omninode-memory 0.18.6__tar.gz → 0.18.7__tar.gz

{omninode_memory-0.18.6 → omninode_memory-0.18.7}/.github/required-checks.yaml

@@ -20,11 +20,13 @@ required_checks:
   - name: "pr-title / check-title"
     workflow: pr-title-check.yml
     job_id: pr-title
-    producer_kind: local
+    producer_kind: cross_repo
+    cross_repo_ref: "OmniNode-ai/omnibase_core/.github/workflows/pr-title-check.yml@6d562b13401684270453f1dedd22f8737110f2f2"
     conditional: false
     rationale: >-
-      PR title ticket-reference check: the job runs omnimarket's
-      node_pr_title_check_compute from a pinned omnimarket release (OMN-20997).
+      PR title ticket-reference check: omnibase_core's reusable runs omnimarket's
+      node_pr_title_check_compute from a pinned omnimarket release (OMN-20997);
+      the job pr-title calls it with only the omnimarket version (OMN-17427).
 
   # -- Phase 1: Quick Validation (parallel, ~2-5 min) -------------------------
 

{omninode_memory-0.18.6 → omninode_memory-0.18.7}/.github/workflows/call-reject-skip.yml

@@ -28,5 +28,5 @@ permissions:
 
 jobs:
   call-reject-skip-token:
-    uses: OmniNode-ai/omniclaude/.github/workflows/reject-deploy-gate-skip.yml@e9b550b6be0a8e648ea83f9ed7f5fb8175ae1aaf
+    uses: OmniNode-ai/omniclaude/.github/workflows/reject-deploy-gate-skip.yml@b6ca3729f2a9b70ae6518a8c46d08f3c1ebb8c60
     secrets: inherit

{omninode_memory-0.18.6 → omninode_memory-0.18.7}/.github/workflows/check-handshake.yml

@@ -28,8 +28,8 @@ jobs:
         uses: actions/checkout@v7
         with:
           repository: OmniNode-ai/omnibase_core
-                                                                                # Auto-bumped by omnibase_core publish-downstream-pin-bump.yml to c880801d4dee.
-          ref: c880801d4deeaa1627535c8622ab6c4ab8cfbecd
+                                                                                # Auto-bumped by omnibase_core publish-downstream-pin-bump.yml to 9b083ad32228.
+          ref: 9b083ad32228f078aecfc47f9c71155656b47fae
           path: omnibase_core
 
       - name: Verify omnibase_core checkout

{omninode_memory-0.18.6 → omninode_memory-0.18.7}/.github/workflows/ci.yml

@@ -783,7 +783,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     env:
-      CANONICAL_FILE_SHAPE_CORE: "omnibase-core @ git+https://github.com/OmniNode-ai/omnibase_core@031148215620031436cba30619bbae67c0bb38ad"
+      CANONICAL_FILE_SHAPE_CORE: "omnibase-core @ git+https://github.com/OmniNode-ai/omnibase_core@dev-20261023085853-9d65b648bff5"
     steps:
       - name: Checkout code
         uses: actions/checkout@v7

omninode_memory-0.18.7/.github/workflows/dev-merge-tag.yml

@@ -0,0 +1,113 @@
+# SPDX-FileCopyrightText: 2026 OmniNode.ai Inc.
+# SPDX-License-Identifier: MIT
+#
+# dev-merge-tag.yml (OMN-19998)
+#
+# Every push to dev gets a lightweight tag dev-<UTC YYYYMMDDHHMMSS>-<sha12> on
+# the pushed commit. omnimemory is a sibling consumed by omnimarket: a
+# consumer can read it through a uv git source pinned to one of these tags
+# instead of waiting for a PyPI release, and a release is cut only when an
+# outside user needs one (RULING 2026-10-16T09:35:49Z). The tag is made here
+# so that it exists for every dev merge without anyone remembering to cut it.
+# Same mechanism as omnimarket's and omnibase_infra's dev-merge-tag.yml.
+#
+# The timestamp is the commit's committer time in UTC, not the run's clock, so
+# a rerun for the same commit computes the same name. The step is idempotent on
+# the sha: when any dev-*-<sha12> tag already exists on the remote it pushes
+# nothing. Names sort by time, so the newest tag is the last in a plain sort.
+#
+# No tag on main, on a pull request branch or on any other ref: the trigger is
+# `push` to `dev` only and the job repeats that check.
+#
+# The push uses the job's workflow token on purpose. A tag pushed with that
+# token starts no workflow, and nothing should start from a dev-* tag:
+# consumers read the tags by polling, and `release.yml` only listens for v*
+# tags. A dev merge therefore cannot fan out into extra runs.
+#
+# tests/ci/test_dev_merge_tag_workflow_omn19998.py runs the tag step below
+# against a throwaway repository and pins the name, idempotency and dry run.
+name: Dev Merge Tag
+
+on:
+  push:
+    branches: [dev]
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.sha }}
+  cancel-in-progress: false
+
+jobs:
+  dev-merge-tag:
+    if: github.ref == 'refs/heads/dev'
+    # GitHub-hosted by literal: this is a public repository and CI runners are
+    # for private repositories only (RULING 2026-10-16T07:07:09Z, OMN-19998).
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          fetch-depth: 1
+
+      - name: Create the dev merge tag
+        id: tag
+        env:
+          SHA: ${{ github.sha }}
+          DRY_RUN: 'false'
+        run: |
+          set -euo pipefail
+
+          if ! [[ "${SHA}" =~ ^[0-9a-f]{40}$ ]]; then
+            echo "::error::not a full commit sha: '${SHA}'"
+            exit 1
+          fi
+          SHA12="${SHA:0:12}"
+
+          STAMP=$(TZ=UTC0 git log -1 --format=%cd --date=format-local:%Y%m%d%H%M%S "${SHA}")
+          TAG="dev-${STAMP}-${SHA12}"
+
+          emit() {
+            if [ -n "${GITHUB_OUTPUT:-}" ]; then
+              printf 'tag=%s\ncreated=%s\n' "$1" "$2" >> "${GITHUB_OUTPUT}"
+            fi
+          }
+
+          EXISTING=$(git ls-remote --tags origin 'refs/tags/dev-*' |
+            awk -v suffix="-${SHA12}" '
+              length($2) > length(suffix) &&
+              substr($2, length($2) - length(suffix) + 1) == suffix {
+                sub(/^refs\/tags\//, "", $2); print $2
+              }' | LC_ALL=C sort | head -n 1)
+          if [ -n "${EXISTING}" ]; then
+            echo "dev tag ${EXISTING} already names ${SHA}; nothing to push"
+            emit "${EXISTING}" false
+            exit 0
+          fi
+
+          if [ "${DRY_RUN}" = "true" ]; then
+            echo "dry run: would push lightweight tag ${TAG} -> ${SHA}"
+            emit "${TAG}" false
+            exit 0
+          fi
+
+          git tag "${TAG}" "${SHA}"
+          PUSH_STATUS=0
+          git push origin "refs/tags/${TAG}" || PUSH_STATUS=$?
+          if [ "${PUSH_STATUS}" -ne 0 ]; then
+            # A concurrent run for the same commit may have pushed the same name.
+            REMOTE_SHA=$(git ls-remote --tags origin "refs/tags/${TAG}" | awk '{print $1}')
+            if [ "${REMOTE_SHA}" != "${SHA}" ]; then
+              echo "::error::push of ${TAG} failed (exit ${PUSH_STATUS}) and the remote does not hold it at ${SHA}"
+              exit 1
+            fi
+            echo "${TAG} was pushed by a concurrent run; nothing to do"
+            emit "${TAG}" false
+            exit 0
+          fi
+
+          echo "pushed lightweight tag ${TAG} -> ${SHA}"
+          emit "${TAG}" true
+          if [ -n "${GITHUB_STEP_SUMMARY:-}" ]; then
+            echo "Dev merge tag: \`${TAG}\`" >> "${GITHUB_STEP_SUMMARY}"
+          fi

{omninode_memory-0.18.6 → omninode_memory-0.18.7}/.github/workflows/docs-validate.yml

@@ -15,4 +15,4 @@ concurrency:
 
 jobs:
   call:
-    uses: OmniNode-ai/omnibase_core/.github/workflows/validate-docs.yml@60178094be3ca82abb6a64498600f7909e247584
+    uses: OmniNode-ai/omnibase_core/.github/workflows/validate-docs.yml@35664cc30ca4bab02da4cac1d55786623db9a452

{omninode_memory-0.18.6 → omninode_memory-0.18.7}/.github/workflows/hardcoded-model-config.yml

@@ -19,6 +19,6 @@ concurrency:
 
 jobs:
   hardcoded-model-config:
-    uses: OmniNode-ai/omniclaude/.github/workflows/hardcoded-model-config-reusable.yml@e9b550b6be0a8e648ea83f9ed7f5fb8175ae1aaf
+    uses: OmniNode-ai/omniclaude/.github/workflows/hardcoded-model-config-reusable.yml@b6ca3729f2a9b70ae6518a8c46d08f3c1ebb8c60
     with:
       core_ref: f873d2c30201c05d4be020fa0b281b5edbfb8307

{omninode_memory-0.18.6 → omninode_memory-0.18.7}/.github/workflows/kb-doc-gate.yml

@@ -41,6 +41,6 @@ concurrency:
 
 jobs:
   kb-doc-gate:
-    uses: OmniNode-ai/omniclaude/.github/workflows/kb-doc-gate-reusable.yml@e9b550b6be0a8e648ea83f9ed7f5fb8175ae1aaf
+    uses: OmniNode-ai/omniclaude/.github/workflows/kb-doc-gate-reusable.yml@b6ca3729f2a9b70ae6518a8c46d08f3c1ebb8c60
     with:
       mode: strict

omninode_memory-0.18.7/.github/workflows/pr-title-check.yml

@@ -0,0 +1,27 @@
+# SPDX-FileCopyrightText: 2025 OmniNode.ai Inc.
+# SPDX-License-Identifier: MIT
+# OMN-6912
+
+name: PR Title Check
+
+on:
+  pull_request:
+    types: [opened, edited, synchronize, reopened]
+  merge_group:
+    types: [checks_requested]
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.sha }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
+jobs:
+  pr-title:
+    # OMN-17427: the check runs from omnibase_core's reusable, the one copy every
+    # repository of the same type calls. The caller job id `pr-title` and the
+    # reusable's job `check-title` compose the required context
+    # `pr-title / check-title` on pull_request and merge_group alike.
+    permissions:
+      contents: read
+    uses: OmniNode-ai/omnibase_core/.github/workflows/pr-title-check.yml@6d562b13401684270453f1dedd22f8737110f2f2
+    with:
+      omnimarket-version: "0.4.310"

{omninode_memory-0.18.6 → omninode_memory-0.18.7}/.github/workflows/secrets-baseline-wiring.yml

@@ -36,4 +36,4 @@ concurrency:
 
 jobs:
   secrets-baseline-wiring:
-    uses: OmniNode-ai/omniclaude/.github/workflows/secrets-baseline-wiring-reusable.yml@e9b550b6be0a8e648ea83f9ed7f5fb8175ae1aaf
+    uses: OmniNode-ai/omniclaude/.github/workflows/secrets-baseline-wiring-reusable.yml@b6ca3729f2a9b70ae6518a8c46d08f3c1ebb8c60

{omninode_memory-0.18.6 → omninode_memory-0.18.7}/.kb-doc-gate.yaml

@@ -6,10 +6,8 @@
 # the allowed set exists on the branch, which is what keeps a scrubbed repo
 # scrubbed. Validator + allowed set: omniclaude/scripts/kb_doc_gate.py.
 #
-# No repo-specific `allowed:` entries: everything that survives here
-# (README.md, CLAUDE.md, .claude/**, CHANGELOG.md, LICENSE, SECURITY.md,
-# .github/**) is already in the validator's DEFAULT_ALLOWED. Do not add an
-# `allowed:` glob to keep a new doc — move the doc to the knowledge base.
-#
-# A `mode:` here always wins over the caller workflow's `--mode` argument.
+# No repo-specific `allowed:` entries: the README, agent instructions,
+# CI-verified architecture handshake, issue/PR templates and machine-read
+# changelog all match the validator's DEFAULT_ALLOWED. Human documentation
+# belongs in the knowledge base; do not add an `allowed:` glob for a new doc.
 mode: strict

{omninode_memory-0.18.6 → omninode_memory-0.18.7}/.public-repo-hygiene.yaml

@@ -40,7 +40,6 @@ allowed_top_level:
   - "CLAUDE.md"
   - "LICENSE"
   - "README.md"
-  - "SECURITY.md"
   - "architecture-handshakes"
   - "config"
   - "contract.yaml"

{omninode_memory-0.18.6 → omninode_memory-0.18.7}/CHANGELOG.md

@@ -1,3 +1,14 @@
+## v0.18.7 (2026-10-28)
+
+### Release
+- Cut omnimemory from dev at 0.18.7 by the scheduled release train.
+- 2 release-relevant commit(s) merged since v0.18.6.
+- Opened by the release train, which cuts only when the repo's declared lab-evidence premise holds for the exact candidate commit.
+
+### Included Since v0.18.6
+- build(deps): update fastapi requirement from <0.144.0,>=0.136.3 to >=0.136.3,<0.163.0 (#676)
+- build(deps): update qdrant-client requirement from <1.20.0,>=1.18.0 to >=1.18.0,<1.21.0 (#677)
+
 ## v0.18.6 (2026-10-15)
 
 v0.18.6 is cut from dev by the scheduled release train; 2 release-relevant commits since v0.18.5; the train opens only when the declared lab-evidence premise holds for the exact candidate commit.
@@ -10,22 +21,11 @@ v0.18.5 is cut from dev by the same train, 1 release-relevant commit since v0.18
 
 ## v0.18.4 (2026-10-01)
 
-### Release
-- Cut omnimemory from dev at 0.18.4 by the scheduled release train.
-- 1 release-relevant commit(s) merged since v0.18.3.
-- Opened by the release train, which cuts only when the repo's declared lab-evidence premise holds for the exact candidate commit.
-
-### Included Since v0.18.3
-- : Migrate OmniMemory handler routing contracts (#555)
+Cut from dev by scheduled release train; 1 release-relevant commit since v0.18.3; opens only when declared lab-evidence premise holds for exact candidate commit. Included: Migrate OmniMemory handler routing contracts (#555).
 
 ## v0.18.3 (2026-09-26)
 
-### Release
-- Cut omnimemory from dev at 0.18.3 by the scheduled release train.
-- 1 release-relevant commit(s) merged since v0.18.2.
-- Opened by the release train, which cuts only when the repo's declared lab-evidence premise holds for the exact candidate commit.
-
-### Included Since v0.18.2
+Cut from dev by same scheduled release train; 1 release-relevant commit since v0.18.2 under same lab-evidence premise.
 - feat: judge PyPI pin resolvability before merge, with the release step's own script (#537)
 
 ## v0.18.2 (2026-09-18)

{omninode_memory-0.18.6 → omninode_memory-0.18.7}/CLAUDE.md

@@ -46,7 +46,7 @@ MIT SPDX headers required in `src/`, `tests/`, `scripts/`, `examples/` (spec: `o
 
 ## Documentation
 
-Every OmniMemory document lives in the OmniNode knowledge base, not in this repository. The only markdown that remains here is this file, the root `README.md`, `CHANGELOG.md`, `LICENSE`, `SECURITY.md`, and the `.claude/` and `.github/` trees — enforced by the required `kb-doc-gate` check running in `strict` mode (`.kb-doc-gate.yaml`). A pointer stub is not a removal: the README's Documentation section carries the signposting role for the whole repo and is the full page index.
+Human documentation lives in the OmniNode knowledge base. Keep the root `README.md` as a short pointer. Repository-local markdown is limited to these agent instructions, the CI-verified `.claude/architecture-handshake.md`, GitHub issue/PR templates, and `CHANGELOG.md`, which the release metadata test and evidence contract read. The required `kb-doc-gate` check runs in `strict` mode (`.kb-doc-gate.yaml`).
 
 - Public: <https://github.com/OmniNode-ai/knowledge_base>
 

omninode_memory-0.18.7/PKG-INFO

@@ -0,0 +1,48 @@
+Metadata-Version: 2.5
+Name: omninode-memory
+Version: 0.18.7
+Summary: OmniNode memory primitives — models, protocols, and storage adapters for Qdrant, Memgraph, and PostgreSQL backends.
+Project-URL: Homepage, https://github.com/OmniNode-ai/omnimemory
+Project-URL: Repository, https://github.com/OmniNode-ai/omnimemory
+Project-URL: Documentation, https://github.com/OmniNode-ai/knowledge_base
+Project-URL: Issues, https://github.com/OmniNode-ai/omnimemory/issues
+Project-URL: Changelog, https://github.com/OmniNode-ai/omnimemory/blob/main/CHANGELOG.md
+Author-email: "OmniNode.ai" <contact@omninode.ai>
+License: MIT
+License-File: LICENSE
+Keywords: embeddings,memory,omninode,onex,rag,semantic-search
+Requires-Python: <3.14,>=3.12
+Requires-Dist: aiohttp<4.0.0,>=3.14.1
+Requires-Dist: alembic<2.0.0,>=1.18.5
+Requires-Dist: asyncio-mqtt<1.0.0,>=0.16.2
+Requires-Dist: asyncpg<1.0.0,>=0.31.0
+Requires-Dist: cachetools<8.0.0,>=6.2.4
+Requires-Dist: fastapi<0.163.0,>=0.136.3
+Requires-Dist: httpx<1.0.0,>=0.28.1
+Requires-Dist: mcp<3.0.0,>=1.27.2
+Requires-Dist: omnibase-core<0.48.0,>=0.47.0
+Requires-Dist: omnibase-infra<0.39.0,>=0.38.4
+Requires-Dist: omnibase-spi<0.24.0,>=0.23.0
+Requires-Dist: pinecone-client<7.0.0,>=6.0.0
+Requires-Dist: psutil<8.0.0,>=7.2.2
+Requires-Dist: psycopg2-binary<3.0.0,>=2.9.12
+Requires-Dist: pydantic-settings<3.0.0,>=2.14.2
+Requires-Dist: pydantic<3.0.0,>=2.13.4
+Requires-Dist: python-dotenv<2.0.0,>=1.2.2
+Requires-Dist: pyyaml<7.0.0,>=6.0.3
+Requires-Dist: qdrant-client<1.21.0,>=1.18.0
+Requires-Dist: redis<9.0.0,>=8.0.1
+Requires-Dist: sqlalchemy<3.0.0,>=2.0.51
+Requires-Dist: structlog<26.0.0,>=25.5.0
+Requires-Dist: supabase<3.0.0,>=2.31.0
+Requires-Dist: uvicorn[standard]<1.0.0,>=0.49.0
+Provides-Extra: graph
+Requires-Dist: httpx<1.0.0,>=0.28.1; extra == 'graph'
+Requires-Dist: neo4j<7.0.0,>=5.0.0; extra == 'graph'
+Requires-Dist: qdrant-client<1.21.0,>=1.18.0; extra == 'graph'
+Description-Content-Type: text/markdown
+
+# OmniMemory
+
+OmniMemory provides document ingestion, semantic retrieval, and storage primitives for OmniNode.
+Documentation: [public knowledge base](https://github.com/OmniNode-ai/knowledge_base).

omninode_memory-0.18.7/README.md

@@ -0,0 +1,4 @@
+# OmniMemory
+
+OmniMemory provides document ingestion, semantic retrieval, and storage primitives for OmniNode.
+Documentation: [public knowledge base](https://github.com/OmniNode-ai/knowledge_base).

omninode_memory-0.18.7/contracts/OMN-17390.yaml

@@ -0,0 +1,44 @@
+---
+schema_version: "1.0.0"
+ticket_id: "OMN-17390"
+title: "Autobind OCC evidence for OMN-17390"
+summary: >
+  OCC contract authored by node_occ_companion_compute (OMN-14285) for OmniNode-ai/omnimemory PR #470.
+is_seam_ticket: false
+interface_change: false
+interfaces_touched: []
+evidence_requirements:
+  - kind: "ci"
+    description: "PR #470 CI checks green"
+    command: "gh pr checks ${PR_NUMBER} --repo ${REPO}"
+  - kind: "tests"
+    description: |-
+      OWED, not claimed. PR #470 on OmniNode-ai/omnimemory changes no pytest target, so this producer cannot derive a behavior-class check from its diff and mints none - the changed surface (CHANGELOG.md, pyproject.toml, uv.lock) is unproven by this contract. A behavior proof must be hand-authored as a `source: manual` dod_evidence item before OMN-15911's flip conjunct can be satisfied. Recorded here rather than papered over with a ticket-independent suite that would read as proof (OMN-16434).
+    command: "uv run pytest <hand-authored target> -q"
+emergency_bypass:
+  enabled: false
+  justification: ""
+  follow_up_ticket_id: ""
+dod_evidence:
+  - id: "dod-OmniNode-ai-omnimemory-pr-470"
+    description: "PR #470 on OmniNode-ai/omnimemory — Evidence-Source autobind."
+    source: "generated"
+    checks:
+      - check_type: "command"
+        check_value: "gh pr view 470 --repo OmniNode-ai/omnimemory --json number,state"
+      - check_type: "command"
+        check_value: |-
+          gh api repos/OmniNode-ai/omnimemory/pulls/470/files --paginate --jq '.[].filename' | grep -cFx 'CHANGELOG.md'
+  - id: "dod-occ-evidence-admissibility-validator"
+    description: "Hosted OCC evidence admissibility validator (OMN-15247)."
+    source: "generated"
+    evidence_artifact: "supersedes_dod_evidence:dod-OmniNode-ai-omnimemory-pr-470"
+    checks:
+      - check_type: "command"
+        check_value: "uv run pytest tests/test_evidence_admissibility.py -q"
+  - id: "occ-self-bind-pr-7886"
+    description: "Binds OMN-17390 to OCC companion PR #7886 (self-bind)."
+    source: "generated"
+    checks:
+      - check_type: "command"
+        check_value: "gh pr view 7886 --repo OmniNode-ai/onex_change_control --json number,state"

omninode_memory-0.18.7/contracts/OMN-17427.yaml

@@ -0,0 +1,149 @@
+# SPDX-FileCopyrightText: 2025 OmniNode.ai Inc.
+# SPDX-License-Identifier: MIT
+---
+schema_version: "1.0.0"
+ticket_id: "OMN-17427"
+title: "omnimemory: remove unread documentation; pr-title check calls the omnibase_core reusable"
+summary: >-
+  Delete unread human documentation, replace the README with a short public knowledge-base pointer, and
+  retain agent instructions, templates, legal text and machine-read files. The pr-title check also calls
+  omnibase_core's reusable pr-title-check.yml under the unchanged pr-title / check-title context.
+is_seam_ticket: false
+interface_change: false
+interfaces_touched: []
+requirements:
+  - id: "req-documentation-removal"
+    statement: "Human documentation belongs in the public knowledge base."
+    acceptance:
+      - id: "AC1"
+        statement: "Unread prose files are removed and the root README is three to five lines linking
+          to the public knowledge base."
+      - id: "AC2"
+        statement: "Legal text, agent instructions, templates and machine-read files remain, with no local
+          markdown links to removed files."
+      - id: "AC3"
+        statement: "The existing focused release metadata tests still pass."
+  - id: "req-pr-title-core-reusable"
+    statement: >-
+      PR Title Check runs from omnibase_core's reusable workflow with only this repository's parameters
+      and keeps its required context, triggers and title decision.
+    acceptance:
+      - id: "AC4"
+        statement: >-
+          AC4: PR Title Check's one job pr-title calls omnibase_core's pr-title-check.yml at a full sha
+          with only omnimarket-version, composing pr-title / check-title on pull_request and merge_group
+          -- falsifier: python -m pytest tests/ci/test_pr_title_check_omnimarket_node.py -q -k "workflow
+          or context" fails at the merge base.
+      - id: "AC5"
+        statement: >-
+          AC5: .github/required-checks.yaml names the pr-title / check-title row as a cross_repo producer
+          whose cross_repo_ref equals the workflow's call -- falsifier: python -m pytest tests/ci/test_pr_title_check_omnimarket_node.py
+          -q -k manifest fails at the merge base.
+  - id: "req-contract-migration"
+    statement: "The scheduled closer can resolve the migrated ticket contracts in this repository."
+    acceptance:
+      - id: "AC6"
+        statement: >-
+          contracts/OMN-17390.yaml and contracts/OMN-20868.yaml contain exactly the source bytes from
+          change-control commit 49cfc14c21a2c50f9964c1aeed4b66001ce279a3, readable without a sibling checkout.
+  - id: "req-pr677-qdrant-lock"
+    statement: "PR 677's widened Qdrant requirement remains installable from the committed lockfile."
+    acceptance:
+      - id: "AC7"
+        statement: "The lockfile matches both Qdrant requirement entries allowing >=1.18.0,<1.21.0, and
+          locked dependency resolution succeeds without rewriting it."
+      - id: "AC8"
+        statement: "The existing focused Qdrant handler tests pass with the locked dependencies."
+  - id: "req-fastapi-lock-pr676"
+    statement: "The FastAPI requirement update in PR 676 remains installable with the committed lockfile."
+    acceptance:
+      - id: "AC7"
+        statement: >-
+          uv.lock records the FastAPI requirement from pyproject.toml, so uv lock --check accepts the
+          widened upper bound without rewriting dependency metadata.
+evidence_requirements:
+  - kind: "tests"
+    description: "Documentation inventory, local links and existing release metadata checks."
+    command: "uv run --no-project --python 3.12 python tests/test_documentation_inventory_omn17427.py"
+  - kind: "tests"
+    description: "Focused workflow, context, manifest and installed-node verdict checks."
+    command: "uv run --no-project --with pytest --with pytest-asyncio --with pytest-xdist --with pyyaml
+      pytest tests/ci/test_pr_title_check_omnimarket_node.py -q -n 0"
+emergency_bypass:
+  enabled: false
+  justification: ""
+  follow_up_ticket_id: ""
+dod_evidence:
+  - id: "dod-documentation-inventory"
+    description: "The removed files are absent and the README points to the public knowledge base."
+    source: "manual"
+    binds_ac: ["AC1"]
+    checks:
+      - check_type: "test_passes"
+        check_value: "uv run --no-project --python 3.12 python tests/test_documentation_inventory_omn17427.py
+          TestRemovedProse"
+  - id: "dod-preserved-readers-and-links"
+    description: "Every retained prose exception exists, markdown links avoid the removed files and the
+      public hygiene allowlist no longer names SECURITY.md."
+    source: "manual"
+    binds_ac: ["AC2"]
+    checks:
+      - check_type: "test_passes"
+        check_value: "uv run --no-project --python 3.12 python tests/test_documentation_inventory_omn17427.py
+          TestRetainedReaders"
+  - id: "dod-release-metadata"
+    description: "With the prose removed, the existing three release metadata checks pass with the retained
+      changelog."
+    source: "manual"
+    binds_ac: ["AC3"]
+    checks:
+      - check_type: "test_passes"
+        check_value: "uv run --no-project --python 3.12 python tests/test_documentation_inventory_omn17427.py
+          TestReleaseMetadataAfterRemoval"
+  - id: "dod-workflow-core-reusable"
+    description: "Workflow calls the core reusable with only its parameters under the required context."
+    source: "manual"
+    checks:
+      - check_type: "test_passes"
+        check_value: "uv run --no-project --with pytest --with pytest-asyncio --with pytest-xdist --with
+          pyyaml pytest tests/ci/test_pr_title_check_omnimarket_node.py -q -n 0 -k \"workflow or context\""
+    binds_ac: ["AC4"]
+  - id: "dod-manifest-core-reusable-producer"
+    description: "Required-check manifest declares the core reusable producer."
+    source: "manual"
+    checks:
+      - check_type: "test_passes"
+        check_value: "uv run --no-project --with pytest --with pytest-asyncio --with pytest-xdist --with
+          pyyaml pytest tests/ci/test_pr_title_check_omnimarket_node.py -q -n 0 -k manifest"
+    binds_ac: ["AC5"]
+  - id: "dod-migrated-contract-bytes"
+    description: "Resolve both migrated contracts locally and compare their Git blob identities with the
+      source bytes; the merge base lacks both contracts."
+    source: "manual"
+    binds_ac: ["AC6"]
+    checks:
+      - check_type: "test_passes"
+        check_value: "python3 tests/ci/test_migrated_contracts_omn17427.py"
+  - id: "dod-pr677-qdrant-lock"
+    description: "Locked resolution accepts the manifest and lockfile after the Qdrant ceiling change."
+    source: "manual"
+    binds_ac: ["AC7"]
+    checks:
+      - check_type: "command"
+        check_value: "uv lock --check"
+  - id: "dod-pr677-qdrant-handler"
+    description: "The existing Qdrant handler unit tests pass with the committed dependency resolution."
+    source: "manual"
+    binds_ac: ["AC8"]
+    checks:
+      - check_type: "test_passes"
+        check_value: "env PYTHONDONTWRITEBYTECODE=1 uv run --locked pytest tests/unit/nodes/test_handler_qdrant.py
+          -q"
+  - id: "dod-fastapi-lock-pr676"
+    description: "The dependency lock accepts the widened FastAPI requirement without an update."
+    source: "manual"
+    binds_ac: ["AC7"]
+    checks:
+      - check_type: "command"
+        check_value: "uv lock --check"
+        cwd: "${OMNI_HOME}/omnimemory"

{omninode_memory-0.18.6 → omninode_memory-0.18.7}/contracts/OMN-18595.yaml

@@ -3,8 +3,8 @@
 ---
 schema_version: "1.0.0"
 ticket_id: "OMN-18595"
-title: "Release omnimemory 0.18.6"
-summary: "Publish consistent 0.18.6 release metadata and compact the newest changelog entries without
+title: "Release omnimemory 0.18.7"
+summary: "Publish consistent 0.18.7 release metadata and compact the newest changelog entries without
   moving the historical credential example tracked by the secrets scanner."
 is_seam_ticket: false
 interface_change: false
@@ -16,7 +16,7 @@ requirements:
     acceptance:
       - id: "AC1"
         statement: "AC1: pyproject.toml, the omninode-memory uv.lock entry and the newest changelog header
-          all declare 0.18.6; falsified by the release metadata assertion."
+          all declare 0.18.7; falsified by the release metadata assertion."
       - id: "AC2"
         statement: "AC2: detect-secrets 1.5.0 finds no new secret in CHANGELOG.md and requires no baseline
           rewrite; falsified by the focused scan assertion."
@@ -38,7 +38,7 @@ dod_evidence:
     checks:
       - check_type: "test_passes"
         check_value: |-
-          uv run --no-project --python 3.12 python -c 'import pathlib, tomllib; p=tomllib.loads(pathlib.Path("pyproject.toml").read_text())["project"]; lock=tomllib.loads(pathlib.Path("uv.lock").read_text()); package=next(item for item in lock["package"] if item["name"] == p["name"]); assert p["version"] == package["version"] == "0.18.6"; assert pathlib.Path("CHANGELOG.md").read_text().startswith("## v0.18.6 (2026-10-15)\n")'
+          uv run --no-project --python 3.12 python -c 'import pathlib, tomllib; p=tomllib.loads(pathlib.Path("pyproject.toml").read_text())["project"]; lock=tomllib.loads(pathlib.Path("uv.lock").read_text()); package=next(item for item in lock["package"] if item["name"] == p["name"]); assert p["version"] == package["version"] == "0.18.7"; assert pathlib.Path("CHANGELOG.md").read_text().startswith("## v0.18.7 (2026-10-28)\n")'
       - check_type: "test_passes"
         check_value: |-
           uv run --no-project --python 3.12 python tests/test_release_metadata_omn18595.py
@@ -50,5 +50,5 @@ dod_evidence:
     checks:
       - check_type: "test_passes"
         check_value: |-
-          uv run --no-project --python 3.12 --with detect-secrets==1.5.0 python -c 'import pathlib; assert pathlib.Path("CHANGELOG.md").read_text().startswith("## v0.18.6 (2026-10-15)\n"), "changelog is not the 0.18.6 release notes"; from detect_secrets.core.secrets_collection import SecretsCollection; from detect_secrets.pre_commit_hook import parse_args, should_update_baseline; args=parse_args(["--baseline", ".secrets.baseline", "--no-verify", "CHANGELOG.md"]); scanned=SecretsCollection(); scanned.scan_file("CHANGELOG.md"); assert not (scanned - args.baseline), "new secret finding"; assert not should_update_baseline(args.baseline, scanned, ["CHANGELOG.md"], args.baseline_version), "baseline rewrite required"'
+          uv run --no-project --python 3.12 --with detect-secrets==1.5.0 python -c 'import pathlib; assert pathlib.Path("CHANGELOG.md").read_text().startswith("## v0.18.7 (2026-10-28)\n"), "changelog is not the 0.18.7 release notes"; from detect_secrets.core.secrets_collection import SecretsCollection; from detect_secrets.pre_commit_hook import parse_args, should_update_baseline; args=parse_args(["--baseline", ".secrets.baseline", "--no-verify", "CHANGELOG.md"]); scanned=SecretsCollection(); scanned.scan_file("CHANGELOG.md"); assert not (scanned - args.baseline), "new secret finding"; assert not should_update_baseline(args.baseline, scanned, ["CHANGELOG.md"], args.baseline_version), "baseline rewrite required"'
     binds_ac: ["AC2"]

{omninode_memory-0.18.6 → omninode_memory-0.18.7}/contracts/OMN-19998.yaml

@@ -22,6 +22,19 @@ requirements:
           hook, and CI Summary requires its success -- falsifier: uv run pytest tests/ci/test_public_runner_placement_omn19998.py
           -q fails at the merge base, where 11 fallback lines name the fleet and neither the job nor the
           hook exists
+  - id: "req-omn19998-omnimemory-dev-merge-tag"
+    statement: "Operator RULING 2026-10-16T09:35:49Z: tags replace releases, made automatic. omnimemory,
+      a sibling another platform repository consumes, tags every push to dev with a lightweight dev-<UTC
+      YYYYMMDDHHMMSS>-<sha12> tag on the pushed commit, idempotent per commit, with no tag on any other
+      ref, so a consumer can pin it through a uv git source."
+    acceptance:
+      - id: "AC2"
+        statement: "AC2: .github/workflows/dev-merge-tag.yml triggers only on push to dev, and its tag
+          step, run against a throwaway repository with a +05:30 committer date, pushes one lightweight
+          tag named dev-<committer time in UTC>-<sha12> at the commit, pushes nothing on a second run
+          or when a dev tag for that sha already exists, pushes nothing in a dry run, and refuses a value
+          that is not a full sha -- falsifier: uv run pytest tests/ci/test_dev_merge_tag_workflow_omn19998.py
+          -q -n 0 fails at the merge base, where the workflow does not exist"
 evidence_requirements:
   - kind: "tests"
     description: "The placement tests read every workflow file for the fleet fallback, the ci.yml job,
@@ -39,3 +52,11 @@ dod_evidence:
       - check_type: "test_passes"
         check_value: "uv run pytest tests/ci/test_public_runner_placement_omn19998.py -q -n 0"
     binds_ac: ["AC1"]
+  - id: "dod-omn19998-omnimemory-dev-merge-tag"
+    description: "The dev merge tag tests pass at the head; at the merge base the workflow file does not
+      exist and every test fails."
+    source: "manual"
+    checks:
+      - check_type: "test_passes"
+        check_value: "uv run pytest tests/ci/test_dev_merge_tag_workflow_omn19998.py -q -n 0"
+    binds_ac: ["AC2"]