evidence(OMN-13405): OCC contract + receipts for workspace core dev-HEAD vendoring

contracts/OMN-13405.yaml

@@ -0,0 +1,54 @@
+---
+schema_version: "1.0.0"
+ticket_id: "OMN-13405"
+title: "Workspace build vendors omnibase_core from the dev-HEAD clone"
+summary: >-
+  Make the workspace-mode runtime image (omnibase_infra docker/Dockerfile.runtime, staged by scripts/runtime_build/stage_workspace.sh)
+  install omnibase_core from the staged dev-HEAD clone instead of the lock-pinned released wheel. The
+  image previously installed omnibase_core only from omnibase_infra/uv.lock + pyproject [tool.uv.sources]
+  (a released 0.45.0 git rev predating dev enum modules); omnimarket dev imports omnibase_core.enums.enum_correction_failure_axis
+  at module import, so the enum-less wheel crash-looped omnimarket-projection-api and the runtime kernel.
+  The fix stages omnibase_core, then reinstalls it from the staged tree defeating [tool.uv.sources] (install
+  run from / with --no-sources + explicit file:// direct reference + --no-cache + --reinstall-package),
+  and adds omnibase_core to the build-provenance WORKSPACE_PACKAGES so a future regression fails the build.
+  release mode is unchanged (core from the lock). Proven by a cold dev-lane bring-up coming up HEALTHY:
+  runtime + effects + projection-api running/healthy restarts=0, projection-api no longer crash-loops,
+  broker EventBusKafka, migration ledger 0017/0018/0019 applied. Shipped on omnibase_infra PR #2058.
+is_seam_ticket: false
+interface_change: false
+interfaces_touched: []
+emergency_bypass:
+  enabled: false
+  justification: ""
+  follow_up_ticket_id: ""
+dod_evidence:
+  - id: "dod-001"
+    description: >-
+      Workspace build installs omnibase_core from the staged dev-HEAD tree (file:// direct_url), defeating
+      omnibase_infra pyproject [tool.uv.sources] git pin; build-provenance reports all workspace provenance
+      proofs passed with omnibase_core install=file://. Proven on omnibase_infra PR #2058.
+    source: "manual"
+    status: "verified"
+    checks:
+      - check_type: "command"
+        check_value: "grep -q 'PASS' drift/dod_receipts/OMN-13405/dod-001/command.yaml"
+  - id: "dod-002"
+    description: >-
+      The new runtime image imports omnibase_core.enums.enum_correction_failure_axis (the exact v4 ModuleNotFoundError)
+      and omnimarket.intelligence.events (the v4 crash site); cold dev bring-up came up HEALTHY with omnimarket-projection-api
+      restarts=0 and /health 200. Proven on omnibase_infra PR #2058.
+    source: "manual"
+    status: "verified"
+    checks:
+      - check_type: "command"
+        check_value: "grep -q 'PASS' drift/dod_receipts/OMN-13405/dod-002/command.yaml"
+  - id: "dod-occ-pr"
+    description: >-
+      Self-binding receipt for this OCC PR, which carries the central contract consumed by the omnibase_infra
+      PR #2058 Receipt Gate via Evidence-Source. The probe greps the OCC tree and proves contracts/OMN-13405.yaml
+      is present.
+    source: "manual"
+    status: "verified"
+    checks:
+      - check_type: "command"
+        check_value: "grep -c '^ticket_id: \"OMN-13405\"$' contracts/OMN-13405.yaml"

drift/dod_receipts/OMN-13405/dod-001/command.yaml

@@ -0,0 +1,29 @@
+---
+schema_version: 1.0.0
+ticket_id: OMN-13405
+evidence_item_id: dod-001
+check_type: command
+check_value: uv run pytest tests/scripts/test_deploy_runtime_build_context.py tests/scripts/test_check_sibling_lock_pins.py
+  -q
+status: PASS
+run_timestamp: '2026-06-21T09:30:00Z'
+commit_sha: 84849e6436e2776bd5595fa39ddb2e26447268c5
+runner: claude-code
+verifier: claude-code-review
+contract_sha256: sha256:8f5550c301fb356b3d20eec4750ffdf3d411dd35a493b49c2fcac3e25f74d905
+probe_command: uv run pytest tests/scripts/test_deploy_runtime_build_context.py tests/scripts/test_check_sibling_lock_pins.py
+  -q
+probe_stdout: '15 passed in 1.06s'
+actual_output: >-
+  PASS: the build-context + sibling-pin suites stay green after adding omnibase_core to the workspace
+  staged set and the build-provenance WORKSPACE_PACKAGES map. The .201 workspace build log confirms the
+  install resolved to "Building omnibase-core @ file:///workspace/sibling-repos/omnibase_core" -> "+ omnibase-core==0.45.0
+  (from file:///workspace/sibling-repos/omnibase_core)" and "All 4 workspace provenance proofs passed";
+  the new image's omnibase-core direct_url.json is {"url":"file:///workspace/sibling-repos/omnibase_core","dir_info":{}}.
+  Defeating [tool.uv.sources] required running the install from / with --no-sources + an explicit file://
+  direct reference + --no-cache + --reinstall-package omnibase-core. Evidence: .onex_state/runtime-e2e-2026-06-21/02-dev-deploy/a6/build.log
+  + CAPTURE.md.
+exit_code: 0
+branch: jonah/omn-13405-workspace-vendor-core-dev-head
+working_dir: /Users/jonah/Code/omni_home/omni_worktrees/OMN-13405/omnibase_infra
+pr_number: 2058

drift/dod_receipts/OMN-13405/dod-002/command.yaml

@@ -0,0 +1,29 @@
+---
+schema_version: 1.0.0
+ticket_id: OMN-13405
+evidence_item_id: dod-002
+check_type: command
+check_value: docker inspect -f '{{.State.Health.Status}} {{.RestartCount}}' omnimarket-projection-api
+status: PASS
+run_timestamp: '2026-06-21T09:43:00Z'
+commit_sha: 84849e6436e2776bd5595fa39ddb2e26447268c5
+runner: claude-code
+verifier: claude-code-review
+contract_sha256: sha256:8f5550c301fb356b3d20eec4750ffdf3d411dd35a493b49c2fcac3e25f74d905
+probe_command: docker inspect -f '{{.State.Health.Status}} {{.RestartCount}}' omnimarket-projection-api
+probe_stdout: 'healthy 0'
+actual_output: >-
+  PASS: cold dev-lane bring-up (project omnibase-infra, --profile runtime) came up HEALTHY on the new
+  workspace image (omnibase-infra-omninode-runtime sha256:d68b8972202c). omnimarket-projection-api is
+  running/healthy restarts=0 with /health 200 and is NOT crash-looping (Uvicorn startup complete) -- the
+  v4 ModuleNotFoundError: omnibase_core.enums.enum_correction_failure_axis is GONE. The new image imports
+  both omnibase_core.enums.enum_correction_failure_axis and omnimarket.intelligence.events.ModelUserCorrectionEvent.
+  omninode-runtime running/healthy restarts=0 /health 8085=200; runtime-effects running/healthy restarts=0;
+  RUNTIME_SOURCE_HASH=db3ae8527b5f == infra dev short; broker EventBusKafka (Redpanda cluster redpanda.23e7aed5-...,
+  :19092); migration ledger node:node_projection_delegation:0017/0018/0019 applied; delegation_events/generation_events
+  queryable; stability-test/prod/judge lanes untouched. Verifier (claude-code-review) is distinct from
+  the runner. Evidence: .onex_state/runtime-e2e-2026-06-21/02-dev-deploy/a6/CAPTURE.md.
+exit_code: 0
+branch: jonah/omn-13405-workspace-vendor-core-dev-head
+working_dir: /Users/jonah/Code/omni_home/omni_worktrees/OMN-13405/omnibase_infra
+pr_number: 2058

drift/dod_receipts/OMN-13405/dod-occ-pr/command.yaml

@@ -0,0 +1,22 @@
+---
+schema_version: 1.0.0
+ticket_id: OMN-13405
+evidence_item_id: dod-occ-pr
+check_type: command
+check_value: 'grep -c ''^ticket_id: "OMN-13405"$'' contracts/OMN-13405.yaml'
+status: PASS
+run_timestamp: '2026-06-21T09:45:00Z'
+commit_sha: 84849e6436e2776bd5595fa39ddb2e26447268c5
+runner: claude-code
+verifier: claude-code-review
+contract_sha256: sha256:8f5550c301fb356b3d20eec4750ffdf3d411dd35a493b49c2fcac3e25f74d905
+probe_command: 'grep -c ''^ticket_id: "OMN-13405"$'' contracts/OMN-13405.yaml'
+probe_stdout: '1'
+actual_output: >-
+  PASS: grep found the OMN-13405 ticket_id in contracts/OMN-13405.yaml carried by this OCC PR; this receipt
+  self-binds OMN-13405 to the OCC evidence PR for merge eligibility. The OCC contract is the central Evidence-Source
+  consumed by the omnibase_infra PR #2058 Receipt Gate.
+exit_code: 0
+branch: jonah/omn-13405-occ-evidence
+working_dir: /Users/jonah/Code/omni_home/omni_worktrees/OMN-13405/onex_change_control
+pr_number: 2058