evidence(OMN-13187): bind core dependency refresh

[jonahgabriel]

Closes OMN-13187

Adds central OCC evidence for omnibase_core#1246, the maintainer-owned replacement for Dependabot PRs #1243 and #1244.

Verification:

• uv run validate-yaml contracts/OMN-13187.yaml
• local receipt-gate simulation for omnibase_core#1246: PASS
• pre-commit run --files : PASS
• pre-commit run --all-files: fails on existing unrelated historical receipt-honesty drift outside this PR

Evidence-Ticket: OMN-13187

Summary by CodeRabbit

• Documentation

  • Updated contract evidence documentation with improved clarification of dependency refresh procedures, verification requirements, and corresponding evidence records.

• Chores

  • Refreshed verification integrity checksums and added new evidence records for dependency resolution validation across multiple components.

[coderabbitai]

Warning

Review limit reached

@jonahgabriel, we couldn't start this review because you've reached your PR review rate limit.

More reviews will be available in 32 minutes and 13 seconds. Learn how PR review limits work.

Your organization has used up its prepaid credits, and credit purchases are no longer available. Enable the review add-on in the billing tab to keep reviews running — you're only billed for reviews past your plan's rate limits ($0.25/file).

⌛ How to resolve this issue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based credits.

🚦 How do rate limits work?

CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan refill rate.

For paid Pro and Pro+ PR reviews, CodeRabbit uses adaptive limits for sustained high-volume activity. When a developer's recent PR review activity reaches the 95th percentile or higher among CodeRabbit users, the refill rate gradually slows as usage increases. The highest same-day bursts are limited more strictly.

Please see our Fair Usage Limits Policy for further information.

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 2b6596d1-5c28-4269-870f-5b8401e3fabf

📥 Commits

Reviewing files that changed from the base of the PR and between 241ce96 and 9b3fbb9.

📒 Files selected for processing (12)

• contracts/OMN-13187.yaml
• drift/dod_receipts/OMN-13187/dod-infra-pr-1998/command.yaml
• drift/dod_receipts/OMN-13187/dod-infra-pr-2000/command.yaml
• drift/dod_receipts/OMN-13187/dod-occ-pr-2681/command.yaml
• drift/dod_receipts/OMN-13187/dod-occ-pr-self/command.yaml
• drift/dod_receipts/OMN-13187/dod-omnibase-core-pr-1246-head/command.yaml
• drift/dod_receipts/OMN-13187/dod-omnibase-core-pr-1246-local-verification/command.yaml
• drift/dod_receipts/OMN-13187/dod-omniclaude-pr-1766/command.yaml
• drift/dod_receipts/OMN-13187/dod-omniintelligence-pr-712/command.yaml
• drift/dod_receipts/OMN-13187/dod-omniintelligence-pr-714/command.yaml
• drift/dod_receipts/OMN-13187/dod-omnimemory-pr-368/command.yaml
• drift/dod_receipts/OMN-13187/dod-replacement-pr-inventory/command.yaml

📝 Walkthrough

Walkthrough

The contracts/OMN-13187.yaml contract narrative is updated to document omnibase_core PR #1246 as a replacement for uneditable Dependabot branches, noting it includes June 17 cryptography/actions changes from PRs #1243 and #1244. Two new dod_evidence entries and their corresponding command.yaml receipt files are added for PR #1246. All eight existing OMN-13187 receipt command.yaml files have their contract_sha256 field refreshed to the new hash.

Changes

OMN-13187 Evidence Update

Layer / File(s)	Summary
Contract narrative and new PR #1246 receipt files contracts/OMN-13187.yaml, drift/dod_receipts/OMN-13187/dod-omnibase-core-pr-1246-head/command.yaml, drift/dod_receipts/OMN-13187/dod-omnibase-core-pr-1246-local-verification/command.yaml	Contract adds rationale text noting omnibase_core PR #1246 absorbs Dependabot PRs #1243/#1244, and two new dod_evidence items are declared; the corresponding receipt files are populated with full run metadata, GitHub CLI probe output (PASS, PR #1246 OPEN), and uv lock --check verification results.
contract_sha256 refresh across existing receipts drift/dod_receipts/OMN-13187/dod-infra-pr-1998/command.yaml, drift/dod_receipts/OMN-13187/dod-infra-pr-2000/command.yaml, drift/dod_receipts/OMN-13187/dod-occ-pr-self/command.yaml, drift/dod_receipts/OMN-13187/dod-omniclaude-pr-1766/command.yaml, drift/dod_receipts/OMN-13187/dod-omniintelligence-pr-71.../command.yaml, drift/dod_receipts/OMN-13187/dod-omnimemory-pr-368/command.yaml, drift/dod_receipts/OMN-13187/dod-replacement-pr-inventory/command.yaml	Each existing receipt's contract_sha256 is updated from sha256:f44d152b... to sha256:07e4781c...; all other receipt metadata is unchanged.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Possibly related PRs

• OmniNode-ai/onex_change_control#2014: Also updates contract_sha256 values across multiple drift/dod_receipts/**/command.yaml receipt files for OMN-13187, following the same hash-refresh pattern.

Poem

🐇 A new receipt has joined the stack,
PR twelve-forty-six has our back.
The cryptography hops into place,
uv lock --check wins the race.
Old hashes out, fresh digests in—
The audit trail's a tidy win! ✨

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and specifically describes the main change: adding evidence binding for OMN-13187 related to a core dependency refresh, which aligns with the primary objective of documenting maintainer-owned replacement PR for Dependabot updates.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch jonah/omn-13187-core-dependency-refresh-evidence

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In
`@drift/dod_receipts/OMN-13187/dod-omnibase-core-pr-1246-local-verification/command.yaml`:
- Around line 6-20: The check_value and probe_command fields contain a
state-changing git commit operation combined with the read-only uv lock check,
which makes replaying the receipt unsafe and potentially destructive to the
worktree. Refactor these fields to separate the read-only probe operation (uv
lock --check) from the state-changing commit action. Keep the probe_command
containing only the uv lock check command, and capture the git commit
information separately in a different field or section to ensure the recorded
probe remains idempotent and replay-safe.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 0be7d38d-fd98-4c2c-9d25-226c61aa15da

📥 Commits

Reviewing files that changed from the base of the PR and between a241702 and 241ce96.

📒 Files selected for processing (11)

• contracts/OMN-13187.yaml
• drift/dod_receipts/OMN-13187/dod-infra-pr-1998/command.yaml
• drift/dod_receipts/OMN-13187/dod-infra-pr-2000/command.yaml
• drift/dod_receipts/OMN-13187/dod-occ-pr-self/command.yaml
• drift/dod_receipts/OMN-13187/dod-omnibase-core-pr-1246-head/command.yaml
• drift/dod_receipts/OMN-13187/dod-omnibase-core-pr-1246-local-verification/command.yaml
• drift/dod_receipts/OMN-13187/dod-omniclaude-pr-1766/command.yaml
• drift/dod_receipts/OMN-13187/dod-omniintelligence-pr-712/command.yaml
• drift/dod_receipts/OMN-13187/dod-omniintelligence-pr-714/command.yaml
• drift/dod_receipts/OMN-13187/dod-omnimemory-pr-368/command.yaml
• drift/dod_receipts/OMN-13187/dod-replacement-pr-inventory/command.yaml