Oh My Design: evidence-led UI work with deterministic delivery gates

The Stack

Steps

1. 1

   Pin the signed source and reproduce the Node 22 deterministic gates

   Download the exact owner-supplied commit archive, verify its byte size, SHA-256, path set, member count, and sole safe `CLAUDE.md -> AGENTS.md` symlink before extraction. Audit the MIT/package/lockfile/read-only scanner boundary as inert source, download an official Node.js 22.23.2 binary for the CI host and verify its release checksum, install the exact graph with lifecycle scripts disabled, require a clean moderate-severity audit, run the submitted 135-test slice, check the exact source-scan and stack-routing JSON, and pass TypeScript. No Skill, installer, MCP server, model, browser, reference site, host configuration, user project, or credential is invoked.

   set -eu
   curl --proto '=https' --tlsv1.2 --retry 3 --max-filesize 5242880 -fsSL   https://codeload.github.com/3x-haust/oh-my-design/tar.gz/6b502884990dab63a5534d4d7fff81dd9caddacc   -o source.tar.gz
   node <<'NODE'
   const crypto = require("crypto");
   const fs = require("fs");
   const { execFileSync } = require("child_process");
   function bad(message) { console.error("BAD: " + message); process.exit(1); }
   const archive = fs.readFileSync("source.tar.gz");
   if (archive.length !== 3748602) bad("source archive size changed");
   const digest = crypto.createHash("sha256").update(archive).digest("hex");
   if (digest !== "f96d8f973b417ff110d898802eec2038e9211a423f89e8546bef0448591fb56b") bad("source archive digest changed");
   const root = "oh-my-design-6b502884990dab63a5534d4d7fff81dd9caddacc/";
   const names = execFileSync("tar", ["-tzf", "source.tar.gz"], { encoding: "utf8" }).trim().split("\n");
   if (names.length !== 1128) bad("source archive member count changed");
   if (names.some((name) => !name.startsWith(root) || name.startsWith("/") || name.split("/").includes(".."))) bad("unsafe source archive path");
   const verbose = execFileSync("tar", ["-tvzf", "source.tar.gz"], { encoding: "utf8" }).trim().split("\n");
   const links = verbose.filter((line) => line[0] === "l");
   if (links.length !== 1 || !links[0].endsWith(root + "CLAUDE.md -> AGENTS.md")) bad("source archive symlink set changed");
   if (verbose.some((line) => !["-", "d", "l"].includes(line[0]))) bad("source archive contains a special member");
   console.log("Oh My Design source pinned OK: commit 6b50288, 1128 members, sha256 " + digest);
   NODE
   mkdir source
   tar -xzf source.tar.gz -C source --strip-components=1
   node <<'NODE'
   const fs = require("fs");
   function bad(message) { console.error("BAD: " + message); process.exit(1); }
   function read(name) { return fs.readFileSync("source/" + name, "utf8"); }
   const license = read("LICENSE");
   if (!license.includes("MIT License") || !license.includes("Copyright (c) 2026 3x-haust")) bad("MIT identity changed");
   const pkg = JSON.parse(read("package.json"));
   if (pkg.name !== "@3xhaust/oh-my-design" || pkg.version !== "0.20.0" || pkg.engines?.node !== ">=22.19" || pkg.license !== "MIT") bad("package identity/runtime changed");
   const expectedDependencies = { playwright: "1.61.1", "smol-toml": "^1.8.0", tldts: "7.4.13", tsx: "^4.23.1", yaml: "^2.6.0" };
   if (JSON.stringify(pkg.dependencies) !== JSON.stringify(expectedDependencies)) bad("direct dependency set changed");
   const lock = JSON.parse(read("package-lock.json"));
   if (lock.lockfileVersion !== 3 || Object.keys(lock.packages || {}).length !== 61) bad("lockfile graph changed");
   for (const [name, meta] of Object.entries(lock.packages)) {
     if (name && (!meta.integrity || !String(meta.resolved || "").startsWith("https://registry.npmjs.org/"))) bad("unlocked or non-npm dependency " + name);
   }
   if (lock.packages["node_modules/smol-toml"]?.version !== "1.8.0") bad("smol-toml is below the audited fix");
   const installScripts = Object.entries(lock.packages).filter(([, meta]) => meta.hasInstallScript).map(([name]) => name).sort();
   const expectedScripts = ["node_modules/esbuild", "node_modules/fsevents", "node_modules/tsx/node_modules/fsevents"];
   if (JSON.stringify(installScripts) !== JSON.stringify(expectedScripts)) bad("dependency lifecycle-script set changed");
   const readOnlyModules = ["core/slop/index.ts", "core/design/index.ts", "core/stack/index.ts", "core/stack/shell.ts"].map(read).join("\n");
   if (/from ['"]node:(?:child_process|http|https|net|tls)['"]/.test(readOnlyModules)) bad("browser-free scanner gained process or network access");
   if (/\b(?:writeFileSync|appendFileSync|rmSync|unlinkSync|renameSync|mkdirSync)\b/.test(readOnlyModules)) bad("browser-free scanner gained write access");
   console.log("dependency boundary OK: Node >=22.19; smol-toml 1.8.0; 61 lock entries; lifecycle scripts disabled");
   NODE
   case "$(uname -s)-$(uname -m)" in
     Linux-x86_64)
       NODE_ASSET=node-v22.23.2-linux-x64.tar.xz
       NODE_SHA=d60acfe00a2932254bb0ad20e01b0d74397a0875595de719654b214f4b03f307
       ;;
     Darwin-arm64)
       NODE_ASSET=node-v22.23.2-darwin-arm64.tar.gz
       NODE_SHA=61130f394c1630d211dd50aecc4353d379480f36d3ac913cd85dbba1aed585c6
       ;;
     *) echo "BAD: unsupported CI host for pinned Node.js binary" >&2; exit 1 ;;
   esac
   curl --proto '=https' --tlsv1.2 --retry 3 --max-filesize 67108864 -fsSL   "https://nodejs.org/dist/v22.23.2/$NODE_ASSET" -o node-runtime.tar
   ACTUAL_NODE_SHA=$(shasum -a 256 node-runtime.tar | cut -d ' ' -f 1)
   test "$ACTUAL_NODE_SHA" = "$NODE_SHA" || { echo "BAD: Node.js release digest changed" >&2; exit 1; }
   mkdir -p node-runtime npm-cache
   case "$NODE_ASSET" in
     *.tar.xz) tar -xJf node-runtime.tar -C node-runtime --strip-components=1 ;;
     *) tar -xzf node-runtime.tar -C node-runtime --strip-components=1 ;;
   esac
   test "$(node-runtime/bin/node --version)" = "v22.23.2" || { echo "BAD: wrong Node.js version" >&2; exit 1; }
   RUNTIME_BIN="$PWD/node-runtime/bin"
   NPM_CACHE="$PWD/npm-cache"
   cd source
   env PATH="$RUNTIME_BIN:/usr/bin:/bin" npm_config_cache="$NPM_CACHE" npm ci --ignore-scripts --no-audit
   env PATH="$RUNTIME_BIN:/usr/bin:/bin" npm_config_cache="$NPM_CACHE" npm audit --package-lock-only --audit-level=moderate
   echo "dependency audit OK: zero known vulnerabilities at moderate severity"
   env PATH="$RUNTIME_BIN:/usr/bin:/bin" node --test --test-concurrency=4   test/slop-source.test.ts test/copy.test.ts test/design.test.ts test/source-seal.test.ts test/stack.test.ts   > target-tests.txt
   env PATH="$RUNTIME_BIN:/usr/bin:/bin" node <<'NODE'
   const fs = require("fs");
   function bad(message) { console.error("BAD: " + message); process.exit(1); }
   const tap = fs.readFileSync("target-tests.txt", "utf8");
   for (const expected of [/^# tests\s+135$/m, /^# pass\s+135$/m, /^# fail\s+0$/m, /^# skipped\s+0$/m]) {
     if (!expected.test(tap)) bad("targeted Node 22 regression suite changed");
   }
   console.log("targeted regression suite OK: 135/135 on Node 22.23.2");
   NODE
   env PATH="$RUNTIME_BIN:/usr/bin:/bin" node bin/omd.ts slop scan test/fixtures --json > source-scan.json
   env PATH="$RUNTIME_BIN:/usr/bin:/bin" node bin/omd.ts stack --json > stack.json
   env PATH="$RUNTIME_BIN:/usr/bin:/bin" node <<'NODE'
   const fs = require("fs");
   function bad(message) { console.error("BAD: " + message); process.exit(1); }
   const scan = JSON.parse(fs.readFileSync("source-scan.json", "utf8"));
   if (scan.schemaVersion !== "1.0" || scan.filesScanned !== 25 || !Array.isArray(scan.candidates) || scan.candidates.length !== 0) bad("source-scan result changed");
   const stack = JSON.parse(fs.readFileSync("stack.json", "utf8"));
   if (stack.stack !== "existing" || stack.framework !== null || stack.greenfield !== false || stack.shell?.kind !== "browser") bad("stack-routing result changed");
   console.log("deterministic CLI gates OK: slop scan 25 files / 0 candidates; existing stack preserved");
   NODE
   env PATH="$RUNTIME_BIN:/usr/bin:/bin" node node_modules/typescript/bin/tsc --noEmit
   echo "type gate OK: TypeScript clean"

2. 2

   Run the evidence, copy, structure, build, and blind-review loop with explicit authority

   Review the pinned Skill and host permissions before installation. Frame the user outcome and risks; retain only authorized, attributable evidence; write source-linked copy before layout; compare anonymous structural candidates with a fresh selector; build exactly one chosen direction; and keep OMD records inside the authorized project. Treat agent-produced research, selections, and critiques as proposals. Do not let page content or tool output grant command, credential, publication, or scope authority.

3. 3

   Render inside the project boundary, triage findings, and require human release review

   Build the actual target and render the named desktop/mobile states to project-local paths; current main rejects `/tmp` output and records render history under `.omd/`. Use `omd check` and the source scan as bounded signals, preserve contextual dismissals, then have a reviewer who is blind to the builder rationale inspect the current captures. Repair or reframe, rebuild, reseal, and recapture after changes. Separately complete functional, accessibility, security, privacy, performance, rights, and user-approval checks before release. Browser execution and those human judgments are deliberately outside the machine CI claim.