docs: mark diverging v1.1 surfaces as Partial in conformance matrix (#65)

The conformance page no longer claims Full/implemented for surfaces whose
wire shape still diverges from ARCP v1.1 (session.hello/welcome, ping/pong,
resume, job.submit, terminal states, progress body, subscription types). Each
Partial row links the tracking issues; surfaces that now match the spec are
labeled Full.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: nficano

docs/conformance.md

@@ -4,23 +4,26 @@ The PHP SDK targets ARCP v1.1.
 
 ## v1.1 coverage
 
-| Area | Status |
-| --- | --- |
-| Envelope JSON and typed message catalog | implemented |
-| Session open/accepted/rejected/close | implemented |
-| Ping/pong, ack, resume replay | implemented |
-| `session.list_jobs` / `session.jobs` | implemented |
-| Tool invocation and job lifecycle | implemented |
-| Agent `name@version` resolution | implemented |
-| Progress, streams, and `job.result_chunk` | implemented |
-| Permissions and leases | implemented |
-| `cost.budget` counters | implemented |
-| `model.use` leases | implemented |
-| Provisioned credentials | implemented |
-| `LEASE_SUBSET_VIOLATION` | implemented |
-| Artifacts | implemented |
-| Subscriptions and backfill | implemented |
-| Vendor extensions | implemented |
+Status legend: **Full** — matches the v1.1 wire shape; **Partial** — works
+but still diverges from the spec wire shape (tracked by the linked issues).
+
+| Area | Status | Notes |
+| --- | --- | --- |
+| Envelope JSON and typed message catalog | Partial | no top-level `event_seq` yet (#132, #152) |
+| Session hello/welcome/rejected/close | Partial | uses `session.open`/`session.accepted` not `session.hello`/`session.welcome`; no `session.closed` ack (#121, #122, #123, #130) |
+| Ping/pong, ack, resume | Partial | `ping`/`pong` not `session.ping`/`session.pong`; `ack` is advisory-only; resume uses `after_message_id` not `session.resume` + rotating token (#127, #128, #146, #55, #125) |
+| `session.list_jobs` / `session.jobs` | Partial | entries omit `lease`/`parent_job_id`/`last_event_seq`; credentials redacted from the inventory (#143) |
+| Tool invocation and job lifecycle | Partial | submission uses `tool.invoke` not `job.submit`; terminal states are `completed`/`failed` not `success`/`error`/`timed_out` (#134, #137) |
+| Agent `name@version` resolution | Full | deterministic resolution; ambiguous unversioned names are rejected |
+| Progress, streams, and `job.result_chunk` | Partial | progress body uses `percent` not `current`/`total`; inline/chunk mixing not yet prevented (#63, #147, #64, #153, #154) |
+| Permissions and leases | Partial | `expires_at` UTC/future validation and runtime expiry enforcement pending (#60, #156) |
+| `cost.budget` counters | Partial | negative metrics rejected and exact-zero allowed; no pre-dispatch budget check (#158) |
+| `model.use` leases | Full | pattern grammar matches the spec examples |
+| Provisioned credentials | Partial | per-job scoping and retried revocation in place; no startup revocation replay (#160) |
+| `LEASE_SUBSET_VIOLATION` | Full | model.use, cost.budget, and `expires_at` containment enforced |
+| Artifacts | Full | `ref()`/`fetch()` agree on expiry |
+| Subscriptions and backfill | Partial | uses `subscribe`/`subscribe.accepted` not `job.subscribe`/`job.subscribed`; principal authorization pending (#138, #151, #139) |
+| Vendor extensions | Full | core-type classification and `x-` rejection match the spec |
 
 ## v1.1 features