fix: trust host evidence for managed no-op delivery

docs/engineering/EP_PRODUCER_READBACK_CONTRACT.md

@@ -69,7 +69,8 @@ artifact response. A missing, corrupt, or mismatched artifact is represented as
 verified, run-bound delivery evidence: normally a recorded merge revision, or
 an explicit host-verified Managed no-op revision after the unchanged,
 synchronized `main` checkout was rechecked in that transaction. EP never uses
-the ambient checkout `HEAD` as a substitute. `VALIDATION_ONLY`, `BLOCKED`, and
+the ambient checkout `HEAD` as a substitute, and an advisory producer-reported
+SHA cannot override the host's before/after observation. `VALIDATION_ONLY`, `BLOCKED`, and
 `FAILED` may have valid terminal evidence with a null revision; they are not
 fabricated into successful delivery.
 

package.json

@@ -1,7 +1,7 @@
 {
   "name": "engineering-platform-browser-validation",
   "private": true,
-  "version": "2.3.16",
+  "version": "2.3.17",
   "scripts": {
     "test:engineering-dashboard": "PYTHONPATH=src python3 -m engineering_platform.dashboard_browser_validation",
     "test:engineering-dashboard-logic": "node --test tests/engineering/dashboard_status_store.test.mjs tests/engineering/ui_localization_contract.test.mjs",

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "engineering-platform"
-version = "2.3.16"
+version = "2.3.17"
 description = "Local-first Engineering Platform execution operations runtime"
 readme = "README.md"
 requires-python = ">=3.11"

src/engineering_platform/ENGINEERING_PLATFORM_CONFIG.json

@@ -3,7 +3,7 @@
   "platform": {
     "id": "engineering-platform",
     "name": "Engineering Platform",
-    "version": "2.3.16",
+    "version": "2.3.17",
     "generation": 2,
     "documentation_namespace": "engineering-platform",
     "capability_registry_version": 1

src/engineering_platform/ENGINEERING_PLATFORM_VERSION.json

@@ -1,15 +1,15 @@
 {
   "bootstrap_contract": "2026.12",
   "checkpoint_format": 1,
-  "dashboard_version": "2.3.16",
+  "dashboard_version": "2.3.17",
   "handoff_protocol": 1,
   "memory_format": 2,
   "minimum_codex_cli": "0.146.0",
   "inbox_protocol": 1,
-  "platform_version": "2.3.16",
+  "platform_version": "2.3.17",
   "report_format": 2,
-  "runner_version": "2.3.16",
+  "runner_version": "2.3.17",
   "status_model": 1,
   "storage_schema": 44,
-  "watcher_version": "2.3.16"
+  "watcher_version": "2.3.17"
 }

src/engineering_platform/execution_host.py

@@ -2244,12 +2244,16 @@ def _is_verified_managed_noop(
             current = self.repository.inspect(self.root)
         except RunnerError:
             return False
+        # The provider's reported SHA is advisory input, not delivery proof.
+        # A Forge Runtime Prompt can legitimately carry an earlier pinned
+        # repository-truth revision while this host has already synchronized
+        # main.  The no-op decision is qualified only by the host-observed
+        # before/after state for this run.
         return (
             current.clean
             and current.branch == "main"
             and current.main_contains_head
             and current.head_sha == baseline.head_sha
-            and (result.commit_sha is None or result.commit_sha == current.head_sha)
         )
 
     def _advance_after_primary_agent_result(

src/engineering_platform/platform_version.py

@@ -12,7 +12,7 @@
 
 SEMVER = re.compile(r"^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$")
 CONTRACT = re.compile(r"^(\d{4})\.(0[1-9]|1[0-2])$")
-CURRENT_PLATFORM_VERSION = "2.3.16"
+CURRENT_PLATFORM_VERSION = "2.3.17"
 MANIFEST_FIELDS = frozenset(
     {
         "platform_version",

src/engineering_platform/templates/workspace-config.json

@@ -3,7 +3,7 @@
   "platform": {
     "id": "engineering-platform",
     "name": "Engineering Platform",
-    "version": "2.3.16",
+    "version": "2.3.17",
     "generation": 2,
     "documentation_namespace": "engineering-platform",
     "capability_registry_version": 1

tests/engineering/test_execution_host.py

@@ -2646,6 +2646,10 @@ def test_verified_managed_noop_reconciles_an_unchanged_main_checkout(self) -> No
         result = AgentResult(
             "COMPLETE",
             terminal_condition="repository_reconciled",
+            # Producer provenance can carry an earlier pinned repository
+            # revision. The host's before/after observation remains the
+            # authoritative no-op delivery evidence.
+            commit_sha="b" * 40,
             validation_evidence=({"command": "python -m unittest focused", "result": "PASS: focused checks"},),
         )