemas/source/**; static/schemas/source/core/account-identity-change.json (modified) matches static/schemas/source/**; static/schemas/source/core/account-ref.json (modified) matches static/schemas/source/**; static/schemas/source/core/account-status-changed-webhook.json (modified) matches static/schemas/source/**; static/schemas/source/core/account-timezone-capability.json (modified) matches static/schemas/source/**; static/schemas/source/core/account.json (modified) matches static/schemas/source/**; static/schemas/source/core/agent-encryption-key.json (modified) matches static/schemas/source/**; static/schemas/source/core/agent-notification-

…(truncated)…