[jonahgabriel]

Summary

Adds PR-scoped concurrency to 21 workflows. Pull-request runs group by PR number with SHA fallback; only pull-request runs cancel superseded work. Push, merge-group, scheduled, and manually dispatched runs remain non-cancelling.

Ticket: OMN-19639
Ruling: 2026-09-25T17:30:10Z

Workflows changed

• .github/workflows/auto-tag-on-merge.yml
• .github/workflows/call-occ-preflight.yml
• .github/workflows/call-receipt-gate.yml
• .github/workflows/call-reject-skip.yml
• .github/workflows/canonical-inference-gate.yml
• .github/workflows/check-db-ownership.yml
• .github/workflows/check-handshake.yml
• .github/workflows/cr-thread-gate-caller.yml
• .github/workflows/dep-provenance-gate.yml
• .github/workflows/kb-doc-gate.yml
• .github/workflows/main-target-guard.yml
• .github/workflows/no-faked-boundary.yml
• .github/workflows/omni-standards-compliance.yml
• .github/workflows/pr-title-check.yml
• .github/workflows/precommit-parity-gate.yml
• .github/workflows/required-check-skip-guard-caller.yml
• .github/workflows/security-scan.yml
• .github/workflows/semantic-diff-labeler.yml
• .github/workflows/stale-todo-gate.yml
• .github/workflows/todo-audit-on-merge.yml
• .github/workflows/url-authority-gate.yml

Workflows skipped

• ci.yml — aggregator (quality-gate, tests-gate); deferred to the own-job cancelled-supersession grace wave.
• propagate-config.yml — existing top-level concurrency block; semantics preserved.

Verification

• actionlint: passed on every changed workflow.
• Repository-configured yamllint: not present.
• 36 focused workflow-shape tests passed.
• Changed-file pre-commit: passed.
• Commit hooks: passed.
• Pre-push hooks: passed.
• Touched-file actionlint cleanup was included where required.

Evidence-Ticket: OMN-19639
Evidence-Source: OCC#11411

[onexbot-occ-writer]

No OCC evidence companion was minted for this PR.

product PR is a draft; companion suppressed (F-17)

Matched in the state: draft

To clear this: Mark the PR ready for review. The ready_for_review trigger re-fires the born path and the companion mints then.

Reported by node_occ_companion_effect (decline code pr_draft, OMN-16665). This decision was made against the PR's LIVE state at compute time, not at publish time — a green publisher job only means the command reached the broker.

[onexbot-occ-writer]

OCC autobind did not mint a companion for this PR: no changed-file candidate could be proven RED against the merge base, and emitting a PR-existence probe instead would be non-falsifiable evidence (OMN-15247). Hand-authored evidence is required.

[onexbot-occ-writer]

OCC autobind rebound this PR's evidence-source stamp line to OCC#11411.

The receipt gate's own eligibility validator, run against the change-control tree the gate pins for OCC#11411, returned eligible for head ec819ccb875014987e308c32bde146d4b136d99f. The body now carries exactly one stamp line. Displaced: OCC#11372.

Reported by occ_companion_emitter (OMN-18853).

[onexbot-occ-writer]

No OCC evidence companion was minted for this PR.

this PR is already bound to OCC#11411; its evidence companion exists and nothing needs authoring

To clear this: Nothing to do — the companion already exists.

Reported by node_occ_companion_effect (decline code already_bound, OMN-16665). This decision was made against the PR's LIVE state at compute time, not at publish time — a green publisher job only means the command reached the broker.

[onexbot-occ-writer]

OCC autobind rebound this PR's evidence-source stamp line to OCC#11372.

The receipt gate's own eligibility validator, run against the change-control tree the gate pins for OCC#11372, returned eligible for head 12fd5ed188775a048d6b0a3e63e1c7bd72fbe2b6. The body now carries exactly one stamp line. Displaced: OCC#11411.

Reported by occ_companion_emitter (OMN-18853).

[jonahgabriel]

Also carried: expired workflow waiver renewal

The kb-doc-gate.yml waiver in architecture-handshakes/pull-request-workflow-budget.yaml (owning ticket OMN-16589) expired on 2026-09-25. Since then the pull-request workflow ratchet fails with WAIVER_EXPIRED on every PR in this repo that touches a pull_request workflow file, and this PR touches 21 of them. The Quality Gate, the Tests Gate, the pre-commit suite and CI Summary all fail as followers. This PR now renews that one waiver for seven days, to 2026-10-02, following the bounded-renewal pattern OMN-16359 used for the waiver just above it. The same renewal is proposed in omnibase_core#1781, which is held on unrelated OMN-19677 work. It makes no migration or retirement decision, and OMN-16589 still owns the waiver. The branch also merges current dev (7a35007) with no conflicts.

Local proof at 12fd5ed: the ratchet validator exits 0, where it reported WAIVER_EXPIRED on the previous head. tests/validation/test_pull_request_workflow_ratchet.py, tests/unit/validation/test_ci_workflow_shape.py and tests/ci pass (428 tests). actionlint passes on all 21 changed workflows, and pre-commit from origin/dev to HEAD passes.