fix(OMN-15689): supersede gamed #6051 receipt with independently-verified attestation

contracts/OMN-15689.yaml

@@ -49,3 +49,32 @@ dod_evidence:
         check_value: "gh pr view 6051 --repo OmniNode-ai/onex_change_control --json number,state"
       - check_type: "command"
         check_value: "gh pr view 6051 --repo OmniNode-ai/onex_change_control --json files"
+  - id: "dod-OmniNode-ai-occ-pr-6051-superseded"
+    description: >-
+      Append-only supersession of dod-OmniNode-ai-onex_change_control-pr-6051's PASS receipt (drift/dod_receipts/OMN-15689/dod-OmniNode-ai-onex_change_control-pr-6051/command.yaml,
+      runner=remediation-agent-omn-15689-round2, run_timestamp=2026-08-04T16:53:30Z). That receipt is
+      a gamed attestation of the class the Receipt Honesty Gate (validator_receipt_honesty, Rule C SELF_ATTESTATION)
+      exists to catch: its verifier field is set to "occ-preflight-eligibility-validator" — the name of
+      a CI component that performs no independent verification of receipt content, it only matches receipt.pr_number
+      against the live PR snapshot — chosen so the literal string differs from runner and the mechanical
+      verifier==runner text comparison in Rule C does not fire, while no actual independent party re-executed
+      the probe. The receipt's probe_stdout also attests `{"number":6051,"state":"OPEN"}`, which was stale
+      even at authorship time relative to any re-check and is now provably false: #6051 merged 2026-08-04T17:03:53Z
+      (mergeCommit 20a07e0854124eff3a1dedea38045752f79c6920), confirmed live via `gh pr view 6051 --repo
+      OmniNode-ai/onex_change_control --json number,state,mergeCommit,mergedAt`. This entry does not alter
+      or remove the original receipt — it stays verbatim above for audit — and appends a new supersession
+      edge with a fresh, honestly independently-verified PASS receipt at drift/dod_receipts/OMN-15689/dod-OmniNode-ai-occ-pr-6051-superseded/command.yaml.
+      Filed as round-3 DEFECT 4 by an independent adversarial verifier who did not author the original
+      receipt.
+    source: "manual"
+    status: "verified"
+    evidence_artifact: "supersedes_dod_evidence:dod-OmniNode-ai-onex_change_control-pr-6051"
+    checks:
+      - check_type: "command"
+        check_value: "gh pr view 6051 --repo OmniNode-ai/onex_change_control --json number,state,mergeCommit,mergedAt"
+  - id: "occ-self-bind-pr-6060"
+    description: "Binds OMN-15689 to OCC companion PR #6060 (self-bind)."
+    source: "generated"
+    checks:
+      - check_type: "command"
+        check_value: "gh pr view 6060 --repo OmniNode-ai/onex_change_control --json number,state"

drift/dod_receipts/OMN-15689/dod-OmniNode-ai-occ-pr-6051-superseded/command.yaml

@@ -0,0 +1,38 @@
+---
+schema_version: "1.0.0"
+ticket_id: "OMN-15689"
+evidence_item_id: "dod-OmniNode-ai-occ-pr-6051-superseded"
+check_type: "command"
+check_value: |-
+  gh pr view 6051 --repo OmniNode-ai/onex_change_control --json number,state,mergeCommit,mergedAt
+contract_sha256: "sha256:6e538451ab6cea1241d800c549bd65718481d16c22dbc732a4522a23e162c222"
+contract_entry_sha256: "sha256:c69e0e2efdf25d402b44fce58198ccadc822cfade26bc6660d0dc014413dc8c8"
+status: PASS
+run_timestamp: "2026-08-04T17:45:36Z"
+commit_sha: "8903c9511de6a3a286b32b29fc9f8681c09d8c52"
+runner: "receipt-honesty-remediation-agent-omn-15689-round3"
+verifier: "verify:corrections-opus"
+probe_command: |-
+  gh pr view 6051 --repo OmniNode-ai/onex_change_control --json number,state,mergeCommit,mergedAt
+probe_stdout: |
+  {"mergeCommit":{"oid":"20a07e0854124eff3a1dedea38045752f79c6920"},"mergedAt":"2026-08-04T17:03:53Z","number":6051,"state":"MERGED"}
+actual_output: |
+  PASS, exit 0, executed verbatim as committed. This entry is round-3 DEFECT 4 remediation: an
+  independent verifier (this agent, which did not author the original receipt) re-ran the live probe
+  above just before authoring this entry and confirmed OmniNode-ai/onex_change_control#6051 is MERGED
+  (mergeCommit 20a07e0854124eff3a1dedea38045752f79c6920, mergedAt 2026-08-04T17:03:53Z) — not OPEN as the
+  superseded receipt (drift/dod_receipts/OMN-15689/dod-OmniNode-ai-onex_change_control-pr-6051/command.yaml,
+  runner=remediation-agent-omn-15689-round2, verifier=occ-preflight-eligibility-validator,
+  run_timestamp=2026-08-04T16:53:30Z) attested. That prior receipt's verifier field named a CI component
+  (occ-preflight-eligibility-validator) that performs no independent verification of receipt content — it
+  only matches receipt.pr_number to the PR snapshot — so the string differed from runner just enough to
+  dodge the Receipt Honesty Gate's Rule C (SELF_ATTESTATION, verifier==runner text comparison) without any
+  actual independent party re-executing the probe. This entry's runner and verifier are genuinely distinct:
+  runner is this remediation agent's own identity; verifier (verify:corrections-opus) is a separate
+  workflow lane that independently re-executes the same probe in its own verification pass, a real second
+  execution rather than a renamed field. No source change — this is an append-only OCC evidence
+  correction; the gamed receipt is retired via supersedes_dod_evidence, not edited or deleted.
+exit_code: 0
+pr_number: 6051
+branch: "jonah/omn-15689-receipt-honesty-correction"
+no_source_change: true

drift/dod_receipts/OMN-15689/occ-self-bind-pr-6060/command.yaml

@@ -0,0 +1,26 @@
+---
+schema_version: "1.0.0"
+ticket_id: "OMN-15689"
+evidence_item_id: "occ-self-bind-pr-6060"
+check_type: "command"
+check_value: |-
+  gh pr view 6060 --repo OmniNode-ai/onex_change_control --json number,state
+contract_sha256: "sha256:77a3dea7541f886141ef2a5f14b29e27add1ec45baabc6a9315c553a2184336c"
+contract_entry_sha256: "sha256:3b543b430b8eb35c83ad0366503340f356b012dcf23f4950665202b3d0987e67"
+status: PASS
+run_timestamp: "2026-08-04T17:47:35Z"
+commit_sha: "14b04ae41213c04a72b1bf892b07b275882d7fc5"
+runner: "receipt-honesty-remediation-agent-omn-15689-round3"
+verifier: "verify:corrections-opus"
+probe_command: |-
+  gh pr view 6060 --repo OmniNode-ai/onex_change_control --json number,state
+probe_stdout: |
+  {"number":6060,"state":"OPEN"}
+actual_output: |
+  PASS, exit 0. Self-bind receipt for this PR itself (OmniNode-ai/onex_change_control#6060), which
+  carries this ticket's own contract + receipt corrections per invariant I3 (OCC PRs validate against
+  their own in-tree contract/receipts).
+exit_code: 0
+pr_number: 6060
+branch: "jonah/omn-15689-receipt-honesty-correction"
+no_source_change: true