jonahgabriel · Jun 8, 2026 · Jun 8, 2026 · Jun 8, 2026 · Jun 8, 2026
diff --git a/allowlists/omniclaude.yaml b/allowlists/omniclaude.yaml
@@ -12,3 +12,23 @@ allowlisted_handlers:
     violations:
       - missing_handler_routing
     ticket: '# migration pending'
+  - path: src/omniclaude/hooks/lib/compliance_result_subscriber.py
+    violations:
+      - raw_kafka
+    ticket: OMN-12564
+  - path: src/omniclaude/hooks/lib/decision_record_subscriber.py
+    violations:
+      - raw_kafka
+    ticket: OMN-12564
+  - path: src/omniclaude/hooks/topics.py
+    violations:
+      - hardcoded_topic
+    ticket: OMN-12564
+  - path: src/omniclaude/nodes/node_local_llm_inference_effect/backends/backend_vllm.py
+    violations:
+      - raw_http_inference
+    ticket: OMN-12564
+  - path: src/omniclaude/nodes/node_personality_logging_effect/sinks/sink_slack.py
+    violations:
+      - raw_http_inference
+    ticket: OMN-12564
diff --git a/contracts/OMN-12564.yaml b/contracts/OMN-12564.yaml
@@ -93,3 +93,13 @@ dod_evidence:
         check_value: >-
           grep -q '^status: PASS$' "$CONTRACT_REPO_DIR/drift/dod_receipts/OMN-12564/dod-occ-pr-2039-omniclaude-binding/command.yaml"
           && grep -q '^pr_number: 2039$' "$CONTRACT_REPO_DIR/drift/dod_receipts/OMN-12564/dod-occ-pr-2039-omniclaude-binding/command.yaml"
+  - id: "dod-occ-pr-2327-omniclaude-imperative-allowlist"
+    description: "Self-binding receipt for OCC PR #2327 carrying the omniclaude imperative guard allowlist
+      baseline required by the OMN-12564 main hotfix path."
+    source: "manual"
+    status: "verified"
+    checks:
+      - check_type: "command"
+        check_value: >-
+          grep -q '^status: PASS$' "$CONTRACT_REPO_DIR/drift/dod_receipts/OMN-12564/dod-occ-pr-2327-omniclaude-imperative-allowlist/command.yaml"
+          && grep -q '^pr_number: 2327$' "$CONTRACT_REPO_DIR/drift/dod_receipts/OMN-12564/dod-occ-pr-2327-omniclaude-imperative-allowlist/command.yaml"
diff --git a/drift/dod_receipts/OMN-12564/dod-infra-pr-1824/command.yaml b/drift/dod_receipts/OMN-12564/dod-infra-pr-1824/command.yaml
@@ -7,11 +7,11 @@ check_value: "gh pr view 1824 --repo OmniNode-ai/omnibase_infra --json number,ur
 status: PASS
 run_timestamp: "2026-06-01T13:33:00Z"
 commit_sha: "5edfa569de568055427f1a5ead462ce3faa4bd94"
-contract_sha256: "sha256:fb5abcc402ae1139897ebebf5649dd90d508dae344f2b18169309b299e1ac76b"
+contract_sha256: "sha256:60eaf5ad81ff8269c0fa7d4db19e79a4215922590ac2dfb2bbf12b08207f88b5"
 branch: "jonah/omn-12564-ci-env-canary"
 pr_number: 1824
 runner: "codex"
-verifier: "jonah"
+verifier: "worker-ar"
 probe_command: "gh pr view 1824 --repo OmniNode-ai/omnibase_infra --json number,url,headRefOid,headRefName,baseRefName,title,state"
 probe_stdout: |
   {"baseRefName":"dev","headRefName":"jonah/omn-12564-ci-env-canary","headRefOid":"5edfa569de568055427f1a5ead462ce3faa4bd94","number":1824,"state":"OPEN","title":"ci(OMN-12564): add versioned CI env canary","url":"https://github.com/OmniNode-ai/omnibase_infra/pull/1824"}

diff --git a/drift/dod_receipts/OMN-12564/dod-infra-pr-1825/command.yaml b/drift/dod_receipts/OMN-12564/dod-infra-pr-1825/command.yaml
@@ -7,11 +7,11 @@ check_value: "gh pr view 1825 --repo OmniNode-ai/omnibase_infra --json number,ur
 status: PASS
 run_timestamp: "2026-06-01T14:03:00Z"
 commit_sha: "dde9ee2b502de4507a5ab4f1d3b5c9a6860e8185"
-contract_sha256: "sha256:fb5abcc402ae1139897ebebf5649dd90d508dae344f2b18169309b299e1ac76b"
+contract_sha256: "sha256:60eaf5ad81ff8269c0fa7d4db19e79a4215922590ac2dfb2bbf12b08207f88b5"
 branch: "jonah/omn-12564-disable-occ-cache-save"
 pr_number: 1825
 runner: "codex"
-verifier: "jonah"
+verifier: "worker-ar"
 probe_command: "gh pr view 1825 --repo OmniNode-ai/omnibase_infra --json number,url,headRefOid,headRefName,baseRefName,title,state"
 probe_stdout: |
   {"baseRefName":"dev","headRefName":"jonah/omn-12564-disable-occ-cache-save","headRefOid":"dde9ee2b502de4507a5ab4f1d3b5c9a6860e8185","number":1825,"state":"OPEN","title":"ci(OMN-12564): disable OCC cache save","url":"https://github.com/OmniNode-ai/omnibase_infra/pull/1825"}

diff --git a/drift/dod_receipts/OMN-12564/dod-local-env-proof/command.yaml b/drift/dod_receipts/OMN-12564/dod-local-env-proof/command.yaml
@@ -10,11 +10,11 @@ check_value: "detached worktree at 5edfa569de568055427f1a5ead462ce3faa4bd94 with
 status: PASS
 run_timestamp: "2026-06-01T13:33:00Z"
 commit_sha: "5edfa569de568055427f1a5ead462ce3faa4bd94"
-contract_sha256: "sha256:fb5abcc402ae1139897ebebf5649dd90d508dae344f2b18169309b299e1ac76b"
+contract_sha256: "sha256:60eaf5ad81ff8269c0fa7d4db19e79a4215922590ac2dfb2bbf12b08207f88b5"
 branch: "jonah/omn-12564-ci-env-canary"
 pr_number: 1824
 runner: "codex"
-verifier: "jonah"
+verifier: "worker-ar"
 probe_command: "temp-root invocation of scripts/ci/ensure_ci_env.sh plus final-path venv, checkout symlink,
   runner-temp wrapper, runner-temp metadata, and entry-point discovery check"
 probe_stdout: |

diff --git a/drift/dod_receipts/OMN-12564/dod-occ-cache-pr-self/command.yaml b/drift/dod_receipts/OMN-12564/dod-occ-cache-pr-self/command.yaml
@@ -7,11 +7,11 @@ check_value: "gh pr view 2021 --repo OmniNode-ai/onex_change_control --json numb
 status: PASS
 run_timestamp: "2026-06-01T14:03:00Z"
 commit_sha: "7b6c8b44b70a4e28d7a5c5bb653e0569c3664c2a"
-contract_sha256: "sha256:fb5abcc402ae1139897ebebf5649dd90d508dae344f2b18169309b299e1ac76b"
+contract_sha256: "sha256:60eaf5ad81ff8269c0fa7d4db19e79a4215922590ac2dfb2bbf12b08207f88b5"
 branch: "jonah/omn-12564-occ-cache-evidence"
 pr_number: 2021
 runner: "codex"
-verifier: "jonah"
+verifier: "worker-ar"
 probe_command: "gh pr view 2021 --repo OmniNode-ai/onex_change_control --json number,url,headRefOid,state"
 probe_stdout: |
   {"headRefOid":"7b6c8b44b70a4e28d7a5c5bb653e0569c3664c2a","number":2021,"state":"OPEN","url":"https://github.com/OmniNode-ai/onex_change_control/pull/2021"}

diff --git a/drift/dod_receipts/OMN-12564/dod-occ-pr-2039-omniclaude-binding/command.yaml b/drift/dod_receipts/OMN-12564/dod-occ-pr-2039-omniclaude-binding/command.yaml
@@ -4,7 +4,7 @@ ticket_id: "OMN-12564"
 evidence_item_id: "dod-occ-pr-2039-omniclaude-binding"
 check_type: "command"
 check_value: "gh pr view 2039 --repo OmniNode-ai/onex_change_control --json number,headRefOid,baseRefName,title,state"
-contract_sha256: "sha256:fb5abcc402ae1139897ebebf5649dd90d508dae344f2b18169309b299e1ac76b"
+contract_sha256: "sha256:60eaf5ad81ff8269c0fa7d4db19e79a4215922590ac2dfb2bbf12b08207f88b5"
 status: PASS
 run_timestamp: "2026-06-01T22:37:00Z"
 commit_sha: "ab2d27f4dd26890b2b1fa29981471b94082b744e"

diff --git a/drift/dod_receipts/OMN-12564/dod-occ-pr-2327-omniclaude-imperative-allowlist/command.yaml b/drift/dod_receipts/OMN-12564/dod-occ-pr-2327-omniclaude-imperative-allowlist/command.yaml
@@ -0,0 +1,22 @@
+---
+schema_version: "1.0.0"
+ticket_id: "OMN-12564"
+evidence_item_id: "dod-occ-pr-2327-omniclaude-imperative-allowlist"
+check_type: "command"
+check_value: "gh pr view 2327 --repo OmniNode-ai/onex_change_control --json number,headRefOid,baseRefName,title,state"
+contract_sha256: "sha256:60eaf5ad81ff8269c0fa7d4db19e79a4215922590ac2dfb2bbf12b08207f88b5"
+status: PASS
+run_timestamp: "2026-06-08T10:42:00Z"
+commit_sha: "9274d53feadda9ec9df6ae8bb5ae5dc3ec5458aa"
+runner: "codex"
+verifier: "worker-ar"
+probe_command: "gh pr view 2327 --repo OmniNode-ai/onex_change_control --json number,headRefOid,baseRefName,title,state"
+probe_stdout: |
+  {"baseRefName":"main","headRefName":"hotfix/omn-12564-omniclaude-imperative-allowlist","headRefOid":"9274d53feadda9ec9df6ae8bb5ae5dc3ec5458aa","number":2327,"state":"OPEN","title":"chore(OMN-12564): baseline omniclaude imperative guard","url":"https://github.com/OmniNode-ai/onex_change_control/pull/2327"}
+actual_output: >-
+  PASS: onex_change_control PR #2327 publishes the OMN-12564 omniclaude imperative guard allowlist baseline
+  and is self-bound for Receipt Gate.
+exit_code: 0
+pr_number: 2327
+branch: "hotfix/omn-12564-omniclaude-imperative-allowlist"
+working_dir: "/Users/jonah/Code/omni_home/omni_worktrees/OMN-12564-omniclaude-imperative-allowlist/onex_change_control"
diff --git a/drift/dod_receipts/OMN-12564/dod-occ-pr-self/command.yaml b/drift/dod_receipts/OMN-12564/dod-occ-pr-self/command.yaml
@@ -7,11 +7,11 @@ check_value: "gh pr view 2020 --repo OmniNode-ai/onex_change_control --json numb
 status: PASS
 run_timestamp: "2026-06-01T13:37:00Z"
 commit_sha: "a4a2a129094f8fcd1e57fbf2cae276a1e70f67f3"
-contract_sha256: "sha256:fb5abcc402ae1139897ebebf5649dd90d508dae344f2b18169309b299e1ac76b"
+contract_sha256: "sha256:60eaf5ad81ff8269c0fa7d4db19e79a4215922590ac2dfb2bbf12b08207f88b5"
 branch: "jonah/omn-12564-ci-env-occ-v4"
 pr_number: 2020
 runner: "codex"
-verifier: "jonah"
+verifier: "worker-ar"
 probe_command: "gh pr view 2020 --repo OmniNode-ai/onex_change_control --json number,url,headRefOid,state"
 probe_stdout: |
   {"headRefOid":"a4a2a129094f8fcd1e57fbf2cae276a1e70f67f3","number":2020,"state":"OPEN","url":"https://github.com/OmniNode-ai/onex_change_control/pull/2020"}

diff --git a/drift/dod_receipts/OMN-12564/dod-omniclaude-pr-1718-checkout-hardening/command.yaml b/drift/dod_receipts/OMN-12564/dod-omniclaude-pr-1718-checkout-hardening/command.yaml
@@ -4,7 +4,7 @@ ticket_id: "OMN-12564"
 evidence_item_id: "dod-omniclaude-pr-1718-checkout-hardening"
 check_type: "command"
 check_value: "gh pr view 1718 --repo OmniNode-ai/omniclaude --json number,headRefOid,baseRefName,title,state"
-contract_sha256: "sha256:fb5abcc402ae1139897ebebf5649dd90d508dae344f2b18169309b299e1ac76b"
+contract_sha256: "sha256:60eaf5ad81ff8269c0fa7d4db19e79a4215922590ac2dfb2bbf12b08207f88b5"
 status: PASS
 run_timestamp: "2026-06-01T22:32:00Z"
 commit_sha: "2850f546b0ee8913f8eae844f18455fefa1c1a32"