Skip to content

evidence(OMN-15718): OCC companion for OmniNode-ai/omnibase_infra#2677 - #6151

Merged
jonahgabriel merged 4 commits into
devfrom
codex/omn-15718-occ-pr2677
Aug 7, 2026
Merged

jonahgabriel merged 4 commits into
devfrom
codex/omn-15718-occ-pr2677

Conversation

@jonahgabriel

@jonahgabriel jonahgabriel commented Aug 6, 2026 •

Copy link
Copy Markdown
Contributor

Central OCC companion for OMN-15718 / OmniNode-ai/omnibase_infra#2677.\n\nEvidence-Ticket: OMN-15718\nEvidence-Source: OmniNode-ai/omnibase_infra#2677\n\nLocal verification:\n- uv run pytest tests/test_evidence_admissibility.py -q (76 passed)\n- pre-commit run --files contracts/OMN-15718.yaml drift/dod_receipts/OMN-15718/dod-OmniNode-ai-omnibase_infra-pr-2677/command.yaml drift/dod_receipts/OMN-15718/dod-occ-evidence-validator-pr-2677/command.yaml (passed)

Summary by CodeRabbit

  • Documentation
    • Added comprehensive evidence documentation for the OMN-15718 change.
    • Recorded validation details for source integrity, admissibility, branch and commit alignment, and expected file changes.
    • Documented successful automated checks, including 76 passing tests and confirmation that verification introduced no source changes.
  • Chores
    • Added auditable verification receipts with execution results, metadata, timestamps, and status information.

@coderabbitai

coderabbitai Bot commented Aug 6, 2026 •

Copy link
Copy Markdown

Review Change Stack

📝 Walkthrough

Walkthrough

The PR adds the OMN-15718 OCC evidence manifest and four passing command receipts. The checks validate PR #2677, evidence admissibility, and self-binding PR #6151. Emergency bypass remains disabled, and no source files change.

Changes

OMN-15718 evidence

Layer / File(s) Summary
Evidence contract
contracts/OMN-15718.yaml
Defines ticket metadata, CI requirements, exact PR #2677 state, branch, commit, file set, evidence admissibility, and self-binding PR #6151 checks.
Source PR validation
drift/dod_receipts/OMN-15718/dod-OmniNode-ai-omnibase_infra-pr-2677/command.yaml, drift/dod_receipts/OMN-15718/dod-occ-evidence-validator-pr-2677/command.yaml
Records passing validation, test, pre-commit, provenance, and no-source-change results for PR #2677.
Admissibility and self-binding
drift/dod_receipts/OMN-15718/dod-occ-evidence-admissibility-active-pr-6151/command.yaml, drift/dod_receipts/OMN-15718/occ-self-bind-pr-6151/command.yaml
Records passing evidence-admissibility and open-branch self-binding checks for PR #6151.

Estimated code review effort: 2 (Simple) | ~15 minutes

Possibly related PRs

Suggested labels: occ:machine-minted

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly identifies the OCC evidence companion and the associated omnibase_infra PR.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch codex/omn-15718-occ-pr2677

Comment @coderabbitai help to get the list of available commands.

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 3

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In
`@drift/dod_receipts/OMN-15718/dod-OmniNode-ai-omnibase_infra-pr-2677/command.yaml`:
- Line 14: Update the commit_sha field in the receipt to the attested
omnibase_infra PR `#2677` head commit from the attestation, replacing the current
OCC commit value.
- Line 11: Add the identical contract_sha256 value, computed from the final raw
bytes of contracts/OMN-15718.yaml using
omnibase_core.validation.validator_receipt_gate, adjacent to
contract_entry_sha256 in all four listed command.yaml files:
drift/dod_receipts/OMN-15718/dod-OmniNode-ai-omnibase_infra-pr-2677/command.yaml:11-11,
drift/dod_receipts/OMN-15718/dod-occ-evidence-validator-pr-2677/command.yaml:7-7,
drift/dod_receipts/OMN-15718/dod-occ-evidence-admissibility-active-pr-6151/command.yaml:7-7,
and drift/dod_receipts/OMN-15718/occ-self-bind-pr-6151/command.yaml:10-10.
Preserve contract_entry_sha256 as the canonical-JSON per-entry hash.
- Line 1: Rename the receipt files to the required timestamp-based names: move
drift/dod_receipts/OMN-15718/dod-OmniNode-ai-omnibase_infra-pr-2677/command.yaml
to 2026-08-06T01:10:36Z.yaml;
drift/dod_receipts/OMN-15718/dod-occ-evidence-validator-pr-2677/command.yaml to
2026-08-06T01:10:36Z.yaml;
drift/dod_receipts/OMN-15718/dod-occ-evidence-admissibility-active-pr-6151/command.yaml
to 2026-08-06T10:53:00Z.yaml; and
drift/dod_receipts/OMN-15718/occ-self-bind-pr-6151/command.yaml to
2026-08-06T01:13:11Z.yaml. No receipt content changes are required.
🪄 Autofix

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 5462a32d-5f45-4f78-83f7-3149e7911c2d

📥 Commits

Reviewing files that changed from the base of the PR and between 11dca91 and 5ca9fd8.

📒 Files selected for processing (5)
  • contracts/OMN-15718.yaml
  • drift/dod_receipts/OMN-15718/dod-OmniNode-ai-omnibase_infra-pr-2677/command.yaml
  • drift/dod_receipts/OMN-15718/dod-occ-evidence-admissibility-active-pr-6151/command.yaml
  • drift/dod_receipts/OMN-15718/dod-occ-evidence-validator-pr-2677/command.yaml
  • drift/dod_receipts/OMN-15718/occ-self-bind-pr-6151/command.yaml

@@ -0,0 +1,33 @@
---

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🗄️ Data Integrity & Integration | 🟠 Major | ⚡ Quick win

Move receipts to timestamp-named files.

The receipt locations violate the required <run_timestamp>.yaml filename format. The receipt gate can fail to discover these files.

  • drift/dod_receipts/OMN-15718/dod-OmniNode-ai-omnibase_infra-pr-2677/command.yaml#L1-L1: move to drift/dod_receipts/OMN-15718/dod-OmniNode-ai-omnibase_infra-pr-2677/2026-08-06T01:10:36Z.yaml.
  • drift/dod_receipts/OMN-15718/dod-occ-evidence-validator-pr-2677/command.yaml#L1-L1: move to drift/dod_receipts/OMN-15718/dod-occ-evidence-validator-pr-2677/2026-08-06T01:10:36Z.yaml.
  • drift/dod_receipts/OMN-15718/dod-occ-evidence-admissibility-active-pr-6151/command.yaml#L1-L1: move to drift/dod_receipts/OMN-15718/dod-occ-evidence-admissibility-active-pr-6151/2026-08-06T10:53:00Z.yaml.
  • drift/dod_receipts/OMN-15718/occ-self-bind-pr-6151/command.yaml#L1-L1: move to drift/dod_receipts/OMN-15718/occ-self-bind-pr-6151/2026-08-06T01:13:11Z.yaml.

As per coding guidelines, “Store DoD receipts only at drift/dod_receipts/<TICKET>/<ITEM_ID>/<run_timestamp>.yaml.”

📍 Affects 4 files
  • drift/dod_receipts/OMN-15718/dod-OmniNode-ai-omnibase_infra-pr-2677/command.yaml#L1-L1 (this comment)
  • drift/dod_receipts/OMN-15718/dod-occ-evidence-validator-pr-2677/command.yaml#L1-L1
  • drift/dod_receipts/OMN-15718/dod-occ-evidence-admissibility-active-pr-6151/command.yaml#L1-L1
  • drift/dod_receipts/OMN-15718/occ-self-bind-pr-6151/command.yaml#L1-L1
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In
`@drift/dod_receipts/OMN-15718/dod-OmniNode-ai-omnibase_infra-pr-2677/command.yaml`
at line 1, Rename the receipt files to the required timestamp-based names: move
drift/dod_receipts/OMN-15718/dod-OmniNode-ai-omnibase_infra-pr-2677/command.yaml
to 2026-08-06T01:10:36Z.yaml;
drift/dod_receipts/OMN-15718/dod-occ-evidence-validator-pr-2677/command.yaml to
2026-08-06T01:10:36Z.yaml;
drift/dod_receipts/OMN-15718/dod-occ-evidence-admissibility-active-pr-6151/command.yaml
to 2026-08-06T10:53:00Z.yaml; and
drift/dod_receipts/OMN-15718/occ-self-bind-pr-6151/command.yaml to
2026-08-06T01:13:11Z.yaml. No receipt content changes are required.

Source: Coding guidelines

'if (.number == 2677 and .state == "OPEN" and .headRefName == "jonah/omn-15718-refresh-stability-lane-wait-timeout-rollback"
and .headRefOid == "72ebe67ac21004b09037da771ccd4ca35fa70ad3" and ([.files[].path] | sort) == ["scripts/deploy-runtime.sh","scripts/runtime_build/compose_wait_timeout.sh","scripts/runtime_build/refresh_stability_lane.sh","tests/scripts/test_compose_wait_timeout.py","tests/scripts/test_deploy_runtime_compose_wait_timeout_wiring.py","tests/scripts/test_deploy_runtime_warmup_restore.py","tests/scripts/test_refresh_stability_lane_compose_wait_timeout_wiring.py"])
then "true" else error("unexpected #2677 state, head, or file set") end'
contract_entry_sha256: "sha256:49bd2471ed1346a4ec77c77b33b240053442a0e8e4fd7b2858808806b8c93321"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🗄️ Data Integrity & Integration | 🟠 Major | ⚡ Quick win

Add the raw contract hash to every receipt.

Each receipt binds its individual entry but omits contract_sha256. Generate the SHA-256 from the final raw bytes of contracts/OMN-15718.yaml with omnibase_core.validation.validator_receipt_gate, then add the same contract_sha256 value to each receipt.

  • drift/dod_receipts/OMN-15718/dod-OmniNode-ai-omnibase_infra-pr-2677/command.yaml#L11-L11: add contract_sha256 adjacent to contract_entry_sha256.
  • drift/dod_receipts/OMN-15718/dod-occ-evidence-validator-pr-2677/command.yaml#L7-L7: add contract_sha256 adjacent to contract_entry_sha256.
  • drift/dod_receipts/OMN-15718/dod-occ-evidence-admissibility-active-pr-6151/command.yaml#L7-L7: add contract_sha256 adjacent to contract_entry_sha256.
  • drift/dod_receipts/OMN-15718/occ-self-bind-pr-6151/command.yaml#L10-L10: add contract_sha256 adjacent to contract_entry_sha256.

As per coding guidelines, “Bind contract_sha256 to the SHA-256 hash of the contract file's raw bytes and contract_entry_sha256 to the canonical-JSON per-entry hash.”

📍 Affects 4 files
  • drift/dod_receipts/OMN-15718/dod-OmniNode-ai-omnibase_infra-pr-2677/command.yaml#L11-L11 (this comment)
  • drift/dod_receipts/OMN-15718/dod-occ-evidence-validator-pr-2677/command.yaml#L7-L7
  • drift/dod_receipts/OMN-15718/dod-occ-evidence-admissibility-active-pr-6151/command.yaml#L7-L7
  • drift/dod_receipts/OMN-15718/occ-self-bind-pr-6151/command.yaml#L10-L10
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In
`@drift/dod_receipts/OMN-15718/dod-OmniNode-ai-omnibase_infra-pr-2677/command.yaml`
at line 11, Add the identical contract_sha256 value, computed from the final raw
bytes of contracts/OMN-15718.yaml using
omnibase_core.validation.validator_receipt_gate, adjacent to
contract_entry_sha256 in all four listed command.yaml files:
drift/dod_receipts/OMN-15718/dod-OmniNode-ai-omnibase_infra-pr-2677/command.yaml:11-11,
drift/dod_receipts/OMN-15718/dod-occ-evidence-validator-pr-2677/command.yaml:7-7,
drift/dod_receipts/OMN-15718/dod-occ-evidence-admissibility-active-pr-6151/command.yaml:7-7,
and drift/dod_receipts/OMN-15718/occ-self-bind-pr-6151/command.yaml:10-10.
Preserve contract_entry_sha256 as the canonical-JSON per-entry hash.

Source: Coding guidelines

contract_entry_sha256: "sha256:49bd2471ed1346a4ec77c77b33b240053442a0e8e4fd7b2858808806b8c93321"
status: "PASS"
run_timestamp: "2026-08-06T01:10:36Z"
commit_sha: "11dca9194e46f9a2e3e9669a6eeaf6399fa6a124"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🗄️ Data Integrity & Integration | 🟠 Major | ⚡ Quick win

Set commit_sha to the attested subject commit.

Line 14 records 11dca9194e46f9a2e3e9669a6eeaf6399fa6a124. Lines 8-10 attest PR #2677 head 72ebe67ac21004b09037da771ccd4ca35fa70ad3. Set commit_sha to that attested omnibase_infra head. Otherwise, consumers bind this receipt to an OCC commit instead of the validated source change.

Based on learnings, cross-repository DoD receipts must use the external subject PR head commit.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In
`@drift/dod_receipts/OMN-15718/dod-OmniNode-ai-omnibase_infra-pr-2677/command.yaml`
at line 14, Update the commit_sha field in the receipt to the attested
omnibase_infra PR `#2677` head commit from the attestation, replacing the current
OCC commit value.

Source: Learnings

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant