data2dsl

ID: ticket-063
Owner: unresolved:human
Status: DONE
Workflow state: DONE
Created: 2026-08-28

Ticket 063: Fix evidence digest computation across adapters to ensure cryptographic integrity (F06)

Fix audit finding F06: Several adapters had weaknesses in SHA-256 evidence digest calculation:

OqlTelemetryAdapter: used val_obj.get("value", "") which returned "" for string-set metrics (pins, buses), producing identical digests when pins or buses differed.
DetaAdapter: computed f"topology:{response.manifest_path}", ignoring actual services and ports.
IntentContractAdapter: omitted parties and obligations from contract digest.
GitHubDiagitAdapter: hashed arbitrary parameters when pagination evidence was present instead of page content digests.

SESSION_EXECUTION_AUTHORIZATION recorded from user prompt.

AC-01: Scope is approved (SESSION_EXECUTION_AUTHORIZATION recorded).
AC-02: OqlTelemetryAdapter produces distinct digests for differing string-set values (pins, buses).
AC-03: DetaAdapter produces distinct digests when services or ports differ.
AC-04: IntentContractAdapter produces distinct digests when parties, obligations, or deliverables differ.
AC-05: Unit tests in tests/test_evidence_digests.py verify cryptographic distinction.
AC-06: Full pytest suite passes (112/112) and governance-check.bat reports GOV-PASS.