@trac3er/oh-my-god 2.1.4 → 2.1.7

package/.agents/skills/omg/AGENTS.fragment.md

@@ -1,11 +1,11 @@
-# OMG Codex Governance (channel: public)
+# OMG Codex Governance (channel: enterprise)
 
 ## Build & Test
 
 ```bash
 python3 -m pytest tests -q
 python3 scripts/omg.py contract validate
-python3 scripts/omg.py contract compile --host codex --channel public
+python3 scripts/omg.py contract compile --host codex --channel enterprise
 ```
 
 ## Protected Paths
@@ -17,10 +17,25 @@ The following paths require tier-gated review before mutation:
 - `.codex/**`
 - `.claude/**`
 
+## Release Audit
+
+Release readiness requires claim and compliance outcomes:
+
+- `claim_judge`
+- `compliance_governor`
+- `execution_primitives`
+Attestation requirements:
+- `registry.verify_artifact.sign_artifact_statement`
+- `registry.verify_artifact.verify_artifact_statement`
+
 ## Evidence Contract
 
 Every production action must emit evidence containing these fields:
 
+- `attestation_statement`
+- `attestation_verifier`
+- `claim_judge_verdict`
+- `compliance_verdict`
 - `executor`
 - `lineage`
 - `timestamp`

package/.agents/skills/omg/algorithms/SKILL.md

@@ -5,7 +5,7 @@ description: "Determinism and benchmark attachments for algorithm-heavy work."
 
 # OMG Algorithms Pack
 
-- Channel: `public`
+- Channel: `enterprise`
 - Execution modes: `embedded, local_supervisor`
 - MCP servers: `omg-control`
 - Evidence outputs: `.omg/evals/latest.json`

package/.agents/skills/omg/algorithms/openai.yaml

@@ -2,7 +2,7 @@ name: omg-algorithms
 description: "Determinism and benchmark attachments for algorithm-heavy work."
 allow_implicit_invocation: false
 metadata:
-  channel: public
+  channel: enterprise
   bundle_id: algorithms
   title: "OMG Algorithms Pack"
 mcp_servers:

package/.agents/skills/omg/api-twin/SKILL.md

@@ -5,7 +5,7 @@ description: "Versioned endpoint cassette replay with latency, drift, and cost r
 
 # OMG API Twin
 
-- Channel: `public`
+- Channel: `enterprise`
 - Execution modes: `embedded, local_supervisor`
 - MCP servers: `omg-control`
 - Evidence outputs: `.omg/state/api_twin.json`

package/.agents/skills/omg/api-twin/openai.yaml

@@ -2,7 +2,7 @@ name: omg-api-twin
 description: "Versioned endpoint cassette replay with latency, drift, and cost reporting."
 allow_implicit_invocation: false
 metadata:
-  channel: public
+  channel: enterprise
   bundle_id: api-twin
   title: "OMG API Twin"
 mcp_servers:

package/.agents/skills/omg/claim-judge/SKILL.md

@@ -5,7 +5,7 @@ description: "Evidence-backed claim validator for structured release and complet
 
 # OMG Claim Judge
 
-- Channel: `public`
+- Channel: `enterprise`
 - Execution modes: `embedded, local_supervisor`
 - MCP servers: `omg-control`
 - Evidence outputs: `.omg/evidence/claim-judge-*.json`

package/.agents/skills/omg/claim-judge/openai.yaml

@@ -2,7 +2,7 @@ name: omg-claim-judge
 description: "Evidence-backed claim validator for structured release and completion claims."
 allow_implicit_invocation: false
 metadata:
-  channel: public
+  channel: enterprise
   bundle_id: claim-judge
   title: "OMG Claim Judge"
 mcp_servers:

package/.agents/skills/omg/codex-rules.md

@@ -1,4 +1,4 @@
-# OMG Codex Rules (channel: public)
+# OMG Codex Rules (channel: enterprise)
 
 ## Defaults
 

package/.agents/skills/omg/control-plane/SKILL.md

@@ -1,11 +1,11 @@
 ---
 name: omg-control-plane
-description: "Canonical production control plane bundle for Claude and Codex."
+description: "Canonical production control plane bundle for Claude, Codex, Gemini, and Kimi."
 ---
 
 # OMG Control Plane
 
-- Channel: `public`
+- Channel: `enterprise`
 - Execution modes: `embedded, local_supervisor`
 - MCP servers: `omg-control, omg-memory`
 - Evidence outputs: `.omg/evidence/control-plane-compile.json`

package/.agents/skills/omg/control-plane/openai.yaml

@@ -1,8 +1,8 @@
 name: omg-control-plane
-description: "Canonical production control plane bundle for Claude and Codex."
+description: "Canonical production control plane bundle for Claude, Codex, Gemini, and Kimi."
 allow_implicit_invocation: false
 metadata:
-  channel: public
+  channel: enterprise
   bundle_id: control-plane
   title: "OMG Control Plane"
 mcp_servers:

package/.agents/skills/omg/data-lineage/SKILL.md

@@ -5,7 +5,7 @@ description: "Provenance and privacy tracking for traces, fixtures, examples, an
 
 # OMG Data Lineage
 
-- Channel: `public`
+- Channel: `enterprise`
 - Execution modes: `embedded, local_supervisor`
 - MCP servers: `omg-control`
 - Evidence outputs: `.omg/lineage/*.json`

package/.agents/skills/omg/data-lineage/openai.yaml

@@ -2,7 +2,7 @@ name: omg-data-lineage
 description: "Provenance and privacy tracking for traces, fixtures, examples, and synthetic artifacts."
 allow_implicit_invocation: true
 metadata:
-  channel: public
+  channel: enterprise
   bundle_id: data-lineage
   title: "OMG Data Lineage"
 mcp_servers:

package/.agents/skills/omg/delta-classifier/SKILL.md

@@ -5,7 +5,7 @@ description: "Change classifier that attaches risk-aware checks, approvals, and
 
 # OMG Delta Classifier
 
-- Channel: `public`
+- Channel: `enterprise`
 - Execution modes: `embedded, local_supervisor`
 - MCP servers: `omg-control`
 - Evidence outputs: `.omg/tracebank/events.jsonl`

package/.agents/skills/omg/delta-classifier/openai.yaml

@@ -2,7 +2,7 @@ name: omg-delta-classifier
 description: "Change classifier that attaches risk-aware checks, approvals, and packs."
 allow_implicit_invocation: true
 metadata:
-  channel: public
+  channel: enterprise
   bundle_id: delta-classifier
   title: "OMG Delta Classifier"
 mcp_servers:

package/.agents/skills/omg/eval-gate/SKILL.md

@@ -5,7 +5,7 @@ description: "Reproducible evaluation gate that blocks regressions before releas
 
 # OMG Eval Gate
 
-- Channel: `public`
+- Channel: `enterprise`
 - Execution modes: `embedded, local_supervisor`
 - MCP servers: `omg-control`
 - Evidence outputs: `.omg/evals/latest.json`

package/.agents/skills/omg/eval-gate/openai.yaml

@@ -2,7 +2,7 @@ name: omg-eval-gate
 description: "Reproducible evaluation gate that blocks regressions before release."
 allow_implicit_invocation: false
 metadata:
-  channel: public
+  channel: enterprise
   bundle_id: eval-gate
   title: "OMG Eval Gate"
 mcp_servers:

package/.agents/skills/omg/health/SKILL.md

@@ -5,7 +5,7 @@ description: "Health-sensitive approvals, provenance, and replay attachments."
 
 # OMG Health Pack
 
-- Channel: `public`
+- Channel: `enterprise`
 - Execution modes: `embedded, local_supervisor`
 - MCP servers: `omg-control`
 - Evidence outputs: `.omg/lineage/*.json`

package/.agents/skills/omg/health/openai.yaml

@@ -2,7 +2,7 @@ name: omg-health
 description: "Health-sensitive approvals, provenance, and replay attachments."
 allow_implicit_invocation: false
 metadata:
-  channel: public
+  channel: enterprise
   bundle_id: health
   title: "OMG Health Pack"
 mcp_servers:

package/.agents/skills/omg/hook-governor/SKILL.md

@@ -5,7 +5,7 @@ description: "Canonical hook ordering, policy reinjection, and protected-path go
 
 # OMG Hook Governor
 
-- Channel: `public`
+- Channel: `enterprise`
 - Execution modes: `embedded, local_supervisor`
 - MCP servers: `omg-control`
 - Evidence outputs: `.omg/state/ledger/tool-ledger.jsonl`

package/.agents/skills/omg/hook-governor/openai.yaml

@@ -2,7 +2,7 @@ name: omg-hook-governor
 description: "Canonical hook ordering, policy reinjection, and protected-path governance."
 allow_implicit_invocation: true
 metadata:
-  channel: public
+  channel: enterprise
   bundle_id: hook-governor
   title: "OMG Hook Governor"
 mcp_servers:

package/.agents/skills/omg/incident-replay/SKILL.md

@@ -5,7 +5,7 @@ description: "Replayable bug packs built from logs, failing tests, traces, and d
 
 # OMG Incident Replay
 
-- Channel: `public`
+- Channel: `enterprise`
 - Execution modes: `embedded, local_supervisor`
 - MCP servers: `omg-control`
 - Evidence outputs: `.omg/incidents/*.json`

package/.agents/skills/omg/incident-replay/openai.yaml

@@ -2,7 +2,7 @@ name: omg-incident-replay
 description: "Replayable bug packs built from logs, failing tests, traces, and diffs."
 allow_implicit_invocation: false
 metadata:
-  channel: public
+  channel: enterprise
   bundle_id: incident-replay
   title: "OMG Incident Replay"
 mcp_servers:

package/.agents/skills/omg/lsp-pack/SKILL.md

@@ -5,7 +5,7 @@ description: "Optional LSP-backed diagnostics and navigation bundle for producti
 
 # OMG LSP Pack
 
-- Channel: `public`
+- Channel: `enterprise`
 - Execution modes: `embedded, local_supervisor`
 - MCP servers: `omg-control`
 - Evidence outputs: `.omg/evidence/lsp-diagnostics.json`

package/.agents/skills/omg/lsp-pack/openai.yaml

@@ -2,7 +2,7 @@ name: omg-lsp-pack
 description: "Optional LSP-backed diagnostics and navigation bundle for production verification."
 allow_implicit_invocation: false
 metadata:
-  channel: public
+  channel: enterprise
   bundle_id: lsp-pack
   title: "OMG LSP Pack"
 mcp_servers:

package/.agents/skills/omg/mcp-fabric/SKILL.md

@@ -5,7 +5,7 @@ description: "Tools, prompts, resources, and server instructions for the OMG con
 
 # OMG MCP Fabric
 
-- Channel: `public`
+- Channel: `enterprise`
 - Execution modes: `embedded, local_supervisor`
 - MCP servers: `omg-control, omg-memory`
 - Evidence outputs: `.omg/evidence/mcp-fabric.json`

package/.agents/skills/omg/mcp-fabric/openai.yaml

@@ -2,7 +2,7 @@ name: omg-mcp-fabric
 description: "Tools, prompts, resources, and server instructions for the OMG control plane."
 allow_implicit_invocation: false
 metadata:
-  channel: public
+  channel: enterprise
   bundle_id: mcp-fabric
   title: "OMG MCP Fabric"
 mcp_servers:

package/.agents/skills/omg/plan-council/SKILL.md

@@ -5,7 +5,7 @@ description: "Canonical council-style planning bundle for explicit, evidence-bac
 
 # OMG Plan Council
 
-- Channel: `public`
+- Channel: `enterprise`
 - Execution modes: `embedded, local_supervisor`
 - MCP servers: `omg-control`
 - Evidence outputs: `.omg/plans/deep-plan.md, .omg/plans/deep-plan.json, .omg/plans/dissent.json, .omg/evidence/plan-council.json`

package/.agents/skills/omg/plan-council/openai.yaml

@@ -2,7 +2,7 @@ name: omg-plan-council
 description: "Canonical council-style planning bundle for explicit, evidence-backed deep plans."
 allow_implicit_invocation: false
 metadata:
-  channel: public
+  channel: enterprise
   bundle_id: plan-council
   title: "OMG Plan Council"
 mcp_servers:

package/.agents/skills/omg/preflight/SKILL.md

@@ -5,7 +5,7 @@ description: "Repo-aware route selection based on diff, manifests, and classifie
 
 # OMG Preflight
 
-- Channel: `public`
+- Channel: `enterprise`
 - Execution modes: `embedded, local_supervisor`
 - MCP servers: `omg-control`
 - Evidence outputs: `.omg/tracebank/events.jsonl`

package/.agents/skills/omg/preflight/openai.yaml

@@ -2,7 +2,7 @@ name: omg-preflight
 description: "Repo-aware route selection based on diff, manifests, and classified risk."
 allow_implicit_invocation: true
 metadata:
-  channel: public
+  channel: enterprise
   bundle_id: preflight
   title: "OMG Preflight"
 mcp_servers:

package/.agents/skills/omg/proof-gate/SKILL.md

@@ -5,7 +5,7 @@ description: "Structured release proof gate that binds claims to required eviden
 
 # OMG Proof Gate
 
-- Channel: `public`
+- Channel: `enterprise`
 - Execution modes: `embedded, local_supervisor`
 - MCP servers: `omg-control`
 - Evidence outputs: `.omg/evidence/proof-gate-*.json`

package/.agents/skills/omg/proof-gate/openai.yaml

@@ -2,7 +2,7 @@ name: omg-proof-gate
 description: "Structured release proof gate that binds claims to required evidence artifacts and trace links."
 allow_implicit_invocation: false
 metadata:
-  channel: public
+  channel: enterprise
   bundle_id: proof-gate
   title: "OMG Proof Gate"
 mcp_servers:

package/.agents/skills/omg/remote-supervisor/SKILL.md

@@ -5,7 +5,7 @@ description: "Local-only authenticated supervisor sessions for worker orchestrat
 
 # OMG Remote Supervisor
 
-- Channel: `public`
+- Channel: `enterprise`
 - Execution modes: `local_supervisor`
 - MCP servers: `omg-control`
 - Evidence outputs: `.omg/supervisor/sessions/*.json`

package/.agents/skills/omg/remote-supervisor/openai.yaml

@@ -2,7 +2,7 @@ name: omg-remote-supervisor
 description: "Local-only authenticated supervisor sessions for worker orchestration."
 allow_implicit_invocation: false
 metadata:
-  channel: public
+  channel: enterprise
   bundle_id: remote-supervisor
   title: "OMG Remote Supervisor"
 mcp_servers:

package/.agents/skills/omg/robotics/SKILL.md

@@ -5,7 +5,7 @@ description: "Robotics safety policy, replay, and evaluation attachments."
 
 # OMG Robotics Pack
 
-- Channel: `public`
+- Channel: `enterprise`
 - Execution modes: `embedded, local_supervisor`
 - MCP servers: `omg-control`
 - Evidence outputs: `.omg/incidents/*.json`

package/.agents/skills/omg/robotics/openai.yaml

@@ -2,7 +2,7 @@ name: omg-robotics
 description: "Robotics safety policy, replay, and evaluation attachments."
 allow_implicit_invocation: false
 metadata:
-  channel: public
+  channel: enterprise
   bundle_id: robotics
   title: "OMG Robotics Pack"
 mcp_servers:

package/.agents/skills/omg/secure-worktree-pipeline/SKILL.md

@@ -5,7 +5,7 @@ description: "Ephemeral worktree execution and supervisor-safe worker dispatch f
 
 # OMG Secure Worktree Pipeline
 
-- Channel: `public`
+- Channel: `enterprise`
 - Execution modes: `automation, ephemeral_worktree, local_supervisor`
 - MCP servers: `omg-control`
 - Evidence outputs: `.omg/evidence/subagents/*.json`

package/.agents/skills/omg/secure-worktree-pipeline/openai.yaml

@@ -2,7 +2,7 @@ name: omg-secure-worktree-pipeline
 description: "Ephemeral worktree execution and supervisor-safe worker dispatch for production jobs."
 allow_implicit_invocation: false
 metadata:
-  channel: public
+  channel: enterprise
   bundle_id: secure-worktree-pipeline
   title: "OMG Secure Worktree Pipeline"
 mcp_servers:

package/.agents/skills/omg/security-check/SKILL.md

@@ -5,7 +5,7 @@ description: "Canonical security audit bundle with provenance, trust scoring, an
 
 # OMG Security Check
 
-- Channel: `public`
+- Channel: `enterprise`
 - Execution modes: `embedded, local_supervisor`
 - MCP servers: `omg-control`
 - Evidence outputs: `.omg/evidence/security-check-*.json`

package/.agents/skills/omg/security-check/openai.yaml

@@ -2,7 +2,7 @@ name: omg-security-check
 description: "Canonical security audit bundle with provenance, trust scoring, and deterministic evidence."
 allow_implicit_invocation: false
 metadata:
-  channel: public
+  channel: enterprise
   bundle_id: security-check
   title: "OMG Security Check"
 mcp_servers:

package/.agents/skills/omg/test-intent-lock/SKILL.md

@@ -5,7 +5,7 @@ description: "Structured test-delta guard that blocks weakened tests unless expl
 
 # OMG Test Intent Lock
 
-- Channel: `public`
+- Channel: `enterprise`
 - Execution modes: `embedded, local_supervisor`
 - MCP servers: `omg-control`
 - Evidence outputs: `.omg/evidence/test-intent-lock-*.json`

package/.agents/skills/omg/test-intent-lock/openai.yaml

@@ -2,7 +2,7 @@ name: omg-test-intent-lock
 description: "Structured test-delta guard that blocks weakened tests unless explicit override evidence is present."
 allow_implicit_invocation: false
 metadata:
-  channel: public
+  channel: enterprise
   bundle_id: test-intent-lock
   title: "OMG Test Intent Lock"
 mcp_servers:

package/.agents/skills/omg/tracebank/SKILL.md

@@ -5,7 +5,7 @@ description: "Structured plan-to-patch-to-verify trace capture for OMG routes."
 
 # OMG Tracebank
 
-- Channel: `public`
+- Channel: `enterprise`
 - Execution modes: `embedded, local_supervisor`
 - MCP servers: `omg-control`
 - Evidence outputs: `.omg/tracebank/events.jsonl`

package/.agents/skills/omg/tracebank/openai.yaml

@@ -2,7 +2,7 @@ name: omg-tracebank
 description: "Structured plan-to-patch-to-verify trace capture for OMG routes."
 allow_implicit_invocation: true
 metadata:
-  channel: public
+  channel: enterprise
   bundle_id: tracebank
   title: "OMG Tracebank"
 mcp_servers:

package/.agents/skills/omg/vision/SKILL.md

@@ -5,7 +5,7 @@ description: "Vision-specific lineage, drift, and replay attachments."
 
 # OMG Vision Pack
 
-- Channel: `public`
+- Channel: `enterprise`
 - Execution modes: `embedded, local_supervisor`
 - MCP servers: `omg-control`
 - Evidence outputs: `.omg/lineage/*.json`

package/.agents/skills/omg/vision/openai.yaml

@@ -2,7 +2,7 @@ name: omg-vision
 description: "Vision-specific lineage, drift, and replay attachments."
 allow_implicit_invocation: false
 metadata:
-  channel: public
+  channel: enterprise
   bundle_id: vision
   title: "OMG Vision Pack"
 mcp_servers:

package/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
   },
   "metadata": {
     "description": "OMG - Oh-My-God for Claude Code and supported agent hosts",
-    "version": "2.1.4",
+    "version": "2.1.7",
     "homepage": "https://github.com/trac3er00/OMG",
     "repository": "https://github.com/trac3er00/OMG"
   },
@@ -14,7 +14,7 @@
     {
       "name": "omg",
       "description": "OMG plugin layer for Claude Code and supported agent hosts with native setup, orchestration, and interop.",
-      "version": "2.1.4",
+      "version": "2.1.7",
       "source": "./",
       "author": {
         "name": "trac3er00"
@@ -32,5 +32,5 @@
       ]
     }
   ],
-  "version": "2.1.4"
+  "version": "2.1.7"
 }

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "omg",
-  "version": "2.1.4",
+  "version": "2.1.7",
   "description": "OMG plugin layer for Claude Code with native setup, orchestration, and interop.",
   "author": {
     "name": "trac3er00"

package/.gemini/settings.json

@@ -7,5 +7,61 @@
         "runtime.omg_mcp_server"
       ]
     }
+  },
+  "_omg": {
+    "_version": "2.1.7",
+    "generated": {
+      "contract_version": "2.1.7",
+      "channel": "public",
+      "required_bundles": [
+        "control-plane",
+        "plan-council",
+        "claim-judge",
+        "test-intent-lock",
+        "proof-gate",
+        "hook-governor",
+        "mcp-fabric",
+        "lsp-pack",
+        "secure-worktree-pipeline",
+        "security-check",
+        "api-twin",
+        "preflight",
+        "robotics",
+        "vision",
+        "algorithms",
+        "health",
+        "tracebank",
+        "eval-gate",
+        "delta-classifier",
+        "incident-replay",
+        "data-lineage",
+        "remote-supervisor"
+      ],
+      "phase1_release_contract": {
+        "forge_specialist_surfaces": [
+          "forge-profile-review",
+          "forge-release-audit",
+          "forge-validate"
+        ],
+        "release_surfaces": [
+          "OMG:profile-review",
+          "OMG:release-audit",
+          "OMG:validate"
+        ],
+        "attestation_requirements": [
+          "registry.verify_artifact.sign_artifact_statement",
+          "registry.verify_artifact.verify_artifact_statement"
+        ],
+        "compliance_governor_expectations": [
+          "runtime.compliance_governor.evaluate_release_compliance",
+          "runtime.compliance_governor.evaluate_tool_compliance"
+        ],
+        "release_readiness_checks": [
+          "claim_judge",
+          "compliance_governor",
+          "execution_primitives"
+        ]
+      }
+    }
   }
 }