@trac3er/oh-my-god 2.0.4 → 2.0.7

package/dist/enterprise/bundle/settings.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json.schemastore.org/claude-code-settings.json",
-  "_comment": "OMG 2.0.4 - project-level config with hook registrations, presets, and feature flags.",
+  "_comment": "OMG 2.0.7 - project-level config with hook registrations, presets, and feature flags.",
   "permissions": {
     "allow": [
       "Agent",
@@ -281,10 +281,32 @@
         ],
         "matcher": ""
       }
+    ],
+    "UserPromptSubmit": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "python3 \"$HOME/.claude/hooks/user-prompt-submit.py\"",
+            "timeout": 10
+          }
+        ]
+      }
+    ],
+    "InstructionsLoaded": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "python3 \"$HOME/.claude/hooks/instructions-loaded.py\"",
+            "timeout": 10
+          }
+        ]
+      }
     ]
   },
   "_omg": {
-    "_version": "2.0.4",
+    "_version": "2.0.7",
     "preset": "safe",
     "default_mode": "ulw+ralph",
     "vision_auto": true,
@@ -337,14 +359,27 @@
       "CONTEXT_MANAGER": false
     },
     "generated": {
-      "contract_version": "2.0.4",
-      "channel": "public",
+      "contract_version": "2.0.7",
+      "channel": "enterprise",
       "required_bundles": [
         "control-plane",
         "hook-governor",
         "mcp-fabric",
         "lsp-pack",
-        "secure-worktree-pipeline"
+        "secure-worktree-pipeline",
+        "security-check",
+        "api-twin",
+        "preflight",
+        "robotics",
+        "vision",
+        "algorithms",
+        "health",
+        "tracebank",
+        "eval-gate",
+        "delta-classifier",
+        "incident-replay",
+        "data-lineage",
+        "remote-supervisor"
       ],
       "protected_paths": [
         ".omg/**",
@@ -360,6 +395,199 @@
         "SubagentStart",
         "SubagentStop",
         "TaskCompleted"
+      ],
+      "policy_model": {
+        "trust_tiers": [
+          {
+            "name": "safe",
+            "level": 0,
+            "label": "Safe",
+            "allowed_sources": [
+              "local_repo",
+              "trusted_registry"
+            ]
+          },
+          {
+            "name": "balanced",
+            "level": 1,
+            "label": "Balanced",
+            "allowed_sources": [
+              "local_repo",
+              "trusted_registry",
+              "reviewed_external"
+            ]
+          },
+          {
+            "name": "interop",
+            "level": 2,
+            "label": "Interop",
+            "allowed_sources": [
+              "local_repo",
+              "trusted_registry",
+              "reviewed_external",
+              "migration_bridge"
+            ]
+          },
+          {
+            "name": "labs",
+            "level": 3,
+            "label": "Labs",
+            "allowed_sources": [
+              "local_repo",
+              "trusted_registry",
+              "reviewed_external",
+              "experimental"
+            ]
+          }
+        ],
+        "tool_policies": [
+          {
+            "tool_name": "Read",
+            "allowed_tiers": [
+              "safe",
+              "balanced",
+              "interop",
+              "labs"
+            ],
+            "requires_approval": false
+          },
+          {
+            "tool_name": "Grep",
+            "allowed_tiers": [
+              "safe",
+              "balanced",
+              "interop",
+              "labs"
+            ],
+            "requires_approval": false
+          },
+          {
+            "tool_name": "Bash(python3:*)",
+            "allowed_tiers": [
+              "balanced",
+              "interop",
+              "labs"
+            ],
+            "requires_approval": true
+          }
+        ],
+        "protected_paths": [
+          {
+            "path_pattern": ".omg/**",
+            "required_tier": "balanced"
+          },
+          {
+            "path_pattern": ".agents/**",
+            "required_tier": "balanced"
+          },
+          {
+            "path_pattern": ".codex/**",
+            "required_tier": "balanced"
+          },
+          {
+            "path_pattern": ".claude/**",
+            "required_tier": "balanced"
+          }
+        ],
+        "evidence_contract": {
+          "timestamp": "timestamp",
+          "executor": "executor",
+          "trace_id": "trace_id",
+          "lineage": "lineage"
+        },
+        "host_rules": {
+          "claude": {
+            "compilation_targets": [
+              ".claude-plugin/plugin.json",
+              ".claude-plugin/marketplace.json",
+              ".mcp.json",
+              "settings.json"
+            ],
+            "hooks": [
+              "SessionStart",
+              "PreToolUse",
+              "PostToolUse",
+              "PreCompact"
+            ],
+            "subagents": [
+              "local_supervisor",
+              "workers"
+            ],
+            "skills": [
+              "omg/control-plane",
+              "omg/hook-governor"
+            ]
+          },
+          "codex": {
+            "compilation_targets": [
+              ".agents/skills/omg/<bundle>/SKILL.md",
+              ".agents/skills/omg/<bundle>/openai.yaml",
+              ".agents/skills/omg/AGENTS.fragment.md",
+              ".agents/skills/omg/codex-mcp.toml"
+            ],
+            "skills": [
+              "omg/control-plane",
+              "omg/mcp-fabric"
+            ],
+            "agents_fragments": [
+              ".agents/skills/omg/AGENTS.fragment.md"
+            ],
+            "rules": [
+              "protected_paths",
+              "explicit_invocation"
+            ],
+            "automations": [
+              "contract-compile",
+              "release-readiness"
+            ]
+          }
+        }
+      },
+      "subagents": [
+        {
+          "name": "security-reviewer",
+          "description": "Read-only security review subagent with scoped tool access.",
+          "tools": [
+            "Read",
+            "Grep",
+            "Glob",
+            "Bash(grep *)",
+            "Bash(find *)",
+            "Bash(git log *)",
+            "Bash(git diff *)"
+          ],
+          "bypassPermissions": false
+        },
+        {
+          "name": "release-manager",
+          "description": "Release management subagent with write access governed by protected-path policy.",
+          "tools": [
+            "Read",
+            "Write",
+            "Edit",
+            "Grep",
+            "Glob",
+            "Bash(git *)",
+            "Bash(python3 scripts/omg.py *)"
+          ],
+          "bypassPermissions": false,
+          "protectedPaths": [
+            ".omg/**",
+            ".agents/**",
+            ".codex/**",
+            ".claude/**"
+          ]
+        }
+      ],
+      "skills": [
+        {
+          "name": "omg/control-plane",
+          "source": ".agents/skills/omg/control-plane/"
+        },
+        {
+          "name": "omg/hook-governor",
+          "source": ".agents/skills/omg/hook-governor/"
+        }
       ]
     }
   }

package/dist/enterprise/manifest.json

@@ -1,16 +1,36 @@
 {
   "schema": "OmgCompiledArtifactManifest",
   "channel": "enterprise",
-  "contract_version": "2.0.4",
+  "contract_version": "2.0.7",
   "artifacts": [
     {
       "path": "bundle/.agents/skills/omg/AGENTS.fragment.md",
-      "sha256": "ac0d35aa2a8d27a246627c7e9bbbe8cab5a50b7b25b2a16bb451f4c79f263d7d"
+      "sha256": "9497432cb2ec30d045feadadeb1bcd8fc5e152d815c9ae4ffd303fe13303b3a8"
+    },
+    {
+      "path": "bundle/.agents/skills/omg/algorithms/SKILL.md",
+      "sha256": "9f007935886f168e43cd76b69857e81c579f9cce8174e14f9b6b0173739c337d"
+    },
+    {
+      "path": "bundle/.agents/skills/omg/algorithms/openai.yaml",
+      "sha256": "879d3b5bcdb3ffa17387eae31634bd5ce7e2695c0e6dd3b478017843a024300d"
+    },
+    {
+      "path": "bundle/.agents/skills/omg/api-twin/SKILL.md",
+      "sha256": "482db7bf01f80d8695f71f3bdbae8e9a179cf05355e736f90c40c1a3c9136fef"
+    },
+    {
+      "path": "bundle/.agents/skills/omg/api-twin/openai.yaml",
+      "sha256": "a6caee113518bda5e2a470ca7d166d18969392bde1470ef2a47f8ead2c0e33ab"
     },
     {
       "path": "bundle/.agents/skills/omg/codex-mcp.toml",
       "sha256": "a56de208a369a2b318d2e66e150eef4cba1fac1ecf32bda6db1a1e4b65db7311"
     },
+    {
+      "path": "bundle/.agents/skills/omg/codex-rules.md",
+      "sha256": "29b837dfc9a92cc5d9f060207d9187c8d49162edaa25a62f616c64c896589752"
+    },
     {
       "path": "bundle/.agents/skills/omg/control-plane/SKILL.md",
       "sha256": "e3a53f89e15018895691657eb3962f942558475d6faaae760e7d48774ce6a47e"
@@ -19,6 +39,38 @@
       "path": "bundle/.agents/skills/omg/control-plane/openai.yaml",
       "sha256": "e7ed793f93c54683ef34e7f43b5c0d9409ad203b77f26cda699a448a13037e6c"
     },
+    {
+      "path": "bundle/.agents/skills/omg/data-lineage/SKILL.md",
+      "sha256": "af65df929c47a35253f606b8a03bc4c61b57d3e811182d22ed95e5cd6eb78461"
+    },
+    {
+      "path": "bundle/.agents/skills/omg/data-lineage/openai.yaml",
+      "sha256": "3acf68fd89ff0141b25b060b8492df65464e841524941f008f26e21d5d954c49"
+    },
+    {
+      "path": "bundle/.agents/skills/omg/delta-classifier/SKILL.md",
+      "sha256": "55bf1b35526993296f16feb6a0f61e51fd840affee8b40aafab0ec7f9574a2ee"
+    },
+    {
+      "path": "bundle/.agents/skills/omg/delta-classifier/openai.yaml",
+      "sha256": "bbea79e16e2e395402635cbb2874bf4db1e1e0661ce6d30e4e76697510d277eb"
+    },
+    {
+      "path": "bundle/.agents/skills/omg/eval-gate/SKILL.md",
+      "sha256": "e03cb62bb11aed70592fbd1f36c89edb9bec142f1402ca16fe7d5423e4c245e8"
+    },
+    {
+      "path": "bundle/.agents/skills/omg/eval-gate/openai.yaml",
+      "sha256": "3c440002312de0f9c6837a833d4309597bcefb9642e9424e032c11900e19d76e"
+    },
+    {
+      "path": "bundle/.agents/skills/omg/health/SKILL.md",
+      "sha256": "0c562e6e071e7b01c9ffea76293d425d45f4aaef4297c42ef757ca7113a6ca02"
+    },
+    {
+      "path": "bundle/.agents/skills/omg/health/openai.yaml",
+      "sha256": "120dbeeaafccf58d638a345dbf940c0fa63f3ec3e9b01a0e18957da4557c5ac5"
+    },
     {
       "path": "bundle/.agents/skills/omg/hook-governor/SKILL.md",
       "sha256": "7c745315ed02595fe0f6c927118dae49ddcb7a412ddff0c06cb0973f1d7b77ca"
@@ -27,6 +79,14 @@
       "path": "bundle/.agents/skills/omg/hook-governor/openai.yaml",
       "sha256": "a7c54e5933bcb7eddc1e0e901ca05174f9cd37065f3195d97839733a43bea30b"
     },
+    {
+      "path": "bundle/.agents/skills/omg/incident-replay/SKILL.md",
+      "sha256": "017df90e8fccb74e128b5075526ef1b2ad159673dd9f5de49750ceeb08ebe8c5"
+    },
+    {
+      "path": "bundle/.agents/skills/omg/incident-replay/openai.yaml",
+      "sha256": "f4ec374aef096a7806d6e099185dd891e84b8a73db8059970ef398434e867ff4"
+    },
     {
       "path": "bundle/.agents/skills/omg/lsp-pack/SKILL.md",
       "sha256": "d5c6773fa614fe6747f205283a82374b2167d1d9b32e7fd75f429072fadb8a3a"
@@ -43,6 +103,30 @@
       "path": "bundle/.agents/skills/omg/mcp-fabric/openai.yaml",
       "sha256": "2165ff298b110ef7fb6c42b6b539f8397b8772218de3fa2b8c2332fdd8db6d48"
     },
+    {
+      "path": "bundle/.agents/skills/omg/preflight/SKILL.md",
+      "sha256": "f9876277a0b836a3bcbe6e8b140368a85447658820974e09bec2fb1795fb0307"
+    },
+    {
+      "path": "bundle/.agents/skills/omg/preflight/openai.yaml",
+      "sha256": "97945c1a557703c41b53c68797ab9b5a38f8d69e1a9af45ed427bee7e37f589c"
+    },
+    {
+      "path": "bundle/.agents/skills/omg/remote-supervisor/SKILL.md",
+      "sha256": "05be2c248fc0eee2a3db70c0ddeba32b25881b3cc914ce16b719292add77b0c3"
+    },
+    {
+      "path": "bundle/.agents/skills/omg/remote-supervisor/openai.yaml",
+      "sha256": "e7f8a7c1f099c76d0aafc95b535e10a1c07e591a5db09a67ecccedc0ebd68c26"
+    },
+    {
+      "path": "bundle/.agents/skills/omg/robotics/SKILL.md",
+      "sha256": "1a54e7292d39aaced9f296bcdc65cc86b41dfa41d95f063582e1dc249ffb48c5"
+    },
+    {
+      "path": "bundle/.agents/skills/omg/robotics/openai.yaml",
+      "sha256": "8d6b6539867cb4080c4502d3325f9f32954290ace6bbc2bb20e9acbf619b61a5"
+    },
     {
       "path": "bundle/.agents/skills/omg/secure-worktree-pipeline/SKILL.md",
       "sha256": "a11292d0122844f7c185e21943d3a39ef3213cf5348f40f006c8fdc8b62f252f"
@@ -51,13 +135,37 @@
       "path": "bundle/.agents/skills/omg/secure-worktree-pipeline/openai.yaml",
       "sha256": "c766a383969893fd29fcd1da712e29e0422709a7b9f665e53e1ca8187c2bd207"
     },
+    {
+      "path": "bundle/.agents/skills/omg/security-check/SKILL.md",
+      "sha256": "30cc33d0b6c3d7d4c968f917121bcea3d696be80c3896da2635a63a01c4afa91"
+    },
+    {
+      "path": "bundle/.agents/skills/omg/security-check/openai.yaml",
+      "sha256": "9c47e9fa2ddcb341fa75d4307c5e36e0b928b06fdb28bd7b69ca6cb5941f6b77"
+    },
+    {
+      "path": "bundle/.agents/skills/omg/tracebank/SKILL.md",
+      "sha256": "5bac45273cd62373fb4387f8e64a63c4fb69f984a44ee79938be2273b5913b03"
+    },
+    {
+      "path": "bundle/.agents/skills/omg/tracebank/openai.yaml",
+      "sha256": "5896ef1980b5a13171756eb27f317d3b32b7d084133552f1d11dfea12d8742ab"
+    },
+    {
+      "path": "bundle/.agents/skills/omg/vision/SKILL.md",
+      "sha256": "9cd5405640edc6e80a8110234f59f6aeb197ececa37a145619d30083ee2263d4"
+    },
+    {
+      "path": "bundle/.agents/skills/omg/vision/openai.yaml",
+      "sha256": "8a6f4e40c91ffff3686af47f6902043cf090df7afc530b052f1344efe9cc8e0a"
+    },
     {
       "path": "bundle/.claude-plugin/marketplace.json",
-      "sha256": "cf1a17ce1e8db6814209126a79d5a05d057f354ef3ee49a74da4f18f2ec04597"
+      "sha256": "4690a0c1785fa1401ad430a270726476d93bc3262ae3ab0f195b15302b24f4ab"
     },
     {
       "path": "bundle/.claude-plugin/plugin.json",
-      "sha256": "6ad6db257f9e46528d94760ef895b6ffc87c78a8ec5ca05b430a46b46ee3dc08"
+      "sha256": "64532d6060c986ec4fec62f038d27dc7c89ba088269b17390f727aae53d64294"
     },
     {
       "path": "bundle/.mcp.json",
@@ -65,35 +173,131 @@
     },
     {
       "path": "bundle/OMG_COMPAT_CONTRACT.md",
-      "sha256": "fa91ec0dbff58d543df5a9e3a86a1fe1629104a383d4e1bd440a36cb5522189c"
+      "sha256": "108ba784d61707ef22a58ff0898d84cdb867e5c2dcf5195eccadf30a6304437c"
+    },
+    {
+      "path": "bundle/plugins/advanced/commands/OMG:code-review.md",
+      "sha256": "99ba9756586924d0ebdd43c4ca65f925b86f6c4bf6bc98d355f0cb9a17f9f6b0"
+    },
+    {
+      "path": "bundle/plugins/advanced/commands/OMG:deep-plan.md",
+      "sha256": "ab0b327d541289c219ffac27c70bcb48affb7dba540b5299a420a8754a3ca458"
+    },
+    {
+      "path": "bundle/plugins/advanced/commands/OMG:handoff.md",
+      "sha256": "eea0da517e14abb0a9bc6fe661f310a81c0282ff666803da4ae1be47fb597011"
+    },
+    {
+      "path": "bundle/plugins/advanced/commands/OMG:learn.md",
+      "sha256": "338f87222db65114f8c83de2185a21c7c2538832395524ac39ea38a0e09d73b3"
+    },
+    {
+      "path": "bundle/plugins/advanced/commands/OMG:maintainer.md",
+      "sha256": "1a29d4cb6839dd6de8c11b88b93a72fb9a371cfb7784bfe409d5e5ef0a825508"
+    },
+    {
+      "path": "bundle/plugins/advanced/commands/OMG:ralph-start.md",
+      "sha256": "31b2aded6032b5f061dbb7cd92dff53bbe3b527b9e9ba93d5043cad2847a6365"
+    },
+    {
+      "path": "bundle/plugins/advanced/commands/OMG:ralph-stop.md",
+      "sha256": "b43acad180bd205ddd78d42f1c7ecf315e521a0c345bf9d42b24d8c4d3913ce3"
+    },
+    {
+      "path": "bundle/plugins/advanced/commands/OMG:security-review.md",
+      "sha256": "f2a0e1a61b4110ac88202e2e5c166191867423235bf61030ef9cc082d964cc22"
+    },
+    {
+      "path": "bundle/plugins/advanced/commands/OMG:sequential-thinking.md",
+      "sha256": "1830de63009cb07c80cbcecf143f6df7560e7f031ac5b1d509b726d184e441da"
+    },
+    {
+      "path": "bundle/plugins/advanced/commands/OMG:ship.md",
+      "sha256": "47979d0dfb2e8be6cfe4ac2f4f5ee2308b426c849eb51511c09bbd100ea2088f"
+    },
+    {
+      "path": "bundle/plugins/advanced/plugin.json",
+      "sha256": "37bed96f0d9113b5055c87f8e8291a7518e1b471d9fdabcd37ce9750e9f2546c"
+    },
+    {
+      "path": "bundle/registry/bundles/algorithms.yaml",
+      "sha256": "210dca6fd5499ecf33109e6b9d72a26311f353cb9bda3faca408a3693b895c2d"
+    },
+    {
+      "path": "bundle/registry/bundles/api-twin.yaml",
+      "sha256": "247931ceb9c23d957561b0abf62bf07670e226921032ede652974556fafc9704"
     },
     {
       "path": "bundle/registry/bundles/control-plane.yaml",
-      "sha256": "bb58e1d21a7f545548da10e7f9b83898d6ece8010a921b66d0f94a08c8ae0d8e"
+      "sha256": "f76ddc2c53be8cc8448903351cdbd9a8690d2386523822c1f538a8f1f4120443"
+    },
+    {
+      "path": "bundle/registry/bundles/data-lineage.yaml",
+      "sha256": "b73b8ee4ab22b3aebf2e065108cac691d6ef028252f426050997b0fd707ed417"
+    },
+    {
+      "path": "bundle/registry/bundles/delta-classifier.yaml",
+      "sha256": "554a14baae9c678da158cd7c6d5e012978f9c9cffbc755b006fd088790c61340"
+    },
+    {
+      "path": "bundle/registry/bundles/eval-gate.yaml",
+      "sha256": "c5071c2bb8f06b51173ea5fec8765c5f455af6805ee95745cde4fe626b8a4171"
+    },
+    {
+      "path": "bundle/registry/bundles/health.yaml",
+      "sha256": "b5764493f3bf3099bf4178cdee1e23bdb5122aa98590352c93a870c386e7aeb8"
     },
     {
       "path": "bundle/registry/bundles/hook-governor.yaml",
-      "sha256": "93b13ea1e2098328349d33373595144f2f863274548bef47fd266d6cab210260"
+      "sha256": "50435af649637cc105813b3b0fc27fb4d8a9d54008385118ccf3bda15fbb7ee8"
+    },
+    {
+      "path": "bundle/registry/bundles/incident-replay.yaml",
+      "sha256": "189980c25e986d6d30b67c8250e31dc687d55d293a41723833e04ee588bf422a"
     },
     {
       "path": "bundle/registry/bundles/lsp-pack.yaml",
-      "sha256": "6c2ca235bdca31635d89c428c48a35a5414250e98c7349cd67ba900870203d9a"
+      "sha256": "85539b633e5fb2c6058e5b2232abc5749d5aa26fe6827041efd3673e44ab44a9"
     },
     {
       "path": "bundle/registry/bundles/mcp-fabric.yaml",
-      "sha256": "2cb71fc331820b19c60c3275f521fb49d099ed7c31539fab9959a55d29ae0fe9"
+      "sha256": "560cbc610be709b177db60776adba502f4f6d14fd5935649f6b7ebfe49c78880"
+    },
+    {
+      "path": "bundle/registry/bundles/preflight.yaml",
+      "sha256": "48cc963426dcfab2027e1cb6f189bbe4f363eb1e7d0545a2f0db766e907519f7"
+    },
+    {
+      "path": "bundle/registry/bundles/remote-supervisor.yaml",
+      "sha256": "c1df55fadf42cc9598575b5cfcf74b6bfc0767e817c9c59990259b515c774007"
+    },
+    {
+      "path": "bundle/registry/bundles/robotics.yaml",
+      "sha256": "87333553aebe6e89196665dc24ccdd0c71c68044c252d2f9f84b1047dbd66063"
     },
     {
       "path": "bundle/registry/bundles/secure-worktree-pipeline.yaml",
-      "sha256": "b93e752cef8b5cbc76fb7aa32ebe80d30ce390193183bb0c79dedfa1ce89c4e9"
+      "sha256": "e7fdae261d9671be6ae32448cc2d20636eefd8bbbcee7379b98d911d2483c37d"
+    },
+    {
+      "path": "bundle/registry/bundles/security-check.yaml",
+      "sha256": "bb19a53192a7c8b476585b30724c0c114d0b62786b1f8e2147d9367ac5c344f9"
+    },
+    {
+      "path": "bundle/registry/bundles/tracebank.yaml",
+      "sha256": "a6b1378a290a659f6eadbf9bb63e639539f7ca01d226af418a0504f69d7406cb"
+    },
+    {
+      "path": "bundle/registry/bundles/vision.yaml",
+      "sha256": "607c4c8582f79392adcf09e5a8f8f1eaf2550603749b162e70f8b7dc4eccb3de"
     },
     {
       "path": "bundle/registry/omg-capability.schema.json",
-      "sha256": "b5a52c03c6d42c0ce0297a2d8c22f34ed1075062cc5434d3a85b9f4fa6a0f121"
+      "sha256": "2df3a4e2f2fc4c0a0e6c150669f463cc7f07e673a0759c15df4e8dd80572ae5b"
     },
     {
       "path": "bundle/settings.json",
-      "sha256": "60fb4f9e2bedd4d67af41a2e442ef37c9a89cd2077bf6dfe40761eec01586824"
+      "sha256": "0208ccb5e20f5e456b1bb3701994fbedbf528260758c539b9afadeacbdf50065"
     }
   ]
 }

package/dist/public/bundle/.agents/skills/omg/AGENTS.fragment.md

@@ -1,5 +1,52 @@
-# OMG Codex Protection Rules
+# OMG Codex Governance (channel: public)
 
-- Channel: `public`
-- Protect `.omg/`, `.agents/`, `.codex/`, and `.claude/` from unreviewed mutation.
+## Build & Test
+
+```bash
+python3 -m pytest tests -q
+python3 scripts/omg.py contract validate
+python3 scripts/omg.py contract compile --host codex --channel public
+```
+
+## Protected Paths
+
+The following paths require tier-gated review before mutation:
+
+- `.omg/**`
+- `.agents/**`
+- `.codex/**`
+- `.claude/**`
+
+## Evidence Contract
+
+Every production action must emit evidence containing these fields:
+
+- `executor`
+- `lineage`
+- `timestamp`
+- `trace_id`
+
+## Required Skills
+
+- `omg/control-plane`
+- `omg/mcp-fabric`
+
+## Web Search Policy
+
+- Prefer cached results over live network requests.
+- Do NOT initiate live web searches unless explicitly instructed.
+- Use `context7` or local documentation before external lookups.
+- Set `cached_web_search: prefer_cached` as the default.
+
+## Approval Constraints
+
+- Destructive file operations require explicit user approval.
+- `git push --force` and branch deletions require explicit approval.
+- Production deployments require explicit approval.
+- Mutations to protected paths require tier-gated approval.
+
+## Rules & Automations
+
+- Rules: `protected_paths, explicit_invocation`
+- Automations: `contract-compile, release-readiness`
 - Require explicit invocation for production-control-plane skills.

package/dist/public/bundle/.agents/skills/omg/algorithms/SKILL.md

@@ -0,0 +1,11 @@
+---
+name: omg-algorithms
+description: "Determinism and benchmark attachments for algorithm-heavy work."
+---
+
+# OMG Algorithms Pack
+
+- Channel: `public`
+- Execution modes: `embedded, local_supervisor`
+- MCP servers: `omg-control`
+- Evidence outputs: `.omg/evals/latest.json`

package/dist/public/bundle/.agents/skills/omg/algorithms/openai.yaml

@@ -0,0 +1,11 @@
+name: omg-algorithms
+description: "Determinism and benchmark attachments for algorithm-heavy work."
+allow_implicit_invocation: false
+metadata:
+  channel: public
+  bundle_id: algorithms
+  title: "OMG Algorithms Pack"
+mcp_servers:
+  - omg-control
+allowed_tools:
+  - "Read"

package/dist/public/bundle/.agents/skills/omg/api-twin/SKILL.md

@@ -0,0 +1,11 @@
+---
+name: omg-api-twin
+description: "Versioned endpoint cassette replay with latency, drift, and cost reporting."
+---
+
+# OMG API Twin
+
+- Channel: `public`
+- Execution modes: `embedded, local_supervisor`
+- MCP servers: `omg-control`
+- Evidence outputs: `.omg/state/api_twin.json`

package/dist/public/bundle/.agents/skills/omg/api-twin/openai.yaml

@@ -0,0 +1,12 @@
+name: omg-api-twin
+description: "Versioned endpoint cassette replay with latency, drift, and cost reporting."
+allow_implicit_invocation: false
+metadata:
+  channel: public
+  bundle_id: api-twin
+  title: "OMG API Twin"
+mcp_servers:
+  - omg-control
+allowed_tools:
+  - "Read"
+  - "Bash(python3:*)"