Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
54 changes: 54 additions & 0 deletions contracts/OMN-15718.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,54 @@
---
schema_version: "1.0.0"
ticket_id: "OMN-15718"
title: "OCC evidence for OMN-15718"
summary: >
Central OCC evidence for OmniNode-ai/omnibase_infra PR #2677.
is_seam_ticket: false
interface_change: false
interfaces_touched: []
evidence_requirements:
- kind: "ci"
description: "PR #2677 CI checks green"
command: "gh pr checks ${PR_NUMBER} --repo ${REPO}"
emergency_bypass:
enabled: false
justification: ""
follow_up_ticket_id: ""
dod_evidence:
- id: "dod-OmniNode-ai-omnibase_infra-pr-2677"
description: "PR #2677 on OmniNode-ai/omnibase_infra - exact-head compose timeout rollback repair."
source: "manual"
status: "verified"
checks:
- check_type: "command"
check_value: >-
gh pr view 2677 --repo OmniNode-ai/omnibase_infra --json number,state,headRefName,headRefOid,files
--jq 'if (.number == 2677 and .state == "OPEN" and .headRefName == "jonah/omn-15718-refresh-stability-lane-wait-timeout-rollback"
and .headRefOid == "72ebe67ac21004b09037da771ccd4ca35fa70ad3" and ([.files[].path] | sort) ==
["scripts/deploy-runtime.sh","scripts/runtime_build/compose_wait_timeout.sh","scripts/runtime_build/refresh_stability_lane.sh","tests/scripts/test_compose_wait_timeout.py","tests/scripts/test_deploy_runtime_compose_wait_timeout_wiring.py","tests/scripts/test_deploy_runtime_warmup_restore.py","tests/scripts/test_refresh_stability_lane_compose_wait_timeout_wiring.py"])
then "true" else error("unexpected #2677 state, head, or file set") end'
- id: "dod-occ-evidence-validator-pr-2677"
description: "Hosted OCC evidence admissibility validator for OMN-15718 / PR #2677."
source: "manual"
evidence_artifact: "supersedes_dod_evidence:dod-OmniNode-ai-omnibase_infra-pr-2677"
checks:
- check_type: "command"
check_value: "uv run pytest tests/test_evidence_admissibility.py -q"
- id: "occ-self-bind-pr-6151"
description: "OCC companion PR self-binding stamp for OMN-15718."
source: "manual"
evidence_artifact: "supersedes_dod_evidence:dod-occ-evidence-validator-pr-2677"
checks:
- check_type: "command"
check_value: >-
gh pr view 6151 --repo OmniNode-ai/onex_change_control --json number,state,headRefName,headRefOid
--jq 'if (.number == 6151 and .state == "OPEN" and .headRefName == "codex/omn-15718-occ-pr2677")
then "true" else error("unexpected OCC self-bind PR state") end'
- id: "dod-occ-evidence-admissibility-active-pr-6151"
description: "Active OCC evidence admissibility check for OMN-15718 companion PR #6151."
source: "manual"
status: "verified"
checks:
- check_type: "command"
check_value: "uv run pytest tests/test_evidence_admissibility.py -q"
Original file line number Diff line number Diff line change
@@ -0,0 +1,33 @@
---

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🗄️ Data Integrity & Integration | 🟠 Major | ⚡ Quick win

Move receipts to timestamp-named files.

The receipt locations violate the required <run_timestamp>.yaml filename format. The receipt gate can fail to discover these files.

  • drift/dod_receipts/OMN-15718/dod-OmniNode-ai-omnibase_infra-pr-2677/command.yaml#L1-L1: move to drift/dod_receipts/OMN-15718/dod-OmniNode-ai-omnibase_infra-pr-2677/2026-08-06T01:10:36Z.yaml.
  • drift/dod_receipts/OMN-15718/dod-occ-evidence-validator-pr-2677/command.yaml#L1-L1: move to drift/dod_receipts/OMN-15718/dod-occ-evidence-validator-pr-2677/2026-08-06T01:10:36Z.yaml.
  • drift/dod_receipts/OMN-15718/dod-occ-evidence-admissibility-active-pr-6151/command.yaml#L1-L1: move to drift/dod_receipts/OMN-15718/dod-occ-evidence-admissibility-active-pr-6151/2026-08-06T10:53:00Z.yaml.
  • drift/dod_receipts/OMN-15718/occ-self-bind-pr-6151/command.yaml#L1-L1: move to drift/dod_receipts/OMN-15718/occ-self-bind-pr-6151/2026-08-06T01:13:11Z.yaml.

As per coding guidelines, “Store DoD receipts only at drift/dod_receipts/<TICKET>/<ITEM_ID>/<run_timestamp>.yaml.”

📍 Affects 4 files
  • drift/dod_receipts/OMN-15718/dod-OmniNode-ai-omnibase_infra-pr-2677/command.yaml#L1-L1 (this comment)
  • drift/dod_receipts/OMN-15718/dod-occ-evidence-validator-pr-2677/command.yaml#L1-L1
  • drift/dod_receipts/OMN-15718/dod-occ-evidence-admissibility-active-pr-6151/command.yaml#L1-L1
  • drift/dod_receipts/OMN-15718/occ-self-bind-pr-6151/command.yaml#L1-L1
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In
`@drift/dod_receipts/OMN-15718/dod-OmniNode-ai-omnibase_infra-pr-2677/command.yaml`
at line 1, Rename the receipt files to the required timestamp-based names: move
drift/dod_receipts/OMN-15718/dod-OmniNode-ai-omnibase_infra-pr-2677/command.yaml
to 2026-08-06T01:10:36Z.yaml;
drift/dod_receipts/OMN-15718/dod-occ-evidence-validator-pr-2677/command.yaml to
2026-08-06T01:10:36Z.yaml;
drift/dod_receipts/OMN-15718/dod-occ-evidence-admissibility-active-pr-6151/command.yaml
to 2026-08-06T10:53:00Z.yaml; and
drift/dod_receipts/OMN-15718/occ-self-bind-pr-6151/command.yaml to
2026-08-06T01:13:11Z.yaml. No receipt content changes are required.

Source: Coding guidelines

schema_version: "1.0.0"
ticket_id: "OMN-15718"
evidence_item_id: "dod-OmniNode-ai-omnibase_infra-pr-2677"
check_type: "command"
check_value: >-
gh pr view 2677 --repo OmniNode-ai/omnibase_infra --json number,state,headRefName,headRefOid,files --jq
'if (.number == 2677 and .state == "OPEN" and .headRefName == "jonah/omn-15718-refresh-stability-lane-wait-timeout-rollback"
and .headRefOid == "72ebe67ac21004b09037da771ccd4ca35fa70ad3" and ([.files[].path] | sort) == ["scripts/deploy-runtime.sh","scripts/runtime_build/compose_wait_timeout.sh","scripts/runtime_build/refresh_stability_lane.sh","tests/scripts/test_compose_wait_timeout.py","tests/scripts/test_deploy_runtime_compose_wait_timeout_wiring.py","tests/scripts/test_deploy_runtime_warmup_restore.py","tests/scripts/test_refresh_stability_lane_compose_wait_timeout_wiring.py"])
then "true" else error("unexpected #2677 state, head, or file set") end'
contract_entry_sha256: "sha256:49bd2471ed1346a4ec77c77b33b240053442a0e8e4fd7b2858808806b8c93321"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🗄️ Data Integrity & Integration | 🟠 Major | ⚡ Quick win

Add the raw contract hash to every receipt.

Each receipt binds its individual entry but omits contract_sha256. Generate the SHA-256 from the final raw bytes of contracts/OMN-15718.yaml with omnibase_core.validation.validator_receipt_gate, then add the same contract_sha256 value to each receipt.

  • drift/dod_receipts/OMN-15718/dod-OmniNode-ai-omnibase_infra-pr-2677/command.yaml#L11-L11: add contract_sha256 adjacent to contract_entry_sha256.
  • drift/dod_receipts/OMN-15718/dod-occ-evidence-validator-pr-2677/command.yaml#L7-L7: add contract_sha256 adjacent to contract_entry_sha256.
  • drift/dod_receipts/OMN-15718/dod-occ-evidence-admissibility-active-pr-6151/command.yaml#L7-L7: add contract_sha256 adjacent to contract_entry_sha256.
  • drift/dod_receipts/OMN-15718/occ-self-bind-pr-6151/command.yaml#L10-L10: add contract_sha256 adjacent to contract_entry_sha256.

As per coding guidelines, “Bind contract_sha256 to the SHA-256 hash of the contract file's raw bytes and contract_entry_sha256 to the canonical-JSON per-entry hash.”

📍 Affects 4 files
  • drift/dod_receipts/OMN-15718/dod-OmniNode-ai-omnibase_infra-pr-2677/command.yaml#L11-L11 (this comment)
  • drift/dod_receipts/OMN-15718/dod-occ-evidence-validator-pr-2677/command.yaml#L7-L7
  • drift/dod_receipts/OMN-15718/dod-occ-evidence-admissibility-active-pr-6151/command.yaml#L7-L7
  • drift/dod_receipts/OMN-15718/occ-self-bind-pr-6151/command.yaml#L10-L10
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In
`@drift/dod_receipts/OMN-15718/dod-OmniNode-ai-omnibase_infra-pr-2677/command.yaml`
at line 11, Add the identical contract_sha256 value, computed from the final raw
bytes of contracts/OMN-15718.yaml using
omnibase_core.validation.validator_receipt_gate, adjacent to
contract_entry_sha256 in all four listed command.yaml files:
drift/dod_receipts/OMN-15718/dod-OmniNode-ai-omnibase_infra-pr-2677/command.yaml:11-11,
drift/dod_receipts/OMN-15718/dod-occ-evidence-validator-pr-2677/command.yaml:7-7,
drift/dod_receipts/OMN-15718/dod-occ-evidence-admissibility-active-pr-6151/command.yaml:7-7,
and drift/dod_receipts/OMN-15718/occ-self-bind-pr-6151/command.yaml:10-10.
Preserve contract_entry_sha256 as the canonical-JSON per-entry hash.

Source: Coding guidelines

status: "PASS"
run_timestamp: "2026-08-06T01:10:36Z"
commit_sha: "11dca9194e46f9a2e3e9669a6eeaf6399fa6a124"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🗄️ Data Integrity & Integration | 🟠 Major | ⚡ Quick win

Set commit_sha to the attested subject commit.

Line 14 records 11dca9194e46f9a2e3e9669a6eeaf6399fa6a124. Lines 8-10 attest PR #2677 head 72ebe67ac21004b09037da771ccd4ca35fa70ad3. Set commit_sha to that attested omnibase_infra head. Otherwise, consumers bind this receipt to an OCC commit instead of the validated source change.

Based on learnings, cross-repository DoD receipts must use the external subject PR head commit.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In
`@drift/dod_receipts/OMN-15718/dod-OmniNode-ai-omnibase_infra-pr-2677/command.yaml`
at line 14, Update the commit_sha field in the receipt to the attested
omnibase_infra PR `#2677` head commit from the attestation, replacing the current
OCC commit value.

Source: Learnings

runner: "codex-merge-sweep-0806"
verifier: "codex/manual-merge-sweep"
probe_command: >-
gh pr view 2677 --repo OmniNode-ai/omnibase_infra --json number,state,headRefName,headRefOid,files --jq
'if (.number == 2677 and .state == "OPEN" and .headRefName == "jonah/omn-15718-refresh-stability-lane-wait-timeout-rollback"
and .headRefOid == "72ebe67ac21004b09037da771ccd4ca35fa70ad3" and ([.files[].path] | sort) == ["scripts/deploy-runtime.sh","scripts/runtime_build/compose_wait_timeout.sh","scripts/runtime_build/refresh_stability_lane.sh","tests/scripts/test_compose_wait_timeout.py","tests/scripts/test_deploy_runtime_compose_wait_timeout_wiring.py","tests/scripts/test_deploy_runtime_warmup_restore.py","tests/scripts/test_refresh_stability_lane_compose_wait_timeout_wiring.py"])
then "true" else error("unexpected #2677 state, head, or file set") end'
probe_stdout: "true"
actual_output: >-
PASS, exit 0. Live GitHub readback for OmniNode-ai/omnibase_infra#2677 matched the exact open branch
jonah/omn-15718-refresh-stability-lane-wait-timeout-rollback, head 72ebe67ac21004b09037da771ccd4ca35fa70ad3,
and the expected seven-file change set. Focused product proof at that same head also passed: uv run
pytest tests/scripts/test_compose_wait_timeout.py tests/scripts/test_deploy_runtime_compose_wait_timeout_wiring.py
tests/scripts/test_deploy_runtime_warmup_restore.py tests/scripts/test_refresh_stability_lane_compose_wait_timeout_wiring.py
-q returned 40 passed, 3 warnings; pre-commit over the seven changed files also passed.
exit_code: 0
pr_number: 2677
branch: "jonah/omn-15718-refresh-stability-lane-wait-timeout-rollback"
no_source_change: true
Original file line number Diff line number Diff line change
@@ -0,0 +1,21 @@
---
schema_version: "1.0.0"
ticket_id: "OMN-15718"
evidence_item_id: "dod-occ-evidence-admissibility-active-pr-6151"
check_type: "command"
check_value: "uv run pytest tests/test_evidence_admissibility.py -q"
contract_entry_sha256: "sha256:4c56afaa9cfd3ce70e0b95ead81da4aa958ce71929faa13e667abaa37d6b05ea"
status: "PASS"
run_timestamp: "2026-08-06T10:53:00Z"
commit_sha: "75f9ede909220baea8cda33c5d7d16a8317deb41"
runner: "codex-merge-sweep-0806"
verifier: "codex/manual-merge-sweep"
probe_command: "uv run pytest tests/test_evidence_admissibility.py -q"
probe_stdout: "76 passed"
actual_output: >-
PASS, exit 0. OCC evidence admissibility suite passed locally from the OMN-15718 OCC worktree after
appending an active, non-superseding evidence item for companion PR #6151.
exit_code: 0
pr_number: 6151
branch: "codex/omn-15718-occ-pr2677"
no_source_change: true
Original file line number Diff line number Diff line change
@@ -0,0 +1,21 @@
---
schema_version: "1.0.0"
ticket_id: "OMN-15718"
evidence_item_id: "dod-occ-evidence-validator-pr-2677"
check_type: "command"
check_value: "uv run pytest tests/test_evidence_admissibility.py -q"
contract_entry_sha256: "sha256:8a2960a69db3c92c87f4c7b266fda453e63996c99ef363e16568fa1bbcc49605"
status: "PASS"
run_timestamp: "2026-08-06T01:10:36Z"
commit_sha: "11dca9194e46f9a2e3e9669a6eeaf6399fa6a124"
runner: "codex-merge-sweep-0806"
verifier: "codex/manual-merge-sweep"
probe_command: "uv run pytest tests/test_evidence_admissibility.py -q"
probe_stdout: "76 passed"
actual_output: >-
PASS, exit 0. OCC evidence admissibility suite passed locally from the OMN-15718 OCC worktree after
adding the central contract and receipts for OmniNode-ai/omnibase_infra#2677.
exit_code: 0
pr_number: 2677
branch: "jonah/omn-15718-refresh-stability-lane-wait-timeout-rollback"
no_source_change: true
28 changes: 28 additions & 0 deletions drift/dod_receipts/OMN-15718/occ-self-bind-pr-6151/command.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,28 @@
---
schema_version: "1.0.0"
ticket_id: "OMN-15718"
evidence_item_id: "occ-self-bind-pr-6151"
check_type: "command"
check_value: >-
gh pr view 6151 --repo OmniNode-ai/onex_change_control --json number,state,headRefName,headRefOid --jq
'if (.number == 6151 and .state == "OPEN" and .headRefName == "codex/omn-15718-occ-pr2677") then "true"
else error("unexpected OCC self-bind PR state") end'
contract_entry_sha256: "sha256:7359f78c7cf76b05aa9657986732a0ca47aaf13b9d0c9add9e38461c8f65db1a"
status: "PASS"
run_timestamp: "2026-08-06T01:13:11Z"
commit_sha: "47a85df5a921767ed802796c1c83cbc7fcd810be"
runner: "codex-merge-sweep-0806"
verifier: "codex/manual-merge-sweep"
probe_command: >-
gh pr view 6151 --repo OmniNode-ai/onex_change_control --json number,state,headRefName,headRefOid --jq
'if (.number == 6151 and .state == "OPEN" and .headRefName == "codex/omn-15718-occ-pr2677") then "true"
else error("unexpected OCC self-bind PR state") end'
probe_stdout: "true"
actual_output: >-
PASS, exit 0. Binding stamp only: OCC evidence PR #6151 resolves on OmniNode-ai/onex_change_control
as an open PR from branch codex/omn-15718-occ-pr2677. This receipt adjudicates no product behavior beyond
proving the companion PR identity for receipt-gate binding.
exit_code: 0
pr_number: 6151
branch: "codex/omn-15718-occ-pr2677"
no_source_change: true
Loading