Proof Portal

Omarchy

ProbeLabs65 findings · 95 requirements

A proof layer — requirements, tests and verified fixes — for two of Omarchy's subsystems: the application menu (launcher scripts, QML model, JSONC config, search and selection) and the lock screen (lock scripts, QML, PAM authentication). Scope is deliberately limited to those components of omacom/omarchy; the rest of the distribution is not covered.

PR #7564

Evidence package#75647b49d0bb606dSynthetic merge tree

omarchy #7564

https://github.com/omacom/omarchy

Delivered by an unverified producer — not accepted as assurance.

← Review-by-exception view

Medium riskEngine readinessNot assessed — next: more evidenceunverified producer

AcceptingMake the keybindings menu's Lua bind scan safe against load-time config reads (linked #12052, #12124, #7025). No requirement was added or changed — the intent is declared only in the PR.
Affects2 files · 2 requirements in 1 area (2 via the changed files) · mapping is file-level, so this is an upper bound · 1 changed file is outside the verification scope.
Works?Shown: all 2 behavioral claims observed passing; coverage of 1 changed file was not measured.
Unresolved1 missing evidence.
DecisionChange author: produce the missing execution evidence — evaluated at 60750dc (head 7b49d0b, base 1e43373).

What am I accepting?

Intended change

“Make the keybindings menu's Lua bind scan safe against load-time config reads”Declared by the change request· reason:#12052 #12124 #7025

The author's description (excerpt)

## Problem

Approved intent (spec changes)

No requirement is added, modified or deleted by this change — the intent is not codified in the spec.

Behavior that must be preserved

2 requirements are in reach (2 whose traced file changed); none is intended to change — each must keep holding. Listed by area under What could it affect? ↓

What could it affect?

2 requirements · 1 area

Changed code

Modifiedbuild_lua_bind_cache()modifiedfile-level trace onlykeybindings_cache_key()modifiedfile-level trace only
Modifiedmake_home()addedno requirementcache_has_ssh()deletedscan_has_ssh()addedno requirement
Added

1 changed file is outside the verification scope (e.g. reproducers) — listed for transparency.

Customer promises reached2

Code changed (file-level — an upper bound) 2

Binds Hyprland reports as dispatcher __lua are shown with resolved keys from the…menuSW-REQ-260922-0W96
A code:N binding shows the keysym resolved from the compiled keymapmenuSW-REQ-260922-9DMS

Important boundaries

No interface contract is recorded as crossed by this change.

Uncertainty in this analysis

one coherent change · code is mapped to requirements by whole file, so “reached” is an upper bound

8 analysis limits · how this was computed

Engine note (spec clusters): All 2 touched requirement(s) are related in the intent graph (satisfies/parent, sibling or shared component).

Scope method: changed units from review.diff (function-granular where a parser exists, else file-granular) traced against the requirements' implemented_by/verified_by targets and local annotations; touched requirements clustered in the intent graph (satisfies/parent incl. siblings under a parent with <= 20 children, shared component, interface contracts); uncodified connections from call-level impact paths (review.changes impactPath); removed-code traces from trace targets and removed diff lines

Function-level mapping comes from trace targets path:symbol / line ranges (authored + derived) and function-local annotations; a whole-file trace is file-level (weak) and says nothing about which function a requirement needs.
Intent relations: requirement level = satisfies/parent or siblings under a parent with <= 20 children; component level = shared component (incl. traces.components); contract level = an interface requirement naming both components. A missing spec edge can make a real dependency look uncodified, and a broad contract can make an uncodified dependency look related — every candidate is a question for a reviewer, not a verdict on the code or the spec.
Removed-code traces: targets naming a removed/renamed/moved function or a deleted file, and requirement ids cited on removed diff lines that the evaluated file no longer cites. remainingTraces counts the requirement's other code targets at the evaluated revision without re-checking that each still resolves.
Renamed/moved detection is best effort: a removed and an added function with the same name in different files are "moved"; a different name with >= 80% identical normalized body lines (>= 3 lines) is "renamed"; anything else is removed + added.
Scope clusters are seeded only by directly touched requirements (spec changes and code_changed); behavior_affected requirements are what the change reaches and are judged by the uncodified-connection rule instead.
Uncodified connections need call-level impact (review.effects — C/C++ only today): this package has none, so NO uncodified connection could be detected. Absence of such candidates proves nothing here.
Units are function-granular only where a parser extracts function boundaries (tree-sitter languages, plus C/C++ function-like macros); other changed files are one file-granular unit, and hunks outside any function are attributed to the file only when no function of that file changed.
When a changed function is traced only at FILE level, every requirement of its file is a from-side seed: a relation through any of them counts as codified, so a coarse trace can MASK an uncodified connection (and inflate scope clusters — see coarse_trace).

Why should I believe it works?

observed results only — AI opinion never counts as evidence

Behavioral claims → observed results

All 2 claims observed passing.

The 2 claims, as a table

Requirement	Claim	Observed	Tests	Disclosures
SW-REQ-260922-0W96	Still holds	Observed passing	3✓ 0✗ 0∅ 0?
SW-REQ-260922-9DMS	Still holds	Observed passing	2✓ 0✗ 0∅ 0?

Changed-code coverage

0 of 0 changed decision lines reached by tests

Not measured for bin/omarchy-menu-keybindings.

What remains unresolved?

5 open disclosures — each listed once, introduced first

Introduced failures0

None outside the other groups below.

Missing evidence1

mediumMissing evidencedrives the next decision
No test of the requirements in scope is tagged with an obligation class (<requirement>:<class>:<evidence>), so none of the 2 obligation cells in scope has an observed outcome.
testResults

Spec questions and disagreements— the engine raises · an AI may argue · a human decides

The code and the spec agree — no code-vs-spec question was raised for this change.

Limitations

Coverage of some changed files was not measured by a fresh artifact.
1 record
1 changed file is outside the approved verification scope, so the audit does not verify it; listed for transparency.
1 record
13 checks were skipped by configuration and produced no verdict.
13 records
build_matrix_complete description_grammar_enumeration_complete documentation_coverage documented_claim_verified dual_path_guards_equivalent known_issue_closure_platform_bound lemma_binding_freshness no_authored_change_surface_reviewed security_surface_covered signal_fixtures_valid spec_lint_mediation_contract_contradicted spec_lint_na_denies_property_enforced_unevenly spec_lint_na_denies_property_the_code_manages
Change effects (new calls, side effects, reachability) were not analyzed for this change.
1 record
review.effects

Which of the 3 relevant tests run the changed code is unknown — no test↔changed-code mapping was measured. The tests → audit trail
The impact analysis has 8 stated limits — listed under What could it affect? ↑

Exceptions and weakened protections

None — the PR leaves the approved policy unchanged; no suppression or waiver is recorded.

Not compared with a baseline run, so nothing is shown as pre-existing.

What decision is mine?

Next decision

More evidencebecause execution evidence is missing

Produce the missing execution evidence (1 gap) for the claims this change touches.

Driven by 1 item:

No test of the requirements in scope is tagged with an obligation class (<requirement>:<class>:<evidence>), so none of the 2 obligation cells in scope has an observed outcome. ↑

Required authority

Change author — under the approved policy at 1e43373287

Accepted identities: GitHub login or portal user · enforced by the portal / GitHub

Evaluated revision

Evaluated: 60750dc8e7baSynthetic merge
PR head: 7b49d0bb606d
Base: 1e43373287afquattro-proof
Policy: sha256:19ad4c0c6f…

Compared against base audit run-f5b0e01eb640 at 1e43373287af — failed checks are split into pre-existing vs introduced.

An immutable record of this revision — freshness is judged on the PR page.

Producer not verified (evidence is informational, not assurance). Provenance

Acceptance: none recorded in this evidence. Readiness is not acceptance, and the merge state is GitHub's.

Audit trail

the verbatim record — every disclosure, the AI review, risk rules, call routes, tests, audit checks, provenance

Every disclosure, by consequence0 block · 1 prevent ready · 0 need judgement · 4 for information

0 block · 1 prevent ready · 0 need judgement · 4 for information

Prevents a ready verdict1— Readiness can't be better than “not assessed” while any of these is open.

mediumMissing evidencedrives the next decision
No test of the requirements in scope is tagged with an obligation class (<requirement>:<class>:<evidence>), so none of the 2 obligation cells in scope has an observed outcome.
testResults

For information4— Shown for the record — no effect on readiness.

lowMissing evidence
Coverage of some changed files was not measured by a fresh artifact.
infoMissing evidence
1 changed file is outside the approved verification scope, so the audit does not verify it; listed for transparency.
infoMissing evidence
13 checks were skipped by configuration and produced no verdict.
build_matrix_complete description_grammar_enumeration_complete documentation_coverage documented_claim_verified dual_path_guards_equivalent known_issue_closure_platform_bound
7 more records
lemma_binding_freshness no_authored_change_surface_reviewed security_surface_covered signal_fixtures_valid spec_lint_mediation_contract_contradicted spec_lint_na_denies_property_enforced_unevenly spec_lint_na_denies_property_the_code_manages
infoPartial input
Change effects (new calls, side effects, reachability) were not analyzed for this change.
review.effects

Routine evidence:178 checks passed · 27 advisory · 1 not applicable · 3 verifying tests passed · 2 claims observed passing

AI review — supporting commentarynone recorded for this package

No AI review has been recorded for this package.

Why the engine rates this risk level2 rules fired

1 changed source file(s) not measured by any fresh coverage artifact: bin/omarchy-menu-keybindings.
5 changed function(s) have no function-level requirement trace: bin/omarchy-menu-keybindings:build_lua_bind_cache (modified), bin/omarchy-menu-keybindings:keybindings_cache_key (modified), pocs/crs-260930-jvx8-c01.sh:make_home (added), pocs/crs-260930-jvx8-c01.sh:cache_has_ssh (deleted), pocs/crs-260930-jvx8-c01.sh:scan_has_ssh (added); 2 requirement(s) match only at file level (possibly affected).

Relevant tests3

Passed
test/shell.d/keybindings-menu-test.sh
unknown whether it runs the changed codeSW-REQ-260922-0W96SW-REQ-260922-9DMS
Passed
test/shell.d/keybindings-menu-test.sh:1:keybindings-menu-test.sh:1
test/shell.d/keybindings-menu-test.shunknown whether it runs the changed codeSW-REQ-260922-0W96SW-REQ-260922-9DMS
Passed
test/shell.d/menu-keybindings-lua-scan-test.sh
unknown whether it runs the changed codeSW-REQ-260922-0W96

Audit checks219 project-wide

219 project-wide audit checks (178 passed · 13 skipped or not run · 28 not applicable) — the rest are unchanged against the baseline run. Open Audit checks

All 219 checks exactly as recorded in this package

Not applicableaccepted_risks_reviewednot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicableapproved_guarantee_ki_conflictnot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicableassumptions_statusnot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Skippedbuild_matrix_completeskippedSame as baseline
raw status skip · severity warning
Not applicablecode_signal_deadline_cast_unreviewednot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicableconcern_adjudicatednot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicabledefect_review_currentnot_applicableNot requiredAdvisorySame as baseline
raw status info · severity warning
Not applicabledeployment_tvl_verifiednot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Skippeddescription_grammar_enumeration_completeskippedSame as baseline
raw status skip · severity warning
Skippeddocumentation_coverageskippedSame as baseline
raw status skip · severity warning
Skippeddocumented_claim_verifiedskippedSame as baseline
raw status skip · severity warning
Skippeddual_path_guards_equivalentskippedSame as baseline
raw status skip · severity warning
Not applicablefailing_test_blocks_approvalnot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicablehigh_severity_obligation_without_vectornot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Skippedknown_issue_closure_platform_boundskippedSame as baseline
raw status skip · severity error
Not applicableknown_issue_completenot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicableknown_issue_platform_coveragenot_applicableNot requiredAdvisorySame as baseline
raw status skip · severity warning
Not applicableknown_issue_recheck_duenot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicableknown_issue_sibling_dispositionnot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicableknown_issue_template_transfernot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Skippedlemma_binding_freshnessskippedSame as baseline
raw status skip · severity warning
Not applicablelemma_branch_coveragenot_applicableNot requiredSame as baseline
raw status skip · severity warning
Skippedno_authored_change_surface_reviewedskippedSame as baseline
raw status skip · severity warning
Not applicablepoc_quality_checkednot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicableproblem_report_class_mitigation_evidencenot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicableproblem_reports_reviewednot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicableprocess_checklistnot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicableproperty_based_test_coveragenot_applicableNot requiredAdvisorySame as baseline
raw status warn · severity warning
Not applicableresidual_kill_hygienenot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Skippedsecurity_surface_coveredskippedSame as baseline
raw status skip · severity error
Skippedsignal_fixtures_validskippedSame as baseline
raw status skip · severity error
Not applicablespec_lint_exemplar_missing_on_newnot_applicableNot requiredAdvisorySame as baseline
raw status info · severity warning
Not applicablespec_lint_hazard_consequencenot_applicableNot requiredAdvisorySame as baseline
raw status info · severity warning
Not applicablespec_lint_ki_banned_markersnot_applicableNot requiredAdvisorySame as baseline
raw status info · severity warning
Skippedspec_lint_mediation_contract_contradictedskippedSame as baseline
raw status skip · severity warning
Skippedspec_lint_na_denies_property_enforced_unevenlyskippedSame as baseline
raw status skip · severity warning
Skippedspec_lint_na_denies_property_the_code_managesskippedSame as baseline
raw status skip · severity warning
Not applicablesurface_coveragenot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicableunresearched_p0_vectorsnot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicablevector_campaign_closurenot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicablevector_campaign_hygienenot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Passacceptance_criteria_witnessedpassedSame as baseline
raw status pass · severity warning
Passacceptance_witness_qualitypassedSame as baseline
raw status pass · severity warning
Passambiguity_reviewedpassedSame as baseline
raw status pass · severity warning
Passannotation_validitypassedSame as baseline
raw status pass · severity error
Passapproval_motivation_presentpassedSame as baseline
raw status pass · severity error
Passapprovals_currentpassedSame as baseline
raw status pass · severity error
Passassume_contract_consistencypassedSame as baseline
raw status pass · severity warning
Passauthored_delta_expectedpassedSame as baseline
raw status pass · severity warning
Passautolink_cleanpassedSame as baseline
raw status pass · severity warning
Passbehavioral_implications_verifiedpassedSame as baseline
raw status pass · severity warning
Passbuild_passespassedSame as baseline
raw status pass · severity error
Passcatalog_completenesspassedSame as baseline
raw status pass · severity error
Passcatalog_semantic_bindings_reviewedpassedSame as baseline
raw status pass · severity warning
Passcatalog_version_pinnedpassedSame as baseline
raw status pass · severity warning
Passchange_evidence_completepassedSame as baseline
raw status pass · severity warning
Passchange_record_landspassedSame as baseline
raw status pass · severity warning
Passchanged_requirements_reviewedpassedSame as baseline
raw status pass · severity error
Passcircular_deps_cleanpassedSame as baseline
raw status pass · severity error
Passcode_mcdc_coveragepassedSame as baseline
raw status pass · severity warning
Passcode_mcdc_measurepassedSame as baseline
raw status pass · severity error
Passcode_predicates_modeledpassedSame as baseline
raw status pass · severity warning
Passcode_signal_obligations_reviewedpassedSame as baseline
raw status pass · severity warning
Passcode_signal_suppressions_reviewedpassedSame as baseline
raw status pass · severity warning
Passcode_signal_unbindablepassedSame as baseline
raw status pass · severity warning
Passconsistency_pair_coveragepassedSame as baseline
raw status pass · severity warning
Passcontract_alignment_cleanpassedSame as baseline
raw status pass · severity warning
Passcoverage_metpassedSame as baseline
raw status pass · severity warning
Passcoverage_thresholdpassedSame as baseline
raw status pass · severity warning
Passcross_component_cleanpassedSame as baseline
raw status pass · severity warning
Passcross_level_completepassedSame as baseline
raw status pass · severity warning
Passcross_spec_consistency_cleanpassedSame as baseline
raw status pass · severity warning
Passcvss_severity_consistentpassedSame as baseline
raw status pass · severity warning
Passdata_constraint_z3_coveragepassedSame as baseline
raw status pass · severity warning
Passdata_constraints_completepassedSame as baseline
raw status pass · severity warning
Passdecomposition_reviewedpassedSame as baseline
raw status pass · severity warning
Passdeletion_without_retirementpassedSame as baseline
raw status pass · severity error
Passdescription_delta_reviewedpassedSame as baseline
raw status pass · severity error
Passdifferential_conformancepassedSame as baseline
raw status pass · severity warning
Passdisclosure_safepassedSame as baseline
raw status pass · severity error
Passdocumentation_enforcedpassedSame as baseline
raw status pass · severity warning
Passevidence_diversitypassedSame as baseline
raw status pass · severity warning
Passfixture_staleness_cleanpassedSame as baseline
raw status pass · severity warning
Passflip_fixtures_existpassedSame as baseline
raw status pass · severity warning
Passflip_test_alignmentpassedSame as baseline
raw status pass · severity warning
Passformalization_lemma_verdict_consistencypassedSame as baseline
raw status pass · severity warning
Passfuzz_evidence_carrier_validpassedSame as baseline
raw status pass · severity warning
Passgaps_cleanpassedSame as baseline
raw status pass · severity warning
Passhigh_severity_reproducer_gradepassedSame as baseline
raw status pass · severity error
Passintegration_evidence_witnessedpassedSame as baseline
raw status pass · severity warning
Passinterface_contract_duplicatespassedSame as baseline
raw status pass · severity warning
Passinterface_coveragepassedSame as baseline
raw status pass · severity warning
Passinterface_formalization_completepassedSame as baseline
raw status pass · severity warning
Passinterface_staleness_cleanpassedSame as baseline
raw status pass · severity warning
Passknown_issue_affected_requirements_presentpassedSame as baseline
raw status pass · severity warning
Passknown_issue_mirror_anchor_relevantpassedSame as baseline
raw status pass · severity warning
Passknown_issue_poc_quality_effectivepassedSame as baseline
raw status pass · severity warning
Passknown_issue_reproducer_consistentpassedSame as baseline
raw status pass · severity warning
Passknown_issue_reproducer_present_and_resolvespassedSame as baseline
raw status pass · severity warning
Passknown_issue_security_remediation_presentpassedSame as baseline
raw status pass · severity warning
Passknown_issue_severity_prose_consistentpassedSame as baseline
raw status pass · severity warning
Passknown_issues_reviewedpassedSame as baseline
raw status pass · severity warning
Passl0_stakeholder_completepassedSame as baseline
raw status pass · severity error
Passl1_system_completepassedSame as baseline
raw status pass · severity error
Passl2_software_completepassedSame as baseline
raw status pass · severity error
Passlevels_connectedpassedSame as baseline
raw status pass · severity error
Passlint_cleanpassedSame as baseline
raw status pass · severity warning
Passmcdc_coveragepassedSame as baseline
raw status pass · severity warning
Passmcdc_ignore_classifiedpassedSame as baseline
raw status pass · severity warning
Passmcdc_known_issue_disposition_stalepassedSame as baseline
raw status pass · severity error
Passmcdc_verifies_witnessespassedSame as baseline
raw status pass · severity warning
Passmcdc_witness_drives_codepassedSame as baseline
raw status pass · severity warning
Passmirror_completepassedSame as baseline
raw status pass · severity warning
Passmirror_stalepassedSame as baseline
raw status pass · severity warning
Passnegative_path_witness_requiredpassedSame as baseline
raw status pass · severity error
Passnonbool_inputs_constrainedpassedSame as baseline
raw status pass · severity warning
Passobligation_baselinepassedSame as baseline
raw status pass · severity warning
Passobligation_completenesspassedSame as baseline
raw status pass · severity error
Passobligation_decomposition_completepassedSame as baseline
raw status pass · severity warning
Passobligation_delegation_resolvespassedSame as baseline
raw status pass · severity error
Passobligation_enforcement_backedpassedSame as baseline
raw status pass · severity warning
Passobligation_evidence_completepassedSame as baseline
raw status pass · severity warning
Passobligation_profile_evidence_completepassedSame as baseline
raw status pass · severity warning
Passobligation_suppression_rationalepassedSame as baseline
raw status pass · severity warning
Passobligation_suppression_reviewerpassedSame as baseline
raw status pass · severity warning
Passobligation_witness_groundedpassedSame as baseline
raw status pass · severity warning
Passorphan_code_cleanpassedSame as baseline
raw status pass · severity warning
Passorphan_tests_cleanpassedSame as baseline
raw status pass · severity warning
Passpartition_evidence_completepassedSame as baseline
raw status pass · severity warning
Passproof_complexity_cleanpassedSame as baseline
raw status pass · severity warning
Passproperty_fixtures_existpassedSame as baseline
raw status pass · severity warning
Passquality_cleanpassedSame as baseline
raw status pass · severity warning
Passretired_cleanuppassedSame as baseline
raw status pass · severity warning
Passrole_prompt_hygienepassedSame as baseline
raw status pass · severity warning
Passrole_references_resolvepassedSame as baseline
raw status pass · severity warning
Passsecurity_relevance_consistentpassedSame as baseline
raw status pass · severity warning
Passslow_tests_cleanpassedSame as baseline
raw status pass · severity error
Passsoftware_formalization_completepassedSame as baseline
raw status pass · severity warning
Passsolver_latency_cleanpassedSame as baseline
raw status pass · severity warning
Passsolver_modeling_opportunitypassedSame as baseline
raw status pass · severity warning
Passspec_lint_ac_inverse_coveragepassedSame as baseline
raw status pass · severity warning
Passspec_lint_ac_subset_of_satisfiespassedSame as baseline
raw status pass · severity warning
Passspec_lint_acceptance_review_currentpassedSame as baseline
raw status pass · severity warning
Passspec_lint_annotation_vs_authoredpassedSame as baseline
raw status pass · severity warning
Passspec_lint_assumption_dispositionpassedSame as baseline
raw status pass · severity warning
Passspec_lint_audit_ignore_reasonpassedSame as baseline
raw status pass · severity warning
Passspec_lint_auto_modifier_without_humanpassedSame as baseline
raw status pass · severity warning
Passspec_lint_circularity_self_citationpassedSame as baseline
raw status pass · severity warning
Passspec_lint_complementary_flags_uninteractedpassedSame as baseline
raw status pass · severity warning
Passspec_lint_data_constraint_parseablepassedSame as baseline
raw status pass · severity error
Passspec_lint_decomposition_adds_refinementpassedSame as baseline
raw status pass · severity warning
Passspec_lint_degenerate_input_obligation_missingpassedSame as baseline
raw status pass · severity warning
Passspec_lint_evidence_tag_existspassedSame as baseline
raw status pass · severity warning
Passspec_lint_formalization_qualitypassedSame as baseline
raw status pass · severity warning
Passspec_lint_fretish_bare_responsepassedSame as baseline
raw status pass · severity warning
Passspec_lint_fretish_tautologypassedSame as baseline
raw status pass · severity warning
Passspec_lint_governance_yaml_data_pathspassedSame as baseline
raw status pass · severity warning
Passspec_lint_hallucinated_symbolspassedSame as baseline
raw status pass · severity error
Passspec_lint_hazard_review_currentpassedSame as baseline
raw status pass · severity warning
Passspec_lint_id_shape_canonicalpassedSame as baseline
raw status pass · severity error
Passspec_lint_inline_impact_review_driftpassedSame as baseline
raw status pass · severity warning
Passspec_lint_input_domain_obligation_missingpassedSame as baseline
raw status pass · severity warning
Passspec_lint_ki_attacker_coherencepassedSame as baseline
raw status pass · severity warning
Passspec_lint_ki_history_chronologypassedSame as baseline
raw status pass · severity warning
Passspec_lint_ki_open_actionabilitypassedSame as baseline
raw status pass · severity warning
Passspec_lint_ki_prose_shapepassedSame as baseline
raw status pass · severity warning
Passspec_lint_ki_stale_status_refspassedSame as baseline
raw status pass · severity warning
Passspec_lint_numbering_gaps_has_tombstonepassedSame as baseline
raw status pass · severity warning
Passspec_lint_obligation_checklist_emptypassedSame as baseline
raw status pass · severity warning
Passspec_lint_obligation_coverage_gappassedSame as baseline
raw status pass · severity warning
Passspec_lint_operational_invariant_varpassedSame as baseline
raw status pass · severity warning
Passspec_lint_parent_field_vs_satisfiespassedSame as baseline
raw status pass · severity warning
Passspec_lint_pinned_delimiter_undispositionedpassedSame as baseline
raw status pass · severity warning
Passspec_lint_plan_of_record_currentpassedSame as baseline
raw status pass · severity warning
Passspec_lint_prose_ste100passedSame as baseline
raw status pass · severity warning
Passspec_lint_reject_combination_composition_witnessedpassedSame as baseline
raw status pass · severity warning
Passspec_lint_req_type_vs_descriptionpassedSame as baseline
raw status pass · severity error
Passspec_lint_review_cadence_currentpassedSame as baseline
raw status pass · severity warning
Passspec_lint_satisfies_target_retiredpassedSame as baseline
raw status pass · severity warning
Passspec_lint_shared_state_rebuildpassedSame as baseline
raw status pass · severity warning
Passspec_lint_source_doc_hedgingpassedSame as baseline
raw status pass · severity warning
Passspec_lint_source_native_yaml_tracepassedSame as baseline
raw status pass · severity warning
Passspec_lint_spec_conformance_review_groundedpassedSame as baseline
raw status pass · severity error
Passspec_lint_status_vs_reviewpassedSame as baseline
raw status pass · severity warning
Passspec_lint_sw_informal_witnessedpassedSame as baseline
raw status pass · severity error
Passspec_lint_threat_surface_presentpassedSame as baseline
raw status pass · severity warning
Passspec_lint_trace_review_evidence_currentpassedSame as baseline
raw status pass · severity error
Passspec_lint_unjoined_effect_halvespassedSame as baseline
raw status pass · severity warning
Passspec_lint_yaml_escape_artefactpassedSame as baseline
raw status pass · severity error
Passsrs_generatespassedSame as baseline
raw status pass · severity error
Passsrs_no_uncheckedpassedSame as baseline
raw status pass · severity error
Passstakeholder_acceptance_criteriapassedSame as baseline
raw status pass · severity warning
Passstakeholder_requirements_existpassedSame as baseline
raw status pass · severity error
Passsubmission_validatedpassedSame as baseline
raw status pass · severity error
Passsuspect_cleanpassedSame as baseline
raw status pass · severity error
Passsys_has_software_childpassedSame as baseline
raw status pass · severity warning
Passsystem_formalization_completepassedSame as baseline
raw status pass · severity error
Passsystem_requirements_linkedpassedSame as baseline
raw status pass · severity error
Passtable_completepassedSame as baseline
raw status pass · severity warning
Passtable_consistentpassedSame as baseline
raw status pass · severity warning
Passtable_equivalencepassedSame as baseline
raw status pass · severity warning
Passtest_command_propagates_failurepassedSame as baseline
raw status pass · severity warning
Passtests_passpassedSame as baseline
raw status pass · severity error
Passtrivial_lemmapassedSame as baseline
raw status pass · severity warning
Passtrusted_outputs_from_untrusted_inputspassedSame as baseline
raw status pass · severity warning
Passunder_modeled_requirements_cleanpassedSame as baseline
raw status pass · severity warning
Passvacuity_cleanpassedSame as baseline
raw status pass · severity warning
Passvalidate_passespassedSame as baseline
raw status pass · severity error
Passvariable_driftpassedSame as baseline
raw status pass · severity warning
Passvariable_orphans_cleanpassedSame as baseline
raw status pass · severity warning
Passvariables_declaredpassedSame as baseline
raw status pass · severity error
Passverification_chain_completepassedSame as baseline
raw status pass · severity warning
Passverification_plan_evidencepassedSame as baseline
raw status pass · severity warning
Passverification_scope_completepassedSame as baseline
raw status pass · severity warning
Passverification_state_consistentpassedSame as baseline
raw status pass · severity warning
Passverify_passespassedSame as baseline
raw status pass · severity error
Passwaivers_reviewedpassedSame as baseline
raw status pass · severity error
Passz3_cross_layer_consistencypassedSame as baseline
raw status pass · severity warning
Passz3_properties_verifiedpassedSame as baseline
raw status pass · severity warning

How this evidence was producedunverified producer · no evidence records attached

Unverified producer — not accepted

Evaluated as this PR applied onto the audit baseline 1e433732 (commit 60750dc8), not the PR's own branch — findings reflect the PR's change on the audited code. Freshness still tracks the PR head it represents, 7b49d0bb.

Repository: https://github.com/omacom/omarchy
Pull request: #7564
Evaluated tree: Synthetic mergesynthetic_merge
PR head commit: 7b49d0bb606d14a5e71cef6b11d85ab6b5b5f639
Evaluated commit: 60750dc8e7ba0875d409e237dfe7eac1cb372372
Audit baseline: 1e43373287afbd6dca4674ad463d5b5db7812358
Spec revision: d3d93b6844ebbaee618815cb08dcd0399ede04d1
Policy revision: 1e43373287afbd6dca4674ad463d5b5db7812358
Package digest: sha256:8b3f42ae0661735ab96751567e69256288cc4a33e8fade16791dc19d347afa25

Schema version: reqproof.evidence-package.v1
Canonicalization: v1
Engine version: 0.1.0-dev
Assembler version: 0.1.0-dev+geeb5981c
Package identity: epkg-7b6eeec0c497e972355be34afe59b2a25cb6cdd65c61a5f36b801e009cc0ef7e
Assembled: Oct 6, 2026 · 6 days ago
Canonical digest: sha256:8b3f42ae0661735ab96751567e69256288cc4a33e8fade16791dc19d347afa25

Proof

History & reports

Reference