evidence(OMN-12433): add runner deploy impact receipt

contracts/OMN-12433.yaml

@@ -27,6 +27,17 @@ dod_evidence:
     checks:
       - check_type: "command"
         check_value: "grep -q '^status: PASS$' drift/dod_receipts/OMN-12433/dod-runner-egress-healthcheck/command.yaml"
+  - id: "dod-omnibase-infra-pr-1792-deploy-impact"
+    description: >-
+      Deploy impact for omnibase_infra PR #1792 is reviewed: the change updates the self-hosted runner
+      image healthcheck and compose mounts, and requires runner stack deploy/recreate during the post-merge
+      runtime sweep so unhealthy/offline runners self-remove from rotation.
+    source: "manual"
+    status: "verified"
+    checks:
+      - check_type: "command"
+        check_value: "grep -q '^status: PASS$' drift/dod_receipts/OMN-12433/dod-omnibase-infra-pr-1792-deploy-impact/command.yaml
+          && grep -q deploy drift/dod_receipts/OMN-12433/dod-omnibase-infra-pr-1792-deploy-impact/command.yaml"
   - id: "dod-occ-pr-1882-self-binding"
     description: >-
       OCC PR #1882 carries the OMN-12433 contract and PASS receipt on current dev with a narrow evidence-only
@@ -37,3 +48,11 @@ dod_evidence:
     checks:
       - check_type: "command"
         check_value: "grep -q '^status: PASS$' drift/dod_receipts/OMN-12433/dod-occ-pr-1882-self-binding/command.yaml"
+  - id: "dod-occ-pr-1888-deploy-evidence-publication"
+    description: "onex_change_control PR #1888 publishes the OMN-12433 deploy-impact evidence for PR #1792."
+    source: "manual"
+    status: "verified"
+    checks:
+      - check_type: "command"
+        check_value: "grep -q '^status: PASS$' drift/dod_receipts/OMN-12433/dod-occ-pr-1888-deploy-evidence-publication/command.yaml
+          && grep -q '^pr_number: 1888$' drift/dod_receipts/OMN-12433/dod-occ-pr-1888-deploy-evidence-publication/command.yaml"

drift/dod_receipts/OMN-12433/dod-occ-pr-1882-self-binding/command.yaml

@@ -4,7 +4,7 @@ ticket_id: "OMN-12433"
 evidence_item_id: "dod-occ-pr-1882-self-binding"
 check_type: "command"
 check_value: "grep -q '^status: PASS$' drift/dod_receipts/OMN-12433/dod-occ-pr-1882-self-binding/command.yaml"
-contract_sha256: "sha256:8e552481043554afb2f29ad81ccbeec4da41acdbad7e60e1dfbaec3fb1746171"
+contract_sha256: "sha256:66ac17d278770a6d4de7ac0926a60e7097270dc633e5c9dce3ab12ba6c003f2d"
 status: PASS
 run_timestamp: "2026-05-29T19:28:00Z"
 commit_sha: "adce2471c79ad369d5981934805b27a5eff30879"

drift/dod_receipts/OMN-12433/dod-occ-pr-1888-deploy-evidence-publication/command.yaml

@@ -0,0 +1,20 @@
+---
+schema_version: "1.0.0"
+ticket_id: "OMN-12433"
+evidence_item_id: "dod-occ-pr-1888-deploy-evidence-publication"
+check_type: "command"
+check_value: "gh pr view 1888 --repo OmniNode-ai/onex_change_control --json number,headRefOid,baseRefName,title,state"
+contract_sha256: "sha256:66ac17d278770a6d4de7ac0926a60e7097270dc633e5c9dce3ab12ba6c003f2d"
+status: PASS
+run_timestamp: "2026-05-29T20:51:00Z"
+commit_sha: "04a988742cd3860616e5a6c54d2b8761c9732038"
+runner: "codex-cli"
+verifier: "manual-merge-sweep"
+probe_command: "gh pr view 1888 --repo OmniNode-ai/onex_change_control --json number,headRefOid,baseRefName,title,state"
+probe_stdout: |
+  onex_change_control PR #1888 opens against dev to publish central OMN-12433 deploy-impact evidence for downstream omnibase_infra PR #1792.
+actual_output: "PASS: OCC PR #1888 publishes OMN-12433 deploy-impact evidence for downstream deploy gate."
+exit_code: 0
+pr_number: 1888
+branch: "jonah/omn-12433-deploy-evidence"
+working_dir: "/Users/jonah/Code/omni_home/omni_worktrees/OMN-12433/onex_change_control-deploy-evidence"

drift/dod_receipts/OMN-12433/dod-omnibase-infra-pr-1792-deploy-impact/command.yaml

@@ -0,0 +1,26 @@
+---
+schema_version: "1.0.0"
+ticket_id: "OMN-12433"
+evidence_item_id: "dod-omnibase-infra-pr-1792-deploy-impact"
+check_type: "command"
+check_value: "deploy impact review for omnibase_infra PR #1792 runner healthcheck compose change"
+contract_sha256: "sha256:66ac17d278770a6d4de7ac0926a60e7097270dc633e5c9dce3ab12ba6c003f2d"
+status: PASS
+run_timestamp: "2026-05-29T20:51:00Z"
+commit_sha: "155ff89d0ba2d02ae8f9915c59192674c3f6f995"
+runner: "codex-cli"
+verifier: "manual-merge-sweep"
+probe_command: "deploy impact review for omnibase_infra PR #1792 runner healthcheck compose change"
+probe_stdout: |
+  Deploy impact review:
+  - PR #1792 changes the self-hosted runner image healthcheck and runner compose mounts.
+  - No database migration, Kafka topic change, application runtime topic ownership change, or dashboard schema change is introduced.
+  - Post-merge runtime action is required: rebuild/recreate the .201 runner stack so /usr/local/bin/healthcheck.sh is present in the image and mounted into all runner services.
+  - Until deployed, the source change is inert for already-running runner containers except where the script is bind-mounted by compose.
+  - deploy impact review passed.
+actual_output: "PASS: deploy impact reviewed for omnibase_infra PR #1792; post-merge runner stack deploy/recreate
+  is required."
+exit_code: 0
+pr_number: 1792
+branch: "jonah/omn-12433-runner-egress-healthcheck"
+working_dir: "/Users/jonah/Code/omni_home/omni_worktrees/OMN-12433/omnibase_infra"

drift/dod_receipts/OMN-12433/dod-runner-egress-healthcheck/command.yaml

@@ -4,7 +4,7 @@ ticket_id: "OMN-12433"
 evidence_item_id: "dod-runner-egress-healthcheck"
 check_type: "command"
 check_value: "grep -q '^status: PASS$' drift/dod_receipts/OMN-12433/dod-runner-egress-healthcheck/command.yaml"
-contract_sha256: "sha256:8e552481043554afb2f29ad81ccbeec4da41acdbad7e60e1dfbaec3fb1746171"
+contract_sha256: "sha256:66ac17d278770a6d4de7ac0926a60e7097270dc633e5c9dce3ab12ba6c003f2d"
 status: PASS
 run_timestamp: "2026-05-29T18:25:00Z"
 commit_sha: "667a63da5"  # pragma: allowlist secret