Repository navigation
evidence(OMN-15628): OCC companion for OmniNode-ai/omnibase_infra#2617 #5911
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Changes from all commits
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,20 @@ | ||
| --- | ||
| schema_version: "1.0.0" | ||
|
Comment on lines
+1
to
+2
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. 🗄️ Data Integrity & Integration | 🟠 Major | ⚡ Quick win Use the required timestamp filename for the receipt. This receipt is stored as As per coding guidelines, DoD receipts must use the 🤖 Prompt for AI AgentsSource: Coding guidelines |
||
| ticket_id: "OMN-15628" | ||
| evidence_item_id: "dod-OmniNode-ai-omnibase_infra-pr-2617" | ||
| check_type: "command" | ||
| check_value: |- | ||
| gh pr view 2617 --repo OmniNode-ai/omnibase_infra --json number,state,headRefName | ||
| contract_entry_sha256: "sha256:45cb8de118fd0dc9d74bd8e295ba945c39c4ed3098a9705b66ebbb65ed068ff7" | ||
|
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. 🗄️ Data Integrity & Integration | 🟠 Major | ⚡ Quick win 🧩 Analysis chain🏁 Script executed: #!/bin/bash
set -euo pipefail
printf '%s\n' '--- target receipt ---'
cat -n drift/dod_receipts/OMN-15628/dod-OmniNode-ai-omnibase_infra-pr-2617/command.yaml
printf '%s\n' '--- matching receipt files ---'
git ls-files 'drift/dod_receipts/**/*.yaml' | sed -n '1,120p'
printf '%s\n' '--- hash and validator references ---'
rg -n --hidden -S \
'contract_sha256|contract_entry_sha256|validator_receipt_gate|ModelDodReceipt' \
--glob '!node_modules' --glob '!dist' --glob '!build' .Repository: OmniNode-ai/onex_change_control Length of output: 50388 🏁 Script executed: #!/bin/bash
set -euo pipefail
printf '%s\n' '--- repository files near receipt and validator ---'
fd -H -t f | rg '(^|/)(command\.yaml|.*receipt.*|.*validator.*|pyproject\.toml|package\.json|README.*)$' | sed -n '1,200p'
printf '%s\n' '--- receipt directory metadata ---'
find drift/dod_receipts/OMN-15628 -maxdepth 3 -type f -print | sort
printf '%s\n' '--- relevant tracked-file contents ---'
while IFS= read -r f; do
case "$f" in
drift/dod_receipts/*.yaml)
echo "### $f"
cat -n "$f"
;;
esac
done < <(git ls-files 'drift/dod_receipts/**/*.yaml' | sed -n '1,80p')Repository: OmniNode-ai/onex_change_control Length of output: 16026 🏁 Script executed: #!/bin/bash
set -euo pipefail
printf '%s\n' '--- target receipt ---'
cat -n drift/dod_receipts/OMN-15628/dod-OmniNode-ai-omnibase_infra-pr-2617/command.yaml
printf '%s\n' '--- all relevant references ---'
rg -n --hidden -S 'contract_sha256|contract_entry_sha256|validator_receipt_gate|ModelDodReceipt' \
--glob '!node_modules' --glob '!dist' --glob '!build' .Repository: OmniNode-ai/onex_change_control Length of output: 50388 🏁 Script executed: #!/bin/bash
set -euo pipefail
python3 - <<'PY'
from pathlib import Path
p = Path("drift/dod_receipts/OMN-15628/dod-OmniNode-ai-omnibase_infra-pr-2617/command.yaml")
print("exists:", p.exists())
if p.exists():
print(p.read_text())
for root in (Path("drift"), Path(".")):
if root.exists():
for f in root.rglob("*"):
if f.is_file() and f.suffix in {".yaml", ".yml", ".py", ".md", ".toml", ".json"}:
try:
s = f.read_text(errors="ignore")
except Exception:
continue
if any(x in s for x in ("contract_sha256", "contract_entry_sha256",
"validator_receipt_gate", "ModelDodReceipt")):
print("REF", f)
PYRepository: OmniNode-ai/onex_change_control Length of output: 50388 🏁 Script executed: #!/bin/bash
set -euo pipefail
printf '%s\n' '--- target receipt ---'
cat -n drift/dod_receipts/OMN-15628/dod-OmniNode-ai-omnibase_infra-pr-2617/command.yaml
printf '%s\n' '--- nearby OMN-15628 receipts ---'
for f in \
drift/dod_receipts/OMN-15628/dod-OmniNode-ai-omnibase_infra-pr-2612/command.yaml \
drift/dod_receipts/OMN-15628/dod-OmniNode-ai-omnibase_infra-pr-2615/command.yaml \
drift/dod_receipts/OMN-15628/dod-OmniNode-ai-omnibase_infra-pr-2615/command.supersede.2006.yaml
do
echo "### $f"
cat -n "$f"
done
printf '%s\n' '--- hashing standard ---'
cat -n docs/standards/receipt_hashing_and_supersession.md | sed -n '1,240p'
printf '%s\n' '--- validator references, limited ---'
rg -n -m 80 'contract_sha256|contract_entry_sha256|validator_receipt_gate|ModelDodReceipt' \
docs scripts tests architecture-handshakes .github/workflows pyproject.tomlRepository: OmniNode-ai/onex_change_control Length of output: 24807 🏁 Script executed: #!/bin/bash
set -euo pipefail
printf '%s\n' '--- exact target and comparable receipts ---'
for f in \
drift/dod_receipts/OMN-15628/dod-OmniNode-ai-omnibase_infra-pr-2617/command.yaml \
drift/dod_receipts/OMN-15628/dod-OmniNode-ai-omnibase_infra-pr-2612/command.yaml \
drift/dod_receipts/OMN-15628/dod-OmniNode-ai-omnibase_infra-pr-2615/command.yaml
do
echo "### $f"
sed -n '1,80p' "$f"
done
printf '%s\n' '--- relevant standard excerpts ---'
rg -n -C 4 'contract_sha256|contract_entry_sha256|validator_receipt_gate|whole-file|whole-contract|canonical' \
docs/standards/receipt_hashing_and_supersession.md \
tests scripts .github/workflows architecture-handshakes \
--glob '!**/*.yaml' --glob '!**/*.yml' | sed -n '1,260p'Repository: OmniNode-ai/onex_change_control Length of output: 24533 Store the receipt at the canonical timestamp path.
🤖 Prompt for AI AgentsSource: Coding guidelines |
||
| status: PASS | ||
| run_timestamp: "2026-08-02T00:28:35Z" | ||
| commit_sha: "fbc23a702f8528087b519058cc82fd7b7677c469" | ||
| runner: "codex-merge-controller" | ||
| verifier: "occ-evidence-source-autobind" | ||
| probe_command: "gh pr view 2617 --repo OmniNode-ai/omnibase_infra --json number,state,headRefName" | ||
| probe_stdout: | | ||
| {"headRefName":"jonah/omn-15628-remediation-round2","number":2617,"state":"OPEN"} | ||
| actual_output: "PASS: Evidence-Source autobind for OMN-15628 from OmniNode-ai/omnibase_infra#2617." | ||
| exit_code: 0 | ||
| pr_number: 2617 | ||
| branch: "codex/omn-15628-infra-2617-occ-002835" | ||
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,20 @@ | ||
| --- | ||
| schema_version: "1.0.0" | ||
| ticket_id: "OMN-15628" | ||
| evidence_item_id: "occ-self-bind-pr-5911" | ||
| check_type: "command" | ||
| check_value: |- | ||
| gh pr view 5911 --repo OmniNode-ai/onex_change_control --json number,state,headRefName | ||
|
Comment on lines
+1
to
+7
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. 🗄️ Data Integrity & Integration | 🟠 Major | ⚡ Quick win Use the canonical receipt path and self-reference The file path ends in Set As per coding guidelines, DoD receipts must use the timestamp-based path. Based on learnings, Proposed fix- drift/dod_receipts/OMN-15628/occ-self-bind-pr-5911/command.yaml
+ drift/dod_receipts/OMN-15628/occ-self-bind-pr-5911/2026-08-02T00:28:35Z.yaml
-check_value: |-
- gh pr view 5911 --repo OmniNode-ai/onex_change_control --json number,state,headRefName
+check_value: "drift/dod_receipts/OMN-15628/occ-self-bind-pr-5911/2026-08-02T00:28:35Z.yaml"🤖 Prompt for AI AgentsSources: Coding guidelines, Learnings |
||
| contract_entry_sha256: "sha256:136270b8aa4469c2666d973faea1301a3798f454bc3d10d18ee686995fb9e17d" | ||
| status: PASS | ||
| run_timestamp: "2026-08-02T00:28:35Z" | ||
| commit_sha: "710b3239bb314eb98360ec86c9d73e7fd52a92d4" | ||
| runner: "codex-merge-controller" | ||
| verifier: "occ-evidence-source-autobind" | ||
| probe_command: "gh pr view 5911 --repo OmniNode-ai/onex_change_control --json number,state" | ||
| probe_stdout: | | ||
| {"number":5911,"state":"OPEN"} | ||
|
Comment on lines
+11
to
+16
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. 🗄️ Data Integrity & Integration | 🟡 Minor | ⚡ Quick win 🧩 Analysis chain🏁 Script executed: gh pr view 5911 --repo OmniNode-ai/onex_change_control --json number,state,headRefName,headRefOid
git cat-file -e '710b3239bb314eb98360ec86c9d73e7fd52a92d4^{commit}'Repository: OmniNode-ai/onex_change_control Length of output: 310 🏁 Script executed: #!/bin/bash
set -e
python3 - <<'PY'
import json
from pathlib import Path
path = Path("drift/dod_receipts/OMN-15628/occ-self-bind-pr-5911/command.yaml")
text = path.read_text()
print(text)
PY
gh api repos/OmniNode-ai/onex_change_control/commits/710b3239bb314eb98360ec86c9d73e7fd52a92d4 --jq '{sha: .sha, message: .commit.message}'
gh api repos/OmniNode-ai/onex_change_control/commits/1cdbca4897d818428e94fbf77198c0c33d6a65c8 --jq '{sha: .sha, message: .commit.message}'Repository: OmniNode-ai/onex_change_control Length of output: 1173 Capture the PR head in the receipt.
🤖 Prompt for AI AgentsSource: Learnings |
||
| actual_output: "PASS: OCC self-bind for OMN-15628 (OCC#5911)." | ||
| exit_code: 0 | ||
| pr_number: 5911 | ||
| branch: "codex/omn-15628-infra-2617-occ-002835" | ||
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🗄️ Data Integrity & Integration | 🟠 Major | ⚡ Quick win
🧩 Analysis chain
🏁 Script executed:
Repository: OmniNode-ai/onex_change_control
Length of output: 37866
🏁 Script executed:
Repository: OmniNode-ai/onex_change_control
Length of output: 19655
🌐 Web query:
omnibase_core validation.validator_receipt_gate compute_contract_entry_sha256 canonical JSON💡 Result:
The omnibase_core library—the kernel of the ONEX (OmniNode eXecution) platform—utilizes
validator_receipt_gateas part of its validation framework [1][2][3]. This module handles logic related to the "Enforcement by Receipt" policy, which ensures that pull requests are backed by verified evidence artifacts [4][5]. The functioncompute_contract_entry_sha256(and related canonicalization operations within the broader ecosystem of canonical-JSON implementations) relies on a deterministic serialization process to ensure consistent cross-process hashing [6][7][8][9][10]. In these contexts, "canonical JSON" generally follows strict serialization rules to guarantee that the same logical input produces identical byte-level output [6][8][9][10]. These rules typically include: 1. Lexicographical sorting of object keys [6][8][9][10]. 2. Minified JSON output with no whitespace (separators set to,and:) [6][9][10]. 3. Character encoding enforced as UTF-8 (no BOM) [8][9][10]. 4. Consistent handling of data types (e.g., ensuring no non-standard floating-point tokens and handling numbers/booleans deterministically) [6][7][9][10]. For exact implementation details, developers should refer to theomnibase_coresource repository [11][3]. Thevalidator_receipt_gate.pymodule is located within thesrc/omnibase_core/validation/directory [1]. [1][4][6][9]Citations:
🏁 Script executed:
Repository: OmniNode-ai/onex_change_control
Length of output: 50388
🏁 Script executed:
Repository: OmniNode-ai/onex_change_control
Length of output: 12139
🏁 Script executed:
Repository: OmniNode-ai/onex_change_control
Length of output: 39031
🏁 Script executed:
Repository: OmniNode-ai/onex_change_control
Length of output: 225
Bind the receipt to the external PR head and contract hashes.
PR 2617 currently has head
fbc23a702f8528087b519058cc82fd7b7677c469, but the checks do not query or assertheadRefOid.contracts/OMN-15628.yaml#L133-L141to queryheadRefOidand assert the expected SHA.headRefOidand require it to equalcommit_sha. Keep the externalheadRefNameseparate from the localbranch.contract_sha256for the contract raw-byte hash and regeneratecontract_entry_sha256withomnibase_core.validation.validator_receipt_gate.📍 Affects 2 files
contracts/OMN-15628.yaml#L133-L141(this comment)drift/dod_receipts/OMN-15628/dod-OmniNode-ai-omnibase_infra-pr-2617/command.yaml#L6-L20🤖 Prompt for AI Agents
Source: Learnings