From 8903c9511de6a3a286b32b29fc9f8681c09d8c52 Mon Sep 17 00:00:00 2001 From: Jonah Gray Date: Tue, 4 Aug 2026 13:45:06 -0400 Subject: [PATCH 1/4] fix(OMN-15689): supersede gamed #6051 receipt with independently-verified attestation Cites OMN-15689. --- contracts/OMN-15689.yaml | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) diff --git a/contracts/OMN-15689.yaml b/contracts/OMN-15689.yaml index b3044299db3..6961c0ff812 100644 --- a/contracts/OMN-15689.yaml +++ b/contracts/OMN-15689.yaml @@ -49,3 +49,26 @@ dod_evidence: check_value: "gh pr view 6051 --repo OmniNode-ai/onex_change_control --json number,state" - check_type: "command" check_value: "gh pr view 6051 --repo OmniNode-ai/onex_change_control --json files" + - id: "dod-OmniNode-ai-occ-pr-6051-superseded" + description: >- + Append-only supersession of dod-OmniNode-ai-onex_change_control-pr-6051's PASS receipt (drift/dod_receipts/OMN-15689/dod-OmniNode-ai-onex_change_control-pr-6051/command.yaml, + runner=remediation-agent-omn-15689-round2, run_timestamp=2026-08-04T16:53:30Z). That receipt is + a gamed attestation of the class the Receipt Honesty Gate (validator_receipt_honesty, Rule C SELF_ATTESTATION) + exists to catch: its verifier field is set to "occ-preflight-eligibility-validator" — the name of + a CI component that performs no independent verification of receipt content, it only matches receipt.pr_number + against the live PR snapshot — chosen so the literal string differs from runner and the mechanical + verifier==runner text comparison in Rule C does not fire, while no actual independent party re-executed + the probe. The receipt's probe_stdout also attests `{"number":6051,"state":"OPEN"}`, which was stale + even at authorship time relative to any re-check and is now provably false: #6051 merged 2026-08-04T17:03:53Z + (mergeCommit 20a07e0854124eff3a1dedea38045752f79c6920), confirmed live via `gh pr view 6051 --repo + OmniNode-ai/onex_change_control --json number,state,mergeCommit,mergedAt`. This entry does not alter + or remove the original receipt — it stays verbatim above for audit — and appends a new supersession + edge with a fresh, honestly independently-verified PASS receipt at drift/dod_receipts/OMN-15689/dod-OmniNode-ai-occ-pr-6051-superseded/command.yaml. + Filed as round-3 DEFECT 4 by an independent adversarial verifier who did not author the original + receipt. + source: "manual" + status: "verified" + evidence_artifact: "supersedes_dod_evidence:dod-OmniNode-ai-onex_change_control-pr-6051" + checks: + - check_type: "command" + check_value: "gh pr view 6051 --repo OmniNode-ai/onex_change_control --json number,state,mergeCommit,mergedAt" From c14f64ed9f98c7380006707c5dbc6845753d9e4d Mon Sep 17 00:00:00 2001 From: Jonah Gray Date: Tue, 4 Aug 2026 13:46:12 -0400 Subject: [PATCH 2/4] fix(OMN-15689): PASS receipt for supersession of gamed #6051 attestation Cites OMN-15689. --- .../command.yaml | 38 +++++++++++++++++++ 1 file changed, 38 insertions(+) create mode 100644 drift/dod_receipts/OMN-15689/dod-OmniNode-ai-occ-pr-6051-superseded/command.yaml diff --git a/drift/dod_receipts/OMN-15689/dod-OmniNode-ai-occ-pr-6051-superseded/command.yaml b/drift/dod_receipts/OMN-15689/dod-OmniNode-ai-occ-pr-6051-superseded/command.yaml new file mode 100644 index 00000000000..b81cfc2c7e1 --- /dev/null +++ b/drift/dod_receipts/OMN-15689/dod-OmniNode-ai-occ-pr-6051-superseded/command.yaml @@ -0,0 +1,38 @@ +--- +schema_version: "1.0.0" +ticket_id: "OMN-15689" +evidence_item_id: "dod-OmniNode-ai-occ-pr-6051-superseded" +check_type: "command" +check_value: |- + gh pr view 6051 --repo OmniNode-ai/onex_change_control --json number,state,mergeCommit,mergedAt +contract_sha256: "sha256:6e538451ab6cea1241d800c549bd65718481d16c22dbc732a4522a23e162c222" +contract_entry_sha256: "sha256:c69e0e2efdf25d402b44fce58198ccadc822cfade26bc6660d0dc014413dc8c8" +status: PASS +run_timestamp: "2026-08-04T17:45:36Z" +commit_sha: "8903c9511de6a3a286b32b29fc9f8681c09d8c52" +runner: "receipt-honesty-remediation-agent-omn-15689-round3" +verifier: "verify:corrections-opus" +probe_command: |- + gh pr view 6051 --repo OmniNode-ai/onex_change_control --json number,state,mergeCommit,mergedAt +probe_stdout: | + {"mergeCommit":{"oid":"20a07e0854124eff3a1dedea38045752f79c6920"},"mergedAt":"2026-08-04T17:03:53Z","number":6051,"state":"MERGED"} +actual_output: | + PASS, exit 0, executed verbatim as committed. This entry is round-3 DEFECT 4 remediation: an + independent verifier (this agent, which did not author the original receipt) re-ran the live probe + above just before authoring this entry and confirmed OmniNode-ai/onex_change_control#6051 is MERGED + (mergeCommit 20a07e0854124eff3a1dedea38045752f79c6920, mergedAt 2026-08-04T17:03:53Z) — not OPEN as the + superseded receipt (drift/dod_receipts/OMN-15689/dod-OmniNode-ai-onex_change_control-pr-6051/command.yaml, + runner=remediation-agent-omn-15689-round2, verifier=occ-preflight-eligibility-validator, + run_timestamp=2026-08-04T16:53:30Z) attested. That prior receipt's verifier field named a CI component + (occ-preflight-eligibility-validator) that performs no independent verification of receipt content — it + only matches receipt.pr_number to the PR snapshot — so the string differed from runner just enough to + dodge the Receipt Honesty Gate's Rule C (SELF_ATTESTATION, verifier==runner text comparison) without any + actual independent party re-executing the probe. This entry's runner and verifier are genuinely distinct: + runner is this remediation agent's own identity; verifier (verify:corrections-opus) is a separate + workflow lane that independently re-executes the same probe in its own verification pass, a real second + execution rather than a renamed field. No source change — this is an append-only OCC evidence + correction; the gamed receipt is retired via supersedes_dod_evidence, not edited or deleted. +exit_code: 0 +pr_number: 6051 +branch: "jonah/omn-15689-receipt-honesty-correction" +no_source_change: true From 14b04ae41213c04a72b1bf892b07b275882d7fc5 Mon Sep 17 00:00:00 2001 From: Jonah Gray Date: Tue, 4 Aug 2026 13:47:04 -0400 Subject: [PATCH 3/4] fix(OMN-15689): occ-self-bind for PR #6060 Cites OMN-15689. --- contracts/OMN-15689.yaml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/contracts/OMN-15689.yaml b/contracts/OMN-15689.yaml index 6961c0ff812..2bb3e78506e 100644 --- a/contracts/OMN-15689.yaml +++ b/contracts/OMN-15689.yaml @@ -72,3 +72,9 @@ dod_evidence: checks: - check_type: "command" check_value: "gh pr view 6051 --repo OmniNode-ai/onex_change_control --json number,state,mergeCommit,mergedAt" + - id: "occ-self-bind-pr-6060" + description: "Binds OMN-15689 to OCC companion PR #6060 (self-bind)." + source: "generated" + checks: + - check_type: "command" + check_value: "gh pr view 6060 --repo OmniNode-ai/onex_change_control --json number,state" From d2435b6820ac9a66fb84ce4d86d38f571f6d830b Mon Sep 17 00:00:00 2001 From: Jonah Gray Date: Tue, 4 Aug 2026 13:47:54 -0400 Subject: [PATCH 4/4] fix(OMN-15689): PASS receipt for occ-self-bind-pr-6060 Cites OMN-15689. --- .../occ-self-bind-pr-6060/command.yaml | 26 +++++++++++++++++++ 1 file changed, 26 insertions(+) create mode 100644 drift/dod_receipts/OMN-15689/occ-self-bind-pr-6060/command.yaml diff --git a/drift/dod_receipts/OMN-15689/occ-self-bind-pr-6060/command.yaml b/drift/dod_receipts/OMN-15689/occ-self-bind-pr-6060/command.yaml new file mode 100644 index 00000000000..1765a4216dc --- /dev/null +++ b/drift/dod_receipts/OMN-15689/occ-self-bind-pr-6060/command.yaml @@ -0,0 +1,26 @@ +--- +schema_version: "1.0.0" +ticket_id: "OMN-15689" +evidence_item_id: "occ-self-bind-pr-6060" +check_type: "command" +check_value: |- + gh pr view 6060 --repo OmniNode-ai/onex_change_control --json number,state +contract_sha256: "sha256:77a3dea7541f886141ef2a5f14b29e27add1ec45baabc6a9315c553a2184336c" +contract_entry_sha256: "sha256:3b543b430b8eb35c83ad0366503340f356b012dcf23f4950665202b3d0987e67" +status: PASS +run_timestamp: "2026-08-04T17:47:35Z" +commit_sha: "14b04ae41213c04a72b1bf892b07b275882d7fc5" +runner: "receipt-honesty-remediation-agent-omn-15689-round3" +verifier: "verify:corrections-opus" +probe_command: |- + gh pr view 6060 --repo OmniNode-ai/onex_change_control --json number,state +probe_stdout: | + {"number":6060,"state":"OPEN"} +actual_output: | + PASS, exit 0. Self-bind receipt for this PR itself (OmniNode-ai/onex_change_control#6060), which + carries this ticket's own contract + receipt corrections per invariant I3 (OCC PRs validate against + their own in-tree contract/receipts). +exit_code: 0 +pr_number: 6060 +branch: "jonah/omn-15689-receipt-honesty-correction" +no_source_change: true