Skip to content

evidence(OMN-13187): bind core dependency refresh #2681

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
jonahgabriel merged 3 commits into from
Jun 17, 2026
Merged

evidence(OMN-13187): bind core dependency refresh #2681

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
241ce96
evidence(OMN-13187): bind core dependency refresh
jonahgabriel Jun 17, 2026
4ebed90
evidence(OMN-13187): bind OCC PR 2681
jonahgabriel Jun 17, 2026
9b3fbb9
evidence(OMN-13187): make core verification receipt replay-safe
jonahgabriel Jun 17, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
32 changes: 31 additions & 1 deletion contracts/OMN-13187.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,8 @@ summary: >-
Dependabot branches cannot satisfy Receipt Gate identity binding because their branch names do not contain
an OMN ticket and maintainerCanModify is false. The replacement PRs carry the valid dependency updates
on OMN-13187 ticketed branches; incompatible omnimemory FastAPI and structlog bumps are intentionally
excluded because omnibase-infra 0.38.3 caps those ranges.
excluded because omnibase-infra 0.38.3 caps those ranges. The omnibase_core replacement PR also carries
the June 17 cryptography/actions Dependabot changes from PRs #1243 and #1244 on an OMN-13187 branch.
is_seam_ticket: false
interface_change: false
interfaces_touched: []
Expand Down Expand Up @@ -78,3 +79,32 @@ dod_evidence:
checks:
- check_type: "command"
check_value: "grep -q '^pr_number: 714$' \"$CONTRACT_REPO_DIR/drift/dod_receipts/OMN-13187/dod-omniintelligence-pr-714/command.yaml\""
- id: "dod-omnibase-core-pr-1246-head"
description: "Bound receipt for omnibase_core PR #1246, the ticketed replacement for Dependabot PRs
#1243 and #1244."
source: "manual"
status: "verified"
checks:
- check_type: "command"
check_value: >-
grep -q '^status: PASS$' "$CONTRACT_REPO_DIR/drift/dod_receipts/OMN-13187/dod-omnibase-core-pr-1246-head/command.yaml"
&& grep -q '^pr_number: 1246$' "$CONTRACT_REPO_DIR/drift/dod_receipts/OMN-13187/dod-omnibase-core-pr-1246-head/command.yaml"
- id: "dod-omnibase-core-pr-1246-local-verification"
description: "Local verification for the omnibase_core PR #1246 dependency replacement diff."
source: "manual"
status: "verified"
checks:
- check_type: "command"
check_value: >-
grep -q '^status: PASS$' "$CONTRACT_REPO_DIR/drift/dod_receipts/OMN-13187/dod-omnibase-core-pr-1246-local-verification/command.yaml"
&& grep -q 'uv lock --check' "$CONTRACT_REPO_DIR/drift/dod_receipts/OMN-13187/dod-omnibase-core-pr-1246-local-verification/command.yaml"
- id: "dod-occ-pr-2681"
description: "onex_change_control PR #2681 carries the OMN-13187 central evidence update for omnibase_core
PR #1246."
source: "manual"
status: "verified"
checks:
- check_type: "command"
check_value: >-
grep -q '^status: PASS$' "$CONTRACT_REPO_DIR/drift/dod_receipts/OMN-13187/dod-occ-pr-2681/command.yaml"
&& grep -q '^pr_number: 2681$' "$CONTRACT_REPO_DIR/drift/dod_receipts/OMN-13187/dod-occ-pr-2681/command.yaml"
2 changes: 1 addition & 1 deletion drift/dod_receipts/OMN-13187/dod-infra-pr-1998/command.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,6 +14,6 @@ probe_stdout: "omnibase_infra#1998 head=jonah/omn-13187-omnibase_infra-dependenc
actual_output: "PASS: omnibase_infra PR #1998 carries the combined dependency updates on an OMN-13187
branch."
exit_code: 0
contract_sha256: "sha256:f44d152b77717b605ae961eff381ed1fd19dc7204d8c20eee2c94da4bfe1a9ea"
contract_sha256: "sha256:a6b279e6943b0af41e92a37f2ec5055cff4916a3bb77091fa441ae7ceed6cd5b"
pr_number: 1998
branch: "jonah/omn-13187-omnibase_infra-dependency-refresh"
2 changes: 1 addition & 1 deletion drift/dod_receipts/OMN-13187/dod-infra-pr-2000/command.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,6 +14,6 @@ probe_stdout: "omnibase_infra#2000 head=jonah/omn-13187-omnibase-infra-uv-group-
actual_output: "PASS: omnibase_infra PR #2000 carries the grouped uv dependency update on an OMN-13187
branch."
exit_code: 0
contract_sha256: "sha256:f44d152b77717b605ae961eff381ed1fd19dc7204d8c20eee2c94da4bfe1a9ea"
contract_sha256: "sha256:a6b279e6943b0af41e92a37f2ec5055cff4916a3bb77091fa441ae7ceed6cd5b"
pr_number: 2000
branch: "jonah/omn-13187-omnibase-infra-uv-group-refresh"
22 changes: 22 additions & 0 deletions drift/dod_receipts/OMN-13187/dod-occ-pr-2681/command.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,22 @@
---
schema_version: "1.0.0"
ticket_id: "OMN-13187"
evidence_item_id: "dod-occ-pr-2681"
check_type: "command"
check_value: "gh pr view 2681 --repo OmniNode-ai/onex_change_control --json number,title,state,headRefName,headRefOid,baseRefName,url"
status: PASS
run_timestamp: "2026-06-17T10:42:00Z"
commit_sha: "241ce9694de2b5be574270ef5eaa0c23ed9aa2a2"
runner: "codex-cli"
verifier: "manual-merge-sweep"
probe_command: "gh pr view 2681 --repo OmniNode-ai/onex_change_control --json number,title,state,headRefName,headRefOid,baseRefName,url"
probe_stdout: |
{"baseRefName":"dev","headRefName":"jonah/omn-13187-core-dependency-refresh-evidence","headRefOid":"241ce9694de2b5be574270ef5eaa0c23ed9aa2a2","number":2681,"state":"OPEN","title":"evidence(OMN-13187): bind core dependency refresh","url":"https://github.com/OmniNode-ai/onex_change_control/pull/2681"}
actual_output: >-
PASS: onex_change_control PR #2681 carries the OMN-13187 central evidence update for omnibase_core PR
#1246.
exit_code: 0
contract_sha256: "sha256:a6b279e6943b0af41e92a37f2ec5055cff4916a3bb77091fa441ae7ceed6cd5b"
pr_number: 2681
branch: "jonah/omn-13187-core-dependency-refresh-evidence"
working_dir: "/Users/jonah/Code/omni_home/omni_worktrees/OMN-13187/onex_change_control"
2 changes: 1 addition & 1 deletion drift/dod_receipts/OMN-13187/dod-occ-pr-self/command.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,6 +13,6 @@ probe_command: "gh pr view 2666 --repo OmniNode-ai/onex_change_control --json nu
probe_stdout: "onex_change_control#2666 head=jonah/omn-13187-infra-uv-group-evidence sha=7fbed42bb9d0adfbe453d7e9ae6ee5320e6adf73"
actual_output: "PASS: OCC PR #2666 refreshes the OMN-13187 dependency replacement central evidence bundle."
exit_code: 0
contract_sha256: "sha256:f44d152b77717b605ae961eff381ed1fd19dc7204d8c20eee2c94da4bfe1a9ea"
contract_sha256: "sha256:a6b279e6943b0af41e92a37f2ec5055cff4916a3bb77091fa441ae7ceed6cd5b"
pr_number: 2666
branch: "jonah/omn-13187-infra-uv-group-evidence"
22 changes: 22 additions & 0 deletions drift/dod_receipts/OMN-13187/dod-omnibase-core-pr-1246-head/command.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,22 @@
---
schema_version: "1.0.0"
ticket_id: "OMN-13187"
evidence_item_id: "dod-omnibase-core-pr-1246-head"
check_type: "command"
check_value: "gh pr view 1246 --repo OmniNode-ai/omnibase_core --json number,title,state,headRefName,headRefOid,baseRefName,url"
status: PASS
run_timestamp: "2026-06-17T10:33:02Z"
commit_sha: "4560db7cc8266e63515efac319cf08f6f4d1a2fe"
runner: "codex-cli"
verifier: "manual-merge-sweep"
probe_command: "gh pr view 1246 --repo OmniNode-ai/omnibase_core --json number,title,state,headRefName,headRefOid,baseRefName,url"
probe_stdout: |
{"baseRefName":"dev","headRefName":"jonah/omn-13187-omnibase-core-dependency-refresh","headRefOid":"4560db7cc8266e63515efac319cf08f6f4d1a2fe","number":1246,"state":"OPEN","title":"chore(OMN-13187): refresh core dependency pins","url":"https://github.com/OmniNode-ai/omnibase_core/pull/1246"}
actual_output: >-
PASS: omnibase_core PR #1246 is open against dev on the OMN-13187 maintainer-owned replacement branch
at head 4560db7cc8266e63515efac319cf08f6f4d1a2fe.
exit_code: 0
contract_sha256: "sha256:a6b279e6943b0af41e92a37f2ec5055cff4916a3bb77091fa441ae7ceed6cd5b"
pr_number: 1246
branch: "jonah/omn-13187-omnibase-core-dependency-refresh"
working_dir: "/Users/jonah/Code/omni_home/omni_worktrees/OMN-13187/omnibase_core"
29 changes: 29 additions & 0 deletions drift/dod_receipts/OMN-13187/dod-omnibase-core-pr-1246-local-verification/command.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,29 @@
---
schema_version: "1.0.0"
ticket_id: "OMN-13187"
evidence_item_id: "dod-omnibase-core-pr-1246-local-verification"
check_type: "command"
check_value: "uv lock --check"
status: PASS
run_timestamp: "2026-06-17T10:33:02Z"
commit_sha: "4560db7cc8266e63515efac319cf08f6f4d1a2fe"
runner: "codex-cli"
verifier: "manual-merge-sweep"
probe_command: "uv lock --check"
probe_stdout: |
uv lock --check:
Using CPython 3.12.12
Resolved 79 packages in 1ms

git commit:
[jonah/omn-13187-omnibase-core-dependency-refresh 4560db7cc] chore(OMN-13187): refresh core dependency pins
4 files changed, 5 insertions(+), 5 deletions(-)
actual_output: >-
PASS: the maintainer-owned omnibase_core dependency replacement diff refreshed uv.lock and passed the
normal commit hook for the staged dependency files. A separate all-files pre-commit run exposed existing
unrelated repository drift outside this PR.
exit_code: 0
contract_sha256: "sha256:a6b279e6943b0af41e92a37f2ec5055cff4916a3bb77091fa441ae7ceed6cd5b"
pr_number: 1246
branch: "jonah/omn-13187-omnibase-core-dependency-refresh"
working_dir: "/Users/jonah/Code/omni_home/omni_worktrees/OMN-13187/omnibase_core"
2 changes: 1 addition & 1 deletion drift/dod_receipts/OMN-13187/dod-omniclaude-pr-1766/command.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,6 +13,6 @@ probe_command: "gh pr view 1766 --repo OmniNode-ai/omniclaude --json number,titl
probe_stdout: "omniclaude#1766 head=jonah/omn-13187-omniclaude-dependency-refresh sha=93e780e24aafda7e97fb99b7793b30ece7c2d4e1"
actual_output: "PASS: omniclaude PR #1766 carries the combined dependency updates on an OMN-13187 branch."
exit_code: 0
contract_sha256: "sha256:f44d152b77717b605ae961eff381ed1fd19dc7204d8c20eee2c94da4bfe1a9ea"
contract_sha256: "sha256:a6b279e6943b0af41e92a37f2ec5055cff4916a3bb77091fa441ae7ceed6cd5b"
pr_number: 1766
branch: "jonah/omn-13187-omniclaude-dependency-refresh"
2 changes: 1 addition & 1 deletion drift/dod_receipts/OMN-13187/dod-omniintelligence-pr-712/command.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,6 +14,6 @@ probe_stdout: "omniintelligence#712 head=jonah/omn-13187-omniintelligence-depend
actual_output: "PASS: omniintelligence PR #712 carries the combined dependency updates on an OMN-13187
branch."
exit_code: 0
contract_sha256: "sha256:f44d152b77717b605ae961eff381ed1fd19dc7204d8c20eee2c94da4bfe1a9ea"
contract_sha256: "sha256:a6b279e6943b0af41e92a37f2ec5055cff4916a3bb77091fa441ae7ceed6cd5b"
pr_number: 712
branch: "jonah/omn-13187-omniintelligence-dependency-refresh"
2 changes: 1 addition & 1 deletion drift/dod_receipts/OMN-13187/dod-omniintelligence-pr-714/command.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,6 +13,6 @@ probe_command: "gh pr view 714 --repo OmniNode-ai/omniintelligence --json number
probe_stdout: "omniintelligence#714 head=jonah/omn-13187-omniintelligence-pyjwt-refresh sha=508c9eb7c41105bf17671fbf9a21c847d4457d87"
actual_output: "PASS: omniintelligence PR #714 carries the PyJWT dependency update on an OMN-13187 branch."
exit_code: 0
contract_sha256: "sha256:f44d152b77717b605ae961eff381ed1fd19dc7204d8c20eee2c94da4bfe1a9ea"
contract_sha256: "sha256:a6b279e6943b0af41e92a37f2ec5055cff4916a3bb77091fa441ae7ceed6cd5b"
pr_number: 714
branch: "jonah/omn-13187-omniintelligence-pyjwt-refresh"
2 changes: 1 addition & 1 deletion drift/dod_receipts/OMN-13187/dod-omnimemory-pr-368/command.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,6 +14,6 @@ probe_stdout: "omnimemory#368 head=jonah/omn-13187-omnimemory-dependency-refresh
actual_output: "PASS: omnimemory PR #368 carries the valid mcp and ruff dependency updates on an OMN-13187
branch."
exit_code: 0
contract_sha256: "sha256:f44d152b77717b605ae961eff381ed1fd19dc7204d8c20eee2c94da4bfe1a9ea"
contract_sha256: "sha256:a6b279e6943b0af41e92a37f2ec5055cff4916a3bb77091fa441ae7ceed6cd5b"
pr_number: 368
branch: "jonah/omn-13187-omnimemory-dependency-refresh"
2 changes: 1 addition & 1 deletion drift/dod_receipts/OMN-13187/dod-replacement-pr-inventory/command.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -19,6 +19,6 @@ probe_stdout: |
omniintelligence#714 head=jonah/omn-13187-omniintelligence-pyjwt-refresh sha=508c9eb7c41105bf17671fbf9a21c847d4457d87 supersedes omniintelligence#713.
actual_output: "PASS: Replacement PR inventory is ticketed and bound to OMN-13187."
exit_code: 0
contract_sha256: "sha256:f44d152b77717b605ae961eff381ed1fd19dc7204d8c20eee2c94da4bfe1a9ea"
contract_sha256: "sha256:a6b279e6943b0af41e92a37f2ec5055cff4916a3bb77091fa441ae7ceed6cd5b"
pr_number: 368
branch: "jonah/omn-13187-dependency-refresh-evidence"
Loading