Verify retained production acceptance evidence - #287
Merged
Conversation
abrichr
added a commit
that referenced
this pull request
Aug 19, 2026
A stacked pull request got zero checks and still reported mergeStateStatus CLEAN. PR #287 targets codex/production-evidence-contract, so the branches: [main] filter on pull_request never matched and no workflow ran. An unverified pull request thus looks the same as a passing one, which is how an untested change reaches main. Remove the base-branch filter from the three pull_request triggers. The push trigger keeps branches: [main]. complex-visual and evidence-freshness keep their paths filters, so the added cost is limited to a stacked pull request that touches those paths. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
abrichr
force-pushed
the
codex/verified-production-acceptance-import
branch
from
August 19, 2026 21:45
08a066c to
fe78194
Compare
…ed evidence - Rename the shared signer field to evidence_runner_signer_sha256 across the importer, derived-result bindings, fixtures, tests, and docs so the identity grammar matches Cloud evidence v2. - Bind campaign-outcomes and oracle-contract digests plus validated task, condition, required-trial, and observed-trial counts into the derived result; report task and condition identities as campaign-scoped hashes and keep all eleven failure-taxonomy counts. - Add a pure, I/O-free builder and validator for the closed openadapt.production-acceptance/v1 manifest with a fixed target->claim scope map, two separate policy digests, and a Flow lifecycle release verifier that binds raw policy bytes, the exact commit URL, and one sorted PyPI sdist+wheel into an immutable verified-release object. - Cloud stays fail-closed until a reviewed deployment-manifest binding exists; other targets refuse without their own evidence adapter. - Export/import of real evidence stays disabled. Tests: 265 focused (acceptance importer + evidence freshness) pass; full CI suite 2410 passed, 56 skipped; ruff, source-boundary check, and git diff --check pass. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
abrichr
force-pushed
the
codex/verified-production-acceptance-import
branch
from
August 19, 2026 21:50
fe78194 to
d8e0d4f
Compare
abrichr
marked this pull request as ready for review
August 19, 2026 21:50
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What changed
Why
The public acceptance record contains only remote-safe digests, bounded counts, and signer provenance. Evals must not trust those counts or let the evidence authorize itself. It must derive the result from the complete retained campaign under an external trust root.
This is a stacked draft on PR #286. It contains only the verifier delta above
codex/production-evidence-contract.Validation
git diff --checkpasses.openadapt_mlor local demo fixtures.Current boundary
No private export is enabled. The importer fails closed before it reads an admission or campaign until the exact export contract receives approval.