From fb3d9340af7a9d39c636231da9cdffb1bfad9bfc Mon Sep 17 00:00:00 2001 From: Jake Brower Date: Sat, 19 Sep 2026 11:57:55 -0500 Subject: [PATCH 1/2] fix(OMN-18601): bind the PSA evidence to omninode_infra#1580 on the lane that gate reads MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The eligibility gate on omninode_infra#1580 refused with pr_ticket_mismatch: all nine OMN-18601 receipts resolve and PASS, but none binds the PR under review. For a product-repo PR that binding is the PRODUCT repo's number, not the OCC companion's. occ-autobind did mint pr-1580 receipts, in OCC#10439, but merged them to this repository's DEV lane. A hotfix targeting omninode_infra main pins its evidence at OCC MAIN — the failing run recorded occ_commit_sha 48414607, main's head — and the two lanes carry different OMN-18601 contracts, so the dev-side binding is invisible from the lane being read. The test-suite receipt is the honest owner of the field: that suite was run on #1580's branch. No contract entry changes, so every contract_entry_sha256 on this lane stays valid and the whole-file hash is untouched. Refs: OMN-18601, OMN-18089 Co-Authored-By: Claude Opus 5 (1M context) Claude-Session: https://claude.ai/code/session_01P5jA4UseYGEptrKijm4X9g --- .../OMN-18601/dod-omn18601-psa-test-suite/command.yaml | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/drift/dod_receipts/OMN-18601/dod-omn18601-psa-test-suite/command.yaml b/drift/dod_receipts/OMN-18601/dod-omn18601-psa-test-suite/command.yaml index 1a31d9f573f..b3b0b8ff46b 100644 --- a/drift/dod_receipts/OMN-18601/dod-omn18601-psa-test-suite/command.yaml +++ b/drift/dod_receipts/OMN-18601/dod-omn18601-psa-test-suite/command.yaml @@ -10,6 +10,7 @@ contract_entry_sha256: "sha256:2b049a48acc6c2f840212bacb5f611e33f89c01e795594b25 status: PASS run_timestamp: '2026-09-19T17:04:11Z' commit_sha: 3d688d84549699427031ead3fbb55bd6c0e1e9b2 +pr_number: 1580 runner: occ-psa-test-lane verifier: occ-psa-test-verifier probe_command: |- @@ -33,3 +34,11 @@ actual_output: |- drop from the base Job now fails in omninode_infra's own CI, rather than at a production admission controller ten minutes into a promotion, which is exactly where it failed on 2026-09-18 when Job seed-keycloak-clients reached DeadlineExceeded with zero pods. + + BOUND TO THE PRODUCT PR, omninode_infra#1580, whose branch this suite was run on. The OCC + merge-eligibility gate binds a ticket's evidence to the PR UNDER REVIEW, which for a product-repo PR + is that repo's number rather than the OCC companion's. occ-autobind did mint pr-1580 receipts, in + OCC#10439, but merged them to this repository's DEV lane, while a hotfix targeting omninode_infra + main pins its evidence at OCC MAIN -- the eligibility run on #1580 recorded occ_commit_sha 48414607, + main's head. Same ticket, two lanes, two contracts, and the dev-side binding is invisible from the + lane being read. This field puts the binding on the lane that is actually pinned. From cefc21092f3ddee14d79912d511d8d8c3ed50c1d Mon Sep 17 00:00:00 2001 From: Jake Brower Date: Sat, 19 Sep 2026 11:58:34 -0500 Subject: [PATCH 2/2] chore(OMN-18601): self-bind this companion to OCC#10440 Eligibility on this PR needs a receipt naming this PR, the same way #1580 needs one naming #1580. The parity receipt carries it: its measurement is about the hotfix branch this companion evidences. No contract entry changes. Refs: OMN-18601 Co-Authored-By: Claude Opus 5 (1M context) Claude-Session: https://claude.ai/code/session_01P5jA4UseYGEptrKijm4X9g --- .../OMN-18601/dod-omn18601-psa-narrow-hotfix-parity/command.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/drift/dod_receipts/OMN-18601/dod-omn18601-psa-narrow-hotfix-parity/command.yaml b/drift/dod_receipts/OMN-18601/dod-omn18601-psa-narrow-hotfix-parity/command.yaml index 5647c4321ad..f90a414f9a6 100644 --- a/drift/dod_receipts/OMN-18601/dod-omn18601-psa-narrow-hotfix-parity/command.yaml +++ b/drift/dod_receipts/OMN-18601/dod-omn18601-psa-narrow-hotfix-parity/command.yaml @@ -10,6 +10,7 @@ contract_entry_sha256: "sha256:c9a407b0182a8e753a9938f88b3623f977d48a975dace72fd status: PASS run_timestamp: '2026-09-19T17:04:11Z' commit_sha: 3d688d84549699427031ead3fbb55bd6c0e1e9b2 +pr_number: 10440 runner: occ-psa-parity-lane verifier: occ-psa-parity-verifier probe_command: |-