From f1b39f294d286764fcc550fb5d6f85ea42579fce Mon Sep 17 00:00:00 2001 From: jonahgabriel Date: Tue, 26 May 2026 12:22:48 -0400 Subject: [PATCH] evidence(OMN-12243): bind guard receipts to downstream PRs --- contracts/OMN-12243.yaml | 21 +++++++++++++++++++ .../command.yaml | 2 +- .../dod-omnibase-infra-pr-1768/command.yaml | 19 +++++++++++++++++ .../dod-omniclaude-pr-1684/command.yaml | 18 ++++++++++++++++ .../dod-omnimarket-pr-931/command.yaml | 18 ++++++++++++++++ 5 files changed, 77 insertions(+), 1 deletion(-) create mode 100644 drift/dod_receipts/OMN-12243/dod-omnibase-infra-pr-1768/command.yaml create mode 100644 drift/dod_receipts/OMN-12243/dod-omniclaude-pr-1684/command.yaml create mode 100644 drift/dod_receipts/OMN-12243/dod-omnimarket-pr-931/command.yaml diff --git a/contracts/OMN-12243.yaml b/contracts/OMN-12243.yaml index 198f476f9a3..86f8c9618da 100644 --- a/contracts/OMN-12243.yaml +++ b/contracts/OMN-12243.yaml @@ -21,3 +21,24 @@ dod_evidence: checks: - check_type: "command" check_value: "grep -q '^status: PASS$' drift/dod_receipts/OMN-12243/dod-main-target-guard-bootstrap-prs/command.yaml" + - id: "dod-omnibase-infra-pr-1768" + description: "omnibase_infra#1768 installs the main-target guard workflow with scoped read-only permissions." + source: "manual" + status: "verified" + checks: + - check_type: "command" + check_value: "grep -q '^status: PASS$' drift/dod_receipts/OMN-12243/dod-omnibase-infra-pr-1768/command.yaml" + - id: "dod-omniclaude-pr-1684" + description: "omniclaude#1684 installs the main-target guard workflow with scoped read-only permissions." + source: "manual" + status: "verified" + checks: + - check_type: "command" + check_value: "grep -q '^status: PASS$' drift/dod_receipts/OMN-12243/dod-omniclaude-pr-1684/command.yaml" + - id: "dod-omnimarket-pr-931" + description: "omnimarket#931 installs the main-target guard workflow with scoped read-only permissions." + source: "manual" + status: "verified" + checks: + - check_type: "command" + check_value: "grep -q '^status: PASS$' drift/dod_receipts/OMN-12243/dod-omnimarket-pr-931/command.yaml" diff --git a/drift/dod_receipts/OMN-12243/dod-main-target-guard-bootstrap-prs/command.yaml b/drift/dod_receipts/OMN-12243/dod-main-target-guard-bootstrap-prs/command.yaml index e09c81edd47..fbd7e1f09ea 100644 --- a/drift/dod_receipts/OMN-12243/dod-main-target-guard-bootstrap-prs/command.yaml +++ b/drift/dod_receipts/OMN-12243/dod-main-target-guard-bootstrap-prs/command.yaml @@ -6,7 +6,7 @@ check_type: "command" check_value: "for repo in omnibase_compat omnibase_core omnibase_spi omnibase_infra omniclaude omniintelligence omnimemory omnimarket omnidash omninode_infra onex_change_control; do test -f \"$OMNI_HOME/omni_worktrees/OMN-12243/$repo/.github/workflows/main-target-guard.yml\" || exit 1; done" -contract_sha256: "sha256:7484013bfaaeaab2698950af73ada08225ea2c7a4bada59c520dc3823c719ae5" +contract_sha256: "sha256:196a10164bc8984afc30e7e038d1fb727a367ed8837bb8a00ce113628a7907f7" status: PASS run_timestamp: "2026-05-26T15:25:00Z" commit_sha: "96b4c08136fc7cc0f0d8d61da1f08f1b378ddd9e" # pragma: allowlist secret diff --git a/drift/dod_receipts/OMN-12243/dod-omnibase-infra-pr-1768/command.yaml b/drift/dod_receipts/OMN-12243/dod-omnibase-infra-pr-1768/command.yaml new file mode 100644 index 00000000000..e2336ec3f62 --- /dev/null +++ b/drift/dod_receipts/OMN-12243/dod-omnibase-infra-pr-1768/command.yaml @@ -0,0 +1,19 @@ +--- +schema_version: "1.0.0" +ticket_id: "OMN-12243" +evidence_item_id: "dod-omnibase-infra-pr-1768" +check_type: "command" +check_value: "gh pr view 1768 --repo OmniNode-ai/omnibase_infra --json headRefOid --jq '.headRefOid'" +contract_sha256: "sha256:196a10164bc8984afc30e7e038d1fb727a367ed8837bb8a00ce113628a7907f7" +status: PASS +run_timestamp: "2026-05-26T16:21:00Z" +commit_sha: "e6147084a4ebf7a525ca2da83c6bc9c20274b30a" +runner: "codex-cli" +verifier: "manual-merge-sweep" +probe_command: "gh pr view 1768 --repo OmniNode-ai/omnibase_infra --json headRefOid --jq '.headRefOid'" +probe_stdout: "e6147084a4ebf7a525ca2da83c6bc9c20274b30a" +actual_output: "PASS: omnibase_infra#1768 carries the OMN-12243 main-target guard workflow with scoped + permissions." +exit_code: 0 +pr_number: 1768 +branch: "hotfix/omn-12243-main-target-guard" diff --git a/drift/dod_receipts/OMN-12243/dod-omniclaude-pr-1684/command.yaml b/drift/dod_receipts/OMN-12243/dod-omniclaude-pr-1684/command.yaml new file mode 100644 index 00000000000..f15b3e60f0b --- /dev/null +++ b/drift/dod_receipts/OMN-12243/dod-omniclaude-pr-1684/command.yaml @@ -0,0 +1,18 @@ +--- +schema_version: "1.0.0" +ticket_id: "OMN-12243" +evidence_item_id: "dod-omniclaude-pr-1684" +check_type: "command" +check_value: "gh pr view 1684 --repo OmniNode-ai/omniclaude --json headRefOid --jq '.headRefOid'" +contract_sha256: "sha256:196a10164bc8984afc30e7e038d1fb727a367ed8837bb8a00ce113628a7907f7" +status: PASS +run_timestamp: "2026-05-26T16:21:00Z" +commit_sha: "2b2ac6bd1c61a5f5e9a14ae460cd4e27552e0f66" +runner: "codex-cli" +verifier: "manual-merge-sweep" +probe_command: "gh pr view 1684 --repo OmniNode-ai/omniclaude --json headRefOid --jq '.headRefOid'" +probe_stdout: "2b2ac6bd1c61a5f5e9a14ae460cd4e27552e0f66" +actual_output: "PASS: omniclaude#1684 carries the OMN-12243 main-target guard workflow with scoped permissions." +exit_code: 0 +pr_number: 1684 +branch: "hotfix/omn-12243-main-target-guard" diff --git a/drift/dod_receipts/OMN-12243/dod-omnimarket-pr-931/command.yaml b/drift/dod_receipts/OMN-12243/dod-omnimarket-pr-931/command.yaml new file mode 100644 index 00000000000..ae0ad4a02f8 --- /dev/null +++ b/drift/dod_receipts/OMN-12243/dod-omnimarket-pr-931/command.yaml @@ -0,0 +1,18 @@ +--- +schema_version: "1.0.0" +ticket_id: "OMN-12243" +evidence_item_id: "dod-omnimarket-pr-931" +check_type: "command" +check_value: "gh pr view 931 --repo OmniNode-ai/omnimarket --json headRefOid --jq '.headRefOid'" +contract_sha256: "sha256:196a10164bc8984afc30e7e038d1fb727a367ed8837bb8a00ce113628a7907f7" +status: PASS +run_timestamp: "2026-05-26T16:21:00Z" +commit_sha: "4590efdf9f25803a9dab386cd38549831c7545dd" +runner: "codex-cli" +verifier: "manual-merge-sweep" +probe_command: "gh pr view 931 --repo OmniNode-ai/omnimarket --json headRefOid --jq '.headRefOid'" +probe_stdout: "4590efdf9f25803a9dab386cd38549831c7545dd" +actual_output: "PASS: omnimarket#931 carries the OMN-12243 main-target guard workflow with scoped permissions." +exit_code: 0 +pr_number: 931 +branch: "hotfix/omn-12243-main-target-guard"