Skip to content

receipt(OMN-13037): bind compose-config lint evidence to omnibase_infra - #3272

Merged
jonahgabriel merged 2 commits into
devfrom
jonah/omn-13037-occ
Jun 28, 2026
Merged

jonahgabriel merged 2 commits into
devfrom
jonah/omn-13037-occ

Conversation

@jonahgabriel

@jonahgabriel jonahgabriel commented Jun 28, 2026 •

Copy link
Copy Markdown
Contributor

Summary

  • Adds OCC contract contracts/OMN-13037.yaml for Retro B-9 compose-config lint gate
  • Adds dod-001 receipt binding 9/9 pytest test run evidence from omnibase_infra worktree
  • Evidence-Ticket: OMN-13037

Evidence-Ticket

OMN-13037

Evidence-Source

Pending omnibase_infra PR (pushed in companion PR).

Proof

collected 9 items
tests/scripts/test_lint_compose_dangling_deps.py::test_bad_overlay_hardcoded_infisical_addr_exits_nonzero PASSED
tests/scripts/test_lint_compose_dangling_deps.py::test_bad_overlay_vault_hostname_exits_nonzero PASSED
tests/scripts/test_lint_compose_dangling_deps.py::test_clean_overlay_disabled_infisical_no_ref_exits_zero PASSED
tests/scripts/test_lint_compose_dangling_deps.py::test_clean_overlay_empty_default_interpolation_exits_zero PASSED
tests/scripts/test_lint_compose_dangling_deps.py::test_clean_overlay_no_disabled_services_exits_zero PASSED
tests/scripts/test_lint_compose_dangling_deps.py::test_real_overlay_passes_lint[docker-compose.stability-test.yml] PASSED
tests/scripts/test_lint_compose_dangling_deps.py::test_real_overlay_passes_lint[docker-compose.prod.yml] PASSED
tests/scripts/test_lint_compose_dangling_deps.py::test_real_overlay_passes_lint[docker-compose.judge.yml] PASSED
tests/scripts/test_lint_compose_dangling_deps.py::test_nonexistent_file_exits_nonzero PASSED
9 passed in 0.49s

Evidence-Ticket: OMN-13037
Evidence-Source: OCC#3272

@coderabbitai

coderabbitai Bot commented Jun 28, 2026 •

Copy link
Copy Markdown

Warning

Review limit reached

@jonahgabriel, we couldn't start this review because you've reached your PR review rate limit.

More reviews will be available in 22 minutes and 57 seconds. Learn how PR review limits work.

Your organization has used up its prepaid credits, and credit purchases are no longer available. Enable the review add-on in the billing tab to keep reviews running — you're only billed for reviews past your plan's rate limits ($0.25/file).

⌛ How to resolve this issue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based credits.

🚦 How do rate limits work?

CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan review availability.

For paid Pro and Pro+ PR reviews, CodeRabbit uses adaptive limits for sustained high-volume activity. When a developer's recent PR review activity reaches the 95th percentile or higher among CodeRabbit users, additional reviews become available more gradually as earlier reviews age out of the rolling window.

Please see our Fair Usage Limits Policy for further information.

ℹ️ Review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 20dffaae-d3a9-487f-b356-5645b42424b4

📥 Commits

Reviewing files that changed from the base of the PR and between 9563d6d and 9a0eae6.

📒 Files selected for processing (5)
  • contracts/OMN-13037.yaml
  • drift/dod_receipts/OMN-13037/dod-001/command.yaml
  • drift/dod_receipts/OMN-13037/dod-002/command.yaml
  • drift/dod_receipts/OMN-13037/dod-deploy/command.yaml
  • drift/dod_receipts/OMN-13037/dod-occ-self/command.yaml
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch jonah/omn-13037-occ

Comment @coderabbitai help to get the list of available commands.

…ra (OMN-13037)

OCC contract + dod-001 receipt for OMN-13037 (Retro B-9).
Evidence: 9/9 pytest tests pass in omnibase_infra worktree.
Bad fixture exits 1; real overlays exit 0.
@jonahgabriel
jonahgabriel force-pushed the jonah/omn-13037-occ branch from c3affa9 to f9af42f Compare June 28, 2026 17:09
@jonahgabriel
jonahgabriel added this pull request to the merge queue Jun 28, 2026
Merged via the queue into dev with commit e8f0a47 Jun 28, 2026
40 checks passed
@jonahgabriel
jonahgabriel deleted the jonah/omn-13037-occ branch June 28, 2026 17:21
jonahgabriel added a commit to OmniNode-ai/omnibase_infra that referenced this pull request Jun 29, 2026
…ential for disabled service

Retro B-9 / PROCESS_FAILURE_RETRO §3.B (OMN-12966 INFISICAL_ADDR pattern).

Adds scripts/lint_compose_dangling_deps.py — static PyYAML-only analysis of compose overlay files to detect containers injecting address/credential env vars for services disabled in the same overlay via profiles: !override ["*-disabled"].

Detection: env var values referencing a disabled service by Docker hostname (http://service:port, service:port, bare service name) are violations. Empty/null values and \ empty defaults are safe.

Covers: stability-test, prod, judge lane overlays. Wired as required CI step in .github/workflows/compose-config-lint.yml.

Also vendors the current omnimarket dev node migrations required by the node-migration-sync gate.

Tests: lint fixtures pass, real overlays pass, migration sequence/deployed-tree sync tests pass, and omnimarket-dev vendor sync --check passes.

OCC: contracts/OMN-13037.yaml + receipt PR OmniNode-ai/onex_change_control#3272

Evidence-Source: e8f0a47f8e1db4a19498e4c8ab959aaaa5a5f816

Evidence-Ticket: OMN-13037
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant