chore(echidnabot): bump vendored copy to faeb280 (#168, #169)

[hyperpolymath]

Summary

Re-pins the vendored bots/echidnabot copy to hyperpolymath/echidnabot main @ faeb2808 (was bf2c0ffc, 2 commits behind), using the repo's own scripts/sync-vendored-bot.sh echidnabot --sync --rev faeb2808efcf1fc8149afc5811182cb14bf79091.

It brings in:

• feat: echidna integration, prove-result contract, id minting, CI repair echidnabot#168: echidna integration, the prove-result contract, UUID minting (src/ids.rs: v7 records, v8 content ids) and a CI repair.
• feat(api): add submitProofObligation mutation for hypatia echidnabot#169: the submitProofObligation GraphQL mutation. hypatia's FleetDispatcher and LearningScheduler send this contract (fix(dispatch): failed fleet dispatch reports failure, not success hypatia#911). Until this bump lands, a fleet-deployed echidnabot rejects every hypatia dispatch as an unknown field.

Scope:

• Only bots/echidnabot/** changes (34 files, +2065/−241).
• FLEET-SYNC.json changes rev only.
• 0 files deleted, so the Repo Integrity Guard needs no [mass-delete-ok].
• 4 files added: migrations/20261008000001_proof_obligations.sql, src/dispatcher/prove_result.rs, src/ids.rs, tests/live_echidna.rs.

No issue to close. This is the follow-up to hyperpolymath/echidnabot#169.

Type of change

• 🐛 Bug fix — not a fix in this repo; it re-pins vendored upstream code.
• ✨ New feature — the feature (submitProofObligation) was built and reviewed upstream in feat(api): add submitProofObligation mutation for hypatia echidnabot#169; this PR only re-vendors it.
• 💥 Breaking change — no existing fleet behaviour changes. The upstream GraphQL change is additive.
• 🕳️ Soundness fix — not applicable.
• 📖 Documentation — no fleet docs change. The vendored copy carries no docs/ (not in include).
• 🧹 Refactor / tech debt — not applicable.
• ⚡ Performance — not applicable.
• 🔧 Build / CI / tooling — a vendored-dependency pin bump (FLEET-SYNC.json rev plus the synced tree).

📌 New pins

• PR head SHA: cdfa0b813f44a46be8dd149edd02d32f65cbe1d8
• bots/echidnabot/FLEET-SYNC.json rev: bf2c0ffc9f5faee3c2072b516855a045400ac247 → faeb2808efcf1fc8149afc5811182cb14bf79091 (hyperpolymath/echidnabot main head, the signed squash merge of licence(#7): PMPL-1.0 -> PMPL-1.0-or-later (owner carve-out, SPDX-only) #169).
• Vendored bots/echidnabot/Cargo.lock records, as resolved upstream:
  • added echidna-core-spark 0.1.0, git https://github.com/hyperpolymath/echidna rev b761b3a832981be51d4e88076ef1b90fe5037e9c
  • added serde_json_canonicalizer 0.3.2
  • added ryu-js 1.0.3
  • async-trait 0.1.89 → 0.1.92
  • rustls 0.23.40 → 0.23.45
  • rustls-webpki 0.103.13 → 0.103.15
• No action uses: SHAs, actions.lock entries or container digests change.

How has this been verified?

All commands were run in the PR worktree at the head above:

• scripts/sync-vendored-bot.sh echidnabot --check printed "bots/echidnabot matches https://github.com/hyperpolymath/echidnabot@faeb2808… (79 entries)" and exited 0.
• bash scripts/tests/sync-vendored-bot.sh reported 21 passed, 0 failed.
• jq -cS . bots/echidnabot/FLEET-SYNC.json is byte-identical to the file, so the lock stays in canonical form.
• git diff --cached --name-only | grep -v '^bots/echidnabot/' printed nothing. git diff --cached --diff-filter=D lists 0 files.
• git log -1 --show-signature reports a good ED25519 signature, as required_signatures on main needs.
• Not built here. Fleet CI does not compile bots/echidnabot: rust.yml builds robot-repo-automaton, shared-context, dashboard and rhodibot; CodeQL is actions / build-mode: none. The build evidence for this tree is therefore upstream CI on faeb2808, which is green apart from skipped deploy/automerge/coverage jobs. squabble verify-satisfied hyperpolymath/echidnabot 169 returned done: true.

Checklist

• My commits are signed: SSH ED25519 key, verified locally with git log --show-signature.
• I ran the project's own checks/tests locally and they pass: the drift --check and the sync script's planted-control suite, as above.
• New files carry the correct SPDX-License-Identifier: all 4 added vendored files are MPL-2.0, as written upstream. Nothing was relicensed.
• Docs are updated, and no public claim now overstates what the code does. No fleet doc describes the vendored version. Upstream's api.adoc says submitProofObligation stores an obligation and does not prove it (status is always PENDING).
• I have not introduced a soundness hole. This is a byte-for-byte re-vendor of reviewed upstream code, and the drift gate enforces that.

Notes for reviewers

• .github/dependabot.yml deliberately leaves out /bots/echidnabot. Dependency bumps for it land upstream and arrive here by re-pinning, as in this PR.
• The new git dependency echidna-core-spark is pinned by full rev in both the vendored Cargo.toml and Cargo.lock.

Deferred red checks (none required; all also red on main @ 72970698)

This PR touches no workflow and no actions.lock. Each red below fails identically on main:

• actions.lock is in sync with the workflow YAML: deferred to actions.lock desync on main: #595 bumped smtp-notify-action 0.3.0→0.5.0 without relocking #604. chore(deps): bump hyperpolymath/smtp-notify-action from 0.3.0 to 0.5.0 in the actions group #595 bumped smtp-notify-action to v0.5.0 without relocking.
• governance / Actions lockfile verify: deferred to actions.lock desync on main: #595 bumped smtp-notify-action 0.3.0→0.5.0 without relocking #604, same cause.
• scorecard / Run Scorecard PR: deferred to actions.lock desync on main: #595 bumped smtp-notify-action 0.3.0→0.5.0 without relocking #604, same cause. Reconciliation fails on push-email-notify.yml.
• Codeac analyze results (legacy status): deferred to Codeac analyze results fails on main: service cannot analyse the repo #590. The service cannot analyse the repo.

🤖 Generated with Claude Code

https://claude.ai/code/session_015bTuGfwCcvjrmNFejydTML

[coderabbitai]

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration

• Configuration used: Repository: hyperpolymath/gitbot-fleet/.coderabbit.yaml
• Review profile: CHILL
• Plan: Advanced
• Run ID: c1915c8c-49dd-4459-b8ce-3717d7f5fea9

📥 Commits

Reviewing files that changed from the base of the PR and between 7297069 and cdfa0b8.

⛔ Files ignored due to path filters (1)

• bots/echidnabot/Cargo.lock is excluded by !**/*.lock

📒 Files selected for processing (33)

• bots/echidnabot/Cargo.toml
• bots/echidnabot/FLEET-SYNC.json
• bots/echidnabot/README.adoc
• bots/echidnabot/benches/echidnabot_bench.rs
• bots/echidnabot/config/echidnabot.ncl
• bots/echidnabot/echidnabot.example.toml
• bots/echidnabot/migrations/20261008000001_proof_obligations.sql
• bots/echidnabot/src/api/graphql.rs
• bots/echidnabot/src/config.rs
• bots/echidnabot/src/dispatcher/echidna_client.rs
• bots/echidnabot/src/dispatcher/mod.rs
• bots/echidnabot/src/dispatcher/prove_result.rs
• bots/echidnabot/src/error.rs
• bots/echidnabot/src/feedback/corpus_delta.rs
• bots/echidnabot/src/feedback/reranker.rs
• bots/echidnabot/src/fleet/mod.rs
• bots/echidnabot/src/ids.rs
• bots/echidnabot/src/lib.rs
• bots/echidnabot/src/main.rs
• bots/echidnabot/src/observability.rs
• bots/echidnabot/src/result_formatter.rs
• bots/echidnabot/src/scheduler/job_queue.rs
• bots/echidnabot/src/scheduler/mod.rs
• bots/echidnabot/src/store/mod.rs
• bots/echidnabot/src/store/models.rs
• bots/echidnabot/src/store/sqlite.rs
• bots/echidnabot/src/trust/axiom_tracker.rs
• bots/echidnabot/src/trust/confidence.rs
• bots/echidnabot/tests/integration_tests.rs
• bots/echidnabot/tests/lifecycle.rs
• bots/echidnabot/tests/live_echidna.rs
• bots/echidnabot/tests/protocol_contract.rs
• bots/echidnabot/tests/regressions/mod.rs

 _________________________________________
< Here's Johnny! Ready to axe those bugs. >
 -----------------------------------------
  \
   \   (\__/)
       (•ㅅ•)
       / 　 づ

✨ Finishing Touches

📝 Generate docstrings

• Commit to this branch
• Create a new PR

🧪 Generate unit tests (beta)

❌ Error committing Unit Tests locally.

• Commit to this branch
• Create a new PR

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[coderabbitai]

❌ Failed to create Coding Agent finishing-touch task. Please try again.

[coderabbitai]

Note

Unit test generation is a beta feature. Expect some limitations and changes as we gather feedback and continue to improve it.

---

Generating unit tests... This may take up to 20 minutes.

[coderabbitai]

Failed to create Coding Agent finishing-touch task.