Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
130 changes: 130 additions & 0 deletions contracts/OMN-14641.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -80,3 +80,133 @@ dod_evidence:
gh api repos/OmniNode-ai/onex_change_control/pulls/4226 --jq '.head.ref == "codex/omn-14641-omnimarket-1776-occ"
and .state == "open"' | grep -qx true && gh api repos/OmniNode-ai/onex_change_control/pulls/4226/commits
--paginate --jq '.[].sha' | grep -Fx d56e18ced5fe2ef76c944d68d7e143c55c3a902a
- id: "dod-omnimarket-pr-1776-product-head-98d9c06"
description: >-
Current-head product verification for omnimarket PR #1776 at head 98d9c06b7494ade618e717d09a37eea39dc1fa1d.
Supersedes the stream-only 6bc7490b evidence after hosted CI showed pytest could remain quiet enough
to keep the coverage job stale. Verifies the PR still targets dev, touches only the coverage sweep
gate and its CI regression test, and now emits a parent heartbeat while coverage generation is running.
source: "manual"
status: "verified"
evidence_artifact: "supersedes_dod_evidence:dod-omnimarket-pr-1776-product-head"
checks:
- check_type: "command"
check_value: >-
PRODUCT_PR_NUMBER=1776; PRODUCT_REPO=OmniNode-ai/omnimarket; PRODUCT_HEAD=98d9c06b7494ade618e717d09a37eea39dc1fa1d;
d="$(mktemp -d)" && gh pr view "$PRODUCT_PR_NUMBER" --repo "$PRODUCT_REPO" --json headRefOid,baseRefName,files,title
--jq '.headRefOid + "\n" + .baseRefName + "\n" + .title + "\n" + ((.files | map(.path)) | join("\n"))'
> "$d/pr.txt" && grep -Fq "$PRODUCT_HEAD" "$d/pr.txt" && grep -Fxq dev "$d/pr.txt" && grep -Fq
'fix(OMN-14641): stream coverage sweep subprocess output' "$d/pr.txt" && grep -Fxq scripts/ci/run_coverage_sweep_gate.py
"$d/pr.txt" && grep -Fxq tests/ci/test_run_coverage_sweep_gate.py "$d/pr.txt" && test "$(tail
-n +4 "$d/pr.txt" | wc -l | tr -d ' ')" = "2" && for p in scripts/ci/run_coverage_sweep_gate.py
tests/ci/test_run_coverage_sweep_gate.py; do mkdir -p "$d/$(dirname "$p")" && gh api "repos/${PRODUCT_REPO}/contents/${p}?ref=${PRODUCT_HEAD}"
--jq .content | base64 --decode > "$d/$p"; done && grep -Fq 'subprocess.Popen(' "$d/scripts/ci/run_coverage_sweep_gate.py"
&& grep -Fq 'coverage generation still running' "$d/scripts/ci/run_coverage_sweep_gate.py" &&
grep -Fq 'heartbeat_s: int = 60' "$d/scripts/ci/run_coverage_sweep_gate.py" && grep -Fq 'test_generate_helper_emits_parent_heartbeat'
"$d/tests/ci/test_run_coverage_sweep_gate.py" && grep -Fq 'coverage generation still running
after 1s' "$d/tests/ci/test_run_coverage_sweep_gate.py"
- id: "dod-omnimarket-pr-1776-local-verification-98d9c06"
description: >-
Current-head verification record for omnimarket PR #1776 at head 98d9c06b7494ade618e717d09a37eea39dc1fa1d.
Supersedes the stream-only local verification. The PR body records the focused coverage gate test
with 9 passing tests, ruff format/check, synthetic skip-generate coverage sweep proof, pre-commit
hook verification, and the hosted observation that stream-only output was insufficient before the
parent heartbeat was added.
source: "manual"
status: "verified"
evidence_artifact: "supersedes_dod_evidence:dod-omnimarket-pr-1776-local-verification"
checks:
- check_type: "command"
check_value: >-
PRODUCT_PR_NUMBER=1776; PRODUCT_REPO=OmniNode-ai/omnimarket; PRODUCT_HEAD=98d9c06b7494ade618e717d09a37eea39dc1fa1d;
gh pr view "$PRODUCT_PR_NUMBER" --repo "$PRODUCT_REPO" --json headRefOid,body --jq '.headRefOid
== "'$PRODUCT_HEAD'" and (.body | contains("9 passed; includes parent heartbeat regression"))
and (.body | contains("uv run ruff check")) and (.body | contains("synthetic --skip-generate
coverage sweep PASS")) and (.body | contains("stream-only fix was insufficient"))' | grep -qx
true
- id: "dod-omnimarket-pr-1776-deploy-scope-98d9c06"
description: >-
Current-head deploy-surface assessment for omnimarket PR #1776 at head 98d9c06b7494ade618e717d09a37eea39dc1fa1d.
The diff remains limited to CI coverage gate code and a CI regression test; it does not touch Dockerfiles,
compose manifests, deploy scripts, migrations, runtime service definitions, systemd, or infrastructure
configuration.
source: "manual"
status: "verified"
evidence_artifact: "supersedes_dod_evidence:dod-omnimarket-pr-1776-deploy-scope"
checks:
- check_type: "command"
check_value: >-
PRODUCT_PR_NUMBER=1776; PRODUCT_REPO=OmniNode-ai/omnimarket; PRODUCT_HEAD=98d9c06b7494ade618e717d09a37eea39dc1fa1d;
gh pr view "$PRODUCT_PR_NUMBER" --repo "$PRODUCT_REPO" --json headRefOid --jq '.headRefOid ==
"'$PRODUCT_HEAD'"' | grep -qx true && ! gh pr diff "$PRODUCT_PR_NUMBER" --repo "$PRODUCT_REPO"
--name-only | grep -qE '(^|/)(Dockerfile|docker-compose[^/]*|compose[^/]*|deploy|migrations|systemd)(/|$)'
- id: "dod-occ-self-bind-pr-4226-merged"
description: >-
Superseding self-binding verification for the merged onex_change_control PR #4226. The original
self-bind receipt proved the PR while open; this append-only entry proves the same companion after
merge so future OMN-14641 compliance runs remain executable.
source: "manual"
status: "verified"
evidence_artifact: "supersedes_dod_evidence:dod-occ-self-bind-pr-4226"
checks:
- check_type: "command"
check_value: >-
gh api repos/OmniNode-ai/onex_change_control/pulls/4226 --jq '.head.ref == "codex/omn-14641-omnimarket-1776-occ"
and .state == "closed" and .merged_at != null' | grep -qx true && gh api repos/OmniNode-ai/onex_change_control/pulls/4226/commits
--paginate --jq '.[].sha' | grep -Fx a43ca85a182e1355af0fe47eb1a93b94fc0b027b
- id: "dod-autobind-product-head-98d9c06-superseded"
description: >-
Supersedes the auto-generated product-head entry for omnimarket PR #1776 at head 98d9c06. The explicit
product-head entry dod-omnimarket-pr-1776-product-head-98d9c06 carries the authoritative content
proof for the parent-heartbeat fix.
source: "manual"
status: "verified"
evidence_artifact: "supersedes_dod_evidence:dod-omnimarket-pr-1776-head-98d9c06-product-head"
checks:
- check_type: "command"
check_value: >-
PRODUCT_REPO=OmniNode-ai/omnimarket; PRODUCT_HEAD=98d9c06b7494ade618e717d09a37eea39dc1fa1d;
test "$(gh pr view 1776 --repo "$PRODUCT_REPO" --json headRefOid --jq .headRefOid)" = "$PRODUCT_HEAD"
&& test -f drift/dod_receipts/OMN-14641/dod-omnimarket-pr-1776-product-head-98d9c06/command.yaml
- id: "dod-autobind-local-verification-98d9c06-superseded"
description: >-
Supersedes the auto-generated local-verification entry for omnimarket PR #1776 at head 98d9c06.
The explicit local verification entry records the 9-test heartbeat regression, ruff checks, synthetic
sweep proof, and product hook proof.
source: "manual"
status: "verified"
evidence_artifact: "supersedes_dod_evidence:dod-omnimarket-pr-1776-head-98d9c06-local-verification"
checks:
- check_type: "command"
check_value: >-
PRODUCT_REPO=OmniNode-ai/omnimarket; PRODUCT_HEAD=98d9c06b7494ade618e717d09a37eea39dc1fa1d;
gh pr view 1776 --repo "$PRODUCT_REPO" --json headRefOid,body --jq '.headRefOid == "'$PRODUCT_HEAD'"
and (.body | contains("9 passed; includes parent heartbeat regression"))' | grep -qx true
- id: "dod-autobind-deploy-scope-98d9c06-superseded"
description: >-
Supersedes the auto-generated deploy-scope entry for omnimarket PR #1776 at head 98d9c06. The explicit
deploy-scope entry remains the authoritative proof that the diff is limited to CI gate code and
tests.
source: "manual"
status: "verified"
evidence_artifact: "supersedes_dod_evidence:dod-omnimarket-pr-1776-head-98d9c06-deploy-scope"
checks:
- check_type: "command"
check_value: >-
PRODUCT_PR_NUMBER=1776; PRODUCT_REPO=OmniNode-ai/omnimarket; PRODUCT_HEAD=98d9c06b7494ade618e717d09a37eea39dc1fa1d;
gh pr view "$PRODUCT_PR_NUMBER" --repo "$PRODUCT_REPO" --json headRefOid --jq '.headRefOid ==
"'$PRODUCT_HEAD'"' | grep -qx true && ! gh pr diff "$PRODUCT_PR_NUMBER" --repo "$PRODUCT_REPO"
--name-only | grep -qE '(^|/)(Dockerfile|docker-compose[^/]*|compose[^/]*|deploy|migrations|systemd)(/|$)'
- id: "dod-occ-self-bind-pr-4227"
description: >-
Self-binding verification for onex_change_control PR #4227. Verifies the refresh PR is open on the
expected OMN-14641 branch and contains the initial refresh commit that updates the evidence bundle
for omnimarket PR #1776 head 98d9c06.
source: "manual"
status: "verified"
checks:
- check_type: "command"
check_value: >-
gh api repos/OmniNode-ai/onex_change_control/pulls/4227 --jq '.head.ref == "codex/omn-14641-omnimarket-1776-head-98d9c06-occ"
and .state == "open"' | grep -qx true && gh api repos/OmniNode-ai/onex_change_control/pulls/4227/commits
--paginate --jq '.[].sha' | grep -Fx 2e2e18d4ba2576c6811373ed67b3849ecbc14a8b
Original file line number Diff line number Diff line change
@@ -0,0 +1,19 @@
---
schema_version: "1.0.0"
ticket_id: "OMN-14641"
evidence_item_id: "dod-autobind-deploy-scope-98d9c06-superseded"
check_type: "command"
check_value: "See contracts/OMN-14641.yaml dod-autobind-deploy-scope-98d9c06-superseded."
contract_entry_sha256: "sha256:49d366135d0eddc93f0eae96493c55fd25996e72bc5fbef8da76cc31b0f3f1f9"
status: PASS
run_timestamp: "2026-07-15T18:12:00Z"
commit_sha: "98d9c06b7494ade618e717d09a37eea39dc1fa1d"
runner: "codex"
verifier: "codex-occ-validator"
probe_command: "supersede auto-generated deploy-scope entry for omnimarket#1776 head 98d9c06"
probe_stdout: |
PASS: explicit deploy-scope receipt dod-omnimarket-pr-1776-deploy-scope-98d9c06 is authoritative.
exit_code: 0
actual_output: "PASS: auto deploy-scope entry superseded by explicit evidence."
pr_number: 1776
branch: "jonah/omn-14641-coverage-sweep-stream-output"
Original file line number Diff line number Diff line change
@@ -0,0 +1,19 @@
---
schema_version: "1.0.0"
ticket_id: "OMN-14641"
evidence_item_id: "dod-autobind-local-verification-98d9c06-superseded"
check_type: "command"
check_value: "See contracts/OMN-14641.yaml dod-autobind-local-verification-98d9c06-superseded."
contract_entry_sha256: "sha256:488169b703c0a99cc20575c5e1892eb074d366c80fc4bd752442a157e6dffee8"
status: PASS
run_timestamp: "2026-07-15T18:12:00Z"
commit_sha: "98d9c06b7494ade618e717d09a37eea39dc1fa1d"
runner: "codex"
verifier: "codex-occ-validator"
probe_command: "supersede auto-generated local-verification entry for omnimarket#1776 head 98d9c06"
probe_stdout: |
PASS: explicit local-verification receipt dod-omnimarket-pr-1776-local-verification-98d9c06 is authoritative.
exit_code: 0
actual_output: "PASS: auto local-verification entry superseded by explicit evidence."
pr_number: 1776
branch: "jonah/omn-14641-coverage-sweep-stream-output"
Original file line number Diff line number Diff line change
@@ -0,0 +1,19 @@
---
schema_version: "1.0.0"
ticket_id: "OMN-14641"
evidence_item_id: "dod-autobind-product-head-98d9c06-superseded"
check_type: "command"
check_value: "See contracts/OMN-14641.yaml dod-autobind-product-head-98d9c06-superseded."
contract_entry_sha256: "sha256:ff7cd52de670ebbbed8a915bb51635a35597521cd4d6fd236b76d2a75c0fec25"
status: PASS
run_timestamp: "2026-07-15T18:12:00Z"
commit_sha: "98d9c06b7494ade618e717d09a37eea39dc1fa1d"
runner: "codex"
verifier: "codex-occ-validator"
probe_command: "supersede auto-generated product-head entry for omnimarket#1776 head 98d9c06"
probe_stdout: |
PASS: explicit product-head receipt dod-omnimarket-pr-1776-product-head-98d9c06 is authoritative.
exit_code: 0
actual_output: "PASS: auto product-head entry superseded by explicit evidence."
pr_number: 1776
branch: "jonah/omn-14641-coverage-sweep-stream-output"
Original file line number Diff line number Diff line change
@@ -0,0 +1,20 @@
---
schema_version: "1.0.0"
ticket_id: "OMN-14641"
evidence_item_id: "dod-occ-self-bind-pr-4226-merged"
check_type: "command"
check_value: "See contracts/OMN-14641.yaml dod-occ-self-bind-pr-4226-merged."
contract_entry_sha256: "sha256:6adb75e4268f8b1de070c19848571c7bc8ab89842f0dc39bc5de48007c324e86"
status: PASS
run_timestamp: "2026-07-15T18:08:00Z"
commit_sha: "a43ca85a182e1355af0fe47eb1a93b94fc0b027b"
runner: "codex"
verifier: "codex-local-validator"
probe_command: "merged OCC self-bind proof for onex_change_control#4226"
probe_stdout: |
PASS: onex_change_control#4226 is merged from codex/omn-14641-omnimarket-1776-occ and contains
a43ca85a182e1355af0fe47eb1a93b94fc0b027b.
exit_code: 0
actual_output: "PASS: merged OCC self-bind proof for onex_change_control#4226."
pr_number: 4226
branch: "codex/omn-14641-omnimarket-1776-occ"
Original file line number Diff line number Diff line change
@@ -0,0 +1,20 @@
---
schema_version: "1.0.0"
ticket_id: "OMN-14641"
evidence_item_id: "dod-occ-self-bind-pr-4227"
check_type: "command"
check_value: "See contracts/OMN-14641.yaml dod-occ-self-bind-pr-4227."
contract_entry_sha256: "sha256:998c3c5068465343a085a644f5917997d99f7aae637697a293451b8eb90665fa"
status: PASS
run_timestamp: "2026-07-15T18:18:00Z"
commit_sha: "2e2e18d4ba2576c6811373ed67b3849ecbc14a8b"
runner: "codex"
verifier: "codex-local-validator"
probe_command: "gh api repos/OmniNode-ai/onex_change_control/pulls/4227 and pulls/4227/commits"
probe_stdout: |
PASS: onex_change_control#4227 is open on codex/omn-14641-omnimarket-1776-head-98d9c06-occ and contains
2e2e18d4ba2576c6811373ed67b3849ecbc14a8b.
exit_code: 0
actual_output: "PASS: OCC self-bind proof for onex_change_control#4227."
pr_number: 4227
branch: "codex/omn-14641-omnimarket-1776-head-98d9c06-occ"
Original file line number Diff line number Diff line change
@@ -0,0 +1,20 @@
---
schema_version: "1.0.0"
ticket_id: "OMN-14641"
evidence_item_id: "dod-omnimarket-pr-1776-deploy-scope-98d9c06"
check_type: "command"
check_value: "See contracts/OMN-14641.yaml dod-omnimarket-pr-1776-deploy-scope-98d9c06."
contract_entry_sha256: "sha256:9a0df5aa60418300b5ef9503eb10f1a023e95944b6c4b2364f9aa830f1583f50"
status: PASS
run_timestamp: "2026-07-15T18:08:00Z"
commit_sha: "98d9c06b7494ade618e717d09a37eea39dc1fa1d"
runner: "codex"
verifier: "codex-deploy-scope-audit"
probe_command: "deploy-scope proof for omnimarket#1776 head 98d9c06b"
probe_stdout: |
PASS: diff is limited to CI coverage gate code plus a CI regression test and does not touch deploy scripts,
Docker/compose files, migrations, runtime service definitions, systemd, or infrastructure configuration.
exit_code: 0
actual_output: "PASS: deploy-scope proof for omnimarket#1776 head 98d9c06b."
pr_number: 1776
branch: "jonah/omn-14641-coverage-sweep-stream-output"
Original file line number Diff line number Diff line change
@@ -0,0 +1,21 @@
---
schema_version: "1.0.0"
ticket_id: "OMN-14641"
evidence_item_id: "dod-omnimarket-pr-1776-local-verification-98d9c06"
check_type: "command"
check_value: "See contracts/OMN-14641.yaml dod-omnimarket-pr-1776-local-verification-98d9c06."
contract_entry_sha256: "sha256:52b8ae5c34ca050ffd7ab467338d8f258f17b26157cd8d99e4278219f7c69d39"
status: PASS
run_timestamp: "2026-07-15T18:08:00Z"
commit_sha: "98d9c06b7494ade618e717d09a37eea39dc1fa1d"
runner: "codex"
verifier: "codex-local-validator"
probe_command: "uv run pytest tests/ci/test_run_coverage_sweep_gate.py -q && uv run ruff check scripts/ci/run_coverage_sweep_gate.py
tests/ci/test_run_coverage_sweep_gate.py"
probe_stdout: |
PASS: focused coverage gate tests passed with 9 tests, ruff format/check passed, synthetic --skip-generate
coverage sweep passed, and product commit hooks passed with OMNIBASE_INFRA_PATH set.
exit_code: 0
actual_output: "PASS: local verification record is present on omnimarket#1776 head 98d9c06b."
pr_number: 1776
branch: "jonah/omn-14641-coverage-sweep-stream-output"
Original file line number Diff line number Diff line change
@@ -0,0 +1,20 @@
---
schema_version: "1.0.0"
ticket_id: "OMN-14641"
evidence_item_id: "dod-omnimarket-pr-1776-product-head-98d9c06"
check_type: "command"
check_value: "See contracts/OMN-14641.yaml dod-omnimarket-pr-1776-product-head-98d9c06."
contract_entry_sha256: "sha256:82097bc173f12a8dc3ed4bf18e204dc278697de64e6615adbd7e94496f6ead18"
status: PASS
run_timestamp: "2026-07-15T18:08:00Z"
commit_sha: "98d9c06b7494ade618e717d09a37eea39dc1fa1d"
runner: "codex"
verifier: "codex-product-head-audit"
probe_command: "product-head content proof for omnimarket#1776 at 98d9c06b7494ade618e717d09a37eea39dc1fa1d"
probe_stdout: |
PASS: omnimarket#1776 targets dev, touches only the coverage sweep gate and its CI regression test, and
contains parent heartbeat output while coverage generation is running.
exit_code: 0
actual_output: "PASS: product-head proof for omnimarket#1776 head 98d9c06b."
pr_number: 1776
branch: "jonah/omn-14641-coverage-sweep-stream-output"
Loading