aios/.agent/results/openclaw/RESULT-V2R1-G1-OPENCLAW-REPORT-CORRECTION-20260713.md

gate, variant, date, source_commit, source_branch, tests_total, tests_passed, tests_failed, cleanup, secret_scan, rollback, recovery, workspace, merge_performed, tag_created, baseline_promoted, staging_deployed, production_deployed

gate	variant	date	source_commit	source_branch	tests_total	tests_passed	tests_failed	cleanup	secret_scan	rollback	recovery	workspace	merge_performed	tag_created	baseline_promoted	staging_deployed	production_deployed
G1	openclaw-cleanroom	2026-07-13	502ef30642	origin/work/v2r1-integration-quality-2000	32	32	0	PASS	PASS	PASS	verified	clean	false	false	false	false	false

V2R1 Gate 1 — OpenClaw Clean-Room Report Correction

Source Verification

Attribute	Value
source commit	502ef30642597fb0b70b90ae2e8a0b6af217d80e
source branch	origin/work/v2r1-integration-quality-2000
parent (0)	6077331addc71d090d454c123cc5de5460ab637e
validation date	2026-07-13 18:43 Asia/Shanghai

Test Results

v2r1 unit tests: 29/29 PASS

PYTHONPATH=active-runtime/app python3 -m pytest \
  tests/v2r1/test_hermes_fabric.py \
  tests/v2r1/test_message_ledger_append.py \
  tests/v2r1/test_router_isolation.py \
  tests/v2r1/test_runtime_identity_binding.py \
  tests/v2r1/test_runtime_wiring.py \
  tests/v2r1/test_tenant_context.py \
  -v

Result: 29 passed in 0.95s, exit code 0

Integration tests: 3/3 PASS

PYTHONPATH=active-runtime/app python3 -m pytest \
  tests/integration/test_runtime_ingress_flow.py \
  -v

Result: 3 passed in 0.17s, exit code 0

Summary: 32/32 PASS

HMAC Test Keys (Legitimate Test Credentials)

File	Key String	Byte Length
test_runtime_wiring.py:25	runtime-external-ingress-key-is-32bytes	39 bytes
test_runtime_identity_binding.py:24	external-ingress-hmac-key-is-32-bytes	37 bytes
test_runtime_ingress_flow.py:27	runtime-integration-ingress-key-32bytes!	40 bytes

These are hardcoded test-only HMAC keys used for deterministic signing in test fixtures. They are not production credentials.

Secret Scan

Method

Manual pattern-based scan on the source commit tree at 502ef306:

1. Pattern: API[Kk]ey\|sk-[a-zA-Z0-9]\{20,\}\|[Nn]pk\|secret\b — searched across all tracked files
2. Private key detection: -----BEGIN.*PRIVATE KEY----- — searched across all tracked files
3. Auxiliary gitleaks evidence (external clean-room): Codex ran gitleaks v8.30.1 on the source tree.
   • Git scan (commits): 312 commits scanned, 0 findings
   • Tree scan (files): ~1.21 MB scanned, 0 findings
   • Report: /tmp/v2r1-cleanup-audit-git.json, /tmp/v2r1-cleanup-audit-tree.json

Findings

• 0 matches for API key or private key patterns in tracked source
• 3 matches for b"\.\.\." are the HMAC test keys listed above — false positive, test-only credentials
• Gitleaks external scan: 0 findings

Result: PASS

Cleanup

• Workspace state at source: clean (no tracked modifications)
• Conflict markers in source tree: 0
• Temporary test directories (e.g., test message ledgers): cleaned during pytest fixture teardown

Result: PASS

Rollback

• Rollback target: 6077331addc71d090d454c123cc5de5460ab637e (release/v2r1c0-rc1 base)
• Recovery steps: git checkout 6077331 → core tests (13 tests) → 13/13 PASS
• Recovery verified: PASS

Result: PASS

Deployment

Operation	Performed
merge_performed	false
tag_created	false
baseline_promoted	false
staging_deployed	false
production_deployed	false

Recommendation

Gate 1 clean-room validation complete. G1-PASS — all 32 tests pass, workspace clean, secret scan clean, rollback verified.

Evidence

• Source commit: 502ef30642597fb0b70b90ae2e8a0b6af217d80e
• Test run log: pytest exit code 0, 32/32 PASS
• Rollback verification: 6077331, 13/13 core tests PASS
• Secret scan: 0 findings (manual) + 0 findings (gitleaks external)