evidence(OMN-17943): backfill diff-derived behavior proofs onto pre-minter contracts

contracts/OMN-17943.yaml

@@ -391,3 +391,11 @@ dod_evidence:
     checks:
       - check_type: "command"
         check_value: "gh pr view 12745 --repo OmniNode-ai/onex_change_control --json number,state,headRefName"
+  - id: "occ-self-bind-pr-12866"
+    description: |-
+      OCC self-bind for PR #12866 — binds this contract to the evidence PR carrying it, by pr_number, so eligibility can resolve a PASS receipt for the evidence PR itself.
+    source: "manual"
+    status: "verified"
+    checks:
+      - check_type: "command"
+        check_value: "gh pr view 12866 --repo OmniNode-ai/onex_change_control --json number,state,headRefName"

contracts/OMN-20533.yaml

@@ -90,3 +90,11 @@ dod_evidence:
         check_value: |-
           uv run pytest tests/integration/infra/test_runtime_effects_tenant_credential_read_omn20533.py -q
         cwd: "${OMNI_HOME}/omnibase_infra"
+  - id: "dod-occ-diff-derived-behavior-proof"
+    description: "PR #4561 on OmniNode-ai/omnibase_infra — diff-derived behavior proof (OMN-16434)."
+    source: "generated"
+    checks:
+      - check_type: "test_passes"
+        check_value: |-
+          uv run pytest tests/integration/infra/test_runtime_effects_tenant_credential_read_omn20533.py -q
+        cwd: "${OMNI_HOME}/omnibase_infra"

contracts/OMN-20534.yaml

@@ -81,3 +81,11 @@ dod_evidence:
         check_value: |-
           uv run pytest tests/handlers/test_ledger_write_guard_omn19513.py tests/hooks_system/test_hook_canary.py tests/unit/scripts/test_hook_canary_ledger_append.py -q
         cwd: "${OMNI_HOME}/omniclaude"
+  - id: "dod-occ-diff-derived-behavior-proof"
+    description: "PR #2543 on OmniNode-ai/omniclaude — diff-derived behavior proof (OMN-16434)."
+    source: "generated"
+    checks:
+      - check_type: "test_passes"
+        check_value: |-
+          uv run pytest tests/handlers/test_ledger_write_guard_omn19513.py tests/hooks_system/test_hook_canary.py tests/unit/scripts/test_hook_canary_ledger_append.py -q
+        cwd: "${OMNI_HOME}/omniclaude"

contracts/OMN-20535.yaml

@@ -143,3 +143,11 @@ dod_evidence:
         check_value: |-
           uv run pytest tests/unit/hooks/test_hook_emit_drainer.py tests/unit/hooks/test_hook_emit_drainer_loss_log_omn20535.py -q
         cwd: "${OMNI_HOME}/omniclaude"
+  - id: "dod-occ-diff-derived-behavior-proof"
+    description: "PR #2545 on OmniNode-ai/omniclaude — diff-derived behavior proof (OMN-16434)."
+    source: "generated"
+    checks:
+      - check_type: "test_passes"
+        check_value: |-
+          uv run pytest tests/unit/hooks/test_hook_emit_drainer.py tests/unit/hooks/test_hook_emit_drainer_loss_log_omn20535.py -q
+        cwd: "${OMNI_HOME}/omniclaude"

contracts/OMN-20536.yaml

@@ -81,3 +81,11 @@ dod_evidence:
         check_value: |-
           uv run pytest tests/unit/nodes/node_projection_work_ledger/test_work_ledger_parity_explain.py tests/unit/nodes/node_projection_work_ledger/test_work_ledger_parity_receipt.py -q
         cwd: "${OMNI_HOME}/omnimarket"
+  - id: "dod-occ-diff-derived-behavior-proof"
+    description: "PR #3400 on OmniNode-ai/omnimarket — diff-derived behavior proof (OMN-16434)."
+    source: "generated"
+    checks:
+      - check_type: "test_passes"
+        check_value: |-
+          uv run pytest tests/unit/nodes/node_projection_work_ledger/test_work_ledger_parity_receipt.py -q
+        cwd: "${OMNI_HOME}/omnimarket"

contracts/OMN-20543.yaml

@@ -125,3 +125,10 @@ dod_evidence:
       - check_type: "test_passes"
         check_value: "uv run pytest tests/ci/test_receipt_gate_caller_evidence_omn20070.py -q"
         cwd: "${OMNI_HOME}/omnibase_core"
+  - id: "dod-occ-diff-derived-behavior-proof"
+    description: "PR #1886 on OmniNode-ai/omnibase_core — diff-derived behavior proof (OMN-16434)."
+    source: "generated"
+    checks:
+      - check_type: "test_passes"
+        check_value: "uv run pytest tests/ci/test_receipt_gate_caller_evidence_omn20070.py -q"
+        cwd: "${OMNI_HOME}/omnibase_core"

drift/behavior_proof_backfill_refusals.yaml

@@ -2656,4 +2656,21 @@ refusals:
     judged_at: '2026-10-04T07:14:47Z'
     reason: no `dod-<owner>-<repo>-pr-<n>` item names a product PR, so there is no diff to derive a behavior
       proof from.
+  OMN-20532:
+    decision: REFUSED_NO_PRODUCT_PR
+    judged_against:
+      legacy_binding_receipts: []
+      product_prs:
+        - OmniNode-ai/omninode_infra#1799
+    judged_at: '2026-10-05T05:43:48Z'
+    reason: no `dod-<owner>-<repo>-pr-<n>` item names a product PR, so there is no diff to derive a behavior
+      proof from.
+  OMN-20552:
+    decision: REFUSED_NO_PRODUCT_PR
+    judged_against:
+      legacy_binding_receipts: []
+      product_prs: []
+    judged_at: '2026-10-05T05:43:36Z'
+    reason: no `dod-<owner>-<repo>-pr-<n>` item names a product PR, so there is no diff to derive a behavior
+      proof from.
 schema_version: 1.0.0

drift/dod_receipts/OMN-17943/occ-self-bind-pr-12866/command.yaml

@@ -0,0 +1,21 @@
+---
+actual_output: 'PASS: OCC PR #12866 on OmniNode-ai/onex_change_control reads back OPEN at branch auto/behavior-proof-backfill-37269014060,
+  tip 5cfda313e5a50341c6c3592594dacfc8dda8acee. This receipt binds OMN-17943 to the evidence PR carrying
+  it; it makes no claim about the evidence in that PR, which its own receipts carry.'
+branch: auto/behavior-proof-backfill-37269014060
+check_type: command
+check_value: gh pr view 12866 --repo OmniNode-ai/onex_change_control --json number,state,headRefName
+commit_sha: 5cfda313e5a50341c6c3592594dacfc8dda8acee
+contract_entry_sha256: sha256:861de44e8288677bc4c96d265c8a9235e181c19bb63766371b819d5a1d1363f5
+evidence_item_id: occ-self-bind-pr-12866
+exit_code: 0
+pr_number: 12866
+probe_command: gh pr view 12866 --repo OmniNode-ai/onex_change_control --json number,state,headRefName
+probe_stdout: '{"headRefName": "auto/behavior-proof-backfill-37269014060", "number": 12866, "state": "OPEN"}'
+run_timestamp: '2026-10-05T05:45:08Z'
+runner: omnimarket-ci occ-behavior-proof-backfill
+schema_version: 1.0.0
+status: PASS
+ticket_id: OMN-17943
+verifier: github-actions occ-pr-readback
+working_dir: null

drift/dod_receipts/OMN-20533/dod-occ-diff-derived-behavior-proof/test_passes.yaml

@@ -0,0 +1,25 @@
+---
+actual_output: 'PASS: the declared targets are derived from the merged diff of OmniNode-ai/omnibase_infra#4561;
+  the PR''s own CI at head 641c37be6525a65f5e440535f9e70a955e1702ea — which is this receipt''s commit_sha,
+  the code state the recorded check ran against — concluded success; it subsequently merged as 3cab249dd3b253537b6100d0d3be91ad52144930,
+  a different tree no check here was run against. This receipt records that observation — it does not
+  claim the pytest run was executed by the backfill. Run: https://github.com/OmniNode-ai/omnimarket/actions/runs/37269014060'
+branch: jonah/omn-20439-runtime-effects-tenant-credential-read
+check_type: test_passes
+check_value: uv run pytest tests/integration/infra/test_runtime_effects_tenant_credential_read_omn20533.py
+  -q
+commit_sha: 641c37be6525a65f5e440535f9e70a955e1702ea
+contract_entry_sha256: sha256:706093be704bbc77226f3be1527b928acf453490620c91daefad093f1669bbb8
+evidence_item_id: dod-occ-diff-derived-behavior-proof
+exit_code: 0
+pr_number: 4561
+probe_command: 'gh api ''repos/OmniNode-ai/omnibase_infra/commits/641c37be6525a65f5e440535f9e70a955e1702ea/check-runs?per_page=100''
+  --paginate --slurp  # judged on the latest attempt of each check name'
+probe_stdout: '{"failing": 0, "latest": 180, "names": [], "total": 206}'
+run_timestamp: '2026-10-05T05:43:47Z'
+runner: omnimarket-ci occ-behavior-proof-backfill
+schema_version: 1.0.0
+status: PASS
+ticket_id: OMN-20533
+verifier: github-actions merged-pr diff derivation
+working_dir: null

drift/dod_receipts/OMN-20534/dod-occ-diff-derived-behavior-proof/test_passes.yaml

@@ -0,0 +1,25 @@
+---
+actual_output: 'PASS: the declared targets are derived from the merged diff of OmniNode-ai/omniclaude#2543;
+  the PR''s own CI at head 5309557c78c8a37114feb053e2e8495c0e72cb65 — which is this receipt''s commit_sha,
+  the code state the recorded check ran against — concluded success; it subsequently merged as fc4070b1e218fe4d770e91339179996775e90440,
+  a different tree no check here was run against. This receipt records that observation — it does not
+  claim the pytest run was executed by the backfill. Run: https://github.com/OmniNode-ai/omnimarket/actions/runs/37269014060'
+branch: jonah/omn-20534-canary-appends-through-onex-ledger
+check_type: test_passes
+check_value: uv run pytest tests/handlers/test_ledger_write_guard_omn19513.py tests/hooks_system/test_hook_canary.py
+  tests/unit/scripts/test_hook_canary_ledger_append.py -q
+commit_sha: 5309557c78c8a37114feb053e2e8495c0e72cb65
+contract_entry_sha256: sha256:ccf5eea4a8a6c4d90a38d68a82761b4d003e3d04450c59eb6250a171cdcaf20c
+evidence_item_id: dod-occ-diff-derived-behavior-proof
+exit_code: 0
+pr_number: 2543
+probe_command: 'gh api ''repos/OmniNode-ai/omniclaude/commits/5309557c78c8a37114feb053e2e8495c0e72cb65/check-runs?per_page=100''
+  --paginate --slurp  # judged on the latest attempt of each check name'
+probe_stdout: '{"failing": 0, "latest": 135, "names": [], "total": 185}'
+run_timestamp: '2026-10-05T05:43:45Z'
+runner: omnimarket-ci occ-behavior-proof-backfill
+schema_version: 1.0.0
+status: PASS
+ticket_id: OMN-20534
+verifier: github-actions merged-pr diff derivation
+working_dir: null

drift/dod_receipts/OMN-20535/dod-occ-diff-derived-behavior-proof/test_passes.yaml

@@ -0,0 +1,25 @@
+---
+actual_output: 'PASS: the declared targets are derived from the merged diff of OmniNode-ai/omniclaude#2545;
+  the PR''s own CI at head ac4035406e763aef7fff4807d893880436a81f8d — which is this receipt''s commit_sha,
+  the code state the recorded check ran against — concluded success; it subsequently merged as 6b411a459cb954ae949ac24219d83db39bdf8dd4,
+  a different tree no check here was run against. This receipt records that observation — it does not
+  claim the pytest run was executed by the backfill. Run: https://github.com/OmniNode-ai/omnimarket/actions/runs/37269014060'
+branch: jonah/omn-20535-drainer-loss-row-id
+check_type: test_passes
+check_value: uv run pytest tests/unit/hooks/test_hook_emit_drainer.py tests/unit/hooks/test_hook_emit_drainer_loss_log_omn20535.py
+  -q
+commit_sha: ac4035406e763aef7fff4807d893880436a81f8d
+contract_entry_sha256: sha256:f2efd5c147cc2b2e5fd33e79f860f1181c9212c021f503caddd7e2f3e5abff03
+evidence_item_id: dod-occ-diff-derived-behavior-proof
+exit_code: 0
+pr_number: 2545
+probe_command: 'gh api ''repos/OmniNode-ai/omniclaude/commits/ac4035406e763aef7fff4807d893880436a81f8d/check-runs?per_page=100''
+  --paginate --slurp  # judged on the latest attempt of each check name'
+probe_stdout: '{"failing": 0, "latest": 132, "names": [], "total": 182}'
+run_timestamp: '2026-10-05T05:43:43Z'
+runner: omnimarket-ci occ-behavior-proof-backfill
+schema_version: 1.0.0
+status: PASS
+ticket_id: OMN-20535
+verifier: github-actions merged-pr diff derivation
+working_dir: null

drift/dod_receipts/OMN-20536/dod-occ-diff-derived-behavior-proof/test_passes.yaml

@@ -0,0 +1,25 @@
+---
+actual_output: 'PASS: the declared targets are derived from the merged diff of OmniNode-ai/omnimarket#3400;
+  the PR''s own CI at head 929ffde00d8423634ffd33f1177ca28d8f7f7f37 — which is this receipt''s commit_sha,
+  the code state the recorded check ran against — concluded success; it subsequently merged as cce192a59d8e5fa57322aa107d27b25fbb545002,
+  a different tree no check here was run against. This receipt records that observation — it does not
+  claim the pytest run was executed by the backfill. Run: https://github.com/OmniNode-ai/omnimarket/actions/runs/37269014060'
+branch: jonah/omn-20536-parity-utc-day-receipt
+check_type: test_passes
+check_value: uv run pytest tests/unit/nodes/node_projection_work_ledger/test_work_ledger_parity_receipt.py
+  -q
+commit_sha: 929ffde00d8423634ffd33f1177ca28d8f7f7f37
+contract_entry_sha256: sha256:dfd432366a8474fb94df12b65ec9f11fd35e7a47f6ae3f985b4f8cd742675842
+evidence_item_id: dod-occ-diff-derived-behavior-proof
+exit_code: 0
+pr_number: 3400
+probe_command: 'gh api ''repos/OmniNode-ai/omnimarket/commits/929ffde00d8423634ffd33f1177ca28d8f7f7f37/check-runs?per_page=100''
+  --paginate --slurp  # judged on the latest attempt of each check name'
+probe_stdout: '{"failing": 0, "latest": 140, "names": [], "total": 144}'
+run_timestamp: '2026-10-05T05:43:41Z'
+runner: omnimarket-ci occ-behavior-proof-backfill
+schema_version: 1.0.0
+status: PASS
+ticket_id: OMN-20536
+verifier: github-actions merged-pr diff derivation
+working_dir: null

drift/dod_receipts/OMN-20543/dod-occ-diff-derived-behavior-proof/test_passes.yaml

@@ -0,0 +1,24 @@
+---
+actual_output: 'PASS: the declared targets are derived from the merged diff of OmniNode-ai/omnibase_core#1886;
+  the PR''s own CI at head 26ddcb4100221baf1bf1af73fadeb0be54cb5029 — which is this receipt''s commit_sha,
+  the code state the recorded check ran against — concluded success; it subsequently merged as 39ad8e5c88f607aed6a035a3241c96ed36d547a0,
+  a different tree no check here was run against. This receipt records that observation — it does not
+  claim the pytest run was executed by the backfill. Run: https://github.com/OmniNode-ai/omnimarket/actions/runs/37269014060'
+branch: jonah/omn-20543-dod-verify-postgres
+check_type: test_passes
+check_value: uv run pytest tests/ci/test_receipt_gate_caller_evidence_omn20070.py -q
+commit_sha: 26ddcb4100221baf1bf1af73fadeb0be54cb5029
+contract_entry_sha256: sha256:ceac96a632ea7ec7a6cb7190ef990d3e2cdf28ad5299c5ebceba377c634f1dc5
+evidence_item_id: dod-occ-diff-derived-behavior-proof
+exit_code: 0
+pr_number: 1886
+probe_command: 'gh api ''repos/OmniNode-ai/omnibase_core/commits/26ddcb4100221baf1bf1af73fadeb0be54cb5029/check-runs?per_page=100''
+  --paginate --slurp  # judged on the latest attempt of each check name'
+probe_stdout: '{"failing": 0, "latest": 158, "names": [], "total": 311}'
+run_timestamp: '2026-10-05T05:43:39Z'
+runner: omnimarket-ci occ-behavior-proof-backfill
+schema_version: 1.0.0
+status: PASS
+ticket_id: OMN-20543
+verifier: github-actions merged-pr diff derivation
+working_dir: null