[jonahgabriel]

Summary

Closes OMN-10347

• validate_pr_receipts() now returns passed=False when any [skip-*] token is found without # skip-token-allowed: <receipt-id>
• Previously [skip-receipt-gate:] returned passed=True, friction_logged=True (exit 0) — this violated Rule Refactor tech debt: Add Protocols and Pydantic models for type safety #10
• Adds SKIP_TOKEN_PATTERN + ALLOWLIST_PATTERN constants; OVERRIDE_PATTERN becomes an alias for backwards compat
• 20 new unit tests covering all cases

Problem

OMN-9608 remediation: GHA run 25132166746 accepted [skip-receipt-gate:] with only a warning. The escape hatch (# skip-token-allowed: <id>) continues to work — it must be paired with a non-empty receipt ID from the user.

DoD evidence

pytest (receipt gate tests)

tests/unit/validation/test_receipt_gate_adversarial.py — 18 passed
tests/unit/validation/test_receipt_gate_cli.py — 1 passed
tests/unit/validation/test_receipt_gate_workflow_shape.py — 7 passed
tests/unit/validation/test_receipt_gate_skip_token_hardening.py — 20 passed
Total: 46 passed

Key behavioral verification

• [skip-receipt-gate: docs only] → passed=False ✓
• [skip-deploy-gate: reason] → passed=False ✓ (regression)
• [skip-anything: reason] → passed=False ✓
• [skip-receipt-gate: ...] + # skip-token-allowed: USER-APPROVAL-2026-04-30-jonah → passed=True, friction_logged=True ✓
• # skip-token-allowed: (empty id) → passed=False ✓

pre-commit

pre-commit run --all-files — all passed

[coderabbitai]

Warning

Rate limit exceeded

@jonahgabriel has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 5 minutes and 1 second before requesting another review.

To keep reviews running without waiting, you can enable usage-based add-on for your organization. This allows additional reviews beyond the hourly cap. Account admins can enable it under billing.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 706ae348-a2ae-40fd-b8e1-d82160b5c861

📥 Commits

Reviewing files that changed from the base of the PR and between d315c8c and c94ca43.

📒 Files selected for processing (4)

• scripts/validation/validate_pr_receipts.py
• src/omnibase_core/validation/receipt_gate.py
• tests/unit/scripts/validation/test_validate_pr_receipts.py
• tests/unit/validation/test_receipt_gate_skip_token_hardening.py

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch jonah/omn-10347-harden-receipt-gate

---

_{Review rate limit: 0/5 reviews remaining, refill in 5 minutes and 1 second.}

_{Comment @coderabbitai help to get the list of available commands and usage tips.}