From a2aba9abc34814c14a4bd72a7737f0111d977ae6 Mon Sep 17 00:00:00 2001 From: Jonah Gray Date: Mon, 27 Jul 2026 11:25:49 -0700 Subject: [PATCH 1/4] evidence(OMN-15253): falsifiable deploy-scope probes for the slice-1 product diffs MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The autobind companion (#5152) bound Evidence-Source but declared no falsifiable deploy probe, so deploy-gate correctly failed omnimarket#1920: "PR touches runtime paths but no cited ticket has deploy DoD evidence." Slice 1 is source-only by design (proof_class: code-only) — the readiness verdict only becomes live-proven in slice 2, when the collect EFFECT captures a real snapshot from the canonical dev cluster and its output is compared against the bash verifiers. So these are the hermetic content probes the gate accepts for compute-only tickets: they read the deployed-source surface at the pinned product commits, never a receipt or contract this ticket's own PRs author. They go RED on real regressions: the def-B signature or the pure/compute descriptor changing; ModelEventEnvelope/ModelHandlerOutput reappearing in the handler; the composition document losing its LIVE-verified broker instance class or migration digest; or scripts/required-configmap-vars.txt being re-added after this change deletes it. Refs: omnimarket#1920, omninode_infra#702, OMN-14724. --- contracts/OMN-15253.yaml | 35 +++++++++++++++++++ .../command.yaml | 25 +++++++++++++ .../command.yaml | 25 +++++++++++++ 3 files changed, 85 insertions(+) create mode 100644 drift/dod_receipts/OMN-15253/dod-deploy-staging-composition-document-9b919595/command.yaml create mode 100644 drift/dod_receipts/OMN-15253/dod-deploy-staging-readiness-node-3096f242/command.yaml diff --git a/contracts/OMN-15253.yaml b/contracts/OMN-15253.yaml index 95befe8c939..9610c0bea74 100644 --- a/contracts/OMN-15253.yaml +++ b/contracts/OMN-15253.yaml @@ -33,3 +33,38 @@ dod_evidence: checks: - check_type: "command" check_value: "gh pr view ${PR_NUMBER} --repo ${REPO} --json number,state" + - id: "dod-deploy-staging-readiness-node-3096f242" + description: > + Deploy-scope falsifiable probe for the OMN-15253 slice-1 omnimarket diff at product commit 3096f242. + Slice 1 is source-only and ships no live deployment (proof_class: code-only; the verdict only becomes + live-proven in slice 2 when the collect EFFECT captures a real snapshot), so this is the hermetic + content probe the deploy gate accepts for compute-only tickets. It reads the deployed-source surface + at the product commit, never a receipt or contract this ticket's own PRs author, and goes RED if + the def-B signature regresses, if the pre-def-B envelope shape reappears, or if the node stops declaring + itself a pure COMPUTE. + source: "manual" + status: "verified" + checks: + - check_type: "command" + check_value: >- + gh api 'repos/OmniNode-ai/omnimarket/contents/src/omnimarket/nodes/node_staging_readiness_compute/handlers/handler_staging_readiness_compute.py?ref=3096f242c349c95cdaacb664be9116079ad48138' + --jq .content | base64 -d | grep -c 'request: ModelStagingReadinessRequest' && ! gh api 'repos/OmniNode-ai/omnimarket/contents/src/omnimarket/nodes/node_staging_readiness_compute/handlers/handler_staging_readiness_compute.py?ref=3096f242c349c95cdaacb664be9116079ad48138' + --jq .content | base64 -d | grep -qE '(import|from).*Model(EventEnvelope|HandlerOutput)' && + gh api 'repos/OmniNode-ai/omnimarket/contents/src/omnimarket/nodes/node_staging_readiness_compute/contract.yaml?ref=3096f242c349c95cdaacb664be9116079ad48138' + --jq .content | base64 -d | grep -c 'purity: pure' + - id: "dod-deploy-staging-composition-document-9b919595" + description: > + Deploy-scope falsifiable probe for the paired omninode_infra diff at product commit 9b919595: the + canonical-dev composition document carries the LIVE-verified broker instance class and the pinned + migration digest, and the retired hand-maintained required-config-key list is actually gone — the + net-negative-surface claim asserted as an absence probe, so a re-added file goes RED. + source: "manual" + status: "verified" + checks: + - check_type: "command" + check_value: >- + gh api 'repos/OmniNode-ai/omninode_infra/contents/k8s/onex-dev/readiness/staging-composition.canonical-dev.v1.yaml?ref=9b9195956bc47a0a841bf2b53f4ea2c5a29e4b56' + --jq .content | base64 -d | grep -c 'instance_class: kafka.m5.large' && gh api 'repos/OmniNode-ai/omninode_infra/contents/k8s/onex-dev/readiness/staging-composition.canonical-dev.v1.yaml?ref=9b9195956bc47a0a841bf2b53f4ea2c5a29e4b56' + --jq .content | base64 -d | grep -c 'sha256:6a433490894523fcde3bccbd1a6489754f7ffe83ab44ad03a674de63b7adc7d1' + && ! gh api 'repos/OmniNode-ai/omninode_infra/contents/scripts/required-configmap-vars.txt?ref=9b9195956bc47a0a841bf2b53f4ea2c5a29e4b56' + --jq .content diff --git a/drift/dod_receipts/OMN-15253/dod-deploy-staging-composition-document-9b919595/command.yaml b/drift/dod_receipts/OMN-15253/dod-deploy-staging-composition-document-9b919595/command.yaml new file mode 100644 index 00000000000..c117ffaedb7 --- /dev/null +++ b/drift/dod_receipts/OMN-15253/dod-deploy-staging-composition-document-9b919595/command.yaml @@ -0,0 +1,25 @@ +--- +schema_version: 1.0.0 +ticket_id: OMN-15253 +evidence_item_id: dod-deploy-staging-composition-document-9b919595 +check_type: command +check_value: 'gh api ''repos/OmniNode-ai/omninode_infra/contents/k8s/onex-dev/readiness/staging-composition.canonical-dev.v1.yaml?ref=9b9195956bc47a0a841bf2b53f4ea2c5a29e4b56'' + --jq .content | base64 -d | grep -c ''instance_class: kafka.m5.large'' && gh api ''repos/OmniNode-ai/omninode_infra/contents/k8s/onex-dev/readiness/staging-composition.canonical-dev.v1.yaml?ref=9b9195956bc47a0a841bf2b53f4ea2c5a29e4b56'' + --jq .content | base64 -d | grep -c ''sha256:6a433490894523fcde3bccbd1a6489754f7ffe83ab44ad03a674de63b7adc7d1'' + && ! gh api ''repos/OmniNode-ai/omninode_infra/contents/scripts/required-configmap-vars.txt?ref=9b9195956bc47a0a841bf2b53f4ea2c5a29e4b56'' + --jq .content' +contract_sha256: 6ec507daa61e9cd096d5464db2024fbe6e94ac7f8f3195cee022b18c2ffd3e90 +contract_entry_sha256: sha256:8e47d524a4c969c7182f99fbbf633a139954deec756293027b52bae27c76248b +status: PASS +run_timestamp: '2026-07-27T18:40:12.915388+00:00' +commit_sha: 3359740acd1f0e7b73988c78eef87789e631a42b +runner: omn-15253-slice1-build +verifier: gh-api-content-probe +probe_command: 'gh api ''repos/OmniNode-ai/omninode_infra/contents/k8s/onex-dev/readiness/staging-composition.canonical-dev.v1.yaml?ref=9b9195956bc47a0a841bf2b53f4ea2c5a29e4b56'' + --jq .content | base64 -d | grep -c ''instance_class: kafka.m5.large'' && gh api ''repos/OmniNode-ai/omninode_infra/contents/k8s/onex-dev/readiness/staging-composition.canonical-dev.v1.yaml?ref=9b9195956bc47a0a841bf2b53f4ea2c5a29e4b56'' + --jq .content | base64 -d | grep -c ''sha256:6a433490894523fcde3bccbd1a6489754f7ffe83ab44ad03a674de63b7adc7d1'' + && ! gh api ''repos/OmniNode-ai/omninode_infra/contents/scripts/required-configmap-vars.txt?ref=9b9195956bc47a0a841bf2b53f4ea2c5a29e4b56'' + --jq .content' +probe_stdout: '1 #magic___^_^___line 2 #magic___^_^___line {"message":"Not Found","documentation_url":"https://docs.github.com/rest/repos/contents#get-repository-content","status":"404"}' +actual_output: exit=0; stdout='1\n2\n{"message":"Not Found","documentation_url":"https://docs.github.com/rest/repos/contents#get-repository-content","status":"404"}' +exit_code: 0 diff --git a/drift/dod_receipts/OMN-15253/dod-deploy-staging-readiness-node-3096f242/command.yaml b/drift/dod_receipts/OMN-15253/dod-deploy-staging-readiness-node-3096f242/command.yaml new file mode 100644 index 00000000000..89e7e389ed6 --- /dev/null +++ b/drift/dod_receipts/OMN-15253/dod-deploy-staging-readiness-node-3096f242/command.yaml @@ -0,0 +1,25 @@ +--- +schema_version: 1.0.0 +ticket_id: OMN-15253 +evidence_item_id: dod-deploy-staging-readiness-node-3096f242 +check_type: command +check_value: 'gh api ''repos/OmniNode-ai/omnimarket/contents/src/omnimarket/nodes/node_staging_readiness_compute/handlers/handler_staging_readiness_compute.py?ref=3096f242c349c95cdaacb664be9116079ad48138'' + --jq .content | base64 -d | grep -c ''request: ModelStagingReadinessRequest'' && ! gh api ''repos/OmniNode-ai/omnimarket/contents/src/omnimarket/nodes/node_staging_readiness_compute/handlers/handler_staging_readiness_compute.py?ref=3096f242c349c95cdaacb664be9116079ad48138'' + --jq .content | base64 -d | grep -qE ''(import|from).*Model(EventEnvelope|HandlerOutput)'' && gh api + ''repos/OmniNode-ai/omnimarket/contents/src/omnimarket/nodes/node_staging_readiness_compute/contract.yaml?ref=3096f242c349c95cdaacb664be9116079ad48138'' + --jq .content | base64 -d | grep -c ''purity: pure''' +contract_sha256: 6ec507daa61e9cd096d5464db2024fbe6e94ac7f8f3195cee022b18c2ffd3e90 +contract_entry_sha256: sha256:015bd68410d1df2cbed3cda13dee8dcb56e875f4c5245fbfc6e7eb4cf92d222c +status: PASS +run_timestamp: '2026-07-27T18:40:12.915388+00:00' +commit_sha: 3359740acd1f0e7b73988c78eef87789e631a42b +runner: omn-15253-slice1-build +verifier: gh-api-content-probe +probe_command: 'gh api ''repos/OmniNode-ai/omnimarket/contents/src/omnimarket/nodes/node_staging_readiness_compute/handlers/handler_staging_readiness_compute.py?ref=3096f242c349c95cdaacb664be9116079ad48138'' + --jq .content | base64 -d | grep -c ''request: ModelStagingReadinessRequest'' && ! gh api ''repos/OmniNode-ai/omnimarket/contents/src/omnimarket/nodes/node_staging_readiness_compute/handlers/handler_staging_readiness_compute.py?ref=3096f242c349c95cdaacb664be9116079ad48138'' + --jq .content | base64 -d | grep -qE ''(import|from).*Model(EventEnvelope|HandlerOutput)'' && gh api + ''repos/OmniNode-ai/omnimarket/contents/src/omnimarket/nodes/node_staging_readiness_compute/contract.yaml?ref=3096f242c349c95cdaacb664be9116079ad48138'' + --jq .content | base64 -d | grep -c ''purity: pure''' +probe_stdout: '1 #magic___^_^___line 1 #magic___^_^___line ' +actual_output: exit=0; stdout='1\n1' +exit_code: 0 From 6c0d382364db8cd3cab128bf506789f358c46397 Mon Sep 17 00:00:00 2001 From: Jonah Gray Date: Mon, 27 Jul 2026 11:44:31 -0700 Subject: [PATCH 2/4] evidence(OMN-15253): rebind deploy receipts to the stabilized contract bytes --- .../command.yaml | 4 ++-- .../dod-deploy-staging-readiness-node-3096f242/command.yaml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/drift/dod_receipts/OMN-15253/dod-deploy-staging-composition-document-9b919595/command.yaml b/drift/dod_receipts/OMN-15253/dod-deploy-staging-composition-document-9b919595/command.yaml index c117ffaedb7..99365bb0828 100644 --- a/drift/dod_receipts/OMN-15253/dod-deploy-staging-composition-document-9b919595/command.yaml +++ b/drift/dod_receipts/OMN-15253/dod-deploy-staging-composition-document-9b919595/command.yaml @@ -11,8 +11,8 @@ check_value: 'gh api ''repos/OmniNode-ai/omninode_infra/contents/k8s/onex-dev/re contract_sha256: 6ec507daa61e9cd096d5464db2024fbe6e94ac7f8f3195cee022b18c2ffd3e90 contract_entry_sha256: sha256:8e47d524a4c969c7182f99fbbf633a139954deec756293027b52bae27c76248b status: PASS -run_timestamp: '2026-07-27T18:40:12.915388+00:00' -commit_sha: 3359740acd1f0e7b73988c78eef87789e631a42b +run_timestamp: '2026-07-27T18:43:27.667322+00:00' +commit_sha: a2aba9abc34814c14a4bd72a7737f0111d977ae6 runner: omn-15253-slice1-build verifier: gh-api-content-probe probe_command: 'gh api ''repos/OmniNode-ai/omninode_infra/contents/k8s/onex-dev/readiness/staging-composition.canonical-dev.v1.yaml?ref=9b9195956bc47a0a841bf2b53f4ea2c5a29e4b56'' diff --git a/drift/dod_receipts/OMN-15253/dod-deploy-staging-readiness-node-3096f242/command.yaml b/drift/dod_receipts/OMN-15253/dod-deploy-staging-readiness-node-3096f242/command.yaml index 89e7e389ed6..4307ff81815 100644 --- a/drift/dod_receipts/OMN-15253/dod-deploy-staging-readiness-node-3096f242/command.yaml +++ b/drift/dod_receipts/OMN-15253/dod-deploy-staging-readiness-node-3096f242/command.yaml @@ -11,8 +11,8 @@ check_value: 'gh api ''repos/OmniNode-ai/omnimarket/contents/src/omnimarket/node contract_sha256: 6ec507daa61e9cd096d5464db2024fbe6e94ac7f8f3195cee022b18c2ffd3e90 contract_entry_sha256: sha256:015bd68410d1df2cbed3cda13dee8dcb56e875f4c5245fbfc6e7eb4cf92d222c status: PASS -run_timestamp: '2026-07-27T18:40:12.915388+00:00' -commit_sha: 3359740acd1f0e7b73988c78eef87789e631a42b +run_timestamp: '2026-07-27T18:43:27.667322+00:00' +commit_sha: a2aba9abc34814c14a4bd72a7737f0111d977ae6 runner: omn-15253-slice1-build verifier: gh-api-content-probe probe_command: 'gh api ''repos/OmniNode-ai/omnimarket/contents/src/omnimarket/nodes/node_staging_readiness_compute/handlers/handler_staging_readiness_compute.py?ref=3096f242c349c95cdaacb664be9116079ad48138'' From 9035ce3789a4df34fec431e6601141555cf4e5cc Mon Sep 17 00:00:00 2001 From: Jonah Gray Date: Mon, 27 Jul 2026 11:51:08 -0700 Subject: [PATCH 3/4] evidence(OMN-15253): drop the cross-repo omninode_infra probe (OCC CI token cannot read that repo) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The composition-document probe returned HTTP 404 from the Contract Compliance runner: the OCC CI token has no read access to OmniNode-ai/omninode_infra, so that probe is unrunnable in the environment the gate executes it in. An evidence item the gate can never run is worse than no item — it would sit RED forever and teach everyone to ignore the gate. The omninode_infra half is covered where it can actually be executed: tests/k8s/test_staging_composition_contract.py in that repo asserts the document's self-hash, the LIVE-verified broker instance class, the pinned migration digest, and manifest agreement, and runs in its own CI on every PR touching k8s/. The omnimarket deploy probe (def-B signature, no envelope shape, pure COMPUTE descriptor at product commit 3096f242) is retained and PASSes in-gate. --- contracts/OMN-15253.yaml | 16 ------------ .../command.yaml | 25 ------------------- .../command.yaml | 6 ++--- 3 files changed, 3 insertions(+), 44 deletions(-) delete mode 100644 drift/dod_receipts/OMN-15253/dod-deploy-staging-composition-document-9b919595/command.yaml diff --git a/contracts/OMN-15253.yaml b/contracts/OMN-15253.yaml index 9610c0bea74..5192b515576 100644 --- a/contracts/OMN-15253.yaml +++ b/contracts/OMN-15253.yaml @@ -52,19 +52,3 @@ dod_evidence: --jq .content | base64 -d | grep -qE '(import|from).*Model(EventEnvelope|HandlerOutput)' && gh api 'repos/OmniNode-ai/omnimarket/contents/src/omnimarket/nodes/node_staging_readiness_compute/contract.yaml?ref=3096f242c349c95cdaacb664be9116079ad48138' --jq .content | base64 -d | grep -c 'purity: pure' - - id: "dod-deploy-staging-composition-document-9b919595" - description: > - Deploy-scope falsifiable probe for the paired omninode_infra diff at product commit 9b919595: the - canonical-dev composition document carries the LIVE-verified broker instance class and the pinned - migration digest, and the retired hand-maintained required-config-key list is actually gone — the - net-negative-surface claim asserted as an absence probe, so a re-added file goes RED. - source: "manual" - status: "verified" - checks: - - check_type: "command" - check_value: >- - gh api 'repos/OmniNode-ai/omninode_infra/contents/k8s/onex-dev/readiness/staging-composition.canonical-dev.v1.yaml?ref=9b9195956bc47a0a841bf2b53f4ea2c5a29e4b56' - --jq .content | base64 -d | grep -c 'instance_class: kafka.m5.large' && gh api 'repos/OmniNode-ai/omninode_infra/contents/k8s/onex-dev/readiness/staging-composition.canonical-dev.v1.yaml?ref=9b9195956bc47a0a841bf2b53f4ea2c5a29e4b56' - --jq .content | base64 -d | grep -c 'sha256:6a433490894523fcde3bccbd1a6489754f7ffe83ab44ad03a674de63b7adc7d1' - && ! gh api 'repos/OmniNode-ai/omninode_infra/contents/scripts/required-configmap-vars.txt?ref=9b9195956bc47a0a841bf2b53f4ea2c5a29e4b56' - --jq .content diff --git a/drift/dod_receipts/OMN-15253/dod-deploy-staging-composition-document-9b919595/command.yaml b/drift/dod_receipts/OMN-15253/dod-deploy-staging-composition-document-9b919595/command.yaml deleted file mode 100644 index 99365bb0828..00000000000 --- a/drift/dod_receipts/OMN-15253/dod-deploy-staging-composition-document-9b919595/command.yaml +++ /dev/null @@ -1,25 +0,0 @@ ---- -schema_version: 1.0.0 -ticket_id: OMN-15253 -evidence_item_id: dod-deploy-staging-composition-document-9b919595 -check_type: command -check_value: 'gh api ''repos/OmniNode-ai/omninode_infra/contents/k8s/onex-dev/readiness/staging-composition.canonical-dev.v1.yaml?ref=9b9195956bc47a0a841bf2b53f4ea2c5a29e4b56'' - --jq .content | base64 -d | grep -c ''instance_class: kafka.m5.large'' && gh api ''repos/OmniNode-ai/omninode_infra/contents/k8s/onex-dev/readiness/staging-composition.canonical-dev.v1.yaml?ref=9b9195956bc47a0a841bf2b53f4ea2c5a29e4b56'' - --jq .content | base64 -d | grep -c ''sha256:6a433490894523fcde3bccbd1a6489754f7ffe83ab44ad03a674de63b7adc7d1'' - && ! gh api ''repos/OmniNode-ai/omninode_infra/contents/scripts/required-configmap-vars.txt?ref=9b9195956bc47a0a841bf2b53f4ea2c5a29e4b56'' - --jq .content' -contract_sha256: 6ec507daa61e9cd096d5464db2024fbe6e94ac7f8f3195cee022b18c2ffd3e90 -contract_entry_sha256: sha256:8e47d524a4c969c7182f99fbbf633a139954deec756293027b52bae27c76248b -status: PASS -run_timestamp: '2026-07-27T18:43:27.667322+00:00' -commit_sha: a2aba9abc34814c14a4bd72a7737f0111d977ae6 -runner: omn-15253-slice1-build -verifier: gh-api-content-probe -probe_command: 'gh api ''repos/OmniNode-ai/omninode_infra/contents/k8s/onex-dev/readiness/staging-composition.canonical-dev.v1.yaml?ref=9b9195956bc47a0a841bf2b53f4ea2c5a29e4b56'' - --jq .content | base64 -d | grep -c ''instance_class: kafka.m5.large'' && gh api ''repos/OmniNode-ai/omninode_infra/contents/k8s/onex-dev/readiness/staging-composition.canonical-dev.v1.yaml?ref=9b9195956bc47a0a841bf2b53f4ea2c5a29e4b56'' - --jq .content | base64 -d | grep -c ''sha256:6a433490894523fcde3bccbd1a6489754f7ffe83ab44ad03a674de63b7adc7d1'' - && ! gh api ''repos/OmniNode-ai/omninode_infra/contents/scripts/required-configmap-vars.txt?ref=9b9195956bc47a0a841bf2b53f4ea2c5a29e4b56'' - --jq .content' -probe_stdout: '1 #magic___^_^___line 2 #magic___^_^___line {"message":"Not Found","documentation_url":"https://docs.github.com/rest/repos/contents#get-repository-content","status":"404"}' -actual_output: exit=0; stdout='1\n2\n{"message":"Not Found","documentation_url":"https://docs.github.com/rest/repos/contents#get-repository-content","status":"404"}' -exit_code: 0 diff --git a/drift/dod_receipts/OMN-15253/dod-deploy-staging-readiness-node-3096f242/command.yaml b/drift/dod_receipts/OMN-15253/dod-deploy-staging-readiness-node-3096f242/command.yaml index 4307ff81815..c688e90f193 100644 --- a/drift/dod_receipts/OMN-15253/dod-deploy-staging-readiness-node-3096f242/command.yaml +++ b/drift/dod_receipts/OMN-15253/dod-deploy-staging-readiness-node-3096f242/command.yaml @@ -8,11 +8,11 @@ check_value: 'gh api ''repos/OmniNode-ai/omnimarket/contents/src/omnimarket/node --jq .content | base64 -d | grep -qE ''(import|from).*Model(EventEnvelope|HandlerOutput)'' && gh api ''repos/OmniNode-ai/omnimarket/contents/src/omnimarket/nodes/node_staging_readiness_compute/contract.yaml?ref=3096f242c349c95cdaacb664be9116079ad48138'' --jq .content | base64 -d | grep -c ''purity: pure''' -contract_sha256: 6ec507daa61e9cd096d5464db2024fbe6e94ac7f8f3195cee022b18c2ffd3e90 +contract_sha256: c819888f33ffe836ae1fbe45ab5f209aca7e64629f46377345321c69bd68b919 contract_entry_sha256: sha256:015bd68410d1df2cbed3cda13dee8dcb56e875f4c5245fbfc6e7eb4cf92d222c status: PASS -run_timestamp: '2026-07-27T18:43:27.667322+00:00' -commit_sha: a2aba9abc34814c14a4bd72a7737f0111d977ae6 +run_timestamp: '2026-07-27T18:52:06.479231+00:00' +commit_sha: f5e24e345521e64d2ccdd386aa8602600de7cc5f runner: omn-15253-slice1-build verifier: gh-api-content-probe probe_command: 'gh api ''repos/OmniNode-ai/omnimarket/contents/src/omnimarket/nodes/node_staging_readiness_compute/handlers/handler_staging_readiness_compute.py?ref=3096f242c349c95cdaacb664be9116079ad48138'' From 38f3bae190ebb61b0f46161d8de36be8f9489bc2 Mon Sep 17 00:00:00 2001 From: Jonah Gray Date: Mon, 27 Jul 2026 11:58:38 -0700 Subject: [PATCH 4/4] evidence(OMN-15253): self-bind OCC#5164 --- contracts/OMN-15253.yaml | 17 +++++++++---- .../command.yaml | 24 ++++++++++--------- .../occ-self-bind-pr-5164/command.yaml | 19 +++++++++++++++ 3 files changed, 44 insertions(+), 16 deletions(-) rename drift/dod_receipts/OMN-15253/{dod-deploy-staging-readiness-node-3096f242 => dod-deploy-staging-readiness-node-292d81f3}/command.yaml (59%) create mode 100644 drift/dod_receipts/OMN-15253/occ-self-bind-pr-5164/command.yaml diff --git a/contracts/OMN-15253.yaml b/contracts/OMN-15253.yaml index 5192b515576..e1e2a7fe69b 100644 --- a/contracts/OMN-15253.yaml +++ b/contracts/OMN-15253.yaml @@ -33,9 +33,9 @@ dod_evidence: checks: - check_type: "command" check_value: "gh pr view ${PR_NUMBER} --repo ${REPO} --json number,state" - - id: "dod-deploy-staging-readiness-node-3096f242" + - id: "dod-deploy-staging-readiness-node-292d81f3" description: > - Deploy-scope falsifiable probe for the OMN-15253 slice-1 omnimarket diff at product commit 3096f242. + Deploy-scope falsifiable probe for the OMN-15253 slice-1 omnimarket diff at product commit 292d81f3. Slice 1 is source-only and ships no live deployment (proof_class: code-only; the verdict only becomes live-proven in slice 2 when the collect EFFECT captures a real snapshot), so this is the hermetic content probe the deploy gate accepts for compute-only tickets. It reads the deployed-source surface @@ -47,8 +47,15 @@ dod_evidence: checks: - check_type: "command" check_value: >- - gh api 'repos/OmniNode-ai/omnimarket/contents/src/omnimarket/nodes/node_staging_readiness_compute/handlers/handler_staging_readiness_compute.py?ref=3096f242c349c95cdaacb664be9116079ad48138' - --jq .content | base64 -d | grep -c 'request: ModelStagingReadinessRequest' && ! gh api 'repos/OmniNode-ai/omnimarket/contents/src/omnimarket/nodes/node_staging_readiness_compute/handlers/handler_staging_readiness_compute.py?ref=3096f242c349c95cdaacb664be9116079ad48138' + gh api 'repos/OmniNode-ai/omnimarket/contents/src/omnimarket/nodes/node_staging_readiness_compute/handlers/handler_staging_readiness_compute.py?ref=292d81f35f29bed39cfa2b2e91482a6d818ce546' + --jq .content | base64 -d | grep -c 'request: ModelStagingReadinessRequest' && ! gh api 'repos/OmniNode-ai/omnimarket/contents/src/omnimarket/nodes/node_staging_readiness_compute/handlers/handler_staging_readiness_compute.py?ref=292d81f35f29bed39cfa2b2e91482a6d818ce546' --jq .content | base64 -d | grep -qE '(import|from).*Model(EventEnvelope|HandlerOutput)' && - gh api 'repos/OmniNode-ai/omnimarket/contents/src/omnimarket/nodes/node_staging_readiness_compute/contract.yaml?ref=3096f242c349c95cdaacb664be9116079ad48138' + gh api 'repos/OmniNode-ai/omnimarket/contents/src/omnimarket/nodes/node_staging_readiness_compute/contract.yaml?ref=292d81f35f29bed39cfa2b2e91482a6d818ce546' --jq .content | base64 -d | grep -c 'purity: pure' + - id: "occ-self-bind-pr-5164" + description: "OCC repair PR #5164 — self-bind for OMN-15253 slice-1 deploy evidence (OMN-14650)." + source: "manual" + status: "verified" + checks: + - check_type: "command" + check_value: "gh pr view 5164 --repo OmniNode-ai/onex_change_control --json number,state" diff --git a/drift/dod_receipts/OMN-15253/dod-deploy-staging-readiness-node-3096f242/command.yaml b/drift/dod_receipts/OMN-15253/dod-deploy-staging-readiness-node-292d81f3/command.yaml similarity index 59% rename from drift/dod_receipts/OMN-15253/dod-deploy-staging-readiness-node-3096f242/command.yaml rename to drift/dod_receipts/OMN-15253/dod-deploy-staging-readiness-node-292d81f3/command.yaml index c688e90f193..0b538102c69 100644 --- a/drift/dod_receipts/OMN-15253/dod-deploy-staging-readiness-node-3096f242/command.yaml +++ b/drift/dod_receipts/OMN-15253/dod-deploy-staging-readiness-node-292d81f3/command.yaml @@ -1,25 +1,27 @@ --- schema_version: 1.0.0 ticket_id: OMN-15253 -evidence_item_id: dod-deploy-staging-readiness-node-3096f242 +evidence_item_id: dod-deploy-staging-readiness-node-292d81f3 check_type: command -check_value: 'gh api ''repos/OmniNode-ai/omnimarket/contents/src/omnimarket/nodes/node_staging_readiness_compute/handlers/handler_staging_readiness_compute.py?ref=3096f242c349c95cdaacb664be9116079ad48138'' - --jq .content | base64 -d | grep -c ''request: ModelStagingReadinessRequest'' && ! gh api ''repos/OmniNode-ai/omnimarket/contents/src/omnimarket/nodes/node_staging_readiness_compute/handlers/handler_staging_readiness_compute.py?ref=3096f242c349c95cdaacb664be9116079ad48138'' +check_value: 'gh api ''repos/OmniNode-ai/omnimarket/contents/src/omnimarket/nodes/node_staging_readiness_compute/handlers/handler_staging_readiness_compute.py?ref=292d81f35f29bed39cfa2b2e91482a6d818ce546'' + --jq .content | base64 -d | grep -c ''request: ModelStagingReadinessRequest'' && ! gh api ''repos/OmniNode-ai/omnimarket/contents/src/omnimarket/nodes/node_staging_readiness_compute/handlers/handler_staging_readiness_compute.py?ref=292d81f35f29bed39cfa2b2e91482a6d818ce546'' --jq .content | base64 -d | grep -qE ''(import|from).*Model(EventEnvelope|HandlerOutput)'' && gh api - ''repos/OmniNode-ai/omnimarket/contents/src/omnimarket/nodes/node_staging_readiness_compute/contract.yaml?ref=3096f242c349c95cdaacb664be9116079ad48138'' + ''repos/OmniNode-ai/omnimarket/contents/src/omnimarket/nodes/node_staging_readiness_compute/contract.yaml?ref=292d81f35f29bed39cfa2b2e91482a6d818ce546'' --jq .content | base64 -d | grep -c ''purity: pure''' -contract_sha256: c819888f33ffe836ae1fbe45ab5f209aca7e64629f46377345321c69bd68b919 -contract_entry_sha256: sha256:015bd68410d1df2cbed3cda13dee8dcb56e875f4c5245fbfc6e7eb4cf92d222c +contract_sha256: abfefd0466104dabc1abbbc9f12983cb788429e5bf3ef43680e4267f532d8bb1 +contract_entry_sha256: sha256:6c99ae9761f50390240f63912167177589962b0a78e63146f259de63e406971a status: PASS -run_timestamp: '2026-07-27T18:52:06.479231+00:00' -commit_sha: f5e24e345521e64d2ccdd386aa8602600de7cc5f +run_timestamp: '2026-07-27T19:34:48.082575+00:00' +commit_sha: c642080f9ef1330ebd1cc8126062efa5f1fac1b8 runner: omn-15253-slice1-build verifier: gh-api-content-probe -probe_command: 'gh api ''repos/OmniNode-ai/omnimarket/contents/src/omnimarket/nodes/node_staging_readiness_compute/handlers/handler_staging_readiness_compute.py?ref=3096f242c349c95cdaacb664be9116079ad48138'' - --jq .content | base64 -d | grep -c ''request: ModelStagingReadinessRequest'' && ! gh api ''repos/OmniNode-ai/omnimarket/contents/src/omnimarket/nodes/node_staging_readiness_compute/handlers/handler_staging_readiness_compute.py?ref=3096f242c349c95cdaacb664be9116079ad48138'' +probe_command: 'gh api ''repos/OmniNode-ai/omnimarket/contents/src/omnimarket/nodes/node_staging_readiness_compute/handlers/handler_staging_readiness_compute.py?ref=292d81f35f29bed39cfa2b2e91482a6d818ce546'' + --jq .content | base64 -d | grep -c ''request: ModelStagingReadinessRequest'' && ! gh api ''repos/OmniNode-ai/omnimarket/contents/src/omnimarket/nodes/node_staging_readiness_compute/handlers/handler_staging_readiness_compute.py?ref=292d81f35f29bed39cfa2b2e91482a6d818ce546'' --jq .content | base64 -d | grep -qE ''(import|from).*Model(EventEnvelope|HandlerOutput)'' && gh api - ''repos/OmniNode-ai/omnimarket/contents/src/omnimarket/nodes/node_staging_readiness_compute/contract.yaml?ref=3096f242c349c95cdaacb664be9116079ad48138'' + ''repos/OmniNode-ai/omnimarket/contents/src/omnimarket/nodes/node_staging_readiness_compute/contract.yaml?ref=292d81f35f29bed39cfa2b2e91482a6d818ce546'' --jq .content | base64 -d | grep -c ''purity: pure''' probe_stdout: '1 #magic___^_^___line 1 #magic___^_^___line ' actual_output: exit=0; stdout='1\n1' exit_code: 0 +pr_number: 5164 +branch: jonah/omn-15253-deploy-evidence diff --git a/drift/dod_receipts/OMN-15253/occ-self-bind-pr-5164/command.yaml b/drift/dod_receipts/OMN-15253/occ-self-bind-pr-5164/command.yaml new file mode 100644 index 00000000000..c535e404828 --- /dev/null +++ b/drift/dod_receipts/OMN-15253/occ-self-bind-pr-5164/command.yaml @@ -0,0 +1,19 @@ +--- +schema_version: 1.0.0 +ticket_id: OMN-15253 +evidence_item_id: occ-self-bind-pr-5164 +check_type: command +check_value: gh pr view 5164 --repo OmniNode-ai/onex_change_control --json number,state +contract_sha256: abfefd0466104dabc1abbbc9f12983cb788429e5bf3ef43680e4267f532d8bb1 +contract_entry_sha256: sha256:d7914299df3bc5146fff024a04450b753500a66dd2758d727aa5bd8e257d58ed +status: PASS +run_timestamp: '2026-07-27T19:34:48.527576+00:00' +commit_sha: c642080f9ef1330ebd1cc8126062efa5f1fac1b8 +runner: omn-15253-slice1-build +verifier: gh-api-content-probe +probe_command: gh pr view 5164 --repo OmniNode-ai/onex_change_control --json number,state +probe_stdout: '{"number":5164,"state":"OPEN"} #magic___^_^___line ' +actual_output: exit=0; stdout='{"number":5164,"state":"OPEN"}' +exit_code: 0 +pr_number: 5164 +branch: jonah/omn-15253-deploy-evidence