Skip to content

[RELEASE] The harness auditor reads the whole adapter (carries #5764) - #5765

Merged
vivekchand merged 1 commit into
mainfrom
release/audit-truncation
Sep 9, 2026
Merged

[RELEASE] The harness auditor reads the whole adapter (carries #5764)#5765
vivekchand merged 1 commit into
mainfrom
release/audit-truncation

Conversation

@vivekchand

Copy link
Copy Markdown
Owner

Publishes #5764 (merged, 36/36 green), which closes #5750.

What ships

scripts/harness/audit.py read the first 60,000 characters of an adapter and then told the model it had the file "in full". clawmetry/adapters/openclaw.py is 193,340 characters, and both runtimes the OSS audit covers map to it, so every run judged a two-thirds-clipped file while being assured it was complete. For a task that is entirely about reporting absence, that assurance turns "I did not see it" into "it is not there".

It filed #5750 at severity high against a NEMOCLAW_TRACE_FILE reader sitting ~18k characters past the cut, with four nemoclawOnboardTrace* fields on the detection record and REQ-OBS-RSO-034 specifying the whole capability.

Risk

Effectively nil for the shipped product: scripts/harness/ is tooling that runs in CI, not code the dashboard or the daemon imports. No route, no adapter behaviour, no cloud surface changes. The only runtime effect is that a future audit run reads more of a file and says so when it cannot.

Why it is worth a release rather than sitting on main

The audit runs on a schedule and files issues automatically. Every run until this ships can mint another high-severity fiction that a person or an agent then has to disprove against already-shipped code.

Verification carried from #5764

openclaw  clawmetry/adapters/openclaw.py  chars=193104  trimmed=False
   NEMOCLAW_TRACE_FILE visible in body: True
   index mentions NEMOCLAW_TRACE_FILE:  True

Guard proven red — restoring the 60k cap and the completeness claim fails 5 of 6, including both audited runtimes and the past-60k witness.

The four siblings were checked, not assumed. #5746 to #5749 came from the same truncated runs but each reasons about functions inside the old window, and the full-file grep confirms every claim. #5750 was the only fiction of the five, and PR #5760 against #5746 is doing real work.

No-PRD: release PR for a merged bug fix against filed issue #5750.

🤖 Generated with Claude Code

https://claude.ai/code/session_01Xb6A5G74JiMe3zHFs1JZEP

@8090-software-factory

Copy link
Copy Markdown

✅ Drift Bot (ClawMetry): no drift detected

Drift Bot analyzed the changed files against this project's blueprints and requirements and found no drift.

@vivekchand
vivekchand merged commit 4fb077a into main Sep 9, 2026
38 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[obs-gap:nemoclaw] nemoclaw: onboarding OTel trace artifacts (per-phase spans/status/duration) not ingested

1 participant