@trac3er/oh-my-god 2.0.5 → 2.0.7

package/dist/public/manifest.json

@@ -1,11 +1,11 @@
 {
   "schema": "OmgCompiledArtifactManifest",
   "channel": "public",
-  "contract_version": "2.0.5",
+  "contract_version": "2.0.7",
   "artifacts": [
     {
       "path": "bundle/.agents/skills/omg/AGENTS.fragment.md",
-      "sha256": "603430cb291632105fda7444ae018da521cc3a57c71c1a1c98179efea42ce0f2"
+      "sha256": "201c33bffbb33eaba07157c2c0aff7e27c657dd76c216934a1aebc0de1822548"
     },
     {
       "path": "bundle/.agents/skills/omg/algorithms/SKILL.md",
@@ -27,6 +27,10 @@
       "path": "bundle/.agents/skills/omg/codex-mcp.toml",
       "sha256": "a56de208a369a2b318d2e66e150eef4cba1fac1ecf32bda6db1a1e4b65db7311"
     },
+    {
+      "path": "bundle/.agents/skills/omg/codex-rules.md",
+      "sha256": "87663481b2d884ca680e4bd361fe3a39a423db1c137397c09e50f71e9248dbad"
+    },
     {
       "path": "bundle/.agents/skills/omg/control-plane/SKILL.md",
       "sha256": "fe281985ffbfb4d324d0ae421653c96d501bfda4ef1462865e2868276c40a3c2"
@@ -157,11 +161,11 @@
     },
     {
       "path": "bundle/.claude-plugin/marketplace.json",
-      "sha256": "2c1e7ffe83d11c464662aba58720c52b3b136d3564c32b83019a7aeecd6a982c"
+      "sha256": "4690a0c1785fa1401ad430a270726476d93bc3262ae3ab0f195b15302b24f4ab"
     },
     {
       "path": "bundle/.claude-plugin/plugin.json",
-      "sha256": "fe79af472d21bd47da149116ff1ed5c82b08c4bfd60b470e5d4faf6799f9abf7"
+      "sha256": "64532d6060c986ec4fec62f038d27dc7c89ba088269b17390f727aae53d64294"
     },
     {
       "path": "bundle/.mcp.json",
@@ -169,87 +173,131 @@
     },
     {
       "path": "bundle/OMG_COMPAT_CONTRACT.md",
-      "sha256": "fa7a4a16097b35170784e136f8ff9eae64c825a07f55413fb8fea3e7ab40c2e5"
+      "sha256": "108ba784d61707ef22a58ff0898d84cdb867e5c2dcf5195eccadf30a6304437c"
+    },
+    {
+      "path": "bundle/plugins/advanced/commands/OMG:code-review.md",
+      "sha256": "99ba9756586924d0ebdd43c4ca65f925b86f6c4bf6bc98d355f0cb9a17f9f6b0"
+    },
+    {
+      "path": "bundle/plugins/advanced/commands/OMG:deep-plan.md",
+      "sha256": "ab0b327d541289c219ffac27c70bcb48affb7dba540b5299a420a8754a3ca458"
+    },
+    {
+      "path": "bundle/plugins/advanced/commands/OMG:handoff.md",
+      "sha256": "eea0da517e14abb0a9bc6fe661f310a81c0282ff666803da4ae1be47fb597011"
+    },
+    {
+      "path": "bundle/plugins/advanced/commands/OMG:learn.md",
+      "sha256": "338f87222db65114f8c83de2185a21c7c2538832395524ac39ea38a0e09d73b3"
+    },
+    {
+      "path": "bundle/plugins/advanced/commands/OMG:maintainer.md",
+      "sha256": "1a29d4cb6839dd6de8c11b88b93a72fb9a371cfb7784bfe409d5e5ef0a825508"
+    },
+    {
+      "path": "bundle/plugins/advanced/commands/OMG:ralph-start.md",
+      "sha256": "31b2aded6032b5f061dbb7cd92dff53bbe3b527b9e9ba93d5043cad2847a6365"
+    },
+    {
+      "path": "bundle/plugins/advanced/commands/OMG:ralph-stop.md",
+      "sha256": "b43acad180bd205ddd78d42f1c7ecf315e521a0c345bf9d42b24d8c4d3913ce3"
+    },
+    {
+      "path": "bundle/plugins/advanced/commands/OMG:security-review.md",
+      "sha256": "f2a0e1a61b4110ac88202e2e5c166191867423235bf61030ef9cc082d964cc22"
+    },
+    {
+      "path": "bundle/plugins/advanced/commands/OMG:sequential-thinking.md",
+      "sha256": "1830de63009cb07c80cbcecf143f6df7560e7f031ac5b1d509b726d184e441da"
+    },
+    {
+      "path": "bundle/plugins/advanced/commands/OMG:ship.md",
+      "sha256": "47979d0dfb2e8be6cfe4ac2f4f5ee2308b426c849eb51511c09bbd100ea2088f"
+    },
+    {
+      "path": "bundle/plugins/advanced/plugin.json",
+      "sha256": "37bed96f0d9113b5055c87f8e8291a7518e1b471d9fdabcd37ce9750e9f2546c"
     },
     {
       "path": "bundle/registry/bundles/algorithms.yaml",
-      "sha256": "cc589c80d47ab2eb1bb2f142d462e40fc1c5f108e175360b40929326966de723"
+      "sha256": "210dca6fd5499ecf33109e6b9d72a26311f353cb9bda3faca408a3693b895c2d"
     },
     {
       "path": "bundle/registry/bundles/api-twin.yaml",
-      "sha256": "6952f8d45dbfa29afac88de0f110b2941804c4543dae4c0f5562cb876de376b7"
+      "sha256": "247931ceb9c23d957561b0abf62bf07670e226921032ede652974556fafc9704"
     },
     {
       "path": "bundle/registry/bundles/control-plane.yaml",
-      "sha256": "fd624b518e20e48b7dc68378c95493a4f88e07c759ea53f3b9c82646b263d80c"
+      "sha256": "f76ddc2c53be8cc8448903351cdbd9a8690d2386523822c1f538a8f1f4120443"
     },
     {
       "path": "bundle/registry/bundles/data-lineage.yaml",
-      "sha256": "602a1906d976ff93beb961affd7b5f6d4dc6486cd960ad47aa2a2b6c65724585"
+      "sha256": "b73b8ee4ab22b3aebf2e065108cac691d6ef028252f426050997b0fd707ed417"
     },
     {
       "path": "bundle/registry/bundles/delta-classifier.yaml",
-      "sha256": "d08df8acb9713c58767a0c1a390fd35a61b7e1a290cfb13376a8f5517cbcc7f3"
+      "sha256": "554a14baae9c678da158cd7c6d5e012978f9c9cffbc755b006fd088790c61340"
     },
     {
       "path": "bundle/registry/bundles/eval-gate.yaml",
-      "sha256": "c3de322fece33b91f503740f828e318264d0388d3403b98f09c2d73486a57b81"
+      "sha256": "c5071c2bb8f06b51173ea5fec8765c5f455af6805ee95745cde4fe626b8a4171"
     },
     {
       "path": "bundle/registry/bundles/health.yaml",
-      "sha256": "3192a27f326656732fe83ed6e725366bc2c9bb7e5009de07b9097b864357383b"
+      "sha256": "b5764493f3bf3099bf4178cdee1e23bdb5122aa98590352c93a870c386e7aeb8"
     },
     {
       "path": "bundle/registry/bundles/hook-governor.yaml",
-      "sha256": "ccb6edc43da2594eb93ad00abe3447879923f83067201d82927a942bb25f412d"
+      "sha256": "50435af649637cc105813b3b0fc27fb4d8a9d54008385118ccf3bda15fbb7ee8"
     },
     {
       "path": "bundle/registry/bundles/incident-replay.yaml",
-      "sha256": "aeaee69df8fdb8652707f3a228e4556e3a42a1487f4b77d33f47197370bd24a6"
+      "sha256": "189980c25e986d6d30b67c8250e31dc687d55d293a41723833e04ee588bf422a"
     },
     {
       "path": "bundle/registry/bundles/lsp-pack.yaml",
-      "sha256": "b0e6f74fd0b52cf37960defc3c9a0b66b722d98b7db15f6b1d4e11eae9a96707"
+      "sha256": "85539b633e5fb2c6058e5b2232abc5749d5aa26fe6827041efd3673e44ab44a9"
     },
     {
       "path": "bundle/registry/bundles/mcp-fabric.yaml",
-      "sha256": "40766fb1fed2fbd29ae029915d2c883f3c3f38157fa3c0d72018381c75df6e31"
+      "sha256": "560cbc610be709b177db60776adba502f4f6d14fd5935649f6b7ebfe49c78880"
     },
     {
       "path": "bundle/registry/bundles/preflight.yaml",
-      "sha256": "f12fd6b4aaa045141dcaaf62b51f5de7d31de2625f819ad368adc1a6e2010b18"
+      "sha256": "48cc963426dcfab2027e1cb6f189bbe4f363eb1e7d0545a2f0db766e907519f7"
     },
     {
       "path": "bundle/registry/bundles/remote-supervisor.yaml",
-      "sha256": "ac727c3074ae4a95e66b7e023f38ad22c3ae903db8af079b8b66c83fad57e650"
+      "sha256": "c1df55fadf42cc9598575b5cfcf74b6bfc0767e817c9c59990259b515c774007"
     },
     {
       "path": "bundle/registry/bundles/robotics.yaml",
-      "sha256": "8748fdb84285c2131685626182ba86806d3cffecfe5c94c6438a791f983afd2b"
+      "sha256": "87333553aebe6e89196665dc24ccdd0c71c68044c252d2f9f84b1047dbd66063"
     },
     {
       "path": "bundle/registry/bundles/secure-worktree-pipeline.yaml",
-      "sha256": "f62b4d9daee055362e013883f86479d2ddc2b22f8a97be84342a1b2979b9d584"
+      "sha256": "e7fdae261d9671be6ae32448cc2d20636eefd8bbbcee7379b98d911d2483c37d"
     },
     {
       "path": "bundle/registry/bundles/security-check.yaml",
-      "sha256": "768f412af9696b8c83320c4d1d92c0703ed553296bbf54aff9c0c387f7a86cf0"
+      "sha256": "bb19a53192a7c8b476585b30724c0c114d0b62786b1f8e2147d9367ac5c344f9"
     },
     {
       "path": "bundle/registry/bundles/tracebank.yaml",
-      "sha256": "500b996f7c55e652e9b4b677fefa472b49b4f61c052b7996738ed1389a575f3a"
+      "sha256": "a6b1378a290a659f6eadbf9bb63e639539f7ca01d226af418a0504f69d7406cb"
     },
     {
       "path": "bundle/registry/bundles/vision.yaml",
-      "sha256": "9f8b8be109d791954e6da97c0caed9234a58c15f1e9a189c445d0a55ec2591d8"
+      "sha256": "607c4c8582f79392adcf09e5a8f8f1eaf2550603749b162e70f8b7dc4eccb3de"
     },
     {
       "path": "bundle/registry/omg-capability.schema.json",
-      "sha256": "ac5ce4663ae343785c844b0404cc5745f329df1cd12674201929f82d1e6332c9"
+      "sha256": "2df3a4e2f2fc4c0a0e6c150669f463cc7f07e673a0759c15df4e8dd80572ae5b"
     },
     {
       "path": "bundle/settings.json",
-      "sha256": "7a2f1d2f501a6db4d57e9863b510c7dadcc4ed7826012783506d10d4514bed5a"
+      "sha256": "425e95844b5eecf4344838d03289c3b71d78c23df539ec68b8d35e80bafba75f"
     }
   ]
 }

package/docs/proof.md

@@ -7,11 +7,19 @@
 
 OMG keeps verification visible instead of burying it in implementation details.
 
-- Current local full-suite result: `2466 passed, 2 skipped` on March 7, 2026.
-- Releases are expected to pass the compat gate, the standalone verification path, and the public-readiness check.
-- Setup, presets, and native adoption behavior have targeted regression tests.
-- `security-check`, `api-twin`, runtime profiles, and the stdio `omg-control` MCP have targeted regression coverage.
-- `compat` remains covered, but it is not the public onboarding path.
+- Runtime evidence root: `.omg/evidence/`
+- Doctor output: `.omg/evidence/doctor.json`
+- Security-check artifacts: `.omg/evidence/security-check-*.json`
+- Trust and external input artifacts: `.omg/evidence/trust-*.json`
+- Truth bundles:
+  - `claim-judge`: `.omg/evidence/claim-judge-*.json` (verifies claim-to-evidence mapping)
+  - `test-intent-lock`: `.omg/evidence/test-intent-lock-*.json` (verifies test-to-intent alignment)
+  - `proof-gate`: `.omg/evidence/proof-gate-*.json` (verifies final release readiness)
+- Browser evidence: `.omg/evidence/browser-*.png` and `.omg/evidence/browser-*.json` (Playwright-backed verification)
+- Trace records and evidence links: `.omg/tracebank/events.jsonl`, `.omg/tracebank/evidence-links.jsonl`
+- Eval gate artifacts and trace links: `.omg/evals/latest.json`, `.omg/evals/history.jsonl`, `.omg/evals/trace-links.jsonl`
+- Lineage manifests: `.omg/lineage/*.json`
+- Release readiness output links these machine artifacts instead of prose-only pass counts.
 
 ## Provider Matrix
 
@@ -39,7 +47,9 @@ Representative benchmark tasks for this release:
 
 - host detection and auth wiring
 - canonical security-check routing and evidence emission
-- stdio OMG control MCP wiring
+- narrowed stdio OMG control MCP wiring
+- truth bundle verification (claim-judge, test-intent-lock, proof-gate)
+- plan-council role compilation and execution
 - adoption detection with overlapping ecosystems
 - plugin install and uninstall correctness
 - `crazy` orchestration smoke coverage

package/docs/release-checklist.md

@@ -20,6 +20,8 @@ Use this checklist before making OMG public or cutting a release tag.
 - `python3 scripts/omg.py contract compile --host claude --host codex --channel public --output-root <tmp>` passes
 - `python3 scripts/omg.py contract compile --host claude --host codex --channel enterprise --output-root <tmp>` passes
 - `python3 scripts/omg.py release readiness --channel dual --output-root <tmp>` passes
+- Truth bundles (`claim-judge`, `test-intent-lock`, `proof-gate`) are verified and present in `registry/bundles/`
+- `plan-council` role is compiled and verified in `registry/bundles/`
 - `python3 scripts/check-omg-standalone-clean.py` passes
 - `./scripts/verify-standalone.sh` passes
 - `python3 -m pytest tests -q` passes

package/hooks/policy_engine.py

@@ -8,6 +8,7 @@ from __future__ import annotations
 
 from dataclasses import dataclass, asdict
 from fnmatch import fnmatch
+import importlib
 import os
 import re
 from typing import Any
@@ -122,12 +123,89 @@ UNTRUSTED_MUTATION_PATTERNS = [
     r"\b(mv|cp|tee|sed\s+-i|touch|mkdir)\b",
 ]
 
+TRUSTED_CONTENT_TIERS = frozenset({"local", "balanced"})
+UNTRUSTED_EXTERNAL_TIERS = frozenset({"research", "browser"})
+
+
+def _project_dir() -> str:
+    return os.environ.get("CLAUDE_PROJECT_DIR", os.getcwd())
+
+
+def _load_untrusted_provenance_entries() -> list[dict[str, Any]]:
+    try:
+        from runtime.untrusted_content import get_untrusted_content_state
+
+        state = get_untrusted_content_state(_project_dir())
+        provenance = state.get("provenance", [])
+        if isinstance(provenance, list):
+            return [entry for entry in provenance if isinstance(entry, dict)]
+    except Exception:
+        return []
+    return []
+
+
+def _is_state_changing_action(action: str) -> bool:
+    normalized = str(action).strip().lower()
+    return normalized in {
+        "state_change",
+        "state-changing",
+        "bash_mutation",
+        "file_mutation",
+        "write",
+        "edit",
+        "delete",
+    }
+
+
+def evaluate_action_justification(
+    *,
+    action: str,
+    evidence: list[dict[str, Any]],
+    require_explicit_approval: bool = True,
+) -> PolicyDecision:
+    if not _is_state_changing_action(action):
+        return allow("non-mutating action")
+    if not evidence:
+        return ask(
+            "State-changing action lacks trust-scored evidence.",
+            "high",
+            ["manual-approval", "trusted-evidence-required"],
+        )
+
+    tiers = {
+        str(item.get("_trust_tier") or item.get("trust_tier") or "").strip().lower()
+        for item in evidence
+        if isinstance(item, dict)
+    }
+    tiers.discard("")
+    has_trusted = bool(tiers & TRUSTED_CONTENT_TIERS)
+    has_external_only = bool(tiers) and tiers.issubset(UNTRUSTED_EXTERNAL_TIERS)
+
+    if has_trusted:
+        return allow("trusted local evidence present")
+
+    if has_external_only:
+        reason = (
+            "State-changing action is justified only by UNTRUSTED_EXTERNAL_CONTENT "
+            "(research/browser tier)."
+        )
+        controls = ["manual-approval", "trusted-corroboration", "review-provenance"]
+        if require_explicit_approval:
+            return ask(reason, "high", controls)
+        return deny(reason, "high", controls)
+
+    return ask(
+        "State-changing action has unknown trust provenance.",
+        "high",
+        ["manual-approval", "review-provenance"],
+    )
+
 
 def _is_untrusted_content_mode_active() -> bool:
     try:
         from runtime.untrusted_content import is_untrusted_content_mode_active
 
-        project_dir = os.environ.get("CLAUDE_PROJECT_DIR", os.getcwd())
+        project_dir = _project_dir()
         return is_untrusted_content_mode_active(project_dir)
     except Exception:
         return False
@@ -175,14 +253,25 @@ def evaluate_bash_command(cmd: str) -> PolicyDecision:
         if re.search(pat, cmd):
             return ask(f"{label}: {cmd[:120]}", "med", ["human-approval"])
 
-    if _is_untrusted_content_mode_active():
-        for pat in UNTRUSTED_MUTATION_PATTERNS:
-            if re.search(pat, cmd):
-                return ask(
-                    "Untrusted external content mode is active. Review before running state-changing commands.",
-                    "high",
-                    ["manual-approval", "review-provenance"],
-                )
+    for pat in UNTRUSTED_MUTATION_PATTERNS:
+        if not re.search(pat, cmd):
+            continue
+        provenance_entries = _load_untrusted_provenance_entries()
+        if provenance_entries:
+            decision = evaluate_action_justification(
+                action="state_change",
+                evidence=provenance_entries,
+                require_explicit_approval=True,
+            )
+            if decision.action != "allow":
+                return decision
+        if _is_untrusted_content_mode_active():
+            return ask(
+                "Untrusted external content mode is active. Review before running state-changing commands.",
+                "high",
+                ["manual-approval", "review-provenance"],
+            )
+        break
 
     return allow("command allowed")
 
@@ -232,7 +321,10 @@ def _is_omg_credential_path(normalized_path: str) -> bool:
     This is deliberately narrow to prevent path traversal attacks.
     """
     # Import here to avoid circular dependency at module level
-    from _common import get_feature_flag
+    try:
+        get_feature_flag = getattr(importlib.import_module("hooks._common"), "get_feature_flag")
+    except Exception:
+        get_feature_flag = getattr(importlib.import_module("_common"), "get_feature_flag")
 
     # Only exempt if feature is enabled
     if not get_feature_flag("MULTI_CREDENTIAL", default=False):
@@ -413,7 +505,10 @@ def _log_allowlist_bypass(path: str, tool: str, reason: str) -> None:
     Silently fails — never raises exceptions (crash isolation invariant).
     """
     try:
-        from secret_audit import log_secret_access
+        try:
+            log_secret_access = getattr(importlib.import_module("hooks.secret_audit"), "log_secret_access")
+        except Exception:
+            log_secret_access = getattr(importlib.import_module("secret_audit"), "log_secret_access")
 
         project_dir = os.environ.get("CLAUDE_PROJECT_DIR", os.getcwd())
         log_secret_access(
@@ -472,12 +567,22 @@ def evaluate_file_access(
         if re.search(pat, lowpath):
             return deny(f"Sensitive path blocked: {file_path}", "critical", ["secret-access"])
 
-    if tool in {"Write", "Edit", "MultiEdit"} and _is_untrusted_content_mode_active():
-        return ask(
-            "Untrusted external content mode is active. Review before mutating files.",
-            "high",
-            ["manual-approval", "review-provenance"],
-        )
+    if tool in {"Write", "Edit", "MultiEdit"}:
+        provenance_entries = _load_untrusted_provenance_entries()
+        if provenance_entries:
+            decision = evaluate_action_justification(
+                action="file_mutation",
+                evidence=provenance_entries,
+                require_explicit_approval=True,
+            )
+            if decision.action != "allow":
+                return decision
+        if _is_untrusted_content_mode_active():
+            return ask(
+                "Untrusted external content mode is active. Review before mutating files.",
+                "high",
+                ["manual-approval", "review-provenance"],
+            )
 
     if allowlist and is_allowlisted(file_path, tool, allowlist):
         return allow(f"Allowlisted: {file_path}")

package/hooks/setup_wizard.py

@@ -69,6 +69,9 @@ BYPASS_ALL_WARNING = (
     "Do you want to enable bypass-all mode? (y/N): "
 )
 
+PRESET_ORDER: tuple[str, ...] = ("safe", "balanced", "interop", "labs")
+_PRESET_LEVEL: dict[str, int] = {p: i for i, p in enumerate(PRESET_ORDER)}
+
 MCP_CATALOG: list[dict[str, Any]] = [
     {
         "id": "context7",
@@ -76,7 +79,8 @@ MCP_CATALOG: list[dict[str, Any]] = [
         "description": "Upstash Context7 MCP server for context management",
         "command": "npx",
         "args": ["@upstash/context7-mcp@2.1.3"],
-        "default": True,
+        "default": False,
+        "min_preset": "balanced",
         "category": "productivity",
     },
     {
@@ -86,6 +90,7 @@ MCP_CATALOG: list[dict[str, Any]] = [
         "command": "npx",
         "args": ["@modelcontextprotocol/server-filesystem@2026.1.14", "."],
         "default": True,
+        "min_preset": "safe",
         "category": "system",
     },
     {
@@ -94,7 +99,8 @@ MCP_CATALOG: list[dict[str, Any]] = [
         "description": "Web search MCP server for internet queries",
         "command": "npx",
         "args": ["@zhafron/mcp-web-search@1.2.2"],
-        "default": True,
+        "default": False,
+        "min_preset": "interop",
         "category": "search",
     },
     {
@@ -103,7 +109,8 @@ MCP_CATALOG: list[dict[str, Any]] = [
         "description": "Chrome DevTools MCP server for browser automation",
         "command": "npx",
         "args": ["chrome-devtools-mcp@0.19.0"],
-        "default": True,
+        "default": False,
+        "min_preset": "labs",
         "category": "browser",
     },
     {
@@ -114,7 +121,8 @@ MCP_CATALOG: list[dict[str, Any]] = [
         "args": [],
         "type": "http",
         "url": "http://127.0.0.1:8765/mcp",
-        "default": True,
+        "default": False,
+        "min_preset": "interop",
         "category": "memory",
     },
     {
@@ -124,6 +132,7 @@ MCP_CATALOG: list[dict[str, Any]] = [
         "command": OMG_CONTROL_COMMAND,
         "args": OMG_CONTROL_ARGS,
         "default": True,
+        "min_preset": "safe",
         "category": "control",
     },
     {
@@ -192,6 +201,26 @@ def get_mcp_catalog() -> list[dict[str, Any]]:
     return MCP_CATALOG
 
 
+def get_default_mcps_for_preset(preset: str) -> list[str]:
+    """Return the list of MCP server IDs enabled by default for *preset*.
+
+    Each catalog entry carries a ``min_preset`` field that specifies the
+    lowest preset tier at which the MCP is included.  The preset order is
+    ``safe < balanced < interop < labs``.
+
+    Returns:
+        Sorted list of MCP server IDs whose ``min_preset`` is at or below
+        the requested *preset* level.
+    """
+    level = _PRESET_LEVEL.get(preset, 0)
+    return [
+        m["id"]
+        for m in MCP_CATALOG
+        if _PRESET_LEVEL.get(m.get("min_preset", ""), -1) <= level
+        and m.get("min_preset") is not None
+    ]
+
+
 def build_mcp_config(selected_ids: list[str]) -> dict[str, Any]:
     """Build .mcp.json configuration from selected MCP server IDs.
 
@@ -245,17 +274,18 @@ def configure_plan_type(plan_type: str) -> dict[str, Any]:
     return result
 
 
-def select_mcps(selected_ids: list[str] | None = None) -> dict[str, Any]:
+def select_mcps(selected_ids: list[str] | None = None, preset: str = "safe") -> dict[str, Any]:
     """Build MCP config from selected IDs.
 
     Args:
-        selected_ids: List of MCP IDs to include. If None, uses defaults.
+        selected_ids: List of MCP IDs to include. If None, uses preset defaults.
+        preset: Preset tier that controls which MCPs are included by default.
 
     Returns:
         dict with mcpServers key (ready to write as .mcp.json)
     """
     if selected_ids is None:
-        selected_ids = [m["id"] for m in MCP_CATALOG if m["default"]]
+        selected_ids = get_default_mcps_for_preset(preset)
     return build_mcp_config(selected_ids)
 
 
@@ -383,6 +413,9 @@ def check_auth() -> dict[str, Any]:
     return {"status": "pending", "results": {}}
 
 
+_HTTP_MEMORY_MIN_LEVEL: int = _PRESET_LEVEL["interop"]
+
+
 def configure_mcp(
     project_dir: str,
     detected_clis: dict[str, Any],
@@ -391,12 +424,17 @@ def configure_mcp(
     control_command: str = OMG_CONTROL_COMMAND,
     control_args: list[str] | None = None,
     control_server_name: str = OMG_CONTROL_SERVER_NAME,
+    preset: str = "safe",
 ) -> dict[str, Any]:
     """Configure OMG MCP servers for authenticated CLIs.
 
     For each CLI in detected_clis where detected_clis[cli]["detected"] == True,
     calls the appropriate writer from runtime.mcp_config_writers.
 
+    HTTP memory surfaces are only written when the *preset* is at or above
+    ``interop`` level.  ``safe`` and ``balanced`` presets write only the
+    stdio ``omg-control`` surface.
+
     Args:
         project_dir: Path to the project directory.
         detected_clis: Dict of CLI detection results from detect_clis().
@@ -405,6 +443,7 @@ def configure_mcp(
         control_command: stdio command for the OMG control MCP server.
         control_args: stdio args for the OMG control MCP server.
         control_server_name: MCP server name for the OMG control surface.
+        preset: Active preset tier (safe, balanced, interop, labs).
 
     Returns:
         Dict with keys:
@@ -415,10 +454,11 @@ def configure_mcp(
     configured: list[str] = []
     errors: dict[str, str] = {}
     resolved_control_args = list(control_args or OMG_CONTROL_ARGS)
+    http_memory_allowed = _PRESET_LEVEL.get(preset, 0) >= _HTTP_MEMORY_MIN_LEVEL
 
-    # Always write Claude project config for both memory and control surfaces.
     try:
-        write_claude_mcp_config(project_dir, server_url, server_name)
+        if http_memory_allowed:
+            write_claude_mcp_config(project_dir, server_url, server_name)
         write_claude_mcp_stdio_config(
             project_dir,
             command=control_command,
@@ -429,7 +469,6 @@ def configure_mcp(
         _logger.warning("Failed to write Claude MCP config: %s", exc)
         errors["claude"] = str(exc)
 
-    # Write both memory and control surfaces for detected external CLIs.
     cli_writers = {
         "codex": (write_codex_mcp_config, write_codex_mcp_stdio_config),
         "gemini": (write_gemini_mcp_config, write_gemini_mcp_stdio_config),
@@ -442,7 +481,8 @@ def configure_mcp(
             continue
 
         try:
-            http_writer(server_url, server_name)
+            if http_memory_allowed:
+                http_writer(server_url, server_name)
             stdio_writer(
                 command=control_command,
                 args=resolved_control_args,
@@ -591,7 +631,7 @@ def run_setup_wizard(
 
     clis = detect_clis()
     auth = check_auth()
-    mcp = configure_mcp(project_dir, clis)
+    mcp = configure_mcp(project_dir, clis, preset=selected_preset)
     prefs = set_preferences(project_dir, {"preset": selected_preset})
     report_path = write_adoption_report(project_dir, adoption)
     adoption["report_path"] = report_path

package/hooks/shadow_manager.py

@@ -8,7 +8,9 @@ from __future__ import annotations
 import hashlib
 import json
 import os
+import platform
 import shutil
+import socket
 import sys
 from datetime import datetime, timezone
 from typing import Any
@@ -185,9 +187,26 @@ def create_evidence_pack(
     route_metadata: dict[str, Any] | None = None,
     trace_ids: list[str] | None = None,
     lineage: dict[str, Any] | None = None,
+    executor: dict[str, Any] | None = None,
+    environment: dict[str, Any] | None = None,
 ) -> str:
     ensure_shadow_dirs(project_dir)
     run_id = _validated_run_id(run_id)
+    
+    # Default executor if not provided
+    if executor is None:
+        executor = {
+            "user": os.getenv("USER", "unknown"),
+            "pid": str(os.getpid()),
+        }
+    
+    # Default environment if not provided
+    if environment is None:
+        environment = {
+            "hostname": socket.gethostname(),
+            "platform": platform.system(),
+        }
+    
     evidence = {
         "schema": "EvidencePack",
         "run_id": run_id,
@@ -203,6 +222,8 @@ def create_evidence_pack(
         "route_metadata": route_metadata or {},
         "trace_ids": trace_ids or [],
         "lineage": lineage or {},
+        "executor": executor,
+        "environment": environment,
     }
     evidence_path = ensure_path_within_dir(
         _evidence_root(project_dir),

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@trac3er/oh-my-god",
-  "version": "2.0.5",
-  "description": "OMG (Oh My God) — Multi-agent orchestration, intelligent model routing, and durable session state for Claude Code",
+  "version": "2.0.7",
+  "description": "OMG (Oh My God) — Multi-agent orchestration, evidence-backed verification, and durable session state for Claude Code, Codex, and supported agent hosts",
   "main": "OMG-setup.sh",
   "scripts": {
     "postinstall": "./OMG-setup.sh install --non-interactive",