Skip to content

evidence: register exact Flow 1.35.1 synthetic workflow admission #42

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
abrichr merged 1 commit into from
Sep 9, 2026
Merged

evidence: register exact Flow 1.35.1 synthetic workflow admission #42

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
28 changes: 25 additions & 3 deletions evidence-registry.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,9 +4,9 @@
"repository": "OpenAdaptAI/.github",
"repository_id": "858454062",
"repository_owner_id": "132681217",
"revision": 4,
"previous_registry_head_sha256": "sha256:d00a5f4f68db36de5da56de27045905c622b5f699ffd9c45eb29f452fe5e3ba1",
"registry_head_sha256": "sha256:41e277d2cf9d6e90dd17da913dc0103b152efe5b2157abf9be400b6225401b69",
"revision": 5,
"previous_registry_head_sha256": "sha256:41e277d2cf9d6e90dd17da913dc0103b152efe5b2157abf9be400b6225401b69",
"registry_head_sha256": "sha256:2de6be9baa56e46d4c705a19a790c1637130968f90dd2ab6cbd26678d53f2891",
"signer_registry": {
"schema_version": "openadapt.qualification-signer-registry-pointer/v1",
"object_path": "production-evidence/signer-registries/sha256/7a/7a81bf3d213c74673f3c6b5fa179234cbee534c9432aaea6ae09e455562f96b6.qualification-signer-registry.json",
Expand Down Expand Up @@ -859,6 +859,28 @@
"semantic_identity_sha256": "sha256:9a5dae5b8ae6dd5e408b4dc56fe215ca7c64d47f97f8e33dc186418b92c31157",
"subject_sha256": "sha256:01f11ce3f7343e407f67ab6e5e6e2490af852602f4cae473e0de0d91cd6f6984",
"registry_entry_sha256": "sha256:8d0d159f371663b7f3c8de756d8d0abea6e8e0084c25a44394ae545b1c1e5f10"
},
{
"kind": "qualification-admission",
"object_schema_version": "openadapt.qualification-admission/v4",
"object_path": "production-evidence/objects/sha256/94/947224523757df41127be021fc66adee5746f07ff1a0e913319c5461e430e34d.qualification-admission.json",
"object_sha256": "sha256:947224523757df41127be021fc66adee5746f07ff1a0e913319c5461e430e34d",
"size_bytes": 8058,
"object_media_type": "application/vnd.openadapt.qualification-admission+json;version=4",
"semantic_identity_sha256": "sha256:7181ef7c2f3a74d1a8e6b8289a544efd40d4e85b8b590855d3dff2715b9ed2d1",
"subject_sha256": null,
"registry_entry_sha256": "sha256:8bf275e7e38161fdbc66084cad6f2365c4283d363b9097b01c5f2587aadc8a73"
},
{
"kind": "qualification-admission-sigstore-bundle",
"object_schema_version": "application/vnd.dev.sigstore.bundle.v0.3+json",
"object_path": "production-evidence/objects/sha256/93/93334be2510f0036a77341bb5eed555dbff790e7b4db1f47a5ebade371ebf1aa.qualification-admission-sigstore-bundle.json",
"object_sha256": "sha256:93334be2510f0036a77341bb5eed555dbff790e7b4db1f47a5ebade371ebf1aa",
"size_bytes": 2737,
"object_media_type": "application/vnd.dev.sigstore.bundle.v0.3+json",
"semantic_identity_sha256": "sha256:b017afeee8149d409bf0edd8970c41f90170ea2e55ef2beee458a7b482137d71",
"subject_sha256": "sha256:947224523757df41127be021fc66adee5746f07ff1a0e913319c5461e430e34d",
"registry_entry_sha256": "sha256:2ccfa9e1a343f516458d89fcc5338331bde54423a728ef578f1a08722eacdcc4"
}
]
}
1 change: 1 addition & 0 deletions ...41bb5eed555dbff790e7b4db1f47a5ebade371ebf1aa.qualification-admission-sigstore-bundle.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
{"dsseEnvelope":{"payload":"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","payloadType":"application/vnd.openadapt.production-public-trust-signing-statement+json;version=1","signatures":[{"keyid":"oa-public-trust-ed25519-9cf4bca214c01d79","sig":"rWLaBr2NXd4eMHxa1IhE1t7ukRlfPqMFDIV4cIeRVvzmA3+WA7GxI/VkV+r2jW0M/0VixUgntCsZacJ5oDXzAQ=="}]},"mediaType":"application/vnd.dev.sigstore.bundle.v0.3+json","verificationMaterial":{"publicKey":{"hint":"oa-public-trust-ed25519-9cf4bca214c01d79"}}}
1 change: 1 addition & 0 deletions ...24523757df41127be021fc66adee5746f07ff1a0e913319c5461e430e34d.qualification-admission.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
{"action_contract_sha256":"sha256:fa5a43508d6914ee7eb805d55d3ed320d7eed0855ba406bf50c5c99cecd1f0fa","admission_id_sha256":"sha256:fd6ec7bcddbd9a40bcb7f9999d4fc9c91513cef9255b62e857918bf1ad0ffb5d","admitted_runtime_sha256":"sha256:cfbc89acc6a2e3bcb5502a4d1fb29e985a03149a7f14c32c259254676bb3f11d","application_contract_sha256":"sha256:478bdeff4846e3e536f6b327ce5f8a065c31276a3fc830a4780b1eeec1939245","bundle_sha256":"sha256:bee27e24a177599d7f83fe1cf332e850d64f26bf9c1c68ccf21ff10202128bc4","bundle_version":"1.35.1-reference.1","campaign_artifact_sha256":"sha256:537ca88d26eee70024a44bbb87a8bac3a97deaa68af83937c22238ef2c558d94","campaign_permit_sha256":"sha256:50c78b73d48f3bfd839e4d690c3843e4b3d8ae3a6681aa65a8132bd320b5a9e2","campaign_summary":{"declared_attended":{"approved_repair_count":0,"authenticated_bound_decision_count":3,"blind_retry_count":0,"live_target_revalidation_count":3,"minimum_trials_per_cell":3,"model_call_count":0,"observed_trial_count":3,"over_halt_count":0,"policy_approved_repair_count":0,"reconciliation_required_count":0,"replay_dispatch_count":0,"retained_repair_evidence_count":0,"silent_incorrect_success_count":0,"task_condition_cell_count":1,"unplanned_intervention_count":0,"unsafe_effect_count":0,"unverified_direct_action_count":0},"governed_repair":{"approved_repair_count":3,"authenticated_bound_decision_count":0,"blind_retry_count":0,"live_target_revalidation_count":3,"minimum_trials_per_cell":3,"model_call_count":0,"observed_trial_count":3,"over_halt_count":0,"policy_approved_repair_count":3,"reconciliation_required_count":0,"replay_dispatch_count":0,"retained_repair_evidence_count":3,"silent_incorrect_success_count":0,"task_condition_cell_count":1,"unplanned_intervention_count":0,"unsafe_effect_count":0,"unverified_direct_action_count":0},"healthy":{"approved_repair_count":0,"authenticated_bound_decision_count":0,"blind_retry_count":0,"live_target_revalidation_count":0,"minimum_trials_per_cell":3,"model_call_count":0,"observed_trial_count":3,"over_halt_count":0,"policy_approved_repair_count":0,"reconciliation_required_count":0,"replay_dispatch_count":0,"retained_repair_evidence_count":0,"silent_incorrect_success_count":0,"task_condition_cell_count":1,"unplanned_intervention_count":0,"unsafe_effect_count":0,"unverified_direct_action_count":0},"idempotency_replay":{"approved_repair_count":0,"authenticated_bound_decision_count":0,"blind_retry_count":0,"live_target_revalidation_count":0,"minimum_trials_per_cell":3,"model_call_count":0,"observed_trial_count":3,"over_halt_count":0,"policy_approved_repair_count":0,"reconciliation_required_count":0,"replay_dispatch_count":0,"retained_repair_evidence_count":0,"silent_incorrect_success_count":0,"task_condition_cell_count":1,"unplanned_intervention_count":0,"unsafe_effect_count":0,"unverified_direct_action_count":0},"safe_halt":{"approved_repair_count":0,"authenticated_bound_decision_count":0,"blind_retry_count":0,"live_target_revalidation_count":0,"minimum_trials_per_cell":3,"model_call_count":0,"observed_trial_count":3,"over_halt_count":0,"policy_approved_repair_count":0,"reconciliation_required_count":0,"replay_dispatch_count":0,"retained_repair_evidence_count":0,"silent_incorrect_success_count":0,"task_condition_cell_count":1,"unplanned_intervention_count":0,"unsafe_effect_count":0,"unverified_direct_action_count":0},"uncertain_delivery":{"approved_repair_count":0,"authenticated_bound_decision_count":0,"blind_retry_count":0,"live_target_revalidation_count":0,"minimum_trials_per_cell":3,"model_call_count":0,"observed_trial_count":3,"over_halt_count":0,"policy_approved_repair_count":0,"reconciliation_required_count":3,"replay_dispatch_count":0,"retained_repair_evidence_count":0,"silent_incorrect_success_count":0,"task_condition_cell_count":1,"unplanned_intervention_count":0,"unsafe_effect_count":0,"unverified_direct_action_count":0}},"decision_receipt_bundle_reference":{"kind":"qualification-evidence-decision-receipt-sigstore-bundle","object_media_type":"application/vnd.dev.sigstore.bundle.v0.3+json","object_path":"production-evidence/objects/sha256/21/219de812a126e2e6ecc2ffc60ca21788ba2c820851d5040c6aa0e02247db6d30.qualification-evidence-decision-receipt-sigstore-bundle.json","object_schema_version":"application/vnd.dev.sigstore.bundle.v0.3+json","object_sha256":"sha256:219de812a126e2e6ecc2ffc60ca21788ba2c820851d5040c6aa0e02247db6d30","registry_entry_sha256":"sha256:8d0d159f371663b7f3c8de756d8d0abea6e8e0084c25a44394ae545b1c1e5f10","registry_head_sha256":"sha256:41e277d2cf9d6e90dd17da913dc0103b152efe5b2157abf9be400b6225401b69","registry_revision":4,"registry_source_commit":"4a4ae1aceacee1e069b029f498bd996e07821840","repository":"OpenAdaptAI/.github","repository_id":"858454062","repository_owner_id":"132681217","schema_version":"openadapt.production-evidence-object-reference/v2","semantic_identity_sha256":"sha256:9a5dae5b8ae6dd5e408b4dc56fe215ca7c64d47f97f8e33dc186418b92c31157","size_bytes":2849,"subject_sha256":"sha256:01f11ce3f7343e407f67ab6e5e6e2490af852602f4cae473e0de0d91cd6f6984"},"decision_receipt_reference":{"kind":"qualification-evidence-decision-receipt","object_media_type":"application/vnd.openadapt.qualification-evidence-decision-receipt+json;version=2","object_path":"production-evidence/objects/sha256/01/01f11ce3f7343e407f67ab6e5e6e2490af852602f4cae473e0de0d91cd6f6984.qualification-evidence-decision-receipt.json","object_schema_version":"openadapt.qualification-evidence-decision-receipt/v2","object_sha256":"sha256:01f11ce3f7343e407f67ab6e5e6e2490af852602f4cae473e0de0d91cd6f6984","registry_entry_sha256":"sha256:1b1c0940cd94b0b31ce1dc4e3a384dbac7402d5d9361eff8bee634c053b9da4c","registry_head_sha256":"sha256:41e277d2cf9d6e90dd17da913dc0103b152efe5b2157abf9be400b6225401b69","registry_revision":4,"registry_source_commit":"4a4ae1aceacee1e069b029f498bd996e07821840","repository":"OpenAdaptAI/.github","repository_id":"858454062","repository_owner_id":"132681217","schema_version":"openadapt.production-evidence-object-reference/v2","semantic_identity_sha256":"sha256:ba54f3d10a92a567afd17550d658e545bfef6ac94f81d332f293a133ec8cd494","size_bytes":6639,"subject_sha256":null},"effect_contract_sha256":"sha256:0ccdde1ca2d0d1aaab67c30101c57053ffe78ef698a73917e3c7b981ed095a91","entity_class":"record","environment_contract_sha256":"sha256:e28d1a30048ac2ad919c8f6981df0379be63db16e5d631b585d7038f45b9f03f","evidence_authority_sha256":"sha256:1aa7cfcb5f3df6b99372a28c305177e046487c8ec5b61111edbf1a12d3e76663","evidence_class":"remote-safe-synthetic","expires_at":null,"identity_contract_sha256":"sha256:5f14297c9276f4b3bb71426ed73d2c6e4683f45fd719eb3b11b492cd3faf87dc","input_contract_sha256":"sha256:2b82ee836801bc7f63b9c5f09ba5590ba8f1a934ff160b060033e81e0a11cd6a","issued_at":"2026-09-09T18:32:30Z","issuer":{"environment":"qualification-admission","ref":"refs/heads/main","repository":"OpenAdaptAI/.github","repository_id":"858454062","repository_owner_id":"132681217","source_commit":"4a4ae1aceacee1e069b029f498bd996e07821840","workflow":".github/workflows/issue-qualification-admission.yml"},"local_identity_opening":{"algorithm":"hmac-sha256","customer_controlled_secret_required":true,"exact_contract_match_required":true,"maximum_age_seconds":60,"required":true,"revalidation_before_actuation":true,"schema_version":"openadapt.qualification-local-identity-opening/v1"},"not_before":"2026-09-09T18:32:30Z","organization_id_sha256":"sha256:f4a7b0b403f25494a137da1f7df58676a5c8e066326cac614844dce0c2aea99b","policy_contract_sha256":"sha256:f6a06d5fdd830ed45bb7fb96a1f2599b85c3311afbae1ec373f042341e2baf52","revocation_state_sha256":"sha256:250ab430e467f5e584ebd2b1832976b42186b698da71d627ee1724c2b1da2457","schema_version":"openadapt.qualification-admission/v4","signer_registry_sha256":"sha256:e243a23243b24986ed08812e284a1bd8c4993814149f02bcba79cc520e10ca14","verdict":"accepted","workflow_id_sha256":"sha256:7841ca395130a388837464479154e7547a5b354217795cdc5c10a10a45e91491","workflow_version_id_sha256":"sha256:5063ddb0305ab81938b5239ca2210554e4a14ae093c4967e248a38d80b55f25e"}