omninode-memory 0.18.7__tar.gz → 0.18.8__tar.gz

{omninode_memory-0.18.7 → omninode_memory-0.18.8}/.github/workflows/call-repo-evidence-gate.yml

@@ -16,8 +16,10 @@
 # Per-PR concurrency cancels superseded runs so the latest event gets a verdict.
 # Read-only contents and pull-requests permissions are all this caller needs;
 # checkout and verification belong to the reusable, with no caller secrets.
-# The full-SHA pin makes the reusable immutable; verifier-version pins the
-# released verifier used to read the caller's contracts.
+# The dev-merge tag of omnibase_core makes the reusable a fixed ref (the repo's
+# ruling is tags, never full commit shas); verifier-tag names the omnimarket
+# dev-merge tag the verifier that reads the caller's contracts is installed from
+# (OMN-21676: a verifier fix reaches the gate once merged and tagged, no release).
 #
 # The job id is the context prefix: repo-evidence / dod-verify carries the
 # verdict, so do not add a job name. The reusable also reports a
@@ -35,17 +37,17 @@
 # Rollback is setting shadow back to "true", which makes every repo-evidence
 # job conclude success again while the cause is found.
 #
-# The reusable is pinned by full SHA to the squash commit of omnibase_core#1932
-# on dev, a descendant of #1914; it carries the `shadow` input. omnimemory does
-# not host receipt-gate.yml.
+# The reusable is pinned to a dev-merge tag of omnibase_core, a descendant of
+# #1932 (the `shadow` input and the VERIFIER_FLOOR refusal) that also carries
+# the fix-parent control fallback (control_uses_fix_parent). omnimemory does not
+# host receipt-gate.yml. The pin is advanced by omnimarket's
+# node_receipt_gate_pin_advance_compute (OMN-20134), which edits this line and
+# RECEIPT_GATE_PIN_TAG in tests/ci/receipt_gate_pin.py.
 #
-# The pinned reusable refuses a verifier-version below 0.4.303 before installing
-# it (VERIFIER_FLOOR, omnibase_core#1932; OMN-20032), the first release that
-# refuses a contract leaving a criterion unbound. With shadow "false" that
-# install step blocks. verifier-version 0.4.310 is the first omnimarket release
-# that ships the writer-app and plugin-manifest diff classifiers
-# (omnimarket#3694) and refuses a contract that repeats a mapping key
-# (omnimarket#3751), the version omniclaude and omnidash run.
+# The reusable resolves verifier-tag to a commit and refuses a tag that was moved,
+# is not on omnimarket dev, or does not descend from its floor commit e565ba5ba00c
+# (omnibase_core#2203). verifier-version is only its warned migration fallback, so
+# this caller does not pass it.
 
 name: Repo Evidence Gate
 
@@ -64,9 +66,9 @@ permissions:
 
 jobs:
   repo-evidence:
-    uses: OmniNode-ai/omnibase_core/.github/workflows/receipt-gate.yml@4e4f5e0404d364e296c5d37db6aa3ab9e07f8ffa # OMN-20032: immutable full-SHA pin, the squash commit of omnibase_core#1932 on that repo's dev branch; descends from #1914 (carries the shadow input) and adds the VERIFIER_FLOOR 0.4.303 refusal to the verifier install step
+    uses: OmniNode-ai/omnibase_core/.github/workflows/receipt-gate.yml@dev-20261101005012-ac2f26e3e5bf # omnibase_core dev-merge tag; carries verifier-tag (OMN-21676)
     with:
       evidence-source: caller
-      verifier-version: 0.4.310
+      verifier-tag: dev-20261101000200-949993edf3b7
       compare-with-occ: "false"
       shadow: "false"

{omninode_memory-0.18.7 → omninode_memory-0.18.8}/.github/workflows/check-handshake.yml

@@ -28,8 +28,8 @@ jobs:
         uses: actions/checkout@v7
         with:
           repository: OmniNode-ai/omnibase_core
-                                                                                # Auto-bumped by omnibase_core publish-downstream-pin-bump.yml to 9b083ad32228.
-          ref: 9b083ad32228f078aecfc47f9c71155656b47fae
+                                                                                # Auto-bumped by omnibase_core publish-downstream-pin-bump.yml to a4baddcdf677.
+          ref: a4baddcdf677160235005496b2efce7187a643c8
           path: omnibase_core
 
       - name: Verify omnibase_core checkout

{omninode_memory-0.18.7 → omninode_memory-0.18.8}/.github/workflows/ci.yml

@@ -783,7 +783,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     env:
-      CANONICAL_FILE_SHAPE_CORE: "omnibase-core @ git+https://github.com/OmniNode-ai/omnibase_core@dev-20261023085853-9d65b648bff5"
+      CANONICAL_FILE_SHAPE_CORE: "omnibase-core @ git+https://github.com/OmniNode-ai/omnibase_core@dev-20261029151319-6e0a5eee541a"
     steps:
       - name: Checkout code
         uses: actions/checkout@v7
@@ -802,7 +802,7 @@ jobs:
           set -u
           ratchet() {
             uv run --no-project --with "$CANONICAL_FILE_SHAPE_CORE" \
-              python -m omnibase_core.validators.canonical_file_shape "$@"
+              python -m omnibase_core.nodes.node_canonical_file_shape_check_compute.runtime_canonical_file_shape_check --rules file-shape "$@"
           }
           mkdir -p bin tests
           printf '#!/bin/sh\necho planted\n' > bin/zz_canary_planted
@@ -844,11 +844,11 @@ jobs:
           if [ -n "$base" ] && git cat-file -e "${base}^{commit}" 2>/dev/null; then
             base="$(git merge-base "$base" HEAD)"
             uv run --no-project --with "$CANONICAL_FILE_SHAPE_CORE" \
-              python -m omnibase_core.validators.canonical_file_shape --base "$base" --head HEAD
+              python -m omnibase_core.nodes.node_canonical_file_shape_check_compute.runtime_canonical_file_shape_check --rules file-shape --base "$base" --head HEAD
           else
             echo "no diff base for this event; checking the tree against the baseline only"
             uv run --no-project --with "$CANONICAL_FILE_SHAPE_CORE" \
-              python -m omnibase_core.validators.canonical_file_shape --head HEAD
+              python -m omnibase_core.nodes.node_canonical_file_shape_check_compute.runtime_canonical_file_shape_check --rules file-shape --head HEAD
           fi
 
       - name: Node-home positive control (planted node refused, clean tree accepted)
@@ -856,7 +856,7 @@ jobs:
           set -u
           node_home() {
             uv run --no-project --with "$CANONICAL_FILE_SHAPE_CORE" \
-              python -m omnibase_core.nodes.node_node_home_check_compute.runtime_node_home_check "$@"
+              python -m omnibase_core.nodes.node_canonical_file_shape_check_compute.runtime_canonical_file_shape_check --rules node-home "$@"
           }
           planted=src/omnimemory/nodes/node_zz_canary_planted_compute
           mkdir -p "$planted"
@@ -883,7 +883,7 @@ jobs:
           set -u
           node_home() {
             uv run --no-project --with "$CANONICAL_FILE_SHAPE_CORE" \
-              python -m omnibase_core.nodes.node_node_home_check_compute.runtime_node_home_check "$@"
+              python -m omnibase_core.nodes.node_canonical_file_shape_check_compute.runtime_canonical_file_shape_check --rules node-home "$@"
           }
           base="${PR_BASE:-${MQ_BASE:-${PUSH_BEFORE:-}}}"
           if [ -n "$base" ] && git cat-file -e "${base}^{commit}" 2>/dev/null; then

{omninode_memory-0.18.7 → omninode_memory-0.18.8}/.onex_ratchets/canonical_file_shape_baseline.txt

@@ -70,5 +70,4 @@ src/omnimemory/tools/__init__.py
 src/omnimemory/tools/contract_linter.py
 src/omnimemory/tools/validators/__init__.py
 src/omnimemory/tools/validators/validator_contract.py
-src/omnimemory/topics.py
 validate_architecture_improvements.py

omninode_memory-0.18.8/.onex_ratchets/canonical_file_shape_burndown_baseline.txt

@@ -0,0 +1,17 @@
+# Burn-down ticket: OMN-21525
+# canonical-file-shape burn-down baseline. Shrink-only once installed.
+# Every line is a file a file-shape rule refuses that the ticket above burns
+# down. Delete a line when its file is removed, moved into a canonical
+# location or rewritten as contract + node + handler. A new line is refused
+# and the file is never deleted, even when empty.
+src/omnimemory/handlers/handler_intent.py
+src/omnimemory/nodes/node_intent_storage_effect/adapters/adapter_intent_storage.py
+src/omnimemory/nodes/node_kreuzberg_parse_effect/handler_kreuzberg_parse.py
+src/omnimemory/nodes/node_memory_retrieval_effect/handlers/handler_db_mock.py
+src/omnimemory/nodes/node_memory_retrieval_effect/handlers/handler_decay.py
+src/omnimemory/nodes/node_memory_retrieval_effect/handlers/handler_fusion.py
+src/omnimemory/nodes/node_memory_retrieval_effect/handlers/handler_graph_mock.py
+src/omnimemory/nodes/node_memory_retrieval_effect/handlers/handler_qdrant.py
+src/omnimemory/nodes/node_memory_retrieval_effect/handlers/handler_qdrant_mock.py
+src/omnimemory/nodes/node_memory_storage_effect/adapters/adapter_filesystem.py
+tests/test_precommit_additional_dependencies_omn19666.sh

{omninode_memory-0.18.7 → omninode_memory-0.18.8}/.pre-commit-config.yaml

@@ -83,7 +83,6 @@ repos:
     rev: 4a4177335d11b138a29fe28e2f4c5575afa92b2b  # pragma: allowlist secret
     hooks:
       - id: no-hardcoded-topics
-        exclude: ^src/omnimemory/topics\.py$
         stages: [pre-commit]
       - id: no-untracked-todos
         stages: [pre-commit]
@@ -119,19 +118,26 @@ repos:
   # CI runs the same module at the same commit (job "Canonical File Shape
   # (OMN-20304)"). OMN-20943 pins canonical-file-shape to the commit that reads
   # the imperative guard caller's allowlist-path as a shrink-only declaration.
+  # OMN-21525: the canonical-file-shape hook (and the node-home rule group,
+  # check-node-home) run the node_canonical_file_shape_check_compute entry; the hook ids
+  # are unchanged. rev is the omnibase_core dev-merge tag that carries omnibase_core#2124.
   - repo: https://github.com/OmniNode-ai/omnibase_core
-    rev: 031148215620031436cba30619bbae67c0bb38ad  # pragma: allowlist secret
+    rev: dev-20261029151319-6e0a5eee541a
     hooks:
-      - id: no-noncanonical-lifecycle-classes
-        args: [--allowlist, .onex_ratchets/noncanonical_class_allowlist.yaml, src/omnimemory]
-        files: ^src/omnimemory/.*\.py$
       - id: canonical-file-shape
+        args: [--rules, file-shape]
       # Node-home ratchet (OMN-20702): a new ONEX node directory or onex.nodes
       # entry point outside omnimarket is refused against the shrink-only
       # .onex_ratchets/node_home_baseline.txt. BLOCKING, no allowlist, no
       # suppression comment. CI twin: the Canonical File Shape job in
       # .github/workflows/ci.yml, same omnibase_core commit.
       - id: check-node-home
+  - repo: https://github.com/OmniNode-ai/omnibase_core
+    rev: 031148215620031436cba30619bbae67c0bb38ad  # pragma: allowlist secret
+    hooks:
+      - id: no-noncanonical-lifecycle-classes
+        args: [--allowlist, .onex_ratchets/noncanonical_class_allowlist.yaml, src/omnimemory]
+        files: ^src/omnimemory/.*\.py$
   # URL Authority Gate (OMN-13298, child of OMN-12803).
   # Ratchet: NEW fingerprints fail; existing violations grandfathered in the
   # shared baseline at omnibase_core/src/omnibase_core/validation/baselines/url_authority_baseline.json.

{omninode_memory-0.18.7 → omninode_memory-0.18.8}/.secrets.baseline

@@ -245,7 +245,7 @@
         "filename": "tests/integration/nodes/test_navigation_history_reducer_integration.py",
         "hashed_secret": "81f344a7686a80b4c5293e8fdc0b0160c82c06a8",
         "is_verified": false,
-        "line_number": 308
+        "line_number": 319
       }
     ],
     "tests/scripts/test_check_dep_provenance.py": [

{omninode_memory-0.18.7 → omninode_memory-0.18.8}/CHANGELOG.md

@@ -1,13 +1,20 @@
-## v0.18.7 (2026-10-28)
+## v0.18.8 (2026-11-01)
+
+v0.18.8 (2026-11-01) is a scheduled release train cut from dev, containing 11 release-relevant commits since v0.18.7, and opens only when the declared lab-evidence premise holds for the exact candidate.
+- feat: resolve graph and intent dispatch topics from node contracts (#698); refactor: resolve topics via node contracts and sanitize credentialed strings (#694)
+- refactor: resolve runtime timeouts and bounds from node contract descriptors (#697); refactor: inject lifecycle timeouts from the node contract (#688)
+- refactor: resolve model settings via contract.yaml (#696)
+- refactor: clear ValidatorHandlerShape findings in omnimemory (#695)
+- refactor: build handlers at container binding sites (#693)
+- refactor: inject resilience timeouts and error backoffs instead of literal defaults (#692)
+- refactor: resolve intent storage breaker settings from contract (#691)
+- feat: move navigation reducer client settings to contract descriptors (#687)
+- fix: the retrieval decay and fusion modules become handler classes with a typed handle (slice 1) (#686)
 
-### Release
-- Cut omnimemory from dev at 0.18.7 by the scheduled release train.
-- 2 release-relevant commit(s) merged since v0.18.6.
-- Opened by the release train, which cuts only when the repo's declared lab-evidence premise holds for the exact candidate commit.
+## v0.18.7 (2026-10-28)
 
-### Included Since v0.18.6
-- build(deps): update fastapi requirement from <0.144.0,>=0.136.3 to >=0.136.3,<0.163.0 (#676)
-- build(deps): update qdrant-client requirement from <1.20.0,>=1.18.0 to >=1.18.0,<1.21.0 (#677)
+v0.18.7 (2026-10-28) is a scheduled release train with the exact-candidate lab-evidence premise, containing 2 release-relevant commits since v0.18.6.
+- Included: update fastapi requirement from <0.144.0,>=0.136.3 to >=0.136.3,<0.163.0 (#676); update qdrant-client requirement from <1.20.0,>=1.18.0 to >=1.18.0,<1.21.0 (#677).
 
 ## v0.18.6 (2026-10-15)
 
@@ -30,15 +37,8 @@ Cut from dev by same scheduled release train; 1 release-relevant commit since v0
 
 ## v0.18.2 (2026-09-18)
 
-### Release
-- Cut omnimemory from dev at 0.18.2 by the scheduled release train.
-- 3 release-relevant commit(s) merged since v0.18.1.
-- Opened by the release train, which cuts only when the repo's declared lab-evidence premise holds for the exact candidate commit.
-
-### Included Since v0.18.1
-- chore(deps, OMN-13902): refresh omninode sibling locks [bot] (#504)
-- docs(OMN-16602): scrub omnimemory docs to zero residual and require kb-doc-gate strict (#473)
-- build(deps-dev): update neo4j requirement from <6.0.0,>=5.0.0 to >=5.0.0,<7.0.0 (#471)
+v0.18.2 (2026-09-18) is a scheduled release train with the exact-candidate lab-evidence premise, containing 3 release-relevant commits since v0.18.1.
+- Included: refresh omninode sibling locks (#504); scrub omnimemory docs to zero residual and require kb-doc-gate strict (#473); update neo4j requirement from <6.0.0,>=5.0.0 to >=5.0.0,<7.0.0 (#471).
 
 ## v0.18.1 (2026-08-31)
 

{omninode_memory-0.18.7 → omninode_memory-0.18.8}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: omninode-memory
-Version: 0.18.7
+Version: 0.18.8
 Summary: OmniNode memory primitives — models, protocols, and storage adapters for Qdrant, Memgraph, and PostgreSQL backends.
 Project-URL: Homepage, https://github.com/OmniNode-ai/omnimemory
 Project-URL: Repository, https://github.com/OmniNode-ai/omnimemory

{omninode_memory-0.18.7 → omninode_memory-0.18.8}/config/hardcoded_model_config_baseline.yaml

@@ -24,21 +24,6 @@ entries:
   - path: src/omnimemory/models/config/model_qdrant_config.py
     family: M
     content_sha1: 31622a2314d35680b6d862f9ceda3d2d1768a4ec
-  - path: src/omnimemory/models/config/model_semantic_compute_policy_config.py
-    family: M
-    content_sha1: 24adf01e2fab31bdf08fe6dd9fb5f549924dd1a2
-  - path: src/omnimemory/models/config/model_semantic_compute_policy_config.py
-    family: M
-    content_sha1: 456ea2b1b71482a8b999e08591330baec2b6ad2d
-  - path: src/omnimemory/models/config/model_semantic_compute_policy_config.py
-    family: M
-    content_sha1: afc41a0c4c87c6c7135d0bf961425683595b0b28
-  - path: src/omnimemory/models/config/model_semantic_compute_policy_config.py
-    family: M
-    content_sha1: e499a46a9f3a931845904bc058b3d95281bf4b40
-  - path: src/omnimemory/nodes/node_navigation_history_reducer/handlers/handler_navigation_history_reducer.py
-    family: M
-    content_sha1: 4f853d37a6c51fa102b42d2ea0e775233f336d84
   - path: tests/integration/test_golden_chain_memgraph_ingestion.py
     family: E-LAN
     content_sha1: 84b23ad58c9198587cfd9eac7e3fa2031eb8cb5f

{omninode_memory-0.18.7 → omninode_memory-0.18.8}/contracts/OMN-18595.yaml

@@ -3,8 +3,8 @@
 ---
 schema_version: "1.0.0"
 ticket_id: "OMN-18595"
-title: "Release omnimemory 0.18.7"
-summary: "Publish consistent 0.18.7 release metadata and compact the newest changelog entries without
+title: "Release omnimemory 0.18.8"
+summary: "Publish consistent 0.18.8 release metadata and compact the newest changelog entries without
   moving the historical credential example tracked by the secrets scanner."
 is_seam_ticket: false
 interface_change: false
@@ -16,7 +16,7 @@ requirements:
     acceptance:
       - id: "AC1"
         statement: "AC1: pyproject.toml, the omninode-memory uv.lock entry and the newest changelog header
-          all declare 0.18.7; falsified by the release metadata assertion."
+          all declare 0.18.8; falsified by the release metadata assertion."
       - id: "AC2"
         statement: "AC2: detect-secrets 1.5.0 finds no new secret in CHANGELOG.md and requires no baseline
           rewrite; falsified by the focused scan assertion."
@@ -38,7 +38,7 @@ dod_evidence:
     checks:
       - check_type: "test_passes"
         check_value: |-
-          uv run --no-project --python 3.12 python -c 'import pathlib, tomllib; p=tomllib.loads(pathlib.Path("pyproject.toml").read_text())["project"]; lock=tomllib.loads(pathlib.Path("uv.lock").read_text()); package=next(item for item in lock["package"] if item["name"] == p["name"]); assert p["version"] == package["version"] == "0.18.7"; assert pathlib.Path("CHANGELOG.md").read_text().startswith("## v0.18.7 (2026-10-28)\n")'
+          uv run --no-project --python 3.12 python -c 'import pathlib, tomllib; p=tomllib.loads(pathlib.Path("pyproject.toml").read_text())["project"]; lock=tomllib.loads(pathlib.Path("uv.lock").read_text()); package=next(item for item in lock["package"] if item["name"] == p["name"]); assert p["version"] == package["version"] == "0.18.8"; assert pathlib.Path("CHANGELOG.md").read_text().startswith("## v0.18.8 (2026-11-01)\n")'
       - check_type: "test_passes"
         check_value: |-
           uv run --no-project --python 3.12 python tests/test_release_metadata_omn18595.py
@@ -50,5 +50,17 @@ dod_evidence:
     checks:
       - check_type: "test_passes"
         check_value: |-
-          uv run --no-project --python 3.12 --with detect-secrets==1.5.0 python -c 'import pathlib; assert pathlib.Path("CHANGELOG.md").read_text().startswith("## v0.18.7 (2026-10-28)\n"), "changelog is not the 0.18.7 release notes"; from detect_secrets.core.secrets_collection import SecretsCollection; from detect_secrets.pre_commit_hook import parse_args, should_update_baseline; args=parse_args(["--baseline", ".secrets.baseline", "--no-verify", "CHANGELOG.md"]); scanned=SecretsCollection(); scanned.scan_file("CHANGELOG.md"); assert not (scanned - args.baseline), "new secret finding"; assert not should_update_baseline(args.baseline, scanned, ["CHANGELOG.md"], args.baseline_version), "baseline rewrite required"'
+          uv run --no-project --python 3.12 --with detect-secrets==1.5.0 python -c 'import pathlib; assert pathlib.Path("CHANGELOG.md").read_text().startswith("## v0.18.8 (2026-11-01)\n"), "changelog is not the 0.18.8 release notes"; from detect_secrets.core.secrets_collection import SecretsCollection; from detect_secrets.pre_commit_hook import parse_args, should_update_baseline; args=parse_args(["--baseline", ".secrets.baseline", "--no-verify", "CHANGELOG.md"]); scanned=SecretsCollection(); scanned.scan_file("CHANGELOG.md"); assert not (scanned - args.baseline), "new secret finding"; assert not should_update_baseline(args.baseline, scanned, ["CHANGELOG.md"], args.baseline_version), "baseline rewrite required"'
     binds_ac: ["AC2"]
+  - id: "dod-omn18595-release-0188"
+    description: "The 0.18.8 release metadata agrees and its changelog passes detect-secrets without rewriting
+      the existing baseline."
+    source: "manual"
+    checks:
+      - check_type: "test_passes"
+        check_value: |-
+          uv run --no-project --python 3.12 python tests/test_release_metadata_omn18595.py
+      - check_type: "test_passes"
+        check_value: |-
+          uv run --no-project --python 3.12 --with detect-secrets==1.5.0 python -c 'import pathlib; assert pathlib.Path("CHANGELOG.md").read_text().startswith("## v0.18.8 (2026-11-01)\n"); from detect_secrets.core.secrets_collection import SecretsCollection; from detect_secrets.pre_commit_hook import parse_args, should_update_baseline; args=parse_args(["--baseline", ".secrets.baseline", "--no-verify", "CHANGELOG.md"]); scanned=SecretsCollection(); scanned.scan_file("CHANGELOG.md"); assert not (scanned - args.baseline), "new secret finding"; assert not should_update_baseline(args.baseline, scanned, ["CHANGELOG.md"], args.baseline_version), "baseline rewrite required"'
+    binds_ac: ["AC1", "AC2"]

omninode_memory-0.18.8/contracts/OMN-20134.yaml

@@ -0,0 +1,40 @@
+---
+schema_version: "1.0.0"
+ticket_id: "OMN-20134"
+title: "omnimemory's Repo Evidence Gate caller pins the omnibase_core dev-merge tag whose receipt-gate
+  carries the fix-parent fallback"
+summary: "No receipt-gate caller pin carried the fix-parent control fallback (control_uses_fix_parent);
+  omnimemory pinned a full commit sha, which the dev-merge-tag-only ruling (2026-10-29T01:50:26Z) forbids.
+  The caller moves to the omnibase_core dev-merge tag dev-20261030152335-66d35d2283c3, whose receipt-gate.yml
+  carries the fallback, and tests/ci/receipt_gate_pin.py holds that pin as the one test-side constant."
+is_seam_ticket: false
+interface_change: false
+interfaces_touched: []
+requirements:
+  - id: "req-caller-pins-fix-parent-dev-tag"
+    statement: "omnimemory's Repo Evidence Gate caller pins the omnibase_core receipt-gate reusable at
+      a dev-merge tag whose receipt-gate.yml carries the fix-parent control fallback, keeping its job
+      id and inputs."
+    acceptance:
+      - id: "AC1"
+        statement: "AC1: .github/workflows/call-repo-evidence-gate.yml pins receipt-gate.yml at the dev-merge
+          tag dev-20261030152335-66d35d2283c3 and not at a commit sha -- falsifier: uv run pytest tests/ci/test_receipt_gate_caller_pin_omn20134.py
+          -q -p no:randomly --no-cov fails at the merge base, where the caller pins 4e4f5e0404d364e296c5d37db6aa3ab9e07f8ffa"
+evidence_requirements:
+  - kind: "tests"
+    description: "The caller's reusable pin is the dev-merge tag."
+    command: "uv run pytest tests/ci/test_receipt_gate_caller_pin_omn20134.py -q -p no:randomly --no-cov"
+emergency_bypass:
+  enabled: false
+  justification: ""
+  follow_up_ticket_id: ""
+dod_evidence:
+  - id: "dod-omn20134-caller-pins-dev-tag"
+    description: "AC1: the Repo Evidence Gate caller pins the omnibase_core receipt-gate reusable at the
+      dev-merge tag dev-20261030152335-66d35d2283c3."
+    source: "manual"
+    checks:
+      - check_type: "test_passes"
+        check_value: "uv run pytest tests/ci/test_receipt_gate_caller_pin_omn20134.py -q -p no:randomly
+          --no-cov"
+    binds_ac: ["AC1"]

omninode_memory-0.18.8/contracts/OMN-21525.yaml

@@ -0,0 +1,85 @@
+---
+schema_version: "1.0.0"
+ticket_id: OMN-21525
+title: omnimemory switches to the canonical-file-shape node entry with a ticketed first-install burn-down
+  baseline
+summary: omnimemory runs the canonical-file-shape hook and its Canonical File Shape CI job through the
+  node_canonical_file_shape_check_compute entry of omnibase_core, pinned to a dev-merge tag. The twelve
+  paths the whole-tree rules refuse and the existing baseline does not list are held in a first-installed
+  burn-down baseline that names this ticket. The existing baseline is untouched. The burn-down baseline
+  only shrinks and reaches zero entries by 2026-11-12.
+is_seam_ticket: false
+interface_change: false
+interfaces_touched: []
+requirements:
+  - id: req-omn21525-omnimemory-canonical-file-shape-switch
+    statement: The canonical-file-shape hook and CI job run the node entry at the omnibase_core dev-merge
+      tag, pass on the whole tree with the burn-down baseline, refuse a new unbound handler and refuse
+      growth of the burn-down baseline.
+    acceptance:
+      - id: AC1
+        statement: "AC1: the hook is wired at the omnibase_core tag and passes on the whole tree with
+          a baseline of exactly the measured findings, this ticket named in its header -- falsifier: the
+          hook run over the whole tree exits 0 and the burn-down baseline holds 12 entries under a header
+          naming OMN-21525"
+      - id: AC2
+        statement: "AC2: a canary commit adding one new unbound handler is refused with handler_outside_node
+          and a canary adding one baseline line for an existing refused file is refused with baseline-growth
+          -- falsifier: the repository's canary test passes on both cases"
+      - id: AC3
+        statement: "AC3: on 2026-11-12 the baseline holds zero entries -- falsifier: the burn-down baseline
+          holds zero entries on 2026-11-12"
+evidence_requirements:
+  - kind: ci
+    description: The hook runs the node entry at the dev-merge tag over the whole tree and exits 0.
+    command: uv run --no-project --with "omnibase-core @ git+https://github.com/OmniNode-ai/omnibase_core@dev-20261029151319-6e0a5eee541a"
+      python -m omnibase_core.nodes.node_canonical_file_shape_check_compute.runtime_canonical_file_shape_check
+      --rules file-shape --head HEAD
+  - kind: ci
+    description: The canary test refuses a new unbound handler and refuses growth of the burn-down baseline.
+    command: uv run pytest tests/ci/test_canonical_file_shape_ratchet_omn21525.py -q -n 0
+emergency_bypass:
+  enabled: false
+  justification: ""
+  follow_up_ticket_id: ""
+dod_evidence:
+  - id: dod-omn21525-ac1
+    description: The whole tree passes the node entry at the dev-merge tag, the burn-down baseline holds
+      the 12 measured findings under a header naming OMN-21525, and the existing baseline keeps its 69
+      entries.
+    source: manual
+    checks:
+      - check_type: command
+        check_value: uv run --no-project --with "omnibase-core @ git+https://github.com/OmniNode-ai/omnibase_core@dev-20261029151319-6e0a5eee541a"
+          python -m omnibase_core.nodes.node_canonical_file_shape_check_compute.runtime_canonical_file_shape_check
+          --rules file-shape --head HEAD
+      - check_type: command
+        check_value: >-
+          head -1 .onex_ratchets/canonical_file_shape_burndown_baseline.txt | grep -q 'Burn-down ticket.
+          OMN-21525' && test "$(grep -c -v '^#' .onex_ratchets/canonical_file_shape_burndown_baseline.txt)"
+          = 12 && test "$(grep -c -v '^#' .onex_ratchets/canonical_file_shape_baseline.txt)" = 69
+      - check_type: test_passes
+        check_value: uv run pytest tests/ci/test_canonical_file_shape_core_tag_omn21331.py tests/ci/test_node_home_activation_omn20702.py
+          -q -n 0
+    binds_ac:
+      - AC1
+  - id: dod-omn21525-ac2
+    description: The canary test commits one new unbound handler and one burn-down line moved from the
+      existing baseline into a throwaway copy of the tree and shows handler_outside_node and baseline-growth.
+    source: manual
+    checks:
+      - check_type: test_passes
+        check_value: uv run pytest tests/ci/test_canonical_file_shape_ratchet_omn21525.py -q -n 0
+    binds_ac:
+      - AC2
+  - id: dod-omn21525-ac3
+    description: The burn-down baseline at the install holds 12 entries and is shrink-only; AC3 is met
+      when this check prints 0 on 2026-11-12. At the install the count is 12, so the check below holds
+      only the install-time bound.
+    source: manual
+    checks:
+      - check_type: command
+        check_value: test "$(grep -c -v '^#' .onex_ratchets/canonical_file_shape_burndown_baseline.txt)"
+          -le 12
+    binds_ac:
+      - AC3

omninode_memory-0.18.8/contracts/OMN-21536.yaml

@@ -0,0 +1,51 @@
+---
+schema_version: "1.0.0"
+ticket_id: "OMN-21536"
+title: "omnimemory: handler-shape debt burn-down, slice 1: the retrieval decay and fusion modules become
+  handler classes"
+summary: "The handler-shape validator of omnibase_core reports 15 findings in omnimemory src at the dev
+  tip 2c62a6b79 (module_function_handler 3, envelope_in_core 1, mutating_public_method 11, noncanonical_handle
+  0). This change clears two module_function_handler findings, the activation decay and the rank fusion
+  modules of the memory retrieval effect node. Each module now holds a stateless handler class whose handle
+  takes one typed request model and returns one typed response model, the retrieval handler composes them
+  through injected collaborators, and the numbers, ordering and tie-break are unchanged. The other 13
+  findings are listed by kind and directory in the lane's ledger TERMINAL row for the next slices."
+is_seam_ticket: false
+interface_change: false
+interfaces_touched: []
+requirements:
+  - id: "req-omn21536-om1-retrieval-decay-fusion-handler-classes"
+    statement: |-
+      The activation decay and rank fusion modules of the memory retrieval effect node hold handler classes with a typed handle, and the retrieval results are unchanged.
+    acceptance:
+      - id: "AC1"
+        statement: "AC1: the handler-shape validator of omnibase_core reports no issue on handler_decay.py
+          and handler_fusion.py -- falsifier: uv run pytest tests/unit/nodes/test_retrieval_handlers_shape_omn21536.py
+          exits non-zero"
+      - id: "AC2"
+        statement: "AC2: the decay, fusion and hybrid retrieval tests pass against the handlers -- falsifier:
+          the pytest command of the evidence below exits non-zero"
+evidence_requirements:
+  - kind: "tests"
+    description: "The shape ratchet test and the decay, fusion and retrieval tests, run on a lab host
+      at the pushed head."
+    command: "uv run pytest tests/unit/nodes -q --no-cov -p no:randomly"
+emergency_bypass:
+  enabled: false
+  justification: ""
+  follow_up_ticket_id: ""
+dod_evidence:
+  - id: "dod-omn21536-om1-ac1-no-module-function-handler"
+    description: "AC1 runs the handler-shape validator on the two cleared modules and finds no issue."
+    source: "manual"
+    binds_ac: ["AC1"]
+    checks:
+      - check_type: "test_passes"
+        check_value: "uv run pytest tests/unit/nodes/test_retrieval_handlers_shape_omn21536.py -q --no-cov"
+  - id: "dod-omn21536-om1-ac2-retrieval-tests"
+    description: "AC2 runs the decay, fusion and hybrid retrieval tests."
+    source: "manual"
+    binds_ac: ["AC2"]
+    checks:
+      - check_type: "test_passes"
+        check_value: "uv run pytest tests/unit/nodes -q --no-cov -p no:randomly"