From bf4cbcde737184c14b596924cda67513c9290af8 Mon Sep 17 00:00:00 2001 From: jonahgabriel Date: Fri, 12 Jun 2026 04:07:53 -0400 Subject: [PATCH 1/2] receipt(OMN-13014): OCC contract + dod receipts for hot-patch ledger rebuild preflight gate Central OMN-13014 ticket_contract + dod-infra-pr / dod-deploy-assessment receipts for omnibase_infra PR #1959 (hot-patch ledger preflight: ancestor gate + .prepatch tripwire wired into deploy-runtime.sh; standalone drop-in verified live on .201 with FAIL-vs-pre-merge-clones / PASS-vs-origin-dev demonstrations). dod-occ-pr receipt follows once this PR has a number. --- contracts/OMN-13014.yaml | 82 +++++++++++++++++++ .../dod-deploy-assessment/command.yaml | 28 +++++++ .../OMN-13014/dod-infra-pr/command.yaml | 24 ++++++ 3 files changed, 134 insertions(+) create mode 100644 contracts/OMN-13014.yaml create mode 100644 drift/dod_receipts/OMN-13014/dod-deploy-assessment/command.yaml create mode 100644 drift/dod_receipts/OMN-13014/dod-infra-pr/command.yaml diff --git a/contracts/OMN-13014.yaml b/contracts/OMN-13014.yaml new file mode 100644 index 00000000000..e84cfcf33be --- /dev/null +++ b/contracts/OMN-13014.yaml @@ -0,0 +1,82 @@ +--- +schema_version: "1.0.0" +ticket_id: "OMN-13014" +title: "Hot-patch ledger + rebuild preflight gate: rebuilds silently destroy live in-container patches (retro B-1)" +summary: >- + Container-layer hot-patches on the .201 runtime lanes (in-container file patch + docker restart with + a .prepatch sibling) silently revert on any image rebuild or compose force-recreate: the 2026-06-11 + 20:58:53Z projection-api rebuild erased a live /api/generate patch that had to be re-applied by hand + (TOTAL_ARCHITECTURE_FINDINGS.md section 2.1). There was no machine-readable ledger mapping patched + files to source PRs and no rebuild-path gate refusing to rebuild a container whose live patches are + not merged into the build ref. OMN-13014 ships (1) the operational ledger at + /data/omninode/hotpatch-ledger/ledger.yaml on .201, backfilled from a live docker-exec census of all + 10 app containers (5 .prepatch files / 4 source PRs, all MERGED to dev: omnimarket#1180 a4e13e9b, + #1181 a0ad3c99, #1184 1d5074d9, omnibase_infra#1951 36d98275), mirrored on the omni_home docs branch; + (2) omnibase_infra PR #1959: scripts/preflight_hotpatch_ledger.py, which hard-fails when any ledger + row's source-PR merge commit is not an ancestor of the per-repo build ref (git merge-base + --is-ancestor) or when the running container carries unledgered .prepatch files, with a --post-rebuild + mode requiring zero .prepatch survivors, wired into scripts/deploy-runtime.sh as guard_hotpatch_ledger + (dry-run + execute); sole bypass is the Rule-10 user-approval receipt form via + HOTPATCH_PREFLIGHT_BYPASS, regex-validated, malformed values hard-fail; (3) a standalone drop-in + installed at /data/omninode/hotpatch-ledger/preflight.sh on .201, demonstrated live: FAIL (exit 1) + against the current pre-merge build-host clone HEADs (5010b1f4 / 8d7da124 — the exact incident class) + and PASS (exit 0) against origin/dev refs with the .prepatch tripwire seeing all 5 ledgered files and + zero unledgered. +is_seam_ticket: false +interface_change: false +interfaces_touched: [] +emergency_bypass: + enabled: false + justification: "" + follow_up_ticket_id: "" +dod_evidence: + - id: "dod-infra-pr" + description: >- + omnibase_infra PR #1959 adds scripts/preflight_hotpatch_ledger.py (ancestor gate + .prepatch + tripwire + post-rebuild mode + Rule-10 bypass validation) with guard_hotpatch_ledger wired into + scripts/deploy-runtime.sh main(), plus 17 unit tests in + tests/unit/scripts/test_preflight_hotpatch_ledger.py covering ancestor pass/fail, unknown-commit + config error, default-build-ref resolution, lane scoping, ledger schema/missing/empty handling, + tripwire (ledgered pass / unledgered fail / post-rebuild both ways / exec failure), and bypass + forms (valid receipt, malformed hard-fail, absent). Local proof: ruff format/check clean; mypy + --strict clean on the script and on src/ (2418 files); bash -n + shellcheck clean on + deploy-runtime.sh; pre-commit all hooks passed at commit time. + source: "manual" + status: "verified" + checks: + - check_type: "command" + check_value: >- + grep -q '^status: PASS$' "$CONTRACT_REPO_DIR/drift/dod_receipts/OMN-13014/dod-infra-pr/command.yaml" + && grep -q '^ticket_id: "OMN-13014"$' "$CONTRACT_REPO_DIR/drift/dod_receipts/OMN-13014/dod-infra-pr/command.yaml" + - id: "dod-deploy-assessment" + description: >- + Deploy assessment: PR #1959 itself performs no live deploy, restart, topic mutation, or container + recreate; the deploy-runtime.sh guard reaches hosts through the normal script distribution path. + Operationally (user-authorized P0.3 lane work, not a runtime mutation): the ledger + (/data/omninode/hotpatch-ledger/ledger.yaml, sha256 50b28669...) and the standalone gate + (/data/omninode/hotpatch-ledger/preflight.sh, sha256 4d558a42...) were installed on .201 as + plain files so tonight's stability rebuild can use the gate before the PR merges. Live + verification on .201 2026-06-12T07:54-07:56Z: gate FAILS (exit 1) against current build-host + clone HEADs (pre-merge identities) and PASSES (exit 0) against origin/dev build refs with the + live .prepatch tripwire (2 + 3 files, zero unledgered). deploy_pending = true for the repo-wired + guard path. + source: "manual" + status: "verified" + checks: + - check_type: "command" + check_value: >- + grep -q '^status: PASS$' "$CONTRACT_REPO_DIR/drift/dod_receipts/OMN-13014/dod-deploy-assessment/command.yaml" + && grep -q '^ticket_id: "OMN-13014"$' "$CONTRACT_REPO_DIR/drift/dod_receipts/OMN-13014/dod-deploy-assessment/command.yaml" + && grep -q 'no live deploy' "$CONTRACT_REPO_DIR/drift/dod_receipts/OMN-13014/dod-deploy-assessment/command.yaml" + - id: "dod-occ-pr" + description: >- + This OCC PR carries the central OMN-13014 ticket_contract and the dod-infra-pr / + dod-deploy-assessment receipts that the omnibase_infra code PR #1959 Receipt-Gate resolves via + its Evidence-Source line. + source: "manual" + status: "verified" + checks: + - check_type: "command" + check_value: >- + grep -q '^status: PASS$' "$CONTRACT_REPO_DIR/drift/dod_receipts/OMN-13014/dod-occ-pr/command.yaml" + && grep -q '^ticket_id: "OMN-13014"$' "$CONTRACT_REPO_DIR/drift/dod_receipts/OMN-13014/dod-occ-pr/command.yaml" diff --git a/drift/dod_receipts/OMN-13014/dod-deploy-assessment/command.yaml b/drift/dod_receipts/OMN-13014/dod-deploy-assessment/command.yaml new file mode 100644 index 00000000000..879c7a8aeec --- /dev/null +++ b/drift/dod_receipts/OMN-13014/dod-deploy-assessment/command.yaml @@ -0,0 +1,28 @@ +--- +schema_version: "1.0.0" +ticket_id: "OMN-13014" +evidence_item_id: "dod-deploy-assessment" +check_type: "command" +check_value: "git diff --stat origin/dev...HEAD" +status: PASS +run_timestamp: "2026-06-12T08:06:30Z" +commit_sha: "7d17e74e2" +branch: "jonah/omn-13014-hotpatch-ledger-preflight" +pr_number: 1959 +contract_sha256: "sha256:19f3c9dc6011e83debd200a36cf7e453d21ca2d2a5c195d2d42614688ed4c1b5" +runner: "claude-code" +verifier: "claude-code-review" +probe_command: "git diff --stat origin/dev...HEAD ; ssh jonah@192.168.86.201 preflight-gate-run-vs-origin/dev + sha256sum artifacts" +probe_stdout: |2 + scripts/deploy-runtime.sh | 87 ++++ + scripts/preflight_hotpatch_ledger.py | 349 ++++++++++++++++ + tests/ci/test_receipt_gate_install_guard.py | 18 +- + .../unit/scripts/test_preflight_hotpatch_ledger.py | 464 +++++++++++++++++++++ + 4 files changed, 913 insertions(+), 5 deletions(-) + gate_exit=0 + 4d558a42293536995fcf4c908a05733ae4020f6bfa6f8353406d38a8215d255c /data/omninode/hotpatch-ledger/preflight.sh + 50b28669c6539c242c5bace9fd955d5b88d685787098654f52e485fcf142bec5 /data/omninode/hotpatch-ledger/ledger.yaml +actual_output: >- + PASS: PR #1959 performs no live deploy, restart, topic mutation, or container recreate -- 4 files, +913/-5, scripts and tests only. deploy_pending = true for the repo-wired guard path (reaches hosts via normal script distribution). Operational drop-in (user-authorized P0.3 lane): ledger.yaml (sha256 50b28669...) and preflight.sh (sha256 4d558a42...) installed on .201 as plain files; live gate run against origin/dev build refs exits 0 with the .prepatch tripwire seeing all 5 ledgered files and zero unledgered; the same gate run against the current pre-merge build-host clone HEADs exits 1, proving the gate blocks the incident class. +exit_code: 0 +working_dir: "/Users/jonah/Code/omni_home/omni_worktrees/OMN-13014/omnibase_infra" diff --git a/drift/dod_receipts/OMN-13014/dod-infra-pr/command.yaml b/drift/dod_receipts/OMN-13014/dod-infra-pr/command.yaml new file mode 100644 index 00000000000..f0545f5634c --- /dev/null +++ b/drift/dod_receipts/OMN-13014/dod-infra-pr/command.yaml @@ -0,0 +1,24 @@ +--- +schema_version: "1.0.0" +ticket_id: "OMN-13014" +evidence_item_id: "dod-infra-pr" +check_type: "command" +check_value: "uv run pytest tests/unit/scripts/test_preflight_hotpatch_ledger.py -q && uv run mypy scripts/preflight_hotpatch_ledger.py --strict" +status: PASS +run_timestamp: "2026-06-12T08:06:30Z" +commit_sha: "7d17e74e2" +branch: "jonah/omn-13014-hotpatch-ledger-preflight" +pr_number: 1959 +contract_sha256: "sha256:19f3c9dc6011e83debd200a36cf7e453d21ca2d2a5c195d2d42614688ed4c1b5" +runner: "claude-code" +verifier: "claude-code-review" +probe_command: "uv run pytest tests/unit/scripts/test_preflight_hotpatch_ledger.py -q && uv run mypy scripts/preflight_hotpatch_ledger.py --strict" +probe_stdout: | + ................. [100%] + 17 passed in 3.06s + Success: no issues found in 1 source file + P1_EXIT=0 +actual_output: >- + PASS: all 17 unit tests for the hot-patch ledger preflight gate pass (ancestor gate, lane scoping, ledger loading, tripwire, bypass forms, build-ref parsing) and mypy --strict is clean on the gate script. deploy-runtime.sh wiring verified by bash -n + shellcheck (clean) and pre-commit all-hooks pass at commit time. +exit_code: 0 +working_dir: "/Users/jonah/Code/omni_home/omni_worktrees/OMN-13014/omnibase_infra" From 068fe7776579d430de14aeb0c0baafff3953489f Mon Sep 17 00:00:00 2001 From: jonahgabriel Date: Fri, 12 Jun 2026 04:09:06 -0400 Subject: [PATCH 2/2] receipt(OMN-13014): add dod-occ-pr receipt bound to OCC#2548 --- contracts/OMN-13014.yaml | 70 +++++++++---------- .../dod-deploy-assessment/command.yaml | 13 +++- .../OMN-13014/dod-infra-pr/command.yaml | 12 ++-- .../OMN-13014/dod-occ-pr/command.yaml | 32 +++++++++ 4 files changed, 83 insertions(+), 44 deletions(-) create mode 100644 drift/dod_receipts/OMN-13014/dod-occ-pr/command.yaml diff --git a/contracts/OMN-13014.yaml b/contracts/OMN-13014.yaml index e84cfcf33be..49f2e5901a9 100644 --- a/contracts/OMN-13014.yaml +++ b/contracts/OMN-13014.yaml @@ -1,27 +1,26 @@ --- schema_version: "1.0.0" ticket_id: "OMN-13014" -title: "Hot-patch ledger + rebuild preflight gate: rebuilds silently destroy live in-container patches (retro B-1)" +title: "Hot-patch ledger + rebuild preflight gate: rebuilds silently destroy live in-container patches + (retro B-1)" summary: >- Container-layer hot-patches on the .201 runtime lanes (in-container file patch + docker restart with a .prepatch sibling) silently revert on any image rebuild or compose force-recreate: the 2026-06-11 20:58:53Z projection-api rebuild erased a live /api/generate patch that had to be re-applied by hand - (TOTAL_ARCHITECTURE_FINDINGS.md section 2.1). There was no machine-readable ledger mapping patched - files to source PRs and no rebuild-path gate refusing to rebuild a container whose live patches are - not merged into the build ref. OMN-13014 ships (1) the operational ledger at - /data/omninode/hotpatch-ledger/ledger.yaml on .201, backfilled from a live docker-exec census of all - 10 app containers (5 .prepatch files / 4 source PRs, all MERGED to dev: omnimarket#1180 a4e13e9b, - #1181 a0ad3c99, #1184 1d5074d9, omnibase_infra#1951 36d98275), mirrored on the omni_home docs branch; - (2) omnibase_infra PR #1959: scripts/preflight_hotpatch_ledger.py, which hard-fails when any ledger - row's source-PR merge commit is not an ancestor of the per-repo build ref (git merge-base - --is-ancestor) or when the running container carries unledgered .prepatch files, with a --post-rebuild - mode requiring zero .prepatch survivors, wired into scripts/deploy-runtime.sh as guard_hotpatch_ledger - (dry-run + execute); sole bypass is the Rule-10 user-approval receipt form via - HOTPATCH_PREFLIGHT_BYPASS, regex-validated, malformed values hard-fail; (3) a standalone drop-in - installed at /data/omninode/hotpatch-ledger/preflight.sh on .201, demonstrated live: FAIL (exit 1) - against the current pre-merge build-host clone HEADs (5010b1f4 / 8d7da124 — the exact incident class) - and PASS (exit 0) against origin/dev refs with the .prepatch tripwire seeing all 5 ledgered files and - zero unledgered. + (TOTAL_ARCHITECTURE_FINDINGS.md section 2.1). There was no machine-readable ledger mapping patched files + to source PRs and no rebuild-path gate refusing to rebuild a container whose live patches are not merged + into the build ref. OMN-13014 ships (1) the operational ledger at /data/omninode/hotpatch-ledger/ledger.yaml + on .201, backfilled from a live docker-exec census of all 10 app containers (5 .prepatch files / 4 source + PRs, all MERGED to dev: omnimarket#1180 a4e13e9b, #1181 a0ad3c99, #1184 1d5074d9, omnibase_infra#1951 + 36d98275), mirrored on the omni_home docs branch; (2) omnibase_infra PR #1959: scripts/preflight_hotpatch_ledger.py, + which hard-fails when any ledger row's source-PR merge commit is not an ancestor of the per-repo build + ref (git merge-base --is-ancestor) or when the running container carries unledgered .prepatch files, + with a --post-rebuild mode requiring zero .prepatch survivors, wired into scripts/deploy-runtime.sh + as guard_hotpatch_ledger (dry-run + execute); sole bypass is the Rule-10 user-approval receipt form + via HOTPATCH_PREFLIGHT_BYPASS, regex-validated, malformed values hard-fail; (3) a standalone drop-in + installed at /data/omninode/hotpatch-ledger/preflight.sh on .201, demonstrated live: FAIL (exit 1) against + the current pre-merge build-host clone HEADs (5010b1f4 / 8d7da124 — the exact incident class) and PASS + (exit 0) against origin/dev refs with the .prepatch tripwire seeing all 5 ledgered files and zero unledgered. is_seam_ticket: false interface_change: false interfaces_touched: [] @@ -32,15 +31,14 @@ emergency_bypass: dod_evidence: - id: "dod-infra-pr" description: >- - omnibase_infra PR #1959 adds scripts/preflight_hotpatch_ledger.py (ancestor gate + .prepatch - tripwire + post-rebuild mode + Rule-10 bypass validation) with guard_hotpatch_ledger wired into - scripts/deploy-runtime.sh main(), plus 17 unit tests in - tests/unit/scripts/test_preflight_hotpatch_ledger.py covering ancestor pass/fail, unknown-commit - config error, default-build-ref resolution, lane scoping, ledger schema/missing/empty handling, - tripwire (ledgered pass / unledgered fail / post-rebuild both ways / exec failure), and bypass - forms (valid receipt, malformed hard-fail, absent). Local proof: ruff format/check clean; mypy - --strict clean on the script and on src/ (2418 files); bash -n + shellcheck clean on - deploy-runtime.sh; pre-commit all hooks passed at commit time. + omnibase_infra PR #1959 adds scripts/preflight_hotpatch_ledger.py (ancestor gate + .prepatch tripwire + + post-rebuild mode + Rule-10 bypass validation) with guard_hotpatch_ledger wired into scripts/deploy-runtime.sh + main(), plus 17 unit tests in tests/unit/scripts/test_preflight_hotpatch_ledger.py covering ancestor + pass/fail, unknown-commit config error, default-build-ref resolution, lane scoping, ledger schema/missing/empty + handling, tripwire (ledgered pass / unledgered fail / post-rebuild both ways / exec failure), and + bypass forms (valid receipt, malformed hard-fail, absent). Local proof: ruff format/check clean; + mypy --strict clean on the script and on src/ (2418 files); bash -n + shellcheck clean on deploy-runtime.sh; + pre-commit all hooks passed at commit time. source: "manual" status: "verified" checks: @@ -52,14 +50,13 @@ dod_evidence: description: >- Deploy assessment: PR #1959 itself performs no live deploy, restart, topic mutation, or container recreate; the deploy-runtime.sh guard reaches hosts through the normal script distribution path. - Operationally (user-authorized P0.3 lane work, not a runtime mutation): the ledger - (/data/omninode/hotpatch-ledger/ledger.yaml, sha256 50b28669...) and the standalone gate - (/data/omninode/hotpatch-ledger/preflight.sh, sha256 4d558a42...) were installed on .201 as - plain files so tonight's stability rebuild can use the gate before the PR merges. Live - verification on .201 2026-06-12T07:54-07:56Z: gate FAILS (exit 1) against current build-host - clone HEADs (pre-merge identities) and PASSES (exit 0) against origin/dev build refs with the - live .prepatch tripwire (2 + 3 files, zero unledgered). deploy_pending = true for the repo-wired - guard path. + Operationally (user-authorized P0.3 lane work, not a runtime mutation): the ledger (/data/omninode/hotpatch-ledger/ledger.yaml, + sha256 50b28669...) and the standalone gate (/data/omninode/hotpatch-ledger/preflight.sh, sha256 + 4d558a42...) were installed on .201 as plain files so tonight's stability rebuild can use the gate + before the PR merges. Live verification on .201 2026-06-12T07:54-07:56Z: gate FAILS (exit 1) against + current build-host clone HEADs (pre-merge identities) and PASSES (exit 0) against origin/dev build + refs with the live .prepatch tripwire (2 + 3 files, zero unledgered). deploy_pending = true for + the repo-wired guard path. source: "manual" status: "verified" checks: @@ -70,9 +67,8 @@ dod_evidence: && grep -q 'no live deploy' "$CONTRACT_REPO_DIR/drift/dod_receipts/OMN-13014/dod-deploy-assessment/command.yaml" - id: "dod-occ-pr" description: >- - This OCC PR carries the central OMN-13014 ticket_contract and the dod-infra-pr / - dod-deploy-assessment receipts that the omnibase_infra code PR #1959 Receipt-Gate resolves via - its Evidence-Source line. + This OCC PR carries the central OMN-13014 ticket_contract and the dod-infra-pr / dod-deploy-assessment + receipts that the omnibase_infra code PR #1959 Receipt-Gate resolves via its Evidence-Source line. source: "manual" status: "verified" checks: diff --git a/drift/dod_receipts/OMN-13014/dod-deploy-assessment/command.yaml b/drift/dod_receipts/OMN-13014/dod-deploy-assessment/command.yaml index 879c7a8aeec..14a134e450c 100644 --- a/drift/dod_receipts/OMN-13014/dod-deploy-assessment/command.yaml +++ b/drift/dod_receipts/OMN-13014/dod-deploy-assessment/command.yaml @@ -9,10 +9,11 @@ run_timestamp: "2026-06-12T08:06:30Z" commit_sha: "7d17e74e2" branch: "jonah/omn-13014-hotpatch-ledger-preflight" pr_number: 1959 -contract_sha256: "sha256:19f3c9dc6011e83debd200a36cf7e453d21ca2d2a5c195d2d42614688ed4c1b5" +contract_sha256: "sha256:ff35759b23497360f3a73a4f46389e1af19406d091d10a3ee39b5587f081e47d" runner: "claude-code" verifier: "claude-code-review" -probe_command: "git diff --stat origin/dev...HEAD ; ssh jonah@192.168.86.201 preflight-gate-run-vs-origin/dev + sha256sum artifacts" +probe_command: "git diff --stat origin/dev...HEAD ; ssh jonah@192.168.86.201 preflight-gate-run-vs-origin/dev + + sha256sum artifacts" probe_stdout: |2 scripts/deploy-runtime.sh | 87 ++++ scripts/preflight_hotpatch_ledger.py | 349 ++++++++++++++++ @@ -23,6 +24,12 @@ probe_stdout: |2 4d558a42293536995fcf4c908a05733ae4020f6bfa6f8353406d38a8215d255c /data/omninode/hotpatch-ledger/preflight.sh 50b28669c6539c242c5bace9fd955d5b88d685787098654f52e485fcf142bec5 /data/omninode/hotpatch-ledger/ledger.yaml actual_output: >- - PASS: PR #1959 performs no live deploy, restart, topic mutation, or container recreate -- 4 files, +913/-5, scripts and tests only. deploy_pending = true for the repo-wired guard path (reaches hosts via normal script distribution). Operational drop-in (user-authorized P0.3 lane): ledger.yaml (sha256 50b28669...) and preflight.sh (sha256 4d558a42...) installed on .201 as plain files; live gate run against origin/dev build refs exits 0 with the .prepatch tripwire seeing all 5 ledgered files and zero unledgered; the same gate run against the current pre-merge build-host clone HEADs exits 1, proving the gate blocks the incident class. + PASS: PR #1959 performs no live deploy, restart, topic mutation, or container recreate -- 4 files, +913/-5, + scripts and tests only. deploy_pending = true for the repo-wired guard path (reaches hosts via normal + script distribution). Operational drop-in (user-authorized P0.3 lane): ledger.yaml (sha256 50b28669...) + and preflight.sh (sha256 4d558a42...) installed on .201 as plain files; live gate run against origin/dev + build refs exits 0 with the .prepatch tripwire seeing all 5 ledgered files and zero unledgered; the + same gate run against the current pre-merge build-host clone HEADs exits 1, proving the gate blocks + the incident class. exit_code: 0 working_dir: "/Users/jonah/Code/omni_home/omni_worktrees/OMN-13014/omnibase_infra" diff --git a/drift/dod_receipts/OMN-13014/dod-infra-pr/command.yaml b/drift/dod_receipts/OMN-13014/dod-infra-pr/command.yaml index f0545f5634c..3f53d1e73c4 100644 --- a/drift/dod_receipts/OMN-13014/dod-infra-pr/command.yaml +++ b/drift/dod_receipts/OMN-13014/dod-infra-pr/command.yaml @@ -3,22 +3,26 @@ schema_version: "1.0.0" ticket_id: "OMN-13014" evidence_item_id: "dod-infra-pr" check_type: "command" -check_value: "uv run pytest tests/unit/scripts/test_preflight_hotpatch_ledger.py -q && uv run mypy scripts/preflight_hotpatch_ledger.py --strict" +check_value: "uv run pytest tests/unit/scripts/test_preflight_hotpatch_ledger.py -q && uv run mypy scripts/preflight_hotpatch_ledger.py + --strict" status: PASS run_timestamp: "2026-06-12T08:06:30Z" commit_sha: "7d17e74e2" branch: "jonah/omn-13014-hotpatch-ledger-preflight" pr_number: 1959 -contract_sha256: "sha256:19f3c9dc6011e83debd200a36cf7e453d21ca2d2a5c195d2d42614688ed4c1b5" +contract_sha256: "sha256:ff35759b23497360f3a73a4f46389e1af19406d091d10a3ee39b5587f081e47d" runner: "claude-code" verifier: "claude-code-review" -probe_command: "uv run pytest tests/unit/scripts/test_preflight_hotpatch_ledger.py -q && uv run mypy scripts/preflight_hotpatch_ledger.py --strict" +probe_command: "uv run pytest tests/unit/scripts/test_preflight_hotpatch_ledger.py -q && uv run mypy scripts/preflight_hotpatch_ledger.py + --strict" probe_stdout: | ................. [100%] 17 passed in 3.06s Success: no issues found in 1 source file P1_EXIT=0 actual_output: >- - PASS: all 17 unit tests for the hot-patch ledger preflight gate pass (ancestor gate, lane scoping, ledger loading, tripwire, bypass forms, build-ref parsing) and mypy --strict is clean on the gate script. deploy-runtime.sh wiring verified by bash -n + shellcheck (clean) and pre-commit all-hooks pass at commit time. + PASS: all 17 unit tests for the hot-patch ledger preflight gate pass (ancestor gate, lane scoping, ledger + loading, tripwire, bypass forms, build-ref parsing) and mypy --strict is clean on the gate script. deploy-runtime.sh + wiring verified by bash -n + shellcheck (clean) and pre-commit all-hooks pass at commit time. exit_code: 0 working_dir: "/Users/jonah/Code/omni_home/omni_worktrees/OMN-13014/omnibase_infra" diff --git a/drift/dod_receipts/OMN-13014/dod-occ-pr/command.yaml b/drift/dod_receipts/OMN-13014/dod-occ-pr/command.yaml new file mode 100644 index 00000000000..b83d63288c7 --- /dev/null +++ b/drift/dod_receipts/OMN-13014/dod-occ-pr/command.yaml @@ -0,0 +1,32 @@ +--- +schema_version: "1.0.0" +ticket_id: "OMN-13014" +evidence_item_id: "dod-occ-pr" +check_type: "command" +check_value: "uv run validate-yaml contracts/OMN-13014.yaml && grep -c '^status: PASS$' drift/dod_receipts/OMN-13014/dod-infra-pr/command.yaml + drift/dod_receipts/OMN-13014/dod-deploy-assessment/command.yaml" +status: PASS +run_timestamp: "2026-06-12T08:08:48Z" +commit_sha: "bf4cbcde7" +branch: "jonah/omn-13014-occ-receipts" +pr_number: 2548 +contract_sha256: "sha256:ff35759b23497360f3a73a4f46389e1af19406d091d10a3ee39b5587f081e47d" +runner: "claude-code" +verifier: "claude-code-review" +probe_command: "uv run validate-yaml contracts/OMN-13014.yaml && grep -c '^status: PASS$' drift/dod_receipts/OMN-13014/dod-infra-pr/command.yaml + drift/dod_receipts/OMN-13014/dod-deploy-assessment/command.yaml" +probe_stdout: | + [INFO] Validating 1 file(s)... + + [OK] contracts/OMN-13014.yaml (ticket_contract) + + [OK] All 1 file(s) valid + drift/dod_receipts/OMN-13014/dod-infra-pr/command.yaml:1 + drift/dod_receipts/OMN-13014/dod-deploy-assessment/command.yaml:1 +actual_output: >- + PASS: validate-yaml confirms contracts/OMN-13014.yaml is a schema-valid ticket_contract, and each of + the two code/deploy receipts (dod-infra-pr, dod-deploy-assessment) carries a PASS status line. This + OCC PR (#2548) carries the central contract plus those receipts; the omnibase_infra code PR #1959 resolves + its Receipt-Gate via Evidence-Source: OCC#2548. +exit_code: 0 +working_dir: "/Users/jonah/Code/omni_home/omni_worktrees/OMN-13014-occ/onex_change_control"