Skip to content

evidence(OMN-12420): dod receipts for node_dod_verify envelope-unwrap fix - #1853

Merged
jonahgabriel merged 4 commits into
devfrom
jonahgabriel/omn-12420-dod-verify-receipt-evidence
May 29, 2026
Merged

jonahgabriel merged 4 commits into
devfrom
jonahgabriel/omn-12420-dod-verify-receipt-evidence

Conversation

@jonahgabriel

Copy link
Copy Markdown
Contributor

Summary

Central OCC evidence binding the omnimarket node_dod_verify dispatch envelope-unwrap fix (OMN-12420) to PASS DoD receipts so the omnimarket PR's Receipt Gate can resolve them via Evidence-Source.

Evidence

  • dod-001 — regression test test_dispatch_envelope_unwrap.py proves the exact wrapped envelope onex run-node publishes is unwrapped by the runtime dispatch callback (built with the contract's event_model), validated against ModelDodVerifyStartCommand with no ValidationError, and returns a ModelDispatchResult carrying the terminal ModelDodVerifyState (which the runtime DispatchResultApplier publishes to dod-verify-completed.v1).
  • dod-002 — the node CLI writes a guard-valid ModelDodReceipt dod_report.json to $ONEX_EVIDENCE_ROOT/OMN-12420/ (run_timestamp + status=PASS).

Receipt-gate validator (validator_receipt_gate_cli) passes locally: 2 checks across 1 ticket all PASS.

Pairs with omnimarket PR for OMN-12420.

Closes OMN-12420

@coderabbitai

coderabbitai Bot commented May 29, 2026 •

Copy link
Copy Markdown

Warning

Review limit reached

@jonahgabriel, we couldn't start this review because you've reached your PR review rate limit.

More reviews will be available in 12 minutes and 37 seconds. Learn how PR review limits work.

Your organization has run out of usage credits. Purchase more in the billing tab.

⌛ How to resolve this issue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans include higher PR review limits than trial, open-source, and free plans. In all cases, reviews become available again over time. During sustained high-volume PR review activity, CodeRabbit may temporarily slow when the next review becomes available.

Please see our Fair Usage Limits Policy for further information.

ℹ️ Review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: a521f2c8-1c0e-46e9-9191-ea281600b8f3

📥 Commits

Reviewing files that changed from the base of the PR and between f338d2c and 1f0d23d.

📒 Files selected for processing (5)
  • contracts/OMN-12420.yaml
  • drift/dod_receipts/OMN-12420/dod-001/command.yaml
  • drift/dod_receipts/OMN-12420/dod-002/command.yaml
  • drift/dod_receipts/OMN-12420/dod-deploy-assessment/command.yaml
  • drift/dod_receipts/OMN-12420/dod-occ-self/command.yaml
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch jonahgabriel/omn-12420-dod-verify-receipt-evidence

Comment @coderabbitai help to get the list of available commands and usage tips.

@jonahgabriel
jonahgabriel changed the base branch from dev to main May 29, 2026 12:34
@jonahgabriel
jonahgabriel changed the base branch from main to dev May 29, 2026 12:37
… fix

Binds the omnimarket node_dod_verify dispatch fix to central OCC evidence.

dod-001: regression test proves the wrapped envelope run-node publishes is
unwrapped by the runtime dispatch callback, validated against
ModelDodVerifyStartCommand with no ValidationError, returning a
ModelDispatchResult carrying the terminal ModelDodVerifyState.
dod-002: the node CLI writes a guard-valid ModelDodReceipt dod_report.json to
$ONEX_EVIDENCE_ROOT/OMN-12420/ (run_timestamp + status=PASS).
dod-deploy-assessment: honest deploy assessment — touches a runtime path and
requires a stability-test runtime redeploy to take effect on the deployed 0.4.2
container; redeploy is the documented follow-up (live deploy, user-gated).

Receipt-gate validator passes locally: 3 checks across 1 ticket all PASS.
@jonahgabriel
jonahgabriel force-pushed the jonahgabriel/omn-12420-dod-verify-receipt-evidence branch from 93093f9 to 023e3f8 Compare May 29, 2026 12:38
Adds dod-occ-self receipt bound to OCC PR #1853 and sets pr_number: 988 on the
omnimarket-bound receipts so the OCC eligibility check (pr_ticket_mismatch) is
satisfied — at least one PASS receipt now binds to OCC PR #1853.
Receipts produced after 2026-04-30 must record the contract hash. Adds
contract_sha256 to all four OMN-12420 receipts to satisfy the receipt-gate
contract-hash binding check.
…ter)

The contract_sha256 insertion had landed inside the wrapped check_value string,
producing invalid YAML. Rewritten cleanly; all four receipts parse with
status=PASS and contract_sha256 present.
@jonahgabriel
jonahgabriel added this pull request to the merge queue May 29, 2026
Merged via the queue into dev with commit ae151a4 May 29, 2026
33 checks passed
@jonahgabriel
jonahgabriel deleted the jonahgabriel/omn-12420-dod-verify-receipt-evidence branch May 29, 2026 12:57
jonahgabriel added a commit that referenced this pull request Jul 4, 2026
…on for Done-flip)

The omniclaude DoD Evidence Check reads a committed .onex_state/evidence/
OMN-13914/dod_report.json to permit the OMN-13914 Done-flip. omniclaude
PR #1853 commits that receipt but its receipt-gate needs a PASS receipt
binding PR #1853. Add net-new dod-omniclaude-pr-1853 evidence item + receipt.

Existing receipts' contract_sha256 rebound to the mutated whole-file hash
(OMN-13888 whole-file-hash cascade), values only — no other receipt edits.
Mirrors merged precedent OCC #3563 (OMN-13886 add-deploy-evidence).
jonahgabriel added a commit that referenced this pull request Jul 4, 2026
…on for Done-flip)

The omniclaude DoD Evidence Check reads a committed .onex_state/evidence/
OMN-13914/dod_report.json to permit the OMN-13914 Done-flip. omniclaude
PR #1853 commits that receipt but its receipt-gate needs a PASS receipt
binding PR #1853. Add net-new dod-omniclaude-pr-1853 evidence item + receipt.

Existing receipts' contract_sha256 rebound to the mutated whole-file hash
(OMN-13888 whole-file-hash cascade), values only — no other receipt edits.
Mirrors merged precedent OCC #3563 (OMN-13886 add-deploy-evidence).
jonahgabriel added a commit that referenced this pull request Oct 12, 2026
Appends dod_evidence item dod-omn19984-pr1853-c32-auth-cases-tests to contracts/OMN-19984.yaml, binding AC1.
Adds PASS receipt at drift/dod_receipts/OMN-19984/dod-omn19984-pr1853-c32-auth-cases-tests/command.yaml with pr_number 1853 and commit_sha e07c89ad4ddcac22ec05858a848b1486fbc63777.
Captured with check_receipt_hardening.py --capture-probe: 104 passed, exit 0.
Reason: occ-preflight on omninode_infra#1853 failed pr_ticket_mismatch because OCC#13449 bound OMN-19984 only by self-bind and no PASS receipt bound PR #1853.
jonahgabriel added a commit that referenced this pull request Oct 12, 2026
…3472)

* evidence(OMN-19984): add C32 auth cases PASS receipt for PR #1853

Appends dod_evidence item dod-omn19984-pr1853-c32-auth-cases-tests to contracts/OMN-19984.yaml, binding AC1.
Adds PASS receipt at drift/dod_receipts/OMN-19984/dod-omn19984-pr1853-c32-auth-cases-tests/command.yaml with pr_number 1853 and commit_sha e07c89ad4ddcac22ec05858a848b1486fbc63777.
Captured with check_receipt_hardening.py --capture-probe: 104 passed, exit 0.
Reason: occ-preflight on omninode_infra#1853 failed pr_ticket_mismatch because OCC#13449 bound OMN-19984 only by self-bind and no PASS receipt bound PR #1853.

* evidence(OMN-18921): mint the owed OCC self-bind for PR #13472

* evidence(OMN-18921): mint the owed OCC self-bind for PR #13472

---------

Co-authored-by: onexbot-occ-writer[bot] <onexbot-occ-writer[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant