Skip to content

evidence(OMN-13196): OCC receipt for ModelOnexEnvelope deletion (core #1250 + infra #2007) - #2686

Merged
jonahgabriel merged 1 commit into
devfrom
jonah/omn-13196-occ-receipt
Jun 17, 2026
Merged

jonahgabriel merged 1 commit into
devfrom
jonah/omn-13196-occ-receipt

Conversation

@jonahgabriel

@jonahgabriel jonahgabriel commented Jun 17, 2026 •

Copy link
Copy Markdown
Contributor

OMN-13196 — OCC contract + PASS receipts for ModelOnexEnvelope deletion (B4)

Evidence-Source: a77ef5ecb2e7bb7b7f6761fb7468f5741e9cde23
Evidence-Ticket: OMN-13196

Binds the two coordinated impl PRs for OMN-13196 (B4: delete ModelOnexEnvelope), epic OMN-13187 (Workstream B — envelope dedup).

What this OCC PR carries

Both receipts: verifier: receipt-gate-local (≠ runner: omn-13196-impl); real probe_command + probe_stdout; contract_sha256 binds the yamlfmt-normalized contract bytes (Receipt Hardening Gate passes).

Binding

Underlying work

  • omnibase_core chore(OMN-11348): bind 2026-05-21 wave 2 batch release evidence #1250: deletes ModelOnexEnvelope class + 2 exports + 4 envelope-specific test files; retargets the validator test fixture (frozen stub, EnvelopeValidator is duck-typed) and stale docstrings. grep src+tests = 0. Gates: ruff clean, mypy --strict no new errors, validator 40 passed, full pytest 41576 passed (21 failures are pre-existing full-suite xdist flakes that pass in isolation, unrelated to envelopes).
  • omnibase_infra docs(OMN-12559): OCC contract + receipts for node migration auto-discovery #2007: retargets the one live ModelOnexEnvelope import (perf benchmark _make_envelope) to ModelEventEnvelope[dict[str, Any]] + corrects 2 stale src docstrings. grep src+tests = 0. Gates: ruff clean, mypy --strict Success, benchmark 13 passed.

Residual doc-only refs (omnibase_spi README, omniintelligence docstring) deferred to B5 → OMN-13204.

Closes OMN-13196.

@coderabbitai

coderabbitai Bot commented Jun 17, 2026 •

Copy link
Copy Markdown

Warning

Review limit reached

@jonahgabriel, we couldn't start this review because you've reached your PR review rate limit.

More reviews will be available in 2 hours, 51 minutes, and 45 seconds. Learn how PR review limits work.

Your organization has used up its prepaid credits, and credit purchases are no longer available. Enable the review add-on in the billing tab to keep reviews running — you're only billed for reviews past your plan's rate limits ($0.25/file).

⌛ How to resolve this issue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based credits.

🚦 How do rate limits work?

CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan refill rate.

For paid Pro and Pro+ PR reviews, CodeRabbit uses adaptive limits for sustained high-volume activity. When a developer's recent PR review activity reaches the 95th percentile or higher among CodeRabbit users, the refill rate gradually slows as usage increases. The highest same-day bursts are limited more strictly.

Please see our Fair Usage Limits Policy for further information.

ℹ️ Review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 15889e28-5978-47d3-b7d4-660ae8e8ed58

📥 Commits

Reviewing files that changed from the base of the PR and between 434678d and 47fa001.

📒 Files selected for processing (3)
  • contracts/OMN-13196.yaml
  • drift/dod_receipts/OMN-13196/pr-omnibase_core/command.yaml
  • drift/dod_receipts/OMN-13196/pr-omnibase_infra/command.yaml
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch jonah/omn-13196-occ-receipt

Comment @coderabbitai help to get the list of available commands and usage tips.

…1250 + infra #2007)

Adds the OCC contract + paired dod_receipts for OMN-13196 (B4: delete
ModelOnexEnvelope). Dual-key binding per OMN-12813/12816:
- pr_number: 2686  -> this OCC PR, for OCC self-preflight eligibility
- commit_sha       -> impl PR head, for each impl repo's verify Receipt-Gate
  - pr-omnibase_core:  a77ef5ecb (PR #1250, delete ModelOnexEnvelope + tests)
  - pr-omnibase_infra: 57f66e31f (PR #2007, retarget perf benchmark + docstrings)

Each receipt records the zero-ModelOnexEnvelope grep proof (src+tests=0) and the
green gate results. verifier=receipt-gate-local (!= runner omn-13196-impl). The
contract check_value greps each receipt for status PASS + pr_number 2686 + the
impl commit_sha; contract_sha256 binds the yamlfmt-normalized contract bytes.

OMN-13196
@jonahgabriel
jonahgabriel force-pushed the jonah/omn-13196-occ-receipt branch from 6eb4eed to 47fa001 Compare June 17, 2026 14:21
@jonahgabriel
jonahgabriel enabled auto-merge June 17, 2026 14:26
@jonahgabriel
jonahgabriel added this pull request to the merge queue Jun 17, 2026
Merged via the queue into dev with commit 5f97c2b Jun 17, 2026
37 checks passed
@jonahgabriel
jonahgabriel deleted the jonah/omn-13196-occ-receipt branch June 17, 2026 14:33
jonahgabriel added a commit that referenced this pull request Jun 17, 2026
…432045df

Follow-up to the merged OMN-13196 OCC evidence (#2686). The omnibase_infra impl
PR #2007 was rescoped to benchmark-only (the two src docstring edits, pure doc
comments, moved to B5/OMN-13204 to keep the PR out of the deploy-gate runtime-path
matcher). Force-push moved the head from 57f66e31f -> f432045df.

This rebinds the infra dod_evidence to the new head:
- drift/dod_receipts/OMN-13196/pr-omnibase_infra/command.yaml: commit_sha + prose
  updated to f432045df; scope narrowed to the perf-benchmark retarget.
- contracts/OMN-13196.yaml: the pr-omnibase_infra check_value greps
  commit_sha "f432045df…" (pr_number 2686 unchanged).
- both receipts' contract_sha256 rebound to the yamlfmt-normalized contract.

pr_number 2686 (the original OCC PR) is retained per the dual-key binding the
merged contract greps. verifier=receipt-gate-local (!= runner omn-13196-impl).

OMN-13196
jonahgabriel added a commit that referenced this pull request Jun 17, 2026
…2045df

Supersedes the merged #2686 evidence after the omnibase_infra impl PR #2007 was
rescoped to benchmark-only (the two src docstring edits, pure doc comments, moved
to B5/OMN-13204 to keep the PR out of the deploy-gate runtime-path matcher). The
force-push moved PR #2007's head 57f66e31f -> f432045df.

Dual-key binding for BOTH impl PRs, now keyed to this OCC PR (#2692):
- pr-omnibase_core:  commit_sha a77ef5ecb (PR #1250) + pr_number 2692
- pr-omnibase_infra: commit_sha f432045df (PR #2007) + pr_number 2692
- contract check_value greps each receipt for status PASS + pr_number 2692 + the
  impl commit_sha; both contract_sha256 rebound to the yamlfmt-normalized contract.

verifier=receipt-gate-local (!= runner omn-13196-impl). Honesty + hardening pass.

OMN-13196
github-merge-queue Bot pushed a commit that referenced this pull request Jun 17, 2026
…2045df (#2692)

Supersedes the merged #2686 evidence after the omnibase_infra impl PR #2007 was
rescoped to benchmark-only (the two src docstring edits, pure doc comments, moved
to B5/OMN-13204 to keep the PR out of the deploy-gate runtime-path matcher). The
force-push moved PR #2007's head 57f66e31f -> f432045df.

Dual-key binding for BOTH impl PRs, now keyed to this OCC PR (#2692):
- pr-omnibase_core:  commit_sha a77ef5ecb (PR #1250) + pr_number 2692
- pr-omnibase_infra: commit_sha f432045df (PR #2007) + pr_number 2692
- contract check_value greps each receipt for status PASS + pr_number 2692 + the
  impl commit_sha; both contract_sha256 rebound to the yamlfmt-normalized contract.

verifier=receipt-gate-local (!= runner omn-13196-impl). Honesty + hardening pass.

OMN-13196
jonahgabriel added a commit that referenced this pull request Aug 8, 2026
…#2686 (#6209)

* evidence(OMN-15744): add falsifiable deploy-gate probe (OMN-14443/14505)

The prior dod-deploy-assessment entry (autobind-generated, pre-existing,
protected by the append-only invariant) uses gh pr diff --name-only |
grep -c, which the deploy-gate falsifiability ratchet correctly rejects
as vacuous (no live-surface command in command position). This appends
a net-new dod_evidence item that uses the ratchet's own documented
"Good (compute-only/no-live-deploy tickets, hermetic under OMN-14051)"
pattern: gh api reads docker/docker-compose.gateway.yml from
omnibase_infra at PR #2686's head SHA and asserts the b-3 broker FQDN
is present in extra_hosts -- a real repo-state check whose exit status
depends on the actual diff (0 matches on dev HEAD pre-fix, 4 matches on
the PR head post-fix; verified live before writing this contract entry).

OMN-15744

* evidence(OMN-15744): net-new receipt for the falsifiable deploy-gate probe

Records the live gh api probe output (grep -c returns 4 on PR #2686 head
SHA) that backs the deploy-scope-falsifiable-probe dod_evidence entry.
Falsifiability against dev HEAD (0 matches pre-fix) is documented in
actual_output; probe_stdout carries only the declared command's literal
terminal output per the Receipt Hardening Gate's shape-consistency rule.

OMN-15744

* fix(OMN-15744): buffer producer before grep -q to avoid SIGPIPE false-RED

Contract Corpus Ratchets (OMN-15411, Rule E) correctly flagged the
deploy-scope-falsifiable-probe check_value: piping an unbounded gh api
producer straight into base64 -d | grep -q lets grep exit at the first
match, SIGPIPE-killing the upstream producer, which the dod_verify
runner's `bash -o pipefail` turns into a false RED (exit 141) even
though the evidence is present. Buffer the producer into a variable
first, per the ratchet's own remediation text.

OMN-15744

* fix(OMN-15744): rebind receipt to SIGPIPE-safe check + rerun probe fresh

Rebinds contract_sha256/contract_entry_sha256 to the buffered check_value
and reruns the probe fresh (grep -cF returns 1, exit 0) rather than
reusing the earlier pipefail-fragile output.

OMN-15744

* fix(OMN-15744): fully buffer base64-decoded body before grep -q too

The prior fix buffered only the gh api fetch, leaving base64 -d | grep -qF
still live-piped -- Contract Corpus Ratchets Rule E flagged that as the
same sigpipe-fragile pattern (bucket: base64-decoded file body). Buffer
the decoded output into a second variable before the final grep -qF.

OMN-15744

* evidence(OMN-15744): rebind receipt to fully-buffered check + rerun probe fresh

OMN-15744
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant