fix(OMN-15335): supersede two ${PR_NUMBER}/${REPO} template-placeholder self-binds

.onex_ratchets/omn_15382_rule_b_baseline.yaml

@@ -832,8 +832,6 @@ baseline:
   - "contracts/OMN-15323.yaml::occ-self-bind-pr-5302"
   - "contracts/OMN-15330.yaml::dod-OmniNode-ai-omnibase_infra-pr-2528"
   - "contracts/OMN-15330.yaml::occ-self-bind-pr-5303"
-  - "contracts/OMN-15335.yaml::occ-self-bind-pr-5364"
-  - "contracts/OMN-15335.yaml::occ-self-bind-pr-5376"
   - "contracts/OMN-15338.yaml::occ-self-bind-pr-5355"
   - "contracts/OMN-15340.yaml::dod-OmniNode-ai-omnibase_core-pr-1519"
   - "contracts/OMN-15340.yaml::occ-self-bind-pr-5366"

contracts/OMN-15335.yaml

@@ -46,3 +46,91 @@ dod_evidence:
     checks:
       - check_type: "command"
         check_value: "gh pr view 5391 --repo OmniNode-ai/onex_change_control --json number,state,headRefOid"
+  - id: "occ-self-bind-pr-5364-superseded"
+    description: >-
+      Append-only supersession of occ-self-bind-pr-5364. The original check_value (`gh pr view ${PR_NUMBER}
+      --repo ${REPO} --json number,state`) is a template-placeholder defect: PR_NUMBER/REPO are substituted
+      only for whichever onex_change_control PR is currently running the compliance gate, never for OCC#5364
+      itself, so the check can never verify what it claims (same class as the OMN-14888 D2 template-placeholder
+      repair precedent). Repaired with a hardcoded merged-terminal-state predicate against the real target:
+      OCC PR #5364, MERGED 2026-07-28T20:53:15Z, merge commit 9c9c932bd1389228c206ad91571bbd478722d40c
+      (confirmed live via `gh pr view 5364 --repo OmniNode-ai/onex_change_control --json state,mergedAt,mergeCommit`).
+      The superseded entry stays verbatim above for audit.
+    source: "manual"
+    status: "verified"
+    evidence_artifact: "supersedes_dod_evidence:occ-self-bind-pr-5364"
+    checks:
+      - check_type: "command"
+        check_value: >-
+          state="$(gh pr view 5364 --repo OmniNode-ai/onex_change_control --json state --jq .state)" &&
+          merge_sha="$(gh pr view 5364 --repo OmniNode-ai/onex_change_control --json mergeCommit --jq
+          .mergeCommit.oid)" && test "$state" = "MERGED" && test "$merge_sha" = "9c9c932bd1389228c206ad91571bbd478722d40c"
+          && printf 'OCC 5364 merged-terminal-state PASS\n'
+  - id: "occ-self-bind-pr-5376-superseded"
+    description: >-
+      Append-only supersession of occ-self-bind-pr-5376. Same template-class defect as occ-self-bind-pr-5364-superseded
+      above (check_value `gh pr view ${PR_NUMBER} --repo ${REPO} --json number,state`). Repaired with
+      a hardcoded merged-terminal-state predicate against the real target: OCC PR #5376, MERGED 2026-07-28T22:48:06Z,
+      merge commit 33bffbac24441c6d5193f1a669ec151205be0ed7 (confirmed live via `gh pr view 5376 --repo
+      OmniNode-ai/onex_change_control --json state,mergedAt,mergeCommit`). The superseded entry stays
+      verbatim above for audit.
+    source: "manual"
+    status: "verified"
+    evidence_artifact: "supersedes_dod_evidence:occ-self-bind-pr-5376"
+    checks:
+      - check_type: "command"
+        check_value: >-
+          state="$(gh pr view 5376 --repo OmniNode-ai/onex_change_control --json state --jq .state)" &&
+          merge_sha="$(gh pr view 5376 --repo OmniNode-ai/onex_change_control --json mergeCommit --jq
+          .mergeCommit.oid)" && test "$state" = "MERGED" && test "$merge_sha" = "33bffbac24441c6d5193f1a669ec151205be0ed7"
+          && printf 'OCC 5376 merged-terminal-state PASS\n'
+  - id: "dod-OmniNode-ai-omninode_infra-pr-738-content"
+    description: >-
+      Repairs dod-OmniNode-ai-omninode_infra-pr-738 and -pr-738-ci: both are self-referential `grep -q
+      '^status: PASS$' $CONTRACT_REPO_DIR/drift/dod_receipts/...` checks (INSIDE_OWN_DIFF per OMN-15309
+      -- they read back the receipt tree this same OCC PR authors). APPEND-ONLY: both originals stay verbatim.
+      Content-bound replacement: reads the actual merged omninode_infra#738 source at its merge commit
+      (61ecc5015b61ac1478331271ca5426a9e06510e4) -- tests/scripts/test_node_migration_ownership_precondition.py
+      defines test_node_loop_carries_the_ownership_precondition_gate, the regression test proving the
+      fail-closed ownership-precondition gate the ticket describes. Falsifiable: the file does not exist
+      at the merge commit's parent (294850e3c7e39a36da8d6fae60b8faa4a87063cc, confirmed 404 via direct
+      gh api call before authoring this receipt).
+    source: "manual"
+    status: "verified"
+    evidence_artifact: "supersedes_dod_evidence:dod-OmniNode-ai-omninode_infra-pr-738,dod-OmniNode-ai-omninode_infra-pr-738-ci"
+    checks:
+      - check_type: "command"
+        check_value: >-
+          body="$(gh api 'repos/OmniNode-ai/omninode_infra/contents/tests/scripts/test_node_migration_ownership_precondition.py?ref=61ecc5015b61ac1478331271ca5426a9e06510e4'
+          --jq .content | base64 -d)" && printf '%s' "$body" | grep -F 'def test_node_loop_carries_the_ownership_precondition_gate'
+  - id: "occ-self-bind-pr-5364-content"
+    description: >-
+      Repairs occ-self-bind-pr-5364-superseded: its replacement check_value is still bare `gh pr view`
+      (not `gh api`), so it remains INADMISSIBLE under the same OMN-15309 predicate it was written to
+      satisfy. APPEND-ONLY: the prior (still-broken) supersede stays verbatim above. Genuinely admissible
+      replacement: reads the OCC#5364 merge commit's git object directly via `gh api .../git/commits/<sha>`
+      (not `/pulls/<n>`, so it is outside the PR/issue-metadata deny pattern) and asserts its exact commit
+      message.
+    source: "manual"
+    status: "verified"
+    evidence_artifact: "supersedes_dod_evidence:occ-self-bind-pr-5364-superseded"
+    checks:
+      - check_type: "command"
+        check_value: >-
+          gh api repos/OmniNode-ai/onex_change_control/git/commits/9c9c932bd1389228c206ad91571bbd478722d40c
+          --jq .message | grep -F 'evidence(OMN-15335): OCC Evidence-Source autobind for OmniNode-ai/omninode_infra#738
+          (#5364)'
+  - id: "occ-self-bind-pr-5376-content"
+    description: >-
+      Repairs occ-self-bind-pr-5376-superseded: same still-bare-gh-pr-view defect as occ-self-bind-pr-5364-content
+      above. APPEND-ONLY: the prior (still-broken) supersede stays verbatim above. Genuinely admissible
+      replacement: reads the OCC#5376 merge commit's git object directly via `gh api .../git/commits/<sha>`.
+    source: "manual"
+    status: "verified"
+    evidence_artifact: "supersedes_dod_evidence:occ-self-bind-pr-5376-superseded"
+    checks:
+      - check_type: "command"
+        check_value: >-
+          gh api repos/OmniNode-ai/onex_change_control/git/commits/33bffbac24441c6d5193f1a669ec151205be0ed7
+          --jq .message | grep -F 'evidence(OMN-15335): OCC companion for OmniNode-ai/omninode_infra#740
+          (#5376)'

drift/dod_receipts/OMN-15335/dod-OmniNode-ai-omninode_infra-pr-738-content/command.yaml

@@ -0,0 +1,27 @@
+---
+schema_version: "1.0.0"
+ticket_id: "OMN-15335"
+evidence_item_id: "dod-OmniNode-ai-omninode_infra-pr-738-content"
+check_type: "command"
+check_value: >-
+  body="$(gh api 'repos/OmniNode-ai/omninode_infra/contents/tests/scripts/test_node_migration_ownership_precondition.py?ref=61ecc5015b61ac1478331271ca5426a9e06510e4'
+  --jq .content | base64 -d)" && printf '%s' "$body" | grep -F 'def test_node_loop_carries_the_ownership_precondition_gate'
+contract_sha256: "sha256:aff5ff9510315bd2a9ef892c8bcb4a6fbbda8ebfc202c653ac58dc1319e9f14b"
+contract_entry_sha256: "sha256:a01cc69471476c90754c5b048e5c3ffddafca232f5021d795bbbe8c5d35dcafb"
+status: PASS
+run_timestamp: "2026-08-23T18:41:00Z"
+commit_sha: "de732b5927ddfa8f47fb80f44a2c9890a1d730ff"
+runner: "manual"
+verifier: "gh-api-content-pinned"
+probe_command: >-
+  body="$(gh api 'repos/OmniNode-ai/omninode_infra/contents/tests/scripts/test_node_migration_ownership_precondition.py?ref=61ecc5015b61ac1478331271ca5426a9e06510e4'
+  --jq .content | base64 -d)" && printf '%s' "$body" | grep -F 'def test_node_loop_carries_the_ownership_precondition_gate'
+probe_stdout: |
+  def test_node_loop_carries_the_ownership_precondition_gate() -> None:
+actual_output: "PASS: tests/scripts/test_node_migration_ownership_precondition.py at omninode_infra#738's
+  merge commit (61ecc5015b61ac1478331271ca5426a9e06510e4) defines test_node_loop_carries_the_ownership_precondition_gate.
+  Falsifiability proven by direct execution before authoring: the file 404s at the merge commit's parent
+  (294850e3c7e39a36da8d6fae60b8faa4a87063cc)."
+exit_code: 0
+pr_number: 6602
+branch: "jonah/omn-15335-repair-self-bind-placeholders"

drift/dod_receipts/OMN-15335/occ-self-bind-pr-5364-content/command.yaml

@@ -0,0 +1,27 @@
+---
+schema_version: "1.0.0"
+ticket_id: "OMN-15335"
+evidence_item_id: "occ-self-bind-pr-5364-content"
+check_type: "command"
+check_value: >-
+  gh api repos/OmniNode-ai/onex_change_control/git/commits/9c9c932bd1389228c206ad91571bbd478722d40c --jq
+  .message | grep -F 'evidence(OMN-15335): OCC Evidence-Source autobind for OmniNode-ai/omninode_infra#738
+  (#5364)'
+contract_sha256: "sha256:aff5ff9510315bd2a9ef892c8bcb4a6fbbda8ebfc202c653ac58dc1319e9f14b"
+contract_entry_sha256: "sha256:c599b4efeea1a36a9442246c07af3a849565db7bca343d821a841eef5d536a15"
+status: PASS
+run_timestamp: "2026-08-23T18:41:00Z"
+commit_sha: "de732b5927ddfa8f47fb80f44a2c9890a1d730ff"
+runner: "manual"
+verifier: "gh-api-git-object"
+probe_command: >-
+  gh api repos/OmniNode-ai/onex_change_control/git/commits/9c9c932bd1389228c206ad91571bbd478722d40c --jq
+  .message | grep -F 'evidence(OMN-15335): OCC Evidence-Source autobind for OmniNode-ai/omninode_infra#738
+  (#5364)'
+probe_stdout: |
+  evidence(OMN-15335): OCC Evidence-Source autobind for OmniNode-ai/omninode_infra#738 (#5364)
+actual_output: "PASS: onex_change_control git commit object 9c9c932bd1389228c206ad91571bbd478722d40c (OCC#5364's
+  merge commit) is real and remote-reachable, with the exact expected commit message."
+exit_code: 0
+pr_number: 6602
+branch: "jonah/omn-15335-repair-self-bind-placeholders"

drift/dod_receipts/OMN-15335/occ-self-bind-pr-5364-superseded/command.yaml

@@ -0,0 +1,27 @@
+---
+schema_version: "1.0.0"
+ticket_id: "OMN-15335"
+evidence_item_id: "occ-self-bind-pr-5364-superseded"
+check_type: "command"
+check_value: >-
+  state="$(gh pr view 5364 --repo OmniNode-ai/onex_change_control --json state --jq .state)" && merge_sha="$(gh
+  pr view 5364 --repo OmniNode-ai/onex_change_control --json mergeCommit --jq .mergeCommit.oid)" && test
+  "$state" = "MERGED" && test "$merge_sha" = "9c9c932bd1389228c206ad91571bbd478722d40c" && printf 'OCC
+  5364 merged-terminal-state PASS\n'
+contract_entry_sha256: "sha256:b0e857ef314d15129862718fdfef16d2598fcc081b39316d717b41fbeb537eab"
+status: PASS
+run_timestamp: "2026-08-17T11:41:51Z"
+commit_sha: "843bb99406db61fb842857f297bafc2204020a0d"
+runner: "github-cli-live-readback"
+verifier: "claude-code-agent:flip-receipt-repairs"
+probe_command: >-
+  state="$(gh pr view 5364 --repo OmniNode-ai/onex_change_control --json state --jq .state)" && merge_sha="$(gh
+  pr view 5364 --repo OmniNode-ai/onex_change_control --json mergeCommit --jq .mergeCommit.oid)" && test
+  "$state" = "MERGED" && test "$merge_sha" = "9c9c932bd1389228c206ad91571bbd478722d40c" && printf 'OCC
+  5364 merged-terminal-state PASS\n'
+probe_stdout: |
+  OCC 5364 merged-terminal-state PASS
+actual_output: "PASS: OCC 5364 merged-terminal-state PASS (supersedes template-placeholder occ-self-bind-pr-5364)."
+exit_code: 0
+pr_number: 5364
+branch: "jonah/omn-15335-repair-self-bind-placeholders"

drift/dod_receipts/OMN-15335/occ-self-bind-pr-5376-content/command.yaml

@@ -0,0 +1,25 @@
+---
+schema_version: "1.0.0"
+ticket_id: "OMN-15335"
+evidence_item_id: "occ-self-bind-pr-5376-content"
+check_type: "command"
+check_value: >-
+  gh api repos/OmniNode-ai/onex_change_control/git/commits/33bffbac24441c6d5193f1a669ec151205be0ed7 --jq
+  .message | grep -F 'evidence(OMN-15335): OCC companion for OmniNode-ai/omninode_infra#740 (#5376)'
+contract_sha256: "sha256:aff5ff9510315bd2a9ef892c8bcb4a6fbbda8ebfc202c653ac58dc1319e9f14b"
+contract_entry_sha256: "sha256:3a8051dc05fb7fe71956d21a20968deb9c2618cb034e3ec15de78c428c716dc3"
+status: PASS
+run_timestamp: "2026-08-23T18:41:00Z"
+commit_sha: "de732b5927ddfa8f47fb80f44a2c9890a1d730ff"
+runner: "manual"
+verifier: "gh-api-git-object"
+probe_command: >-
+  gh api repos/OmniNode-ai/onex_change_control/git/commits/33bffbac24441c6d5193f1a669ec151205be0ed7 --jq
+  .message | grep -F 'evidence(OMN-15335): OCC companion for OmniNode-ai/omninode_infra#740 (#5376)'
+probe_stdout: |
+  evidence(OMN-15335): OCC companion for OmniNode-ai/omninode_infra#740 (#5376)
+actual_output: "PASS: onex_change_control git commit object 33bffbac24441c6d5193f1a669ec151205be0ed7 (OCC#5376's
+  merge commit) is real and remote-reachable, with the exact expected commit message."
+exit_code: 0
+pr_number: 6602
+branch: "jonah/omn-15335-repair-self-bind-placeholders"

drift/dod_receipts/OMN-15335/occ-self-bind-pr-5376-superseded/command.yaml

@@ -0,0 +1,27 @@
+---
+schema_version: "1.0.0"
+ticket_id: "OMN-15335"
+evidence_item_id: "occ-self-bind-pr-5376-superseded"
+check_type: "command"
+check_value: >-
+  state="$(gh pr view 5376 --repo OmniNode-ai/onex_change_control --json state --jq .state)" && merge_sha="$(gh
+  pr view 5376 --repo OmniNode-ai/onex_change_control --json mergeCommit --jq .mergeCommit.oid)" && test
+  "$state" = "MERGED" && test "$merge_sha" = "33bffbac24441c6d5193f1a669ec151205be0ed7" && printf 'OCC
+  5376 merged-terminal-state PASS\n'
+contract_entry_sha256: "sha256:7f98e49a170991ace21a065050aa52d2dfd6133d108ee60e15dc2420ed3d4966"
+status: PASS
+run_timestamp: "2026-08-17T11:41:51Z"
+commit_sha: "843bb99406db61fb842857f297bafc2204020a0d"
+runner: "github-cli-live-readback"
+verifier: "claude-code-agent:flip-receipt-repairs"
+probe_command: >-
+  state="$(gh pr view 5376 --repo OmniNode-ai/onex_change_control --json state --jq .state)" && merge_sha="$(gh
+  pr view 5376 --repo OmniNode-ai/onex_change_control --json mergeCommit --jq .mergeCommit.oid)" && test
+  "$state" = "MERGED" && test "$merge_sha" = "33bffbac24441c6d5193f1a669ec151205be0ed7" && printf 'OCC
+  5376 merged-terminal-state PASS\n'
+probe_stdout: |
+  OCC 5376 merged-terminal-state PASS
+actual_output: "PASS: OCC 5376 merged-terminal-state PASS (supersedes template-placeholder occ-self-bind-pr-5376)."
+exit_code: 0
+pr_number: 5376
+branch: "jonah/omn-15335-repair-self-bind-placeholders"