Skip to content

fix(review): clarify proof scenario coverage - #1286

Merged
steipete merged 1 commit into
mainfrom
steipete/cranky-antonelli-f87932
Aug 28, 2026
Merged

fix(review): clarify proof scenario coverage#1286
steipete merged 1 commit into
mainfrom
steipete/cranky-antonelli-f87932

Conversation

@steipete

Copy link
Copy Markdown
Contributor
Additional instructions

Keep Allow edits from maintainers enabled when opening this PR.

What Problem This Solves

Resolves a presentation and review-guidance gap: historical Live Verification comments show PASS without saying that only the declared scenario and assertions passed. Review guidance also needs an explicit connection from the changed source behavior to the scenario that evidence actually exercises.

This is a focused follow-up to PR #1282 and PR #1283. Those already landed the proof-authority fix and retired-helper cleanup. Main already passes the original 22-case production classification recipe; this PR neither reimplements that fix nor restores the deleted helpers.

Why This Change Was Made

The prompt and two existing schema descriptions now ask reviewers to connect the changed production owner and behavior to the exercised entrypoint, scenario, environment, and observed result or coverage gap. Historical PASS rendering states its limited scope. Relevant changed-help output and substantive terminal evidence remain valid; unrelated help smoke and signing alone do not establish native coverage. Native examples distinguish normal write-half-close success from explicit caller abort, disconnect, or shutdown cancellation. No full-app matrix or video is required.

The recorded semantic assessment remains authoritative. Parser, orchestration, status, label, rating, and publication owners are unchanged, as are receipt identity/plan/assertion validation, independent failure blocking, patch caps, rank-up advice, and existing proof exemptions and gates. No new schema field, version, execution lane, dependency, or budget change is introduced.

User Impact

Maintainers get a clearer explanation of what PASS establishes and a more auditable source-to-scenario proof assessment. Independent sufficient native evidence retains its classification and media attribution even beside an unrelated help PASS. Automatic live proof remains retired.

OpenClaw Bay Impact

No Bay change is needed. There is no observer API, lifecycle, status/telemetry, timing, dashboard data-contract, or action change. Bay remains observer-only; this adds review-comment wording and reviewer guidance only.

Documentation Impact

Reviewed AGENTS.md, CONTRIBUTING.md, README.md, VISION.md, docs/README.md, and the canonical docs/live-proof.md compatibility contract. Added incremental scenario guidance beside the existing authority contract without changing it. The active review prompt and schema descriptions are maintained by the review owners; the compatibility document retains its review/publication owners and update triggers. CHANGELOG.md describes only this residual guidance and PASS wording.

The historical recipe under docs/proof/historical-proof-classification/ retains its original 22 cases and prior repair observations, and adds five explicitly synthetic native/help classification cases. Its README documents their provenance and limits. Verified against base ccac077fea2f63570bd7d91969ee69abcca310e0 and committed source 206907d968aa9204f50ca4b381b2b18b8f97d046. Update this proof when guidance, rendering, classification, or publication behavior changes.

Evidence

The residual preparation passed pnpm run build:all, all 318 focused tests (zero failures, cancellations, or skips), pnpm run check:static, scoped type-aware source lint, fixture/recipe lint, scoped formatting checks, and git diff --check. A structural comparison confirms that the schema changes only two descriptions. Protected main owners, test matrices, original proof fixtures, and retired-helper deletions remain unchanged.

Focused tests:

node --test --test-reporter=tap test/pr-proof-automation.test.ts test/pr-label-policy.test.ts test/pr-review-labels.test.ts test/live-proof-report.test.ts test/live-proof.test.ts test/review-prompt-policy.test.ts test/review-prompt-context.test.ts test/decision-parser.test.ts

Full-suite limitation: an earlier run on the superseded, uncommitted implementation reported 4,011 tests: 4,000 passed, 2 failed, 9 skipped. One failure was an obsolete proof-status expectation; main's superior matrix is preserved here and passes the focused run. The other was the untouched pnpm validation refreshes the prepared executable before every command test, which hit validation identity deadline exhausted during raw worktree head. Its subsequent isolated retries each passed that one test, both normally and with coverage instrumentation. Those retries do not establish a clean full-suite result. The hour-long full local coverage run was not repeated for this residual, and no deadline, assertion, or coverage threshold was weakened. Exact-head GitHub CI remains the full gate after PR creation. Fresh isolated Codex precommit review found no actionable findings at the configured P0 threshold; a separate committed-branch review remains pending and is required before merge.

A bounded Codex check using the current proof policy and four frozen change/evidence packets produced all four expected classifications: unrelated native/help smoke was insufficient; changed-help evidence, substantive native terminal observations, and independent native evidence alongside help smoke were sufficient. This supports the guidance distinction for those controlled packets only—it is not native execution, authentication of contributor evidence, or a guarantee of future reviewer verdicts.

Real Behavior Proof

Tested committed source head: 206907d968aa9204f50ca4b381b2b18b8f97d046. A fresh maintained production-CLI run on this exact commit passed 27/27 cases with an empty production diff (SHA-256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855). Its built-owner hashes match the prepared residual, and all 27 classifications and per-case reports, comments, publication results, and repeat-publication receipts match that run. The before/after comparison remains against base ccac077fea2f63570bd7d91969ee69abcca310e0.

Claim and surface: the retained production CLI folds historical artifacts, preserves semantic proof and report contents, and renders the added PASS scope disclaimer without changing main's classifications or gates. The exercised path is live-proof-publish-artifacts → publication/attachment → report rendering and automation projections. No target command is executed.

Command and environment: built with pnpm run build:all; ran the maintained recipe on unmodified base ccac077fea2f63570bd7d91969ee69abcca310e0, on the prepared residual, and freshly on the exact committed head, each in a new output directory. The committed run reused the verified build of identical source:

node docs/proof/historical-proof-classification/run-proof.mjs .artifacts/proof-scenario-coverage

Local macOS arm64, Node v26.7.0, pinned pnpm 11.10.0; provider local-process, image and lease not applicable. CLI children receive only PATH, isolated HOME, and LANG. No media manifest exists, so there is no upload; the command folds local artifacts without GitHub comment sync or live-head lookup.

Observed results: base ccac077fea2f63570bd7d91969ee69abcca310e0 passed 22/22 original cases; the prepared residual and fresh committed-head run each passed 27/27. Five added cases cover an unrelated help PASS with an apps/macos/Sources/OpenClaw/ExecHostExecutor.swift coverage gap, relevant changed-help output, substantive native terminal observations, and independent signed-native linked-artifact/recording attribution. All 22 attached cases preserve frontmatter, the original semantic proof, and unrelated report sections exactly; a second production CLI publication leaves the report byte-identical.

Across the original 22 cases, classification/label/rating results, stored reports, and automation markers stayed identical. Eleven PASS comments changed only by adding the sentence below; the other eleven comments stayed byte-identical. Other built owner hashes also remained unchanged.

Before, on already-fixed main:

Result: PASS (completed)

After:

Result: PASS (completed)

PASS covers only the declared scenario and assertions; the real behavior proof assessment determines whether they cover the PR's changes.

Artifacts and reproduction: the maintained proof recipe and provenance/limits README are pinned to the tested commit. Local residual-preparation/main-proof/result.json, residual-preparation/residual-proof/result.json, committed-proof-206907d968aa/result.json, per-case reports/comments/publication results, repeat-publication receipts, committed-before-after.json, and residual-preparation/rendering-before-after.diff record the runs and hashes. The fresh result SHA-256 is c2fb69879808499319d613c522f9cf1e1e5d8e946d3a1a825e76e4a98bfb4964; it records the exact source head and built-owner hashes. These generated artifacts were retained locally, not uploaded; the maintained recipe reproduces the observations. This is a textual rendering observation, not a screenshot or native application recording.

Limits: native scenarios and semantic assessments are synthetic classification inputs. This proves actual local publication and rendering behavior, not native correctness or how a model interprets the new guidance. No fresh native/Gateway/terminal-driver execution, live GitHub/R2/queue action, workflow dispatch, target PR action, or deployment was performed. No new automatic proof lane is enabled.

@clawsweeper

clawsweeper Bot commented Aug 28, 2026

Copy link
Copy Markdown
Contributor

🦞👀
ClawSweeper picked this up.

Pull request received. I will update this pull request when review starts.

@clawsweeper clawsweeper Bot added P3 Low-risk cleanup, docs, polish, ergonomics, or speculative feature. proof: sufficient Contributor real behavior proof is sufficient. rating: 🦞 diamond lobster Very strong PR readiness with only minor maintainer review expected. status: 👀 ready for maintainer look ClawSweeper has no concrete contributor-facing blocker left for this PR. labels Aug 28, 2026
@clawsweeper

clawsweeper Bot commented Aug 28, 2026

Copy link
Copy Markdown
Contributor

Codex review: needs maintainer review before merge. Reviewed August 28, 2026, 1:24 PM ET / 17:24 UTC.

ClawSweeper review

What this changes

The PR clarifies that a historical Live Verification PASS covers only its declared scenario, adds source-to-scenario proof guidance, and extends the historical publication recipe with scoped classification cases.

Merge readiness

⚠️ Ready for maintainer review - 2 items remain

Keep open: this is a focused, still-unmerged improvement to proof-review guidance and historical PASS rendering; the supplied exact-head production-CLI evidence is sufficient and no introduced correctness defect was found.

Priority: P3
Reviewed head: 206907d968aa9204f50ca4b381b2b18b8f97d046

Review scores

Measure Result What it means
Overall readiness 🦞 diamond lobster (5/6) Focused implementation and exact-head production-CLI proof provide clearly above-average confidence for this small review-path refinement.
Proof confidence 🦞 diamond lobster (5/6) Sufficient (terminal): The changed historical-artifact publication and PASS-comment rendering path was exercised by the retained production CLI on the exact head, with 27/27 observed cases and an explicit before/after rendered result.
Patch quality 🦞 diamond lobster (5/6) No actionable review findings were identified.

Verification

Check Result Evidence
Real behavior Verified Sufficient (terminal): The changed historical-artifact publication and PASS-comment rendering path was exercised by the retained production CLI on the exact head, with 27/27 observed cases and an explicit before/after rendered result.
Evidence reviewed 5 items Introduced renderer behavior: The proposed renderer appends the scope disclaimer only when the parsed verification result is a PASS, preserving FAIL output behavior.
Focused regression coverage: The new unit test verifies the PASS disclaimer and confirms rendering does not mutate the verification receipt; the existing failure test asserts the disclaimer is absent for partial failures.
Publication-recipe coverage: The maintained recipe checks attached publication preserves the report's Live Proof section, repeats publication idempotently, and exercises the added synthetic scenario classifications.
Findings None None.
Security None None.

How this fits together

ClawSweeper folds historical verification artifacts into durable review reports and renders their results in review comments. Review guidance and proof assessments then determine whether that execution evidence actually covers the changed PR behavior before merge automation can proceed.

flowchart LR
A[Historical verification artifact] --> B[Artifact publication command]
C[PR diff and proof assessment] --> D[Review report]
B --> D
D --> E[PASS scope comment]
E --> F[Maintainer merge review]
Loading

Before merge

  • Resolve merge risk (P1) - Hosted exact-head checks were still incomplete in the captured PR state, so their outcome remains a normal landing gate.
  • Complete next step (P2) - No repair lane is warranted because the patch is coherent, covered by supplied real CLI evidence, and has no actionable review finding.
Agent review details

Security

None.

Review metrics

Metric Value Why it matters
Patch scope 8 files; +210/-15 The change is concentrated in proof guidance, one comment renderer, its unit coverage, and the maintained historical recipe.
Historical recipe cases 5 added; 22 → 27 total The added cases cover the claimed PASS-scope and source-to-scenario distinctions without changing the publication interface.

Merge-risk options

Maintainer options:

  1. Decide the mitigation before merge
    Retain the narrow renderer disclaimer and source-aware guidance, with the historical recipe protecting report preservation and repeat-publication behavior.
  2. Pause or close
    Do not merge this PR until maintainers decide whether the risk is worth taking.

Technical review

Best possible solution:

Retain the narrow renderer disclaimer and source-aware guidance, with the historical recipe protecting report preservation and repeat-publication behavior.

Do we have a high-confidence way to reproduce the issue?

Not applicable: this is a review-comment and guidance refinement, and the PR supplies an exact-head production CLI run for the changed rendering path.

Is this the best way to solve the issue?

Yes: adding the explanation at the common PASS rendering point, paired with focused recipe and unit coverage, is narrower and more maintainable than changing proof-gate semantics.

AGENTS.md: found and applied where relevant.

Codex review notes: model internal, reasoning high; reviewed against ccac077fea2f.

Labels

Label changes:

  • add P3: This is a low-risk clarity and review-ergonomics improvement with no new user-facing capability or configuration surface.
  • add proof: sufficient: Contributor real behavior proof is sufficient. The changed historical-artifact publication and PASS-comment rendering path was exercised by the retained production CLI on the exact head, with 27/27 observed cases and an explicit before/after rendered result.
  • add rating: 🦞 diamond lobster: Overall readiness is 🦞 diamond lobster; proof is 🦞 diamond lobster and patch quality is 🦞 diamond lobster.
  • add status: 👀 ready for maintainer look: ClawSweeper has no concrete contributor-facing blocker left for this PR. Sufficient (terminal): The changed historical-artifact publication and PASS-comment rendering path was exercised by the retained production CLI on the exact head, with 27/27 observed cases and an explicit before/after rendered result.

Label justifications:

  • P3: This is a low-risk clarity and review-ergonomics improvement with no new user-facing capability or configuration surface.
  • rating: 🦞 diamond lobster: Overall readiness is 🦞 diamond lobster; proof is 🦞 diamond lobster and patch quality is 🦞 diamond lobster.
  • status: 👀 ready for maintainer look: ClawSweeper has no concrete contributor-facing blocker left for this PR. Sufficient (terminal): The changed historical-artifact publication and PASS-comment rendering path was exercised by the retained production CLI on the exact head, with 27/27 observed cases and an explicit before/after rendered result.
  • proof: sufficient: Contributor real behavior proof is sufficient. The changed historical-artifact publication and PASS-comment rendering path was exercised by the retained production CLI on the exact head, with 27/27 observed cases and an explicit before/after rendered result.

Evidence

What I checked:

  • Introduced renderer behavior: The proposed renderer appends the scope disclaimer only when the parsed verification result is a PASS, preserving FAIL output behavior. (src/live-proof/verification.ts:406, 206907d968aa)
  • Focused regression coverage: The new unit test verifies the PASS disclaimer and confirms rendering does not mutate the verification receipt; the existing failure test asserts the disclaimer is absent for partial failures. (test/live-proof.test.ts:3081, 206907d968aa)
  • Publication-recipe coverage: The maintained recipe checks attached publication preserves the report's Live Proof section, repeats publication idempotently, and exercises the added synthetic scenario classifications. (docs/proof/historical-proof-classification/run-proof.mjs:109, 206907d968aa)
  • After-fix real behavior proof: The PR body records a fresh exact-head run of the retained production artifact-publication CLI with 27/27 cases passing and an observed before/after PASS-comment rendering change; its stated limits correctly exclude native execution and remote mutation. (206907d968aa)
  • Relevant merged history: The prior merged proof-authority fix was committed as ClawSweeper PR 1282, establishing the current semantic-proof boundary that this PR documents and presents more clearly. (src/live-proof/verification.ts:398, 468dab46ff57)

Likely related people:

  • steipete: Authored the merged proof-authority fix and the immediately preceding retirement cleanup, as well as this focused follow-up. (role: recent proof-review feature owner; confidence: high; commits: 468dab46ff57, ccac077fea2f; files: src/live-proof/verification.ts, docs/live-proof.md, docs/proof/historical-proof-classification/run-proof.mjs)
  • vincentkoc: Recent feature history identifies this contributor's gate work as the earlier source of the historical verification behavior refined by the merged follow-up. (role: original proof-gate contributor; confidence: medium; commits: f3883a32631b, 3ec84eef2517; files: src/live-proof/verification.ts)

Rating scale

Score Internal tier Crab rank Meaning
6/6 S 🦀 challenger crab Exceptional readiness
5/6 A 🦞 diamond lobster Very strong readiness
4/6 B 🐚 platinum hermit Good normal PR; ordinary maintainer review
3/6 C 🦐 gold shrimp Useful, but confidence is limited
2/6 D 🦪 silver shellfish Proof or implementation needs work
1/6 F 🧂 unranked krab Not merge-ready
N/A NA 🌊 off-meta tidepool Rating does not apply

Overall follows the weaker of proof and patch quality.
Shiny media proof means a screenshot, video, or linked artifact directly shows the changed behavior. Runtime, network, CSP, and security claims still need visible diagnostics.

Workflow

  • ClawSweeper keeps one durable marker-backed review comment per issue or PR.
  • Re-runs edit this comment so the latest verdict, findings, and automation markers stay together instead of adding duplicate bot comments.
  • A fresh review can be triggered by eligible @clawsweeper re-review comments, exact-item GitHub events, scheduled/background review runs, or manual workflow dispatch.
  • PR/issue authors and users with repository write access can comment @clawsweeper re-review or @clawsweeper re-run on an open PR or issue to request a fresh review only.
  • Maintainers can also comment @clawsweeper review to request a fresh review only.
  • Fresh-review commands do not start repair, autofix, rebase, CI repair, or automerge.
  • Maintainer-only repair and merge flows require explicit commands such as @clawsweeper autofix, @clawsweeper automerge, @clawsweeper fix ci, or @clawsweeper address review.
  • Maintainers can comment @clawsweeper explain to ask for more context, or @clawsweeper stop to stop active automation.

@steipete
steipete merged commit 566889b into main Aug 28, 2026
16 checks passed
@steipete
steipete deleted the steipete/cranky-antonelli-f87932 branch August 28, 2026 17:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

P3 Low-risk cleanup, docs, polish, ergonomics, or speculative feature. proof: sufficient Contributor real behavior proof is sufficient. rating: 🦞 diamond lobster Very strong PR readiness with only minor maintainer review expected. status: 👀 ready for maintainer look ClawSweeper has no concrete contributor-facing blocker left for this PR.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant