Proof Portal

Omarchy

ProbeLabs65 findings · 95 requirements

A proof layer — requirements, tests and verified fixes — for two of Omarchy's subsystems: the application menu (launcher scripts, QML model, JSONC config, search and selection) and the lock screen (lock scripts, QML, PAM authentication). Scope is deliberately limited to those components of omacom/omarchy; the rest of the distribution is not covered.

PR #11851

Evidence package#1185103cbacb87d02Synthetic merge tree

omarchy #11851

https://github.com/omacom/omarchy

Delivered by an unverified producer — not accepted as assurance.

← Review-by-exception view

Medium riskEngine readinessNot assessed — next: human judgementunverified producer

AcceptingDispatch Lua function keybindings from the menu. The spec change codifies it: 1 requirement (1 added).
Affects2 files · 3 requirements in 1 area (1 changed in the spec, 2 via the changed files) · mapping is file-level, so this is an upper bound · 1 changed file is outside the verification scope.
Works?Shown: all 3 behavioral claims observed passing; coverage of 1 changed file was not measured.
Unresolved3 missing evidence · 7 spec questions.
DecisionReviewer: human judgement — evaluated at 8eb6c64 (head 03cbacb, base 1e43373).

What am I accepting?

Intended change

“Dispatch Lua function keybindings from the menu”Declared by the change request

The author's description (excerpt)

`Super + K` lists Lua function bindings, but selecting one did nothing. For example, a user who zooms in, searches for `Reset zoom`, and presses Enter gets no reset or message; the script exits 1. Five of the 232 default bindings on Omarchy 4.0.2 are affected: `Zoom in`, `Reset zoom`, and the three universal clipboard actions. User-defined function binds have the same failure.

Approved intent (spec changes)

addedA picked keybindings menu row for a Lua function bind calls the functionnew in this changeSW-REQ-261005-4MKB

Behavior that must be preserved

2 requirements are in reach (1 whose traced function changed, 1 whose traced file changed); none is intended to change — each must keep holding. Listed by area under What could it affect? ↓

What could it affect?

3 requirements · 1 area

Changed code

Modifiedlua_bind_identity()addeddynamic_bindings()modifiedfile-level trace onlykeybindings_cache_key()modifiedfile-level trace onlymark_lua_state()addedunmark_lua_state()addedcurrent_lua_function_ref()addedcall_lua_function_if_marked()addeddispatch_lua_function_binding()addeddispatch_binding()modified
Modifiedhyprctl()modifieduntraced
Modifiedlua_function_bind()addedno requirementuse_pick_file_picker()addedno requirementrun_keybindings()modifiedfile-level trace onlystub_hyprctl_dispatch()addedno requirementcalled()addedno requirementcalled_nothing()addedno requirementleft_no_mark()addedno requirementpick_from_menu()addedno requirement

1 changed file is outside the verification scope (e.g. reproducers) — listed for transparency.

Customer promises reached3

1 requirement changed by the spec itself — listed under What am I accepting? ↑

Code changed 1

Binds Hyprland reports as dispatcher __lua are shown with resolved keys from the…menuSW-REQ-260922-0W96

Code changed (file-level — an upper bound) 1

A code:N binding shows the keysym resolved from the compiled keymapmenuSW-REQ-260922-9DMS

Important boundaries

No interface contract is recorded as crossed by this change.

Uncertainty in this analysis

one coherent change · code is mapped to requirements by whole file, so “reached” is an upper bound

8 analysis limits · how this was computed

Engine note (spec clusters): All 3 touched requirement(s) are related in the intent graph (satisfies/parent, sibling or shared component).

Scope method: changed units from review.diff (function-granular where a parser exists, else file-granular) traced against the requirements' implemented_by/verified_by targets and local annotations; touched requirements clustered in the intent graph (satisfies/parent incl. siblings under a parent with <= 20 children, shared component, interface contracts); uncodified connections from call-level impact paths (review.changes impactPath); removed-code traces from trace targets and removed diff lines

Function-level mapping comes from trace targets path:symbol / line ranges (authored + derived) and function-local annotations; a whole-file trace is file-level (weak) and says nothing about which function a requirement needs.
Intent relations: requirement level = satisfies/parent or siblings under a parent with <= 20 children; component level = shared component (incl. traces.components); contract level = an interface requirement naming both components. A missing spec edge can make a real dependency look uncodified, and a broad contract can make an uncodified dependency look related — every candidate is a question for a reviewer, not a verdict on the code or the spec.
Removed-code traces: targets naming a removed/renamed/moved function or a deleted file, and requirement ids cited on removed diff lines that the evaluated file no longer cites. remainingTraces counts the requirement's other code targets at the evaluated revision without re-checking that each still resolves.
Renamed/moved detection is best effort: a removed and an added function with the same name in different files are "moved"; a different name with >= 80% identical normalized body lines (>= 3 lines) is "renamed"; anything else is removed + added.
Scope clusters are seeded only by directly touched requirements (spec changes and code_changed); behavior_affected requirements are what the change reaches and are judged by the uncodified-connection rule instead.
Uncodified connections need call-level impact (review.effects — C/C++ only today): this package has none, so NO uncodified connection could be detected. Absence of such candidates proves nothing here.
Units are function-granular only where a parser extracts function boundaries (tree-sitter languages, plus C/C++ function-like macros); other changed files are one file-granular unit, and hunks outside any function are attributed to the file only when no function of that file changed.
When a changed function is traced only at FILE level, every requirement of its file is a from-side seed: a relation through any of them counts as codified, so a coarse trace can MASK an uncodified connection (and inflate scope clusters — see coarse_trace).

Why should I believe it works?

observed results only — AI opinion never counts as evidence

Behavioral claims → observed results

All 3 claims observed passing.

The 3 claims, as a table

Requirement	Claim	Observed	Tests
SW-REQ-260922-0W96	Still holds	Observed passing	2✓ 0✗ 0∅ 0?
SW-REQ-260922-9DMS	Still holds	Observed passing	2✓ 0✗ 0∅ 0?
SW-REQ-261005-4MKBnew in this change	Changed as intended	Observed passing	2✓ 0✗ 0∅ 0?

Changed-code coverage

0 of 0 changed decision lines reached by tests

Not measured for bin/omarchy-menu-keybindings.

What remains unresolved?

16 open disclosures — each listed once, introduced first

Introduced failures0

None — every blocking finding also failed at the base.

Missing evidence3

highUnresolved finding · introduced by this changedrives the next decision
MC/DC evidence changed at test/shell.d/keybindings-menu-test.sh: MC/DC witness test keybindings-menu-test.sh:1 of SW-REQ-260922-0W96 no longer witnesses it at the head (base "witness test/shell.d/keybindings-menu-test.sh:1:keybindings-"… → head ""); not approved as a compatibility change.
compat:cf-4c5e34efd4c84e91
highUnresolved finding · introduced by this changedrives the next decision
MC/DC evidence changed at test/shell.d/keybindings-menu-test.sh: MC/DC witness test keybindings-menu-test.sh:1 of SW-REQ-260922-9DMS no longer witnesses it at the head (base "witness test/shell.d/keybindings-menu-test.sh:1:keybindings-"… → head ""); not approved as a compatibility change.
compat:cf-8507c81c0f32c95a
mediumMissing evidence
No test of the requirements in scope is tagged with an obligation class (<requirement>:<class>:<evidence>), so none of the 3 obligation cells in scope has an observed outcome.
testResults

Spec questions and disagreements7— the engine raises · an AI may argue · a human decides

test/shell.d/keybindings-menu-test.sh traces at file level toSW-REQ-260922-0W96 SW-REQ-260922-9DMS SW-REQ-261005-4MKBnew in this change

New code with no requirement 7

LowNew called() in test/shell.d/keybindings-menu-test.sh has no function-level requirement
open
What the engine saw · what a reviewer could do
New function test/shell.d/keybindings-menu-test.sh:called has no function-level trace; only its file is traced (to 3 requirement(s): SW-REQ-260922-0W96, SW-REQ-260922-9DMS, SW-REQ-261005-4MKB), which does not establish what this code is for.
Suggestion: Give the new behaviour an intent: trace it to the requirement it realizes (Implements: <REQ> on the function), or add a requirement for it. If it is pure plumbing with no behaviour of its own, reject as noise.
LowNew called_nothing() in test/shell.d/keybindings-menu-test.sh has no function-level requirement
open
What the engine saw · what a reviewer could do
New function test/shell.d/keybindings-menu-test.sh:called_nothing has no function-level trace; only its file is traced (to 3 requirement(s): SW-REQ-260922-0W96, SW-REQ-260922-9DMS, SW-REQ-261005-4MKB), which does not establish what this code is for.
Suggestion: Give the new behaviour an intent: trace it to the requirement it realizes (Implements: <REQ> on the function), or add a requirement for it. If it is pure plumbing with no behaviour of its own, reject as noise.
LowNew left_no_mark() in test/shell.d/keybindings-menu-test.sh has no function-level requirement
open
What the engine saw · what a reviewer could do
New function test/shell.d/keybindings-menu-test.sh:left_no_mark has no function-level trace; only its file is traced (to 3 requirement(s): SW-REQ-260922-0W96, SW-REQ-260922-9DMS, SW-REQ-261005-4MKB), which does not establish what this code is for.
Suggestion: Give the new behaviour an intent: trace it to the requirement it realizes (Implements: <REQ> on the function), or add a requirement for it. If it is pure plumbing with no behaviour of its own, reject as noise.
LowNew lua_function_bind() in test/shell.d/keybindings-menu-test.sh has no function-level requirement
open
What the engine saw · what a reviewer could do
New function test/shell.d/keybindings-menu-test.sh:lua_function_bind has no function-level trace; only its file is traced (to 3 requirement(s): SW-REQ-260922-0W96, SW-REQ-260922-9DMS, SW-REQ-261005-4MKB), which does not establish what this code is for.
Suggestion: Give the new behaviour an intent: trace it to the requirement it realizes (Implements: <REQ> on the function), or add a requirement for it. If it is pure plumbing with no behaviour of its own, reject as noise.
LowNew pick_from_menu() in test/shell.d/keybindings-menu-test.sh has no function-level requirement
open
What the engine saw · what a reviewer could do
New function test/shell.d/keybindings-menu-test.sh:pick_from_menu has no function-level trace; only its file is traced (to 3 requirement(s): SW-REQ-260922-0W96, SW-REQ-260922-9DMS, SW-REQ-261005-4MKB), which does not establish what this code is for.
Suggestion: Give the new behaviour an intent: trace it to the requirement it realizes (Implements: <REQ> on the function), or add a requirement for it. If it is pure plumbing with no behaviour of its own, reject as noise.
LowNew stub_hyprctl_dispatch() in test/shell.d/keybindings-menu-test.sh has no function-level requirement
open
What the engine saw · what a reviewer could do
New function test/shell.d/keybindings-menu-test.sh:stub_hyprctl_dispatch has no function-level trace; only its file is traced (to 3 requirement(s): SW-REQ-260922-0W96, SW-REQ-260922-9DMS, SW-REQ-261005-4MKB), which does not establish what this code is for.
Suggestion: Give the new behaviour an intent: trace it to the requirement it realizes (Implements: <REQ> on the function), or add a requirement for it. If it is pure plumbing with no behaviour of its own, reject as noise.
LowNew use_pick_file_picker() in test/shell.d/keybindings-menu-test.sh has no function-level requirement
open
What the engine saw · what a reviewer could do
New function test/shell.d/keybindings-menu-test.sh:use_pick_file_picker has no function-level trace; only its file is traced (to 3 requirement(s): SW-REQ-260922-0W96, SW-REQ-260922-9DMS, SW-REQ-261005-4MKB), which does not establish what this code is for.
Suggestion: Give the new behaviour an intent: trace it to the requirement it realizes (Implements: <REQ> on the function), or add a requirement for it. If it is pure plumbing with no behaviour of its own, reject as noise.

Limitations

Coverage of some changed files was not measured by a fresh artifact.
1 record
1 changed file is outside the approved verification scope, so the audit does not verify it; listed for transparency.
1 record
13 checks were skipped by configuration and produced no verdict.
13 records
build_matrix_complete description_grammar_enumeration_complete documentation_coverage documented_claim_verified dual_path_guards_equivalent known_issue_closure_platform_bound lemma_binding_freshness no_authored_change_surface_reviewed security_surface_covered signal_fixtures_valid spec_lint_mediation_contract_contradicted spec_lint_na_denies_property_enforced_unevenly spec_lint_na_denies_property_the_code_manages
Auditor buger assessed compatibility finding cf-8507c81c0f32c95a as acceptable: Same evidence under a new name. At the head, keybindings-menu-test.sh still witnesses SW-REQ-260922-9DMS rows 1-3 (line 1, scenarios 1 2 3, meets policy); only the witness name changed from keybindings-menu-test.sh:1 to type. The engine's g… — a note for the maintainers, not an approval.
2 records
compat:cf-8507c81c0f32c95adecision:rdec-4d85f4d0542ab345676ce6e6a92d7b39
Auditor buger assessed compatibility finding cf-4c5e34efd4c84e91 as acceptable: Same evidence under a new name. At the head, keybindings-menu-test.sh still witnesses SW-REQ-260922-0W96 rows 1-3 (line 1, scenarios 1 2 3, meets policy); only the witness name changed from keybindings-menu-test.sh:1 to type. The engine's g… — a note for the maintainers, not an approval.
2 records
compat:cf-4c5e34efd4c84e91decision:rdec-aa3f6e535e75bb8ec562950cf0e1269b
Change effects (new calls, side effects, reachability) were not analyzed for this change.
1 record
review.effects

Which of the 2 relevant tests run the changed code is unknown — no test↔changed-code mapping was measured. The tests → audit trail
The impact analysis has 8 stated limits — listed under What could it affect? ↑

Exceptions and weakened protections

None — the PR leaves the approved policy unchanged; no suppression or waiver is recorded.

No pre-existing failure — nothing failed at the base too.

What decision is mine?

Next decision

Human judgementbecause backward-compatibility changes are unapproved

Approve each of the 2 backward-compatibility changes: a reviewer or above approves it, or the author fixes it.

Driven by 2 items:

MC/DC evidence changed at test/shell.d/keybindings-menu-test.sh: MC/DC witness test keybindings-menu-test.sh:1 of SW-REQ-260922-0W96 no longer witnesses it at the head (base "witness test/shell.d/keybindings-menu-test.sh:1:keybindings-"… → head ""); not approved as a compatibility change. ↑
MC/DC evidence changed at test/shell.d/keybindings-menu-test.sh: MC/DC witness test keybindings-menu-test.sh:1 of SW-REQ-260922-9DMS no longer witnesses it at the head (base "witness test/shell.d/keybindings-menu-test.sh:1:keybindings-"… → head ""); not approved as a compatibility change. ↑

Required authority

Reviewer — under the approved policy at 1e43373287

Accepted identities: GitHub login or portal user · enforced by the portal / GitHub

Evaluated revision

Evaluated: 8eb6c64ca15bSynthetic merge
PR head: 03cbacb87d02
Base: 1e43373287afquattro-proof
Policy: sha256:19ad4c0c6f…

Compared against base audit run-f5b0e01eb640 at 1e43373287af — failed checks are split into pre-existing vs introduced.

An immutable record of this revision — freshness is judged on the PR page.

Producer not verified (evidence is informational, not assurance). Provenance

Acceptance: none recorded in this evidence. Readiness is not acceptance, and the merge state is GitHub's.

Audit trail

the verbatim record — every disclosure, the AI review, risk rules, call routes, tests, audit checks, provenance

Every disclosure, by consequence0 block · 3 prevent ready · 7 need judgement · 6 for information

0 block · 3 prevent ready · 7 need judgement · 6 for information

Prevents a ready verdict3— Readiness can't be better than “not assessed” while any of these is open.

highUnresolved finding · introduced by this changedrives the next decision
MC/DC evidence changed at test/shell.d/keybindings-menu-test.sh: MC/DC witness test keybindings-menu-test.sh:1 of SW-REQ-260922-0W96 no longer witnesses it at the head (base "witness test/shell.d/keybindings-menu-test.sh:1:keybindings-"… → head ""); not approved as a compatibility change.
compat:cf-4c5e34efd4c84e91
highUnresolved finding · introduced by this changedrives the next decision
MC/DC evidence changed at test/shell.d/keybindings-menu-test.sh: MC/DC witness test keybindings-menu-test.sh:1 of SW-REQ-260922-9DMS no longer witnesses it at the head (base "witness test/shell.d/keybindings-menu-test.sh:1:keybindings-"… → head ""); not approved as a compatibility change.
compat:cf-8507c81c0f32c95a
mediumMissing evidence
No test of the requirements in scope is tagged with an obligation class (<requirement>:<class>:<evidence>), so none of the 3 obligation cells in scope has an observed outcome.
testResults

Needs a human judgement7— Readiness is unaffected, but a human must disposition each one.

lowUnresolved finding
Spec-gap candidate (unmapped_code): New function test/shell.d/keybindings-menu-test.sh · called() has no function-level trace; only its file is traced (to 3 requirement(s): SW-REQ-260922-0W96, SW-REQ-260922-9DMS, SW-REQ-261005-4MKB), which does not establish what this code is for.
unmapped_code|test/shell.d/keybindings-menu-test.sh:called
lowUnresolved finding
Spec-gap candidate (unmapped_code): New function test/shell.d/keybindings-menu-test.sh · called_nothing() has no function-level trace; only its file is traced (to 3 requirement(s): SW-REQ-260922-0W96, SW-REQ-260922-9DMS, SW-REQ-261005-4MKB), which does not establish what this code is for.
unmapped_code|test/shell.d/keybindings-menu-test.sh:called_nothing
lowUnresolved finding
Spec-gap candidate (unmapped_code): New function test/shell.d/keybindings-menu-test.sh · left_no_mark() has no function-level trace; only its file is traced (to 3 requirement(s): SW-REQ-260922-0W96, SW-REQ-260922-9DMS, SW-REQ-261005-4MKB), which does not establish what this code is for.
unmapped_code|test/shell.d/keybindings-menu-test.sh:left_no_mark
lowUnresolved finding
Spec-gap candidate (unmapped_code): New function test/shell.d/keybindings-menu-test.sh · lua_function_bind() has no function-level trace; only its file is traced (to 3 requirement(s): SW-REQ-260922-0W96, SW-REQ-260922-9DMS, SW-REQ-261005-4MKB), which does not establish what this code is for.
unmapped_code|test/shell.d/keybindings-menu-test.sh:lua_function_bind
lowUnresolved finding
Spec-gap candidate (unmapped_code): New function test/shell.d/keybindings-menu-test.sh · pick_from_menu() has no function-level trace; only its file is traced (to 3 requirement(s): SW-REQ-260922-0W96, SW-REQ-260922-9DMS, SW-REQ-261005-4MKB), which does not establish what this code is for.
unmapped_code|test/shell.d/keybindings-menu-test.sh:pick_from_menu
lowUnresolved finding
Spec-gap candidate (unmapped_code): New function test/shell.d/keybindings-menu-test.sh · stub_hyprctl_dispatch() has no function-level trace; only its file is traced (to 3 requirement(s): SW-REQ-260922-0W96, SW-REQ-260922-9DMS, SW-REQ-261005-4MKB), which does not establish what this code is for.
unmapped_code|test/shell.d/keybindings-menu-test.sh:stub_hyprctl_dispatch
lowUnresolved finding
Spec-gap candidate (unmapped_code): New function test/shell.d/keybindings-menu-test.sh · use_pick_file_picker() has no function-level trace; only its file is traced (to 3 requirement(s): SW-REQ-260922-0W96, SW-REQ-260922-9DMS, SW-REQ-261005-4MKB), which does not establish what this code is for.
unmapped_code|test/shell.d/keybindings-menu-test.sh:use_pick_file_picker

For information6— Shown for the record — no effect on readiness.

lowMissing evidence
Coverage of some changed files was not measured by a fresh artifact.
infoMissing evidence
1 changed file is outside the approved verification scope, so the audit does not verify it; listed for transparency.
infoMissing evidence
13 checks were skipped by configuration and produced no verdict.
build_matrix_complete description_grammar_enumeration_complete documentation_coverage documented_claim_verified dual_path_guards_equivalent known_issue_closure_platform_bound
7 more records
lemma_binding_freshness no_authored_change_surface_reviewed security_surface_covered signal_fixtures_valid spec_lint_mediation_contract_contradicted spec_lint_na_denies_property_enforced_unevenly spec_lint_na_denies_property_the_code_manages
infoUnresolved finding
Auditor buger assessed compatibility finding cf-8507c81c0f32c95a as acceptable: Same evidence under a new name. At the head, keybindings-menu-test.sh still witnesses SW-REQ-260922-9DMS rows 1-3 (line 1, scenarios 1 2 3, meets policy); only the witness name changed from keybindings-menu-test.sh:1 to type. The engine's g… — a note for the maintainers, not an approval.
compat:cf-8507c81c0f32c95adecision:rdec-4d85f4d0542ab345676ce6e6a92d7b39
infoUnresolved finding
Auditor buger assessed compatibility finding cf-4c5e34efd4c84e91 as acceptable: Same evidence under a new name. At the head, keybindings-menu-test.sh still witnesses SW-REQ-260922-0W96 rows 1-3 (line 1, scenarios 1 2 3, meets policy); only the witness name changed from keybindings-menu-test.sh:1 to type. The engine's g… — a note for the maintainers, not an approval.
compat:cf-4c5e34efd4c84e91decision:rdec-aa3f6e535e75bb8ec562950cf0e1269b
infoPartial input
Change effects (new calls, side effects, reachability) were not analyzed for this change.
review.effects

Routine evidence:178 checks passed · 27 advisory · 1 not applicable · 2 verifying tests passed · 3 claims observed passing

AI review — supporting commentarynone recorded for this package

No AI review has been recorded for this package.

Why the engine rates this risk level2 rules fired

1 changed source file(s) not measured by any fresh coverage artifact: bin/omarchy-menu-keybindings.
11 changed function(s) have no function-level requirement trace: bin/omarchy-menu-keybindings:dynamic_bindings (modified), bin/omarchy-menu-keybindings:keybindings_cache_key (modified), pocs/crs-260930-jvx8-c02.sh:hyprctl (modified), test/shell.d/keybindings-menu-test.sh:lua_function_bind (added), test/shell.d/keybindings-menu-test.sh:use_pick_file_picker (added) (+6 more); 1 requirement(s) match only at file level (possibly affected).

Relevant tests2

Passed
test/shell.d/keybindings-menu-test.sh
unknown whether it runs the changed codeSW-REQ-260922-0W96SW-REQ-260922-9DMSSW-REQ-261005-4MKBnew in this change
Passed
test/shell.d/keybindings-menu-test.sh:1:type
test/shell.d/keybindings-menu-test.shunknown whether it runs the changed codeSW-REQ-260922-0W96SW-REQ-260922-9DMSSW-REQ-261005-4MKBnew in this change

Audit checks219 project-wide

219 project-wide audit checks (178 passed · 13 skipped or not run · 28 not applicable) — the rest are unchanged against the baseline run. Open Audit checks

All 219 checks exactly as recorded in this package

Not applicableaccepted_risks_reviewednot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicableapproved_guarantee_ki_conflictnot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicableassumptions_statusnot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Skippedbuild_matrix_completeskippedSame as baseline
raw status skip · severity warning
Not applicablecode_signal_deadline_cast_unreviewednot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicableconcern_adjudicatednot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicabledefect_review_currentnot_applicableNot requiredAdvisorySame as baseline
raw status info · severity warning
Not applicabledeployment_tvl_verifiednot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Skippeddescription_grammar_enumeration_completeskippedSame as baseline
raw status skip · severity warning
Skippeddocumentation_coverageskippedSame as baseline
raw status skip · severity warning
Skippeddocumented_claim_verifiedskippedSame as baseline
raw status skip · severity warning
Skippeddual_path_guards_equivalentskippedSame as baseline
raw status skip · severity warning
Not applicablefailing_test_blocks_approvalnot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicablehigh_severity_obligation_without_vectornot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Skippedknown_issue_closure_platform_boundskippedSame as baseline
raw status skip · severity error
Not applicableknown_issue_completenot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicableknown_issue_platform_coveragenot_applicableNot requiredAdvisorySame as baseline
raw status skip · severity warning
Not applicableknown_issue_recheck_duenot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicableknown_issue_sibling_dispositionnot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicableknown_issue_template_transfernot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Skippedlemma_binding_freshnessskippedSame as baseline
raw status skip · severity warning
Not applicablelemma_branch_coveragenot_applicableNot requiredSame as baseline
raw status skip · severity warning
Skippedno_authored_change_surface_reviewedskippedSame as baseline
raw status skip · severity warning
Not applicablepoc_quality_checkednot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicableproblem_report_class_mitigation_evidencenot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicableproblem_reports_reviewednot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicableprocess_checklistnot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicableproperty_based_test_coveragenot_applicableNot requiredAdvisorySame as baseline
raw status warn · severity warning
Not applicableresidual_kill_hygienenot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Skippedsecurity_surface_coveredskippedSame as baseline
raw status skip · severity error
Skippedsignal_fixtures_validskippedSame as baseline
raw status skip · severity error
Not applicablespec_lint_exemplar_missing_on_newnot_applicableNot requiredAdvisorySame as baseline
raw status info · severity warning
Not applicablespec_lint_hazard_consequencenot_applicableNot requiredAdvisorySame as baseline
raw status info · severity warning
Not applicablespec_lint_ki_banned_markersnot_applicableNot requiredAdvisorySame as baseline
raw status info · severity warning
Skippedspec_lint_mediation_contract_contradictedskippedSame as baseline
raw status skip · severity warning
Skippedspec_lint_na_denies_property_enforced_unevenlyskippedSame as baseline
raw status skip · severity warning
Skippedspec_lint_na_denies_property_the_code_managesskippedSame as baseline
raw status skip · severity warning
Not applicablesurface_coveragenot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicableunresearched_p0_vectorsnot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicablevector_campaign_closurenot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Not applicablevector_campaign_hygienenot_applicableNot requiredAdvisorySame as baseline
raw status pass · severity warning
Passacceptance_criteria_witnessedpassedSame as baseline
raw status pass · severity warning
Passacceptance_witness_qualitypassedSame as baseline
raw status pass · severity warning
Passambiguity_reviewedpassedSame as baseline
raw status pass · severity warning
Passannotation_validitypassedSame as baseline
raw status pass · severity error
Passapproval_motivation_presentpassedSame as baseline
raw status pass · severity error
Passapprovals_currentpassedSame as baseline
raw status pass · severity error
Passassume_contract_consistencypassedSame as baseline
raw status pass · severity warning
Passauthored_delta_expectedpassedSame as baseline
raw status pass · severity warning
Passautolink_cleanpassedSame as baseline
raw status pass · severity warning
Passbehavioral_implications_verifiedpassedSame as baseline
raw status pass · severity warning
Passbuild_passespassedSame as baseline
raw status pass · severity error
Passcatalog_completenesspassedSame as baseline
raw status pass · severity error
Passcatalog_semantic_bindings_reviewedpassedSame as baseline
raw status pass · severity warning
Passcatalog_version_pinnedpassedSame as baseline
raw status pass · severity warning
Passchange_evidence_completepassedSame as baseline
raw status pass · severity warning
Passchange_record_landspassedSame as baseline
raw status pass · severity warning
Passchanged_requirements_reviewedpassedSame as baseline
raw status pass · severity error
Passcircular_deps_cleanpassedSame as baseline
raw status pass · severity error
Passcode_mcdc_coveragepassedSame as baseline
raw status pass · severity warning
Passcode_mcdc_measurepassedSame as baseline
raw status pass · severity error
Passcode_predicates_modeledpassedSame as baseline
raw status pass · severity warning
Passcode_signal_obligations_reviewedpassedSame as baseline
raw status pass · severity warning
Passcode_signal_suppressions_reviewedpassedSame as baseline
raw status pass · severity warning
Passcode_signal_unbindablepassedSame as baseline
raw status pass · severity warning
Passconsistency_pair_coveragepassedSame as baseline
raw status pass · severity warning
Passcontract_alignment_cleanpassedSame as baseline
raw status pass · severity warning
Passcoverage_metpassedSame as baseline
raw status pass · severity warning
Passcoverage_thresholdpassedSame as baseline
raw status pass · severity warning
Passcross_component_cleanpassedSame as baseline
raw status pass · severity warning
Passcross_level_completepassedSame as baseline
raw status pass · severity warning
Passcross_spec_consistency_cleanpassedSame as baseline
raw status pass · severity warning
Passcvss_severity_consistentpassedSame as baseline
raw status pass · severity warning
Passdata_constraint_z3_coveragepassedSame as baseline
raw status pass · severity warning
Passdata_constraints_completepassedSame as baseline
raw status pass · severity warning
Passdecomposition_reviewedpassedSame as baseline
raw status pass · severity warning
Passdeletion_without_retirementpassedSame as baseline
raw status pass · severity error
Passdescription_delta_reviewedpassedSame as baseline
raw status pass · severity error
Passdifferential_conformancepassedSame as baseline
raw status pass · severity warning
Passdisclosure_safepassedSame as baseline
raw status pass · severity error
Passdocumentation_enforcedpassedSame as baseline
raw status pass · severity warning
Passevidence_diversitypassedSame as baseline
raw status pass · severity warning
Passfixture_staleness_cleanpassedSame as baseline
raw status pass · severity warning
Passflip_fixtures_existpassedSame as baseline
raw status pass · severity warning
Passflip_test_alignmentpassedSame as baseline
raw status pass · severity warning
Passformalization_lemma_verdict_consistencypassedSame as baseline
raw status pass · severity warning
Passfuzz_evidence_carrier_validpassedSame as baseline
raw status pass · severity warning
Passgaps_cleanpassedSame as baseline
raw status pass · severity warning
Passhigh_severity_reproducer_gradepassedSame as baseline
raw status pass · severity error
Passintegration_evidence_witnessedpassedSame as baseline
raw status pass · severity warning
Passinterface_contract_duplicatespassedSame as baseline
raw status pass · severity warning
Passinterface_coveragepassedSame as baseline
raw status pass · severity warning
Passinterface_formalization_completepassedSame as baseline
raw status pass · severity warning
Passinterface_staleness_cleanpassedSame as baseline
raw status pass · severity warning
Passknown_issue_affected_requirements_presentpassedSame as baseline
raw status pass · severity warning
Passknown_issue_mirror_anchor_relevantpassedSame as baseline
raw status pass · severity warning
Passknown_issue_poc_quality_effectivepassedSame as baseline
raw status pass · severity warning
Passknown_issue_reproducer_consistentpassedSame as baseline
raw status pass · severity warning
Passknown_issue_reproducer_present_and_resolvespassedSame as baseline
raw status pass · severity warning
Passknown_issue_security_remediation_presentpassedSame as baseline
raw status pass · severity warning
Passknown_issue_severity_prose_consistentpassedSame as baseline
raw status pass · severity warning
Passknown_issues_reviewedpassedSame as baseline
raw status pass · severity warning
Passl0_stakeholder_completepassedSame as baseline
raw status pass · severity error
Passl1_system_completepassedSame as baseline
raw status pass · severity error
Passl2_software_completepassedSame as baseline
raw status pass · severity error
Passlevels_connectedpassedSame as baseline
raw status pass · severity error
Passlint_cleanpassedSame as baseline
raw status pass · severity warning
Passmcdc_coveragepassedSame as baseline
raw status pass · severity warning
Passmcdc_ignore_classifiedpassedSame as baseline
raw status pass · severity warning
Passmcdc_known_issue_disposition_stalepassedSame as baseline
raw status pass · severity error
Passmcdc_verifies_witnessespassedSame as baseline
raw status pass · severity warning
Passmcdc_witness_drives_codepassedSame as baseline
raw status pass · severity warning
Passmirror_completepassedSame as baseline
raw status pass · severity warning
Passmirror_stalepassedSame as baseline
raw status pass · severity warning
Passnegative_path_witness_requiredpassedSame as baseline
raw status pass · severity error
Passnonbool_inputs_constrainedpassedSame as baseline
raw status pass · severity warning
Passobligation_baselinepassedSame as baseline
raw status pass · severity warning
Passobligation_completenesspassedSame as baseline
raw status pass · severity error
Passobligation_decomposition_completepassedSame as baseline
raw status pass · severity warning
Passobligation_delegation_resolvespassedSame as baseline
raw status pass · severity error
Passobligation_enforcement_backedpassedSame as baseline
raw status pass · severity warning
Passobligation_evidence_completepassedSame as baseline
raw status pass · severity warning
Passobligation_profile_evidence_completepassedSame as baseline
raw status pass · severity warning
Passobligation_suppression_rationalepassedSame as baseline
raw status pass · severity warning
Passobligation_suppression_reviewerpassedSame as baseline
raw status pass · severity warning
Passobligation_witness_groundedpassedSame as baseline
raw status pass · severity warning
Passorphan_code_cleanpassedSame as baseline
raw status pass · severity warning
Passorphan_tests_cleanpassedSame as baseline
raw status pass · severity warning
Passpartition_evidence_completepassedSame as baseline
raw status pass · severity warning
Passproof_complexity_cleanpassedSame as baseline
raw status pass · severity warning
Passproperty_fixtures_existpassedSame as baseline
raw status pass · severity warning
Passquality_cleanpassedSame as baseline
raw status pass · severity warning
Passretired_cleanuppassedSame as baseline
raw status pass · severity warning
Passrole_prompt_hygienepassedSame as baseline
raw status pass · severity warning
Passrole_references_resolvepassedSame as baseline
raw status pass · severity warning
Passsecurity_relevance_consistentpassedSame as baseline
raw status pass · severity warning
Passslow_tests_cleanpassedSame as baseline
raw status pass · severity error
Passsoftware_formalization_completepassedSame as baseline
raw status pass · severity warning
Passsolver_latency_cleanpassedSame as baseline
raw status pass · severity warning
Passsolver_modeling_opportunitypassedSame as baseline
raw status pass · severity warning
Passspec_lint_ac_inverse_coveragepassedSame as baseline
raw status pass · severity warning
Passspec_lint_ac_subset_of_satisfiespassedSame as baseline
raw status pass · severity warning
Passspec_lint_acceptance_review_currentpassedSame as baseline
raw status pass · severity warning
Passspec_lint_annotation_vs_authoredpassedSame as baseline
raw status pass · severity warning
Passspec_lint_assumption_dispositionpassedSame as baseline
raw status pass · severity warning
Passspec_lint_audit_ignore_reasonpassedSame as baseline
raw status pass · severity warning
Passspec_lint_auto_modifier_without_humanpassedSame as baseline
raw status pass · severity warning
Passspec_lint_circularity_self_citationpassedSame as baseline
raw status pass · severity warning
Passspec_lint_complementary_flags_uninteractedpassedSame as baseline
raw status pass · severity warning
Passspec_lint_data_constraint_parseablepassedSame as baseline
raw status pass · severity error
Passspec_lint_decomposition_adds_refinementpassedSame as baseline
raw status pass · severity warning
Passspec_lint_degenerate_input_obligation_missingpassedSame as baseline
raw status pass · severity warning
Passspec_lint_evidence_tag_existspassedSame as baseline
raw status pass · severity warning
Passspec_lint_formalization_qualitypassedSame as baseline
raw status pass · severity warning
Passspec_lint_fretish_bare_responsepassedSame as baseline
raw status pass · severity warning
Passspec_lint_fretish_tautologypassedSame as baseline
raw status pass · severity warning
Passspec_lint_governance_yaml_data_pathspassedSame as baseline
raw status pass · severity warning
Passspec_lint_hallucinated_symbolspassedSame as baseline
raw status pass · severity error
Passspec_lint_hazard_review_currentpassedSame as baseline
raw status pass · severity warning
Passspec_lint_id_shape_canonicalpassedSame as baseline
raw status pass · severity error
Passspec_lint_inline_impact_review_driftpassedSame as baseline
raw status pass · severity warning
Passspec_lint_input_domain_obligation_missingpassedSame as baseline
raw status pass · severity warning
Passspec_lint_ki_attacker_coherencepassedSame as baseline
raw status pass · severity warning
Passspec_lint_ki_history_chronologypassedSame as baseline
raw status pass · severity warning
Passspec_lint_ki_open_actionabilitypassedSame as baseline
raw status pass · severity warning
Passspec_lint_ki_prose_shapepassedSame as baseline
raw status pass · severity warning
Passspec_lint_ki_stale_status_refspassedSame as baseline
raw status pass · severity warning
Passspec_lint_numbering_gaps_has_tombstonepassedSame as baseline
raw status pass · severity warning
Passspec_lint_obligation_checklist_emptypassedSame as baseline
raw status pass · severity warning
Passspec_lint_obligation_coverage_gappassedSame as baseline
raw status pass · severity warning
Passspec_lint_operational_invariant_varpassedSame as baseline
raw status pass · severity warning
Passspec_lint_parent_field_vs_satisfiespassedSame as baseline
raw status pass · severity warning
Passspec_lint_pinned_delimiter_undispositionedpassedSame as baseline
raw status pass · severity warning
Passspec_lint_plan_of_record_currentpassedSame as baseline
raw status pass · severity warning
Passspec_lint_prose_ste100passedSame as baseline
raw status pass · severity warning
Passspec_lint_reject_combination_composition_witnessedpassedSame as baseline
raw status pass · severity warning
Passspec_lint_req_type_vs_descriptionpassedSame as baseline
raw status pass · severity error
Passspec_lint_review_cadence_currentpassedSame as baseline
raw status pass · severity warning
Passspec_lint_satisfies_target_retiredpassedSame as baseline
raw status pass · severity warning
Passspec_lint_shared_state_rebuildpassedSame as baseline
raw status pass · severity warning
Passspec_lint_source_doc_hedgingpassedSame as baseline
raw status pass · severity warning
Passspec_lint_source_native_yaml_tracepassedSame as baseline
raw status pass · severity warning
Passspec_lint_spec_conformance_review_groundedpassedSame as baseline
raw status pass · severity error
Passspec_lint_status_vs_reviewpassedSame as baseline
raw status pass · severity warning
Passspec_lint_sw_informal_witnessedpassedSame as baseline
raw status pass · severity error
Passspec_lint_threat_surface_presentpassedSame as baseline
raw status pass · severity warning
Passspec_lint_trace_review_evidence_currentpassedSame as baseline
raw status pass · severity error
Passspec_lint_unjoined_effect_halvespassedSame as baseline
raw status pass · severity warning
Passspec_lint_yaml_escape_artefactpassedSame as baseline
raw status pass · severity error
Passsrs_generatespassedSame as baseline
raw status pass · severity error
Passsrs_no_uncheckedpassedSame as baseline
raw status pass · severity error
Passstakeholder_acceptance_criteriapassedSame as baseline
raw status pass · severity warning
Passstakeholder_requirements_existpassedSame as baseline
raw status pass · severity error
Passsubmission_validatedpassedSame as baseline
raw status pass · severity error
Passsuspect_cleanpassedSame as baseline
raw status pass · severity error
Passsys_has_software_childpassedSame as baseline
raw status pass · severity warning
Passsystem_formalization_completepassedSame as baseline
raw status pass · severity error
Passsystem_requirements_linkedpassedSame as baseline
raw status pass · severity error
Passtable_completepassedSame as baseline
raw status pass · severity warning
Passtable_consistentpassedSame as baseline
raw status pass · severity warning
Passtable_equivalencepassedSame as baseline
raw status pass · severity warning
Passtest_command_propagates_failurepassedSame as baseline
raw status pass · severity warning
Passtests_passpassedSame as baseline
raw status pass · severity error
Passtrivial_lemmapassedSame as baseline
raw status pass · severity warning
Passtrusted_outputs_from_untrusted_inputspassedSame as baseline
raw status pass · severity warning
Passunder_modeled_requirements_cleanpassedSame as baseline
raw status pass · severity warning
Passvacuity_cleanpassedSame as baseline
raw status pass · severity warning
Passvalidate_passespassedSame as baseline
raw status pass · severity error
Passvariable_driftpassedSame as baseline
raw status pass · severity warning
Passvariable_orphans_cleanpassedSame as baseline
raw status pass · severity warning
Passvariables_declaredpassedSame as baseline
raw status pass · severity error
Passverification_chain_completepassedSame as baseline
raw status pass · severity warning
Passverification_plan_evidencepassedSame as baseline
raw status pass · severity warning
Passverification_scope_completepassedSame as baseline
raw status pass · severity warning
Passverification_state_consistentpassedSame as baseline
raw status pass · severity warning
Passverify_passespassedSame as baseline
raw status pass · severity error
Passwaivers_reviewedpassedSame as baseline
raw status pass · severity error
Passz3_cross_layer_consistencypassedSame as baseline
raw status pass · severity warning
Passz3_properties_verifiedpassedSame as baseline
raw status pass · severity warning

How this evidence was producedunverified producer · no evidence records attached

Unverified producer — not accepted

Evaluated as this PR applied onto the audit baseline 1e433732 (commit 8eb6c64c), not the PR's own branch — findings reflect the PR's change on the audited code. Freshness still tracks the PR head it represents, 03cbacb8.

Repository: https://github.com/omacom/omarchy
Pull request: #11851
Evaluated tree: Synthetic mergesynthetic_merge
PR head commit: 03cbacb87d020bb2055aeb95d15aff8a319a2395
Evaluated commit: 8eb6c64ca15b64e8696f8771796a93b9d76c848a
Audit baseline: 1e43373287afbd6dca4674ad463d5b5db7812358
Spec revision: 41595b0d84f13b4e330d098a147328e1fe04205c
Policy revision: 1e43373287afbd6dca4674ad463d5b5db7812358
Package digest: sha256:b653980da73789327d287d68102a1f33d81f279f93263e077e06b683493021ce

Schema version: reqproof.evidence-package.v1
Canonicalization: v1
Engine version: 0.1.0-dev
Assembler version: 0.1.0-dev+geeb5981c
Package identity: epkg-6bd69ece5f9f54085c81ca4ce15ff5fa744b8a147772d60629c783cec3ea0d20
Assembled: Oct 5, 2026 · last week
Canonical digest: sha256:b653980da73789327d287d68102a1f33d81f279f93263e077e06b683493021ce

Proof

History & reports

Reference