feat: persist TEPP accepted receipts as transport evidence (v2.12.11)

[seonghobae]

Product result

A live TEPP accepted / queued / running envelope that carries a remote run id no longer looks like a product failure. The local analysis run stays Running and stores the receipt as transport evidence. The receipt is not a calibrated measurement and does not invent a theta.

Root cause

ADR 0022 treated any non-completed TEPP envelope as Failed / tepp_result_not_persisted. TEPP's published AnalysisRunAccepted is a durable submission receipt, not a temporal measurement. Treating it as Failed hid a successful accept; treating it as Succeeded would manufacture a scientific result from transport evidence.

Issue #277. Completed-result polling remains blocked on ContextualWisdomLab/TEPP#156.

What this head changes

• Classify TEPP envelopes: missing transport → Failed / tepp_not_available; completed+result → Succeeded + analysis_run_tepp_result; accepted/queued/running with a remote run id → persist analysis_run_tepp_accepted_receipt and stay Running; empty accepted → Failed / tepp_result_not_persisted.
• Do not append a terminal status and do not mark the outbox delivered on a valid receipt (ADR 0023 / ADR 0162).
• Seed stays Failed / tepp_not_available. Do not change seed to Running.
• Detail may attach {remote_run_id, accepted_status_code, received_at}. Next-action copy says the receipt is not a calibrated score.
• Login uses returnUrlFromLocation + rememberOidcReturnUrl and no longer mounts Admin settings with an undefined token, so this head's frontend gate is not poisoned by main.

Migration 0171 only (not 0103/0104/0105). ADR 0162 amends ADR 0022.

Local verification

Exact head: 288125acb1e6939ca0b99c0c4af2aacaadaffc79

• uv run --extra dev --with asyncpg --with redis pytest tests/test_tepp_accepted_receipt.py tests/test_analysis_run_start.py tests/test_seed_tepp_run.py tests/test_migration_replay.py tests/test_static_sql_review_contracts.py: 48 passed
• pnpm exec tsc -b: passed
• pnpm exec vitest run src/App.test.tsx src/oidcReturnUrl.test.ts: 84 passed

No real records, identifiers, provider credentials, or runtime secrets are included. Synthetic fixtures only.

Remaining protected gates

• Independent exact-head review (OpenCode / Strix / Noema) is required. This identity cannot self-approve.
• Squash-merge only after current checks and that independent approval.
• Do not close issues Milestone 2: port verified direct-PostgreSQL analysis into the protected product architecture #79 or Milestone 2.1: add normalized runtime-analysis schema bridge after v0.77 #87.
• Do not mix leftover-map (feat: persist leftover interaction-map coordinates (v2.12.7) #481), Allen intervals (feat: name Allen interval relations on Event Lineage edges (v2.15.0) #484), or completed-result polling (TEPP#156) into this PR.

---

[seonghobae]

@opencode-agent independent exact-head review requested. This identity cannot self-approve.

Head 5c0de352a4186d0ae8f22af476a6e87b3584a3f3:

• Valid TEPP accepted/queued/running envelopes with a remote run id persist as transport evidence and leave the local run Running.
• The receipt is not a measurement and does not invent a theta. Empty accepted envelopes stay Failed / tepp_result_not_persisted. Seed stays Failed / tepp_not_available.
• Outbox stays claimed (not delivered) until a terminal status. Completed-result polling remains TEPP#156.
• Login no longer mounts Admin settings with an undefined token.
• Local pytest 48 passed; tsc -b passed; App + OIDC vitest 84 passed.

Please review this exact head. Squash-merge only after independent approval and current checks. Issues #79 and #87 stay open.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 09ed016f-ca2b-4e3d-aa55-89ab82c35445

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[seonghobae]

Resolved the live ADR-number collision on exact head 49fae1bd2ca1b5aea91a3d967a3004a17812f107 by keeping the earlier ontology claimant at ADR 0157 and renumbering this later TEPP accepted-receipt ADR to the next monotonic free number, ADR 0162. The change is reference-only: the ADR file/title, exact architecture/docstring/migration references, and the existing ADR contract test name/path. No product semantics or dependencies changed.\n\nPush-time ownership audit: protected main and all 53 open PR changed-file sets had no docs/adr/0162-* claimant; >100-file PRs #258/#417/#490 were REST-paginated separately. Exact composed-head validation: uv run --frozen --extra dev --extra backend pytest -q tests/test_documentation_hygiene.py tests/test_tepp_accepted_receipt.py → 18 passed; stale ADR 0157/old path/test-name scan empty; git diff HEAD^ --check clean.

[seonghobae]

Exact-head follow-up at e40a9a12b5f1f00997a77f1336860069872e511b closes the bounded receipt replay test gap only:

• changed remote_run_id for an existing local receipt returns False without another insert;
• changed request_sha256 for the same remote run returns False without another insert.

No production code or fixture abstraction changed. Fresh exact-head CodeGraph worktree evidence:

• receipt/start/migration plus documentation hygiene: 36 passed in 2.95s;
• git diff --check: passed;
• diff: tests/test_tepp_accepted_receipt.py, +42/-0.

Hosted checks must evaluate this new head; no prior-head result is being reused.

[seonghobae]

Still needs independent exact-head APPROVE. Author/bot COMMENTED reviews are not an approval. Do not self-approve.

[seonghobae]

Resolved the current open-stack migration filename collision without changing ADR 0162 or TEPP receipt behavior.

• renamed only the idempotent migration and rollback from 0106 to unused 0171
• updated the existing replay selector, ADR reference, docstring, and tests
• local exact-head validation: 55 passed; shellcheck docker/postgres-init/migrate.sh; sh -n docker/postgres-init/migrate.sh; git diff --check

Exact pushed head: 288125ac.

[devin-ai-integration]

Devin Review found 1 new potential issue.

[devin-ai-integration]

📝 Info: Conflicting re-check revokes a durable receipt

A re-check envelope classified as a receipt but carrying a remote run id or request digest that differs from the stored receipt makes _persist_tepp_accepted_receipt return False, so analysis_run_start.py:988-998 marks the run Failed / tepp_receipt_not_persisted and delivers the outbox. This revokes a previously Running acceptance. ADR 0162 documents this as fail-closed, so it reads as intentional.

---

Was this helpful? React with 👍 or 👎 to provide feedback.