Skip to content

evidence(OMN-14974): bind observability deployment - #5450

Merged
jonahgabriel merged 2 commits into
devfrom
codex/omn-14974-infra759-evidence
Jul 29, 2026
Merged

jonahgabriel merged 2 commits into
devfrom
codex/omn-14974-infra759-evidence

Conversation

@jonahgabriel

@jonahgabriel jonahgabriel commented Jul 29, 2026 •

Copy link
Copy Markdown
Contributor

Outcome

Binds omninode_infra PR #759 at exact head bb5b102d1606cb204052126e884066767e12fc58 and verifies its exact three-file staging deployment scope.

Evidence

  • exact product head and OPEN state read back from GitHub
  • exact changed-file set read back from GitHub
  • runtime and migration artifacts independently resolved in ECR
  • 214 Kubernetes tests passed with 2 intentional skips on the .200 build lane
  • 100 evidence-admissibility and receipt-hardening tests passed
  • receipt hardening and scoped pre-commit passed

Product: OmniNode-ai/omninode_infra#759
Evidence-Ticket: OMN-14974

Summary by CodeRabbit

  • Tests

    • Added verification coverage for runtime and migration image digest checks.
    • Added file-scope validation confirming the expected Kubernetes artifacts are present.
    • Added hosted evidence-admissibility test execution under the superseding receipt.
  • Documentation

    • Recorded successful verification results, including check outputs, commit details, timestamps, and execution metadata.

@coderabbitai

coderabbitai Bot commented Jul 29, 2026 •

Copy link
Copy Markdown

Review Change Stack

Warning

Review limit reached

You’ve reached a temporary PR review limit under our Fair Usage Limits Policy.

Your recent review volume is higher than typical usage, so adaptive limits are currently applied.

Next review available in: 56 minutes

Enable usage-based reviews in Billing to review now. Otherwise, wait until the next included review is available.
You're only billed for reviews past your plan's rate limits ($0.25/file).

How can I continue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based reviews.

How do review limits work?

CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan review availability.

For paid Pro and Pro+ PR reviews, CodeRabbit uses adaptive limits for sustained high-volume activity. When a developer's recent PR review activity reaches the 95th percentile or higher among CodeRabbit users, additional reviews become available more gradually as earlier reviews age out of the rolling window.

Please refer docs for additional details.

Review details
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: f63c9eda-c002-49f1-8b28-5b90613a5397

📥 Commits

Reviewing files that changed from the base of the PR and between 9b2dcee and 34cc2f3.

📒 Files selected for processing (3)
  • contracts/OMN-14974.yaml
  • drift/dod_receipts/OMN-14974/dod-infra759-ci-hosted-token-supersession/command.yaml
  • drift/dod_receipts/OMN-14974/occ-self-bind-pr-5450/command.yaml
📝 Walkthrough

Walkthrough

The PR adds OMN-14974 evidence checks for omninode_infra PR 759 and records passing command receipts for its reviewed commit and exact Kubernetes file scope.

Changes

PR 759 verification

Layer / File(s) Summary
PR 759 evidence contract
contracts/OMN-14974.yaml
Adds head commit, exact file-scope, and hosted evidence-admissibility checks for PR 759.
Successful verification receipts
drift/dod_receipts/OMN-14974/dod-OmniNode-ai-omninode_infra-pr-759/command.yaml, drift/dod_receipts/OMN-14974/dod-OmniNode-ai-omninode_infra-pr-759-ci/command.yaml
Records passing command probes, expected and actual outputs, exit codes, hashes, and execution metadata.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Possibly related PRs

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title matches the main change: binding observability deployment evidence for OMN-14974.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch codex/omn-14974-infra759-evidence

Comment @coderabbitai help to get the list of available commands.

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In
`@drift/dod_receipts/OMN-14974/dod-OmniNode-ai-omninode_infra-pr-759/command.yaml`:
- Around line 1-11: Rename the receipt at
drift/dod_receipts/OMN-14974/dod-OmniNode-ai-omninode_infra-pr-759/command.yaml
to 2026-07-29T12:27:33+00:00.yaml using its recorded run_timestamp, and rename
drift/dod_receipts/OMN-14974/dod-OmniNode-ai-omninode_infra-pr-759-ci/command.yaml
to its own recorded run_timestamp.yaml. Ensure both receipts are stored only
under the required timestamped paths.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 59e8b535-4064-4bc0-8091-dc66a4347ddb

📥 Commits

Reviewing files that changed from the base of the PR and between 5333ae0 and 9b2dcee.

📒 Files selected for processing (3)
  • contracts/OMN-14974.yaml
  • drift/dod_receipts/OMN-14974/dod-OmniNode-ai-omninode_infra-pr-759-ci/command.yaml
  • drift/dod_receipts/OMN-14974/dod-OmniNode-ai-omninode_infra-pr-759/command.yaml

Comment on lines +1 to +11
---
schema_version: "1.0.0"
ticket_id: "OMN-14974"
evidence_item_id: "dod-OmniNode-ai-omninode_infra-pr-759"
check_type: "command"
check_value: |-
test "$(gh pr view 759 --repo OmniNode-ai/omninode_infra --json state,headRefOid --jq '.state + " " + .headRefOid')" = "OPEN bb5b102d1606cb204052126e884066767e12fc58"
contract_sha256: "sha256:dba1970c769220f682a0f4e0a228fc05a2075f3de7c16db8a9352b4772796678"
contract_entry_sha256: "sha256:e90caeafebf6c82212d88a28d5f2e9657d2552e31c211eff9a9a1a27546f1e2e"
status: PASS
run_timestamp: "2026-07-29T12:27:33+00:00"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🗄️ Data Integrity & Integration | 🟠 Major | ⚡ Quick win

Store both receipts under timestamped filenames.

Both receipts use command.yaml instead of the required <run_timestamp>.yaml path, which can prevent receipt discovery by the gate.

  • drift/dod_receipts/OMN-14974/dod-OmniNode-ai-omninode_infra-pr-759/command.yaml#L1-L11: rename using its recorded run_timestamp.
  • drift/dod_receipts/OMN-14974/dod-OmniNode-ai-omninode_infra-pr-759-ci/command.yaml#L1-L14: rename using its recorded run_timestamp.

As per coding guidelines, DoD receipts must be stored only at drift/dod_receipts/<TICKET>/<ITEM_ID>/<run_timestamp>.yaml.

📍 Affects 2 files
  • drift/dod_receipts/OMN-14974/dod-OmniNode-ai-omninode_infra-pr-759/command.yaml#L1-L11 (this comment)
  • drift/dod_receipts/OMN-14974/dod-OmniNode-ai-omninode_infra-pr-759-ci/command.yaml#L1-L14
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In
`@drift/dod_receipts/OMN-14974/dod-OmniNode-ai-omninode_infra-pr-759/command.yaml`
around lines 1 - 11, Rename the receipt at
drift/dod_receipts/OMN-14974/dod-OmniNode-ai-omninode_infra-pr-759/command.yaml
to 2026-07-29T12:27:33+00:00.yaml using its recorded run_timestamp, and rename
drift/dod_receipts/OMN-14974/dod-OmniNode-ai-omninode_infra-pr-759-ci/command.yaml
to its own recorded run_timestamp.yaml. Ensure both receipts are stored only
under the required timestamped paths.

Source: Coding guidelines

@jonahgabriel
jonahgabriel merged commit a93f836 into dev Jul 29, 2026
59 checks passed
@jonahgabriel
jonahgabriel deleted the codex/omn-14974-infra759-evidence branch July 29, 2026 12:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant