Skip to content

fix(OMN-11424): hash-bind receipt gate evidence - #1300

Merged
jonahgabriel merged 2 commits into
mainfrom
jonah/omn-11424-receipt-contract-hash
May 21, 2026
Merged

jonahgabriel merged 2 commits into
mainfrom
jonah/omn-11424-receipt-contract-hash

Conversation

@jonahgabriel

@jonahgabriel jonahgabriel commented May 21, 2026 •

Copy link
Copy Markdown
Contributor

Summary

  • Adds contract_sha256 to all OMN-11424 DoD receipts.
  • Uses sha256:a9d7c12cb0921003031908c41d0f4dfc668e6f8c02e1220c7767bd6d23c7a84e, the current hash of contracts/OMN-11424.yaml.
  • Fixes the omniclaude#1628 merge-group Receipt Gate failure.

Verification

  • LC_ALL=C shasum -a 256 contracts/OMN-11424.yaml -> a9d7c12cb0921003031908c41d0f4dfc668e6f8c02e1220c7767bd6d23c7a84e
  • uv run validate-yaml contracts/OMN-11424.yaml
  • CONTRACT_REPO_DIR=$PWD uv run python scripts/ci/run_contract_compliance_check.py --pr 1628 --repo OmniNode-ai/omniclaude --contracts-dir contracts -> OMN-11424: 10/10 PASS, 0 WARN, 0 BLOCK
  • pre-commit/pre-push hooks passed

Evidence-Ticket: OMN-11424

Summary by CodeRabbit

  • Chores
    • Updated command evidence records with contract SHA256 hash values for verification across multiple configurations.

Review Change Stack

@coderabbitai

coderabbitai Bot commented May 21, 2026 •

Copy link
Copy Markdown
📝 Walkthrough

Walkthrough

This PR adds a contract_sha256 metadata field to ten command evidence YAML files in the drift/dod_receipts/OMN-11424/ directory. Each file receives an identical one-line addition at line 10 containing a SHA-256 checksum value alongside existing evidence metadata (schema, ticket, check type, runner, and probe details).

Changes

Contract SHA256 Addition to Evidence Records

Layer / File(s) Summary
Add contract_sha256 metadata to command evidence
drift/dod_receipts/OMN-11424/dod-deploy/command.yaml, drift/dod_receipts/OMN-11424/dod-occ-self/command.yaml, drift/dod_receipts/OMN-11424/dod-omnibase-compat-pr-97/command.yaml, drift/dod_receipts/OMN-11424/dod-omnibase-core-pr-1124/command.yaml, drift/dod_receipts/OMN-11424/dod-omnibase-infra-pr-1694/command.yaml, drift/dod_receipts/OMN-11424/dod-omniclaude-pr-1628/command.yaml, drift/dod_receipts/OMN-11424/dod-omniintelligence-pr-658/command.yaml, drift/dod_receipts/OMN-11424/dod-omnimarket-pr-736/command.yaml, drift/dod_receipts/OMN-11424/dod-onex-change-control-pr-1293/command.yaml, drift/dod_receipts/OMN-11424/dod-workflow-trigger-proof/command.yaml
Ten evidence records for ticket OMN-11424 each add a contract_sha256 field with a SHA-256 digest value, recording the expected contract hash for validation or audit purposes.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~8 minutes

Possibly related PRs

  • OmniNode-ai/onex_change_control#1003: Both PRs modify drift/dod_receipts/**/command.yaml evidence records by adding/updating the contract_sha256 field for check_type: command receipts.
  • OmniNode-ai/onex_change_control#981: Both PRs modify the same contract_sha256 field in drift/dod_receipts/**/command.yaml evidence entries across multiple receipt records.
  • OmniNode-ai/onex_change_control#978: Both PRs modify the drift/dod_receipts/**/command.yaml evidence schema to include/bind a contract_sha256 value for command check validation.

Poem

🐰 Ten checksums, SHA-256 true,
Evidence sealed with hashes new—
OMN-11424 now complete,
Contract validation, neat and sweet! ✨

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Title check ✅ Passed The title clearly summarizes the main change: adding contract SHA256 hashes to receipt gate evidence for ticket OMN-11424, which is reflected in all 10 modified files.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
📝 Generate docstrings
  • Create stacked PR
  • Commit on current branch
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch jonah/omn-11424-receipt-contract-hash

Comment @coderabbitai help to get the list of available commands and usage tips.

@jonahgabriel
jonahgabriel merged commit 6be7081 into main May 21, 2026
35 checks passed
@jonahgabriel
jonahgabriel deleted the jonah/omn-11424-receipt-contract-hash branch May 21, 2026 20:46
jonahgabriel pushed a commit that referenced this pull request Jun 22, 2026
…relock (token fields)

Carries contracts/OMN-13507.yaml + dod_receipts for the omnibase_infra PR #2071
Receipt Gate via Evidence-Source. Re-locks omnibase-core git pin from db7f341353
(OMN-13444, predates token fields) to core dev HEAD 1b22fd18b so the dev runtime
image bundles a ModelTaskDelegatedEvent carrying tokens_input/tokens_output
(#1300/OMN-13408) + context_pack_hash (#1299/OMN-13407).

Dev-lane only; no prod/stability/judge mutation.
jonahgabriel pushed a commit that referenced this pull request Jun 22, 2026
…relock (token fields)

Carries contracts/OMN-13507.yaml + dod_receipts for the omnibase_infra PR #2071
Receipt Gate via Evidence-Source. Re-locks omnibase-core git pin from db7f341353
(OMN-13444, predates token fields) to core dev HEAD 1b22fd18b so the dev runtime
image bundles a ModelTaskDelegatedEvent carrying tokens_input/tokens_output
(#1300/OMN-13408) + context_pack_hash (#1299/OMN-13407).

Dev-lane only; no prod/stability/judge mutation.
jonahgabriel pushed a commit that referenced this pull request Jun 22, 2026
…relock (token fields)

Carries contracts/OMN-13507.yaml + dod_receipts for the omnibase_infra PR #2071
Receipt Gate via Evidence-Source. Re-locks omnibase-core git pin from db7f341353
(OMN-13444, predates token fields) to core dev HEAD 1b22fd18b so the dev runtime
image bundles a ModelTaskDelegatedEvent carrying tokens_input/tokens_output
(#1300/OMN-13408) + context_pack_hash (#1299/OMN-13407).

Dev-lane only; no prod/stability/judge mutation.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant