Proof Portal

Omarchy

ProbeLabs65 findings · 95 requirements

A proof layer — requirements, tests and verified fixes — for two of Omarchy's subsystems: the application menu (launcher scripts, QML model, JSONC config, search and selection) and the lock screen (lock scripts, QML, PAM authentication). Scope is deliberately limited to those components of omacom/omarchy; the rest of the distribution is not covered.

PR #14054

Evidence package#1405409bfcda4de58Synthetic merge tree

omarchy #14054

https://github.com/omacom/omarchy

Delivered by an unverified producer — not accepted as assurance.

← Review-by-exception view

Medium riskEngine readinessNot assessed — next: human judgementunverified producer

AcceptingKeep an uninstall confirmation from answering the next menu summon (linked #14052). The spec change codifies it: 2 requirements (1 added, 1 modified).
Affects9 files · 32 requirements in 1 area (2 changed in the spec, 30 via the changed files) · mapping is file-level, so this is an upper bound · 1 changed file is outside the verification scope.
Works?Partly shown: 31 of 32 behavioral claims observed passing; coverage of 6 changed files was not measured.
Unresolved1 missing evidence · 1 item needs a judgement.
DecisionReviewer: human judgement — evaluated at 04bab1c (head 09bfcda, base 41076fd).

What am I accepting?

Intended change

“Keep an uninstall confirmation from answering the next menu summon”Declared by the change request· reason:#14052

The author's description (excerpt)

Fixes #14052.

Approved intent (spec changes)

modifiedDelete with the cursor on an app row opens an uninstall confirmation naming the app.…SW-REQ-260922-8CQ4
addedA summon can arrive while the uninstall confirmation shows. The menu then closes the…new in this changeSW-REQ-261002-VJR1

Behavior that must be preserved

30 requirements are in reach (30 whose traced file changed); none is intended to change — each must keep holding. Listed by area under What could it affect? ↓

What could it affect?

32 requirements · 1 area

Changed code

Modified
Modified
Added
Added
Added
Added
Added
Added
Modified
Added

1 changed file is outside the verification scope (e.g. reproducers) — listed for transparency.

Customer promises reached32

Code changed (file-level — an upper bound) 32

When no row is selectablemenuSW-REQ-260922-3JG5
Unparseable input (after stripping)menuSW-REQ-260922-3T3F
finishRequest with no active request or no done file just closes the menu. It…menuSW-REQ-260922-3VTN
The menu discards a guard batch that exits nonzero or by signalmenuSW-REQ-260922-4079

28 more

An entry with action is an actionmenuSW-REQ-260922-46HY
open(payload) dispatches on mode: select/input open the dmenu flowmenuSW-REQ-260922-50RE
A route matching no id and no alias resolves to the literal input. A misspelling…menuSW-REQ-260922-74BZ
A user entry overrides the default per key while keeping the row's original order…menuSW-REQ-260922-7NPE
Delete with the cursor on an app row opens an uninstall confirmation naming the…menuSW-REQ-260922-8CQ4
When the rows do not fitmenuSW-REQ-260922-B757
finishRequest with a null selection (Escape/cancel) creates only the done filemenuSW-REQ-260922-C8HX
Absent an exact id, a route equal to a declared alias resolves to the id of the…menuSW-REQ-260922-CYB9
Drilling in pushes the previous menu on the navigation stack. Backspace/Left pops itmenuSW-REQ-260922-DE93
A row matches only when every query term appears in its name text (labelmenuSW-REQ-260922-DQ9P
The parser strips full-line // comments and trailing commas before JSON parsingmenuSW-REQ-260922-E4J2
swapProviderRows drops exactly the rows carrying the re-run provider's providerMenu…menuSW-REQ-260922-EFNR
finishRequest with a selection writes the value to the selection file and creates…menuSW-REQ-260922-FGZQ
Applied guard results drive the view. A row hides when its when: is false. A static…menuSW-REQ-260922-JRW1
When a route resolves to an action item with a non-empty actionmenuSW-REQ-260922-N3RM
A dmenu option may lead with a glyph TAB and trail a subtext TAB. The picker shows…menuSW-REQ-260922-NM45
An exact id match wins over every alias. App rows are never routablemenuSW-REQ-260922-PRNV
Scores tier exact labelmenuSW-REQ-260922-SJ7P
Search lists current-menu matches before deeper (drilldown) matchesmenuSW-REQ-260922-TKDP
When a route resolves to a link itemmenuSW-REQ-260922-XW52
Cursor movement lands on the next selectable row in the direction of travelmenuSW-REQ-260922-Z48F
mergeAppRows and swapProviderRows return fresh maps that drop orphan ids and the…menuSW-REQ-260922-Z680
A menu action may exactly match the bare-summon grammar: omarchy-shell shell summon…menuSW-REQ-260928-8VJQ
The merged item tree is addressable by id. An id present in the tree yields its itemmenuSW-REQ-260929-B8N9
After the first filter keystroke or submenu movemenuSW-REQ-260929-DXFJ
Row selection follows the pointer only after it genuinely moves past the gate…menuSW-REQ-260929-T378
A summon can arrive while the uninstall confirmation shows. The menu then closes…new in this changemenuSW-REQ-261002-VJR1
Activating a row runs its actionmenuSYS-REQ-260922-P708

Important boundaries

No interface contract is recorded as crossed by this change.

Uncertainty in this analysis

one coherent change · code is mapped to requirements by whole file, so “reached” is an upper bound

8 analysis limits · how this was computed

Engine note (spec clusters): All 32 touched requirement(s) are related in the intent graph (satisfies/parent, sibling or shared component).

Scope method: changed units from review.diff (function-granular where a parser exists, else file-granular) traced against the requirements' implemented_by/verified_by targets and local annotations; touched requirements clustered in the intent graph (satisfies/parent incl. siblings under a parent with <= 20 children, shared component, interface contracts); uncodified connections from call-level impact paths (review.changes impactPath); removed-code traces from trace targets and removed diff lines

Function-level mapping comes from trace targets path:symbol / line ranges (authored + derived) and function-local annotations; a whole-file trace is file-level (weak) and says nothing about which function a requirement needs.
Intent relations: requirement level = satisfies/parent or siblings under a parent with <= 20 children; component level = shared component (incl. traces.components); contract level = an interface requirement naming both components. A missing spec edge can make a real dependency look uncodified, and a broad contract can make an uncodified dependency look related — every candidate is a question for a reviewer, not a verdict on the code or the spec.
Removed-code traces: targets naming a removed/renamed/moved function or a deleted file, and requirement ids cited on removed diff lines that the evaluated file no longer cites. remainingTraces counts the requirement's other code targets at the evaluated revision without re-checking that each still resolves.
Renamed/moved detection is best effort: a removed and an added function with the same name in different files are "moved"; a different name with >= 80% identical normalized body lines (>= 3 lines) is "renamed"; anything else is removed + added.
Scope clusters are seeded only by directly touched requirements (spec changes and code_changed); behavior_affected requirements are what the change reaches and are judged by the uncodified-connection rule instead.
Uncodified connections need call-level impact (review.effects — C/C++ only today): this package has none, so NO uncodified connection could be detected. Absence of such candidates proves nothing here.
Units are function-granular only where a parser extracts function boundaries (tree-sitter languages, plus C/C++ function-like macros); other changed files are one file-granular unit, and hunks outside any function are attributed to the file only when no function of that file changed.
When a changed function is traced only at FILE level, every requirement of its file is a from-side seed: a relation through any of them counts as codified, so a coarse trace can MASK an uncodified connection (and inflate scope clusters — see coarse_trace).

Why should I believe it works?

observed results only — AI opinion never counts as evidence

Behavioral claims → observed results

A summon can arrive while the uninstall confirmation shows. The menu then closes…new in this change — changed as intended: partly observed · 2 passed · 0 failed · 0 not run · 7 no outcome
Delete with the cursor on an app row opens an uninstall confirmation naming the… — changed as intended: observed passing · 2 passed · 0 failed · 0 not run · 0 no outcome
When no row is selectable — still holds: observed passing · 2 passed · 0 failed · 0 not run · 0 no outcome
Unparseable input (after stripping) — still holds: observed passing · 3 passed · 0 failed · 0 not run · 0 no outcome
finishRequest with no active request or no done file just closes the menu. It… — still holds: observed passing · 2 passed · 0 failed · 0 not run · 0 no outcome

All 32 claims (27 more)

Requirement	Claim	Observed	Tests
SW-REQ-260922-3JG5	Still holds	Observed passing	2✓ 0✗ 0∅ 0?
SW-REQ-260922-3T3F	Still holds	Observed passing	3✓ 0✗ 0∅ 0?
SW-REQ-260922-3VTN	Still holds	Observed passing	2✓ 0✗ 0∅ 0?
SW-REQ-260922-4079	Still holds	Observed passing	2✓ 0✗ 0∅ 0?
SW-REQ-260922-46HY	Still holds	Observed passing	3✓ 0✗ 0∅ 0?
SW-REQ-260922-50RE	Still holds	Observed passing	2✓ 0✗ 0∅ 0?
SW-REQ-260922-74BZ	Still holds	Observed passing	3✓ 0✗ 0∅ 0?
SW-REQ-260922-7NPE	Still holds	Observed passing	3✓ 0✗ 0∅ 0?

Show all 32 claims

SW-REQ-260922-8CQ4	Changed as intended	Observed passing	2✓ 0✗ 0∅ 0?
SW-REQ-260922-B757	Still holds	Observed passing	2✓ 0✗ 0∅ 0?
SW-REQ-260922-C8HX	Still holds	Observed passing	2✓ 0✗ 0∅ 0?
SW-REQ-260922-CYB9	Still holds	Observed passing	3✓ 0✗ 0∅ 0?
SW-REQ-260922-DE93	Still holds	Observed passing	2✓ 0✗ 0∅ 0?
SW-REQ-260922-DQ9P	Still holds	Observed passing	3✓ 0✗ 0∅ 0?
SW-REQ-260922-E4J2	Still holds	Observed passing	3✓ 0✗ 0∅ 0?
SW-REQ-260922-EFNR	Still holds	Observed passing	3✓ 0✗ 0∅ 0?
SW-REQ-260922-FGZQ	Still holds	Observed passing	2✓ 0✗ 0∅ 0?
SW-REQ-260922-JRW1	Still holds	Observed passing	3✓ 0✗ 0∅ 0?
SW-REQ-260922-N3RM	Still holds	Observed passing	3✓ 0✗ 0∅ 0?
SW-REQ-260922-NM45	Still holds	Observed passing	2✓ 0✗ 0∅ 0?
SW-REQ-260922-PRNV	Still holds	Observed passing	3✓ 0✗ 0∅ 0?
SW-REQ-260922-SJ7P	Still holds	Observed passing	4✓ 0✗ 0∅ 0?
SW-REQ-260922-TKDP	Still holds	Observed passing	3✓ 0✗ 0∅ 0?
SW-REQ-260922-XW52	Still holds	Observed passing	3✓ 0✗ 0∅ 0?
SW-REQ-260922-Z48F	Still holds	Observed passing	3✓ 0✗ 0∅ 0?
SW-REQ-260922-Z680	Still holds	Observed passing	3✓ 0✗ 0∅ 0?
SW-REQ-260928-8VJQ	Still holds	Observed passing	2✓ 0✗ 0∅ 0?
SW-REQ-260929-B8N9	Still holds	Observed passing	2✓ 0✗ 0∅ 0?
SW-REQ-260929-DXFJ	Still holds	Observed passing	2✓ 0✗ 0∅ 0?
SW-REQ-260929-T378	Still holds	Observed passing	2✓ 0✗ 0∅ 0?
SW-REQ-261002-VJR1new in this change	Changed as intended	Partially observed	2✓ 0✗ 0∅ 7?	test_outcome_unobserved:SW-REQ-261002-VJR1 7 non-passing records test:test/bdiff/corpus/lifecycle/seq-delete-confirm-cancel-button.events test:test/bdiff/corpus/lifecycle/seq-delete-confirm-enter.events test:test/bdiff/corpus/lifecycle/seq-delete-confirm-escape.events test:test/bdiff/corpus/lifecycle/seq-delete-confirm-then-input-enter.events test:test/bdiff/corpus/lifecycle/seq-delete-confirm-then-menu-enter.events test:test/bdiff/corpus/lifecycle/seq-delete-confirm-then-select-enter.events test:test/bdiff/harness.mjs
SYS-REQ-260922-P708	Still holds	Observed passing	3✓ 0✗ 0∅ 0?

Changed-code coverage

0 of 0 changed decision lines reached by tests

Not measured for test/bdiff/corpus/lifecycle/seq-delete-confirm-cancel-button.events, test/bdiff/corpus/lifecycle/seq-delete-confirm-enter.events, test/bdiff/corpus/lifecycle/seq-delete-confirm-escape.events, test/bdiff/corpus/lifecycle/seq-delete-confirm-then-input-enter.events, test/bdiff/corpus/lifecycle/seq-delete-confirm-then-menu-enter.events, test/bdiff/corpus/lifecycle/seq-delete-confirm-then-select-enter.events.

What remains unresolved?

9 open disclosures — each listed once, introduced first

Introduced failures0

None — every blocking finding also failed at the base.

Missing evidence2

mediumUnresolved finding · introduced by this changedrives the next decision
Removed behaviour at pocs/menu-qml-static.sh: Removed behaviour: regex anchors ^ / $: input boundaries vs line boundaries depends on the multiline flag (base "sed -n '/function openExistingMenu/,/^ }/p' \"$F\" | grep -qF"… → head "no test preserves it"); not approved as a compatibility change.
compat:cf-4d41f5e4cae16ee6

The tests verifying 1 requirement have no observed outcome at the evaluated revision (7 test records). Claims → Why should I believe it works? ↑

Spec questions and disagreements— the engine raises · an AI may argue · a human decides

The code and the spec agree — no code-vs-spec question was raised for this change.

Other items needing a judgement1

mediumMissing evidence
Backward compatibility was not fully checked (differential not_checked: no behaviour-diff result recorded for 41076fd4b7af..04bab1c4ecf4; run `proof change behavior-diff --base 41076fd4b7af --head 04bab1c4ecf4`), so a compatibility change can go unnoticed.
compat.source:differential

Limitations

The baseline run evaluated 39746e651fad, which is neither the base nor the merge-base, so pre-existing attribution may be wrong.
1 record
review.baseline
Coverage of some changed files was not measured by a fresh artifact.
6 records
1 changed file is outside the approved verification scope, so the audit does not verify it; listed for transparency.
1 record
13 checks were skipped by configuration and produced no verdict.
13 records
build_matrix_complete description_grammar_enumeration_complete documentation_coverage documented_claim_verified dual_path_guards_equivalent known_issue_closure_platform_bound lemma_binding_freshness no_authored_change_surface_reviewed security_surface_covered signal_fixtures_valid spec_lint_mediation_contract_contradicted spec_lint_na_denies_property_enforced_unevenly spec_lint_na_denies_property_the_code_manages
Auditor buger assessed compatibility finding cf-4d41f5e4cae16ee6 as acceptable: Intended: a check in the proof-of-concept script that showed the confirmation surviving a summon is removed, because this PR fixes that bug (SW-REQ-261002-VJR1). The script is not part of the product, and the PR's own test now covers the ca… — a note for the maintainers, not an approval.
2 records
compat:cf-4d41f5e4cae16ee6decision:rdec-7ac0dfce9977e0699843acad60654c10
Change effects (new calls, side effects, reachability) were not analyzed for this change.
1 record
review.effects

Which of the 20 relevant tests run the changed code is unknown — no test↔changed-code mapping was measured. The tests → audit trail
The impact analysis has 8 stated limits — listed under What could it affect? ↑

Exceptions and weakened protections

None — the PR leaves the approved policy unchanged; no suppression or waiver is recorded.

No pre-existing failure — nothing failed at the base too.

What decision is mine?

Next decision

Human judgementbecause backward-compatibility changes are unapproved

Approve each of the 1 backward-compatibility change: a reviewer or above approves it, or the author fixes it.

Driven by 1 item:

Removed behaviour at pocs/menu-qml-static.sh: Removed behaviour: regex anchors ^ / $: input boundaries vs line boundaries depends on the multiline flag (base "sed -n '/function openExistingMenu/,/^ }/p' \"$F\" | grep -qF"… → head "no test preserves it"); not approved as a compatibility change. ↑

Required authority

Reviewer — under the approved policy at 41076fd4b7

Accepted identities: GitHub login or portal user · enforced by the portal / GitHub

Evaluated revision

Evaluated: 04bab1c4ecf4Synthetic merge
PR head: 09bfcda4de58
Base: 41076fd4b7afquattro-proof
Policy: sha256:6849bf0c51…

Compared against base audit run-256e3c404fba at 39746e651fad — failed checks are split into pre-existing vs introduced.

An immutable record of this revision — freshness is judged on the PR page.

Producer not verified (evidence is informational, not assurance). Provenance

Acceptance: none recorded in this evidence. Readiness is not acceptance, and the merge state is GitHub's.

Audit trail

the verbatim record — every disclosure, the AI review, risk rules, call routes, tests, audit checks, provenance

Every disclosure, by consequence0 block · 2 prevent ready · 1 need judgement · 14 for information

0 block · 2 prevent ready · 1 need judgement · 14 for information

Prevents a ready verdict2— Readiness can't be better than “not assessed” while any of these is open.

mediumUnresolved finding · introduced by this changedrives the next decision
Removed behaviour at pocs/menu-qml-static.sh: Removed behaviour: regex anchors ^ / $: input boundaries vs line boundaries depends on the multiline flag (base "sed -n '/function openExistingMenu/,/^ }/p' \"$F\" | grep -qF"… → head "no test preserves it"); not approved as a compatibility change.
compat:cf-4d41f5e4cae16ee6
mediumMissing evidence
7 of 9 tests verifying SW-REQ-261002-VJR1 (A summon can arrive while the uninstall confirmation shows. The menu then closes the confirmation and removes nothing, a…) have no observed outcome at the evaluated revision.
test:test/bdiff/corpus/lifecycle/seq-delete-confirm-cancel-button.eventstest:test/bdiff/corpus/lifecycle/seq-delete-confirm-enter.eventstest:test/bdiff/corpus/lifecycle/seq-delete-confirm-escape.eventstest:test/bdiff/corpus/lifecycle/seq-delete-confirm-then-input-enter.eventstest:test/bdiff/corpus/lifecycle/seq-delete-confirm-then-menu-enter.eventstest:test/bdiff/corpus/lifecycle/seq-delete-confirm-then-select-enter.events
1 more record
test:test/bdiff/harness.mjs

Needs a human judgement1— Readiness is unaffected, but a human must disposition each one.

mediumMissing evidence
Backward compatibility was not fully checked (differential not_checked: no behaviour-diff result recorded for 41076fd4b7af..04bab1c4ecf4; run `proof change behavior-diff --base 41076fd4b7af --head 04bab1c4ecf4`), so a compatibility change can go unnoticed.
compat.source:differential

For information6— Shown for the record — no effect on readiness.

mediumStale input
The baseline run evaluated 39746e651fad, which is neither the base nor the merge-base, so pre-existing attribution may be wrong.
review.baseline
lowMissing evidence
Coverage of some changed files was not measured by a fresh artifact.
infoMissing evidence
1 changed file is outside the approved verification scope, so the audit does not verify it; listed for transparency.
infoMissing evidence
13 checks were skipped by configuration and produced no verdict.
build_matrix_complete description_grammar_enumeration_complete documentation_coverage documented_claim_verified dual_path_guards_equivalent known_issue_closure_platform_bound
7 more records
lemma_binding_freshness no_authored_change_surface_reviewed security_surface_covered signal_fixtures_valid spec_lint_mediation_contract_contradicted spec_lint_na_denies_property_enforced_unevenly spec_lint_na_denies_property_the_code_manages
infoUnresolved finding
Auditor buger assessed compatibility finding cf-4d41f5e4cae16ee6 as acceptable: Intended: a check in the proof-of-concept script that showed the confirmation surviving a summon is removed, because this PR fixes that bug (SW-REQ-261002-VJR1). The script is not part of the product, and the PR's own test now covers the ca… — a note for the maintainers, not an approval.
compat:cf-4d41f5e4cae16ee6decision:rdec-7ac0dfce9977e0699843acad60654c10
infoPartial input
Change effects (new calls, side effects, reachability) were not analyzed for this change.
review.effects

Routine evidence:178 checks passed · 27 advisory · 1 not applicable · 13 verifying tests passed · 31 claims observed passing

AI review — supporting commentarynone recorded for this package

No AI review has been recorded for this package.

Why the engine rates this risk level1 rule fired

6 changed source file(s) not measured by any fresh coverage artifact: test/bdiff/corpus/lifecycle/seq-delete-confirm-cancel-button.events, test/bdiff/corpus/lifecycle/seq-delete-confirm-enter.events, test/bdiff/corpus/lifecycle/seq-delete-confirm-escape.events, test/bdiff/corpus/lifecycle/seq-delete-confirm-then-input-enter.events, test/bdiff/corpus/lifecycle/seq-delete-confirm-then-menu-enter.events (+1 more).

Relevant tests20

Unknown
test/bdiff/corpus/lifecycle/seq-delete-confirm-cancel-button.events
unknown whether it runs the changed codeSW-REQ-261002-VJR1new in this change
Unknown
test/bdiff/corpus/lifecycle/seq-delete-confirm-enter.events
unknown whether it runs the changed codeSW-REQ-261002-VJR1new in this change
Unknown
test/bdiff/corpus/lifecycle/seq-delete-confirm-escape.events
unknown whether it runs the changed codeSW-REQ-261002-VJR1new in this change
Unknown
test/bdiff/corpus/lifecycle/seq-delete-confirm-then-input-enter.events
unknown whether it runs the changed codeSW-REQ-261002-VJR1new in this change
Unknown
test/bdiff/corpus/lifecycle/seq-delete-confirm-then-menu-enter.events
unknown whether it runs the changed codeSW-REQ-261002-VJR1new in this change
Unknown
test/bdiff/corpus/lifecycle/seq-delete-confirm-then-select-enter.events
unknown whether it runs the changed codeSW-REQ-261002-VJR1new in this change
Unknown
test/bdiff/harness.mjs
unknown whether it runs the changed codeSW-REQ-261002-VJR1new in this change
Passed
test/node/menumodel-replay.test.mjs
unknown whether it runs the changed codeSW-REQ-260922-3T3FSW-REQ-260922-46HYSW-REQ-260922-74BZSW-REQ-260922-7NPESW-REQ-260922-CYB9SW-REQ-260922-DQ9PSW-REQ-260922-E4J2SW-REQ-260922-EFNRSW-REQ-260922-JRW1SW-REQ-260922-N3RMSW-REQ-260922-PRNVSW-REQ-260922-SJ7PSW-REQ-260922-TKDPSW-REQ-260922-XW52SW-REQ-260922-Z680
Passed
test/node/report-reproducers.test.mjs
unknown whether it runs the changed codeSW-REQ-260922-SJ7P
Passed
test/shell.d/menu-acceptance-test.sh
unknown whether it runs the changed codeSW-REQ-260922-Z48FSYS-REQ-260922-P708
Passed
test/shell.d/menu-compositor-test.sh
unknown whether it runs the changed codeSW-REQ-260922-3JG5SW-REQ-260922-4079SW-REQ-260922-50RESW-REQ-260922-8CQ4SW-REQ-260922-B757SW-REQ-260922-DE93SW-REQ-260922-NM45SW-REQ-260922-Z48FSYS-REQ-260922-P708
Passed
test/shell.d/menu-compositor-test.sh:213:pokeGuards
test/shell.d/menu-compositor-test.shunknown whether it runs the changed codeSW-REQ-260922-3JG5SW-REQ-260922-4079SW-REQ-260922-50RESW-REQ-260922-8CQ4SW-REQ-260922-B757SW-REQ-260922-DE93SW-REQ-260922-NM45SW-REQ-260922-Z48FSYS-REQ-260922-P708
Passed
test/shell.d/menu-dmenu-test.sh
unknown whether it runs the changed codeSW-REQ-260922-3VTNSW-REQ-260922-C8HXSW-REQ-260922-FGZQ
Passed
test/shell.d/menu-dmenu-test.sh:1:menu-dmenu-test.sh:1
test/shell.d/menu-dmenu-test.shunknown whether it runs the changed codeSW-REQ-260922-3VTNSW-REQ-260922-C8HXSW-REQ-260922-FGZQ
Passed
test/shell.d/menu-pointer-lifecycle-test.sh
unknown whether it runs the changed codeSW-REQ-260929-B8N9SW-REQ-260929-DXFJSW-REQ-260929-T378
Passed
test/shell.d/menu-pointer-lifecycle-test.sh:27:extractQmlFunction
test/shell.d/menu-pointer-lifecycle-test.shunknown whether it runs the changed codeSW-REQ-260929-B8N9SW-REQ-260929-DXFJSW-REQ-260929-T378
Passed
test/shell.d/menu-test.sh
unknown whether it runs the changed codeSW-REQ-260922-3T3FSW-REQ-260922-46HYSW-REQ-260922-74BZSW-REQ-260922-7NPESW-REQ-260922-CYB9SW-REQ-260922-DQ9PSW-REQ-260922-E4J2SW-REQ-260922-EFNRSW-REQ-260922-JRW1SW-REQ-260922-N3RMSW-REQ-260922-PRNVSW-REQ-260922-SJ7PSW-REQ-260922-TKDPSW-REQ-260922-XW52SW-REQ-260922-Z680SW-REQ-260928-8VJQ
Passed
test/shell.d/menu-test.sh:1:menu-test.sh:1
test/shell.d/menu-test.shunknown whether it runs the changed codeSW-REQ-260922-3T3FSW-REQ-260922-46HYSW-REQ-260922-74BZSW-REQ-260922-7NPESW-REQ-260922-CYB9SW-REQ-260922-DQ9PSW-REQ-260922-E4J2SW-REQ-260922-EFNRSW-REQ-260922-JRW1SW-REQ-260922-N3RMSW-REQ-260922-PRNVSW-REQ-260922-SJ7PSW-REQ-260922-TKDPSW-REQ-260922-XW52SW-REQ-260922-Z680SW-REQ-260928-8VJQ
Passed
test/shell.d/menu-uninstall-confirm-test.sh
unknown whether it runs the changed codeSW-REQ-261002-VJR1new in this change
Passed
test/shell.d/menu-uninstall-confirm-test.sh:30:menuHarness
test/shell.d/menu-uninstall-confirm-test.shunknown whether it runs the changed codeSW-REQ-261002-VJR1new in this change

Audit checks219 project-wide

219 project-wide audit checks (178 passed · 13 skipped or not run · 28 not applicable) — the rest are unchanged against the baseline run. Open Audit checks

All 219 checks exactly as recorded in this package

Not applicableaccepted_risks_reviewednot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicableapproved_guarantee_ki_conflictnot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicableassumptions_statusnot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Skippedbuild_matrix_completeskippedSame as baseline
raw status skip · severity warning
Not applicablecode_signal_deadline_cast_unreviewednot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicableconcern_adjudicatednot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicabledefect_review_currentnot_applicableNot requiredAdvisorySame as baseline
raw status info · severity warning
Not applicabledeployment_tvl_verifiednot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Skippeddescription_grammar_enumeration_completeskippedSame as baseline
raw status skip · severity warning
Skippeddocumentation_coverageskippedSame as baseline
raw status skip · severity warning
Skippeddocumented_claim_verifiedskippedSame as baseline
raw status skip · severity warning
Skippeddual_path_guards_equivalentskippedSame as baseline
raw status skip · severity warning
Not applicablefailing_test_blocks_approvalnot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicablehigh_severity_obligation_without_vectornot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Skippedknown_issue_closure_platform_boundskippedSame as baseline
raw status skip · severity error
Not applicableknown_issue_completenot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicableknown_issue_platform_coveragenot_applicableNot requiredAdvisorySame as baseline
raw status skip · severity warning
Not applicableknown_issue_recheck_duenot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicableknown_issue_sibling_dispositionnot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicableknown_issue_template_transfernot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Skippedlemma_binding_freshnessskippedSame as baseline
raw status skip · severity warning
Not applicablelemma_branch_coveragenot_applicableNot requiredSame as baseline
raw status skip · severity warning
Skippedno_authored_change_surface_reviewedskippedSame as baseline
raw status skip · severity warning
Not applicablepoc_quality_checkednot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicableproblem_report_class_mitigation_evidencenot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicableproblem_reports_reviewednot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicableprocess_checklistnot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicableproperty_based_test_coveragenot_applicableNot requiredAdvisorySame as baseline
raw status warn · severity warning
Not applicableresidual_kill_hygienenot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Skippedsecurity_surface_coveredskippedSame as baseline
raw status skip · severity error
Skippedsignal_fixtures_validskippedSame as baseline
raw status skip · severity error
Not applicablespec_lint_exemplar_missing_on_newnot_applicableNot requiredAdvisorySame as baseline
raw status info · severity warning
Not applicablespec_lint_hazard_consequencenot_applicableNot requiredAdvisorySame as baseline
raw status info · severity warning
Not applicablespec_lint_ki_banned_markersnot_applicableNot requiredAdvisorySame as baseline
raw status info · severity warning
Skippedspec_lint_mediation_contract_contradictedskippedSame as baseline
raw status skip · severity warning
Skippedspec_lint_na_denies_property_enforced_unevenlyskippedSame as baseline
raw status skip · severity warning
Skippedspec_lint_na_denies_property_the_code_managesskippedSame as baseline
raw status skip · severity warning
Not applicablesurface_coveragenot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicableunresearched_p0_vectorsnot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicablevector_campaign_closurenot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicablevector_campaign_hygienenot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Passacceptance_criteria_witnessedpassedSame as baseline
raw status pass · severity warning
Passacceptance_witness_qualitypassedSame as baseline
raw status pass · severity warning
Passambiguity_reviewedpassedSame as baseline
raw status pass · severity warning
Passannotation_validitypassedSame as baseline
raw status pass · severity error
Passapproval_motivation_presentpassedSame as baseline
raw status pass · severity error
Passapprovals_currentpassedSame as baseline
raw status pass · severity error
Passassume_contract_consistencypassedSame as baseline
raw status pass · severity warning
Passauthored_delta_expectedpassedSame as baseline
raw status pass · severity warning
Passautolink_cleanpassedSame as baseline
raw status pass · severity warning
Passbehavioral_implications_verifiedpassedSame as baseline
raw status pass · severity warning
Passbuild_passespassedSame as baseline
raw status pass · severity error
Passcatalog_completenesspassedSame as baseline
raw status pass · severity error
Passcatalog_semantic_bindings_reviewedpassedSame as baseline
raw status pass · severity warning
Passcatalog_version_pinnedpassedSame as baseline
raw status pass · severity warning
Passchange_evidence_completepassedSame as baseline
raw status pass · severity warning
Passchange_record_landspassedSame as baseline
raw status pass · severity warning
Passchanged_requirements_reviewedpassedSame as baseline
raw status pass · severity error
Passcircular_deps_cleanpassedSame as baseline
raw status pass · severity error
Passcode_mcdc_coveragepassedSame as baseline
raw status pass · severity warning
Passcode_mcdc_measurepassedSame as baseline
raw status pass · severity error
Passcode_predicates_modeledpassedSame as baseline
raw status pass · severity warning
Passcode_signal_obligations_reviewedpassedSame as baseline
raw status pass · severity warning
Passcode_signal_suppressions_reviewedpassedSame as baseline
raw status pass · severity warning
Passcode_signal_unbindablepassedSame as baseline
raw status pass · severity warning
Passconsistency_pair_coveragepassedSame as baseline
raw status pass · severity warning
Passcontract_alignment_cleanpassedSame as baseline
raw status pass · severity warning
Passcoverage_metpassedSame as baseline
raw status pass · severity warning
Passcoverage_thresholdpassedSame as baseline
raw status pass · severity warning
Passcross_component_cleanpassedSame as baseline
raw status pass · severity warning
Passcross_level_completepassedSame as baseline
raw status pass · severity warning
Passcross_spec_consistency_cleanpassedSame as baseline
raw status pass · severity warning
Passcvss_severity_consistentpassedSame as baseline
raw status pass · severity warning
Passdata_constraint_z3_coveragepassedSame as baseline
raw status pass · severity warning
Passdata_constraints_completepassedSame as baseline
raw status pass · severity warning
Passdecomposition_reviewedpassedSame as baseline
raw status pass · severity warning
Passdeletion_without_retirementpassedSame as baseline
raw status pass · severity error
Passdescription_delta_reviewedpassedSame as baseline
raw status pass · severity error
Passdifferential_conformancepassedSame as baseline
raw status pass · severity warning
Passdisclosure_safepassedSame as baseline
raw status pass · severity error
Passdocumentation_enforcedpassedSame as baseline
raw status pass · severity warning
Passevidence_diversitypassedSame as baseline
raw status pass · severity warning
Passfixture_staleness_cleanpassedSame as baseline
raw status pass · severity warning
Passflip_fixtures_existpassedSame as baseline
raw status pass · severity warning
Passflip_test_alignmentpassedSame as baseline
raw status pass · severity warning
Passformalization_lemma_verdict_consistencypassedSame as baseline
raw status pass · severity warning
Passfuzz_evidence_carrier_validpassedSame as baseline
raw status pass · severity warning
Passgaps_cleanpassedSame as baseline
raw status pass · severity warning
Passhigh_severity_reproducer_gradepassedSame as baseline
raw status pass · severity error
Passintegration_evidence_witnessedpassedSame as baseline
raw status pass · severity warning
Passinterface_contract_duplicatespassedSame as baseline
raw status pass · severity warning
Passinterface_coveragepassedSame as baseline
raw status pass · severity warning
Passinterface_formalization_completepassedSame as baseline
raw status pass · severity warning
Passinterface_staleness_cleanpassedSame as baseline
raw status pass · severity warning
Passknown_issue_affected_requirements_presentpassedSame as baseline
raw status pass · severity warning
Passknown_issue_mirror_anchor_relevantpassedSame as baseline
raw status pass · severity warning
Passknown_issue_poc_quality_effectivepassedSame as baseline
raw status pass · severity warning
Passknown_issue_reproducer_consistentpassedSame as baseline
raw status pass · severity warning
Passknown_issue_reproducer_present_and_resolvespassedSame as baseline
raw status pass · severity warning
Passknown_issue_security_remediation_presentpassedSame as baseline
raw status pass · severity warning
Passknown_issue_severity_prose_consistentpassedSame as baseline
raw status pass · severity warning
Passknown_issues_reviewedpassedSame as baseline
raw status pass · severity warning
Passl0_stakeholder_completepassedSame as baseline
raw status pass · severity error
Passl1_system_completepassedSame as baseline
raw status pass · severity error
Passl2_software_completepassedSame as baseline
raw status pass · severity error
Passlevels_connectedpassedSame as baseline
raw status pass · severity error
Passlint_cleanpassedSame as baseline
raw status pass · severity warning
Passmcdc_coveragepassedSame as baseline
raw status pass · severity warning
Passmcdc_ignore_classifiedpassedSame as baseline
raw status pass · severity warning
Passmcdc_known_issue_disposition_stalepassedSame as baseline
raw status pass · severity error
Passmcdc_verifies_witnessespassedSame as baseline
raw status pass · severity warning
Passmcdc_witness_drives_codepassedSame as baseline
raw status pass · severity warning
Passmirror_completepassedSame as baseline
raw status pass · severity warning
Passmirror_stalepassedSame as baseline
raw status pass · severity warning
Passnegative_path_witness_requiredpassedSame as baseline
raw status pass · severity error
Passnonbool_inputs_constrainedpassedSame as baseline
raw status pass · severity warning
Passobligation_baselinepassedSame as baseline
raw status pass · severity warning
Passobligation_completenesspassedSame as baseline
raw status pass · severity error
Passobligation_decomposition_completepassedSame as baseline
raw status pass · severity warning
Passobligation_delegation_resolvespassedSame as baseline
raw status pass · severity error
Passobligation_enforcement_backedpassedSame as baseline
raw status pass · severity warning
Passobligation_evidence_completepassedSame as baseline
raw status pass · severity warning
Passobligation_profile_evidence_completepassedSame as baseline
raw status pass · severity warning
Passobligation_suppression_rationalepassedSame as baseline
raw status pass · severity warning
Passobligation_suppression_reviewerpassedSame as baseline
raw status pass · severity warning
Passobligation_witness_groundedpassedSame as baseline
raw status pass · severity warning
Passorphan_code_cleanpassedSame as baseline
raw status pass · severity warning
Passorphan_tests_cleanpassedSame as baseline
raw status pass · severity warning
Passpartition_evidence_completepassedSame as baseline
raw status pass · severity warning
Passproof_complexity_cleanpassedSame as baseline
raw status pass · severity warning
Passproperty_fixtures_existpassedSame as baseline
raw status pass · severity warning
Passquality_cleanpassedSame as baseline
raw status pass · severity warning
Passretired_cleanuppassedSame as baseline
raw status pass · severity warning
Passrole_prompt_hygienepassedSame as baseline
raw status pass · severity warning
Passrole_references_resolvepassedSame as baseline
raw status pass · severity warning
Passsecurity_relevance_consistentpassedSame as baseline
raw status pass · severity warning
Passslow_tests_cleanpassedSame as baseline
raw status pass · severity error
Passsoftware_formalization_completepassedSame as baseline
raw status pass · severity warning
Passsolver_latency_cleanpassedSame as baseline
raw status pass · severity warning
Passsolver_modeling_opportunitypassedSame as baseline
raw status pass · severity warning
Passspec_lint_ac_inverse_coveragepassedSame as baseline
raw status pass · severity warning
Passspec_lint_ac_subset_of_satisfiespassedSame as baseline
raw status pass · severity warning
Passspec_lint_acceptance_review_currentpassedSame as baseline
raw status pass · severity warning
Passspec_lint_annotation_vs_authoredpassedSame as baseline
raw status pass · severity warning
Passspec_lint_assumption_dispositionpassedSame as baseline
raw status pass · severity warning
Passspec_lint_audit_ignore_reasonpassedSame as baseline
raw status pass · severity warning
Passspec_lint_auto_modifier_without_humanpassedSame as baseline
raw status pass · severity warning
Passspec_lint_circularity_self_citationpassedSame as baseline
raw status pass · severity warning
Passspec_lint_complementary_flags_uninteractedpassedSame as baseline
raw status pass · severity warning
Passspec_lint_data_constraint_parseablepassedSame as baseline
raw status pass · severity error
Passspec_lint_decomposition_adds_refinementpassedSame as baseline
raw status pass · severity warning
Passspec_lint_degenerate_input_obligation_missingpassedSame as baseline
raw status pass · severity warning
Passspec_lint_evidence_tag_existspassedSame as baseline
raw status pass · severity warning
Passspec_lint_formalization_qualitypassedSame as baseline
raw status pass · severity warning
Passspec_lint_fretish_bare_responsepassedSame as baseline
raw status pass · severity warning
Passspec_lint_fretish_tautologypassedSame as baseline
raw status pass · severity warning
Passspec_lint_governance_yaml_data_pathspassedSame as baseline
raw status pass · severity warning
Passspec_lint_hallucinated_symbolspassedSame as baseline
raw status pass · severity error
Passspec_lint_hazard_review_currentpassedSame as baseline
raw status pass · severity warning
Passspec_lint_id_shape_canonicalpassedSame as baseline
raw status pass · severity error
Passspec_lint_inline_impact_review_driftpassedSame as baseline
raw status pass · severity warning
Passspec_lint_input_domain_obligation_missingpassedSame as baseline
raw status pass · severity warning
Passspec_lint_ki_attacker_coherencepassedSame as baseline
raw status pass · severity warning
Passspec_lint_ki_history_chronologypassedSame as baseline
raw status pass · severity warning
Passspec_lint_ki_open_actionabilitypassedSame as baseline
raw status pass · severity warning
Passspec_lint_ki_prose_shapepassedSame as baseline
raw status pass · severity warning
Passspec_lint_ki_stale_status_refspassedSame as baseline
raw status pass · severity warning
Passspec_lint_numbering_gaps_has_tombstonepassedSame as baseline
raw status pass · severity warning
Passspec_lint_obligation_checklist_emptypassedSame as baseline
raw status pass · severity warning
Passspec_lint_obligation_coverage_gappassedSame as baseline
raw status pass · severity warning
Passspec_lint_operational_invariant_varpassedSame as baseline
raw status pass · severity warning
Passspec_lint_parent_field_vs_satisfiespassedSame as baseline
raw status pass · severity warning
Passspec_lint_pinned_delimiter_undispositionedpassedSame as baseline
raw status pass · severity warning
Passspec_lint_plan_of_record_currentpassedSame as baseline
raw status pass · severity warning
Passspec_lint_prose_ste100passedSame as baseline
raw status pass · severity warning
Passspec_lint_reject_combination_composition_witnessedpassedSame as baseline
raw status pass · severity warning
Passspec_lint_req_type_vs_descriptionpassedSame as baseline
raw status pass · severity error
Passspec_lint_review_cadence_currentpassedSame as baseline
raw status pass · severity warning
Passspec_lint_satisfies_target_retiredpassedSame as baseline
raw status pass · severity warning
Passspec_lint_shared_state_rebuildpassedSame as baseline
raw status pass · severity warning
Passspec_lint_source_doc_hedgingpassedSame as baseline
raw status pass · severity warning
Passspec_lint_source_native_yaml_tracepassedSame as baseline
raw status pass · severity warning
Passspec_lint_spec_conformance_review_groundedpassedSame as baseline
raw status pass · severity error
Passspec_lint_status_vs_reviewpassedSame as baseline
raw status pass · severity warning
Passspec_lint_sw_informal_witnessedpassedSame as baseline
raw status pass · severity error
Passspec_lint_threat_surface_presentpassedSame as baseline
raw status pass · severity warning
Passspec_lint_trace_review_evidence_currentpassedSame as baseline
raw status pass · severity error
Passspec_lint_unjoined_effect_halvespassedSame as baseline
raw status pass · severity warning
Passspec_lint_yaml_escape_artefactpassedSame as baseline
raw status pass · severity error
Passsrs_generatespassedSame as baseline
raw status pass · severity error
Passsrs_no_uncheckedpassedSame as baseline
raw status pass · severity error
Passstakeholder_acceptance_criteriapassedSame as baseline
raw status pass · severity warning
Passstakeholder_requirements_existpassedSame as baseline
raw status pass · severity error
Passsubmission_validatedpassedSame as baseline
raw status pass · severity error
Passsuspect_cleanpassedSame as baseline
raw status pass · severity error
Passsys_has_software_childpassedSame as baseline
raw status pass · severity warning
Passsystem_formalization_completepassedSame as baseline
raw status pass · severity error
Passsystem_requirements_linkedpassedSame as baseline
raw status pass · severity error
Passtable_completepassedSame as baseline
raw status pass · severity warning
Passtable_consistentpassedSame as baseline
raw status pass · severity warning
Passtable_equivalencepassedSame as baseline
raw status pass · severity warning
Passtest_command_propagates_failurepassedSame as baseline
raw status pass · severity warning
Passtests_passpassedSame as baseline
raw status pass · severity error
Passtrivial_lemmapassedSame as baseline
raw status pass · severity warning
Passtrusted_outputs_from_untrusted_inputspassedSame as baseline
raw status pass · severity warning
Passunder_modeled_requirements_cleanpassedSame as baseline
raw status pass · severity warning
Passvacuity_cleanpassedSame as baseline
raw status pass · severity warning
Passvalidate_passespassedSame as baseline
raw status pass · severity error
Passvariable_driftpassedSame as baseline
raw status pass · severity warning
Passvariable_orphans_cleanpassedSame as baseline
raw status pass · severity warning
Passvariables_declaredpassedSame as baseline
raw status pass · severity error
Passverification_chain_completepassedSame as baseline
raw status pass · severity warning
Passverification_plan_evidencepassedSame as baseline
raw status pass · severity warning
Passverification_scope_completepassedSame as baseline
raw status pass · severity warning
Passverification_state_consistentpassedSame as baseline
raw status pass · severity warning
Passverify_passespassedSame as baseline
raw status pass · severity error
Passwaivers_reviewedpassedSame as baseline
raw status pass · severity error
Passz3_cross_layer_consistencypassedSame as baseline
raw status pass · severity warning
Passz3_properties_verifiedpassedSame as baseline
raw status pass · severity warning

How this evidence was producedunverified producer · no evidence records attached

Unverified producer — not accepted

Evaluated as this PR applied onto the audit baseline 41076fd4 (commit 04bab1c4), not the PR's own branch — findings reflect the PR's change on the audited code. Freshness still tracks the PR head it represents, 09bfcda4.

Repository: https://github.com/omacom/omarchy
Pull request: #14054
Evaluated tree: Synthetic mergesynthetic_merge
PR head commit: 09bfcda4de58db8ef2b1208f9d1b3d102006d6c4
Evaluated commit: 04bab1c4ecf40fa9f419eeb2642e3cf3fbadc7d0
Audit baseline: 41076fd4b7affccd1f8e1d9e8f750ad20435d915
Spec revision: 9385a5328e4906c7591c6699d576bad719916756
Policy revision: 41076fd4b7affccd1f8e1d9e8f750ad20435d915
Package digest: sha256:2c8cea8dd0de702e86670f1355f66da5fba56b2592869c55e13f3eb0ebb3f0a2

Schema version: reqproof.evidence-package.v1
Canonicalization: v1
Engine version: 0.1.0-dev
Assembler version: 0.1.0-dev+g8cac9cff8c34
Package identity: epkg-da7cf56895252f83b5f4effad6c1ac38ebac123ad097d5d8ba1231b45cc78ff1
Assembled: Oct 3, 2026 · 2 weeks ago
Canonical digest: sha256:2c8cea8dd0de702e86670f1355f66da5fba56b2592869c55e13f3eb0ebb3f0a2

Proof

History & reports

Reference