@trac3er/oh-my-god 2.1.4 → 2.1.7

package/dist/.agents/skills/omg/mcp-fabric/openai.yaml

@@ -0,0 +1,13 @@
+name: omg-mcp-fabric
+description: "Tools, prompts, resources, and server instructions for the OMG control plane."
+allow_implicit_invocation: false
+metadata:
+  channel: public
+  bundle_id: mcp-fabric
+  title: "OMG MCP Fabric"
+mcp_servers:
+  - omg-control
+  - omg-memory
+allowed_tools:
+  - "Read"
+  - "Bash(python3:*)"

package/dist/.agents/skills/omg/plan-council/SKILL.md

@@ -0,0 +1,11 @@
+---
+name: omg-plan-council
+description: "Canonical council-style planning bundle for explicit, evidence-backed deep plans."
+---
+
+# OMG Plan Council
+
+- Channel: `public`
+- Execution modes: `embedded, local_supervisor`
+- MCP servers: `omg-control`
+- Evidence outputs: `.omg/plans/deep-plan.md, .omg/plans/deep-plan.json, .omg/plans/dissent.json, .omg/evidence/plan-council.json`

package/dist/.agents/skills/omg/plan-council/openai.yaml

@@ -0,0 +1,12 @@
+name: omg-plan-council
+description: "Canonical council-style planning bundle for explicit, evidence-backed deep plans."
+allow_implicit_invocation: false
+metadata:
+  channel: public
+  bundle_id: plan-council
+  title: "OMG Plan Council"
+mcp_servers:
+  - omg-control
+allowed_tools:
+  - "Read"
+  - "Grep"

package/dist/.agents/skills/omg/preflight/SKILL.md

@@ -0,0 +1,11 @@
+---
+name: omg-preflight
+description: "Repo-aware route selection based on diff, manifests, and classified risk."
+---
+
+# OMG Preflight
+
+- Channel: `public`
+- Execution modes: `embedded, local_supervisor`
+- MCP servers: `omg-control`
+- Evidence outputs: `.omg/tracebank/events.jsonl`

package/dist/.agents/skills/omg/preflight/openai.yaml

@@ -0,0 +1,12 @@
+name: omg-preflight
+description: "Repo-aware route selection based on diff, manifests, and classified risk."
+allow_implicit_invocation: true
+metadata:
+  channel: public
+  bundle_id: preflight
+  title: "OMG Preflight"
+mcp_servers:
+  - omg-control
+allowed_tools:
+  - "Read"
+  - "Grep"

package/dist/.agents/skills/omg/proof-gate/SKILL.md

@@ -0,0 +1,11 @@
+---
+name: omg-proof-gate
+description: "Structured release proof gate that binds claims to required evidence artifacts and trace links."
+---
+
+# OMG Proof Gate
+
+- Channel: `public`
+- Execution modes: `embedded, local_supervisor`
+- MCP servers: `omg-control`
+- Evidence outputs: `.omg/evidence/proof-gate-*.json`

package/dist/.agents/skills/omg/proof-gate/openai.yaml

@@ -0,0 +1,13 @@
+name: omg-proof-gate
+description: "Structured release proof gate that binds claims to required evidence artifacts and trace links."
+allow_implicit_invocation: false
+metadata:
+  channel: public
+  bundle_id: proof-gate
+  title: "OMG Proof Gate"
+mcp_servers:
+  - omg-control
+allowed_tools:
+  - "Read"
+  - "Grep"
+  - "Bash(python3:*)"

package/dist/.agents/skills/omg/remote-supervisor/SKILL.md

@@ -0,0 +1,11 @@
+---
+name: omg-remote-supervisor
+description: "Local-only authenticated supervisor sessions for worker orchestration."
+---
+
+# OMG Remote Supervisor
+
+- Channel: `public`
+- Execution modes: `local_supervisor`
+- MCP servers: `omg-control`
+- Evidence outputs: `.omg/supervisor/sessions/*.json`

package/dist/.agents/skills/omg/remote-supervisor/openai.yaml

@@ -0,0 +1,12 @@
+name: omg-remote-supervisor
+description: "Local-only authenticated supervisor sessions for worker orchestration."
+allow_implicit_invocation: false
+metadata:
+  channel: public
+  bundle_id: remote-supervisor
+  title: "OMG Remote Supervisor"
+mcp_servers:
+  - omg-control
+allowed_tools:
+  - "Read"
+  - "Bash(python3:*)"

package/dist/.agents/skills/omg/robotics/SKILL.md

@@ -0,0 +1,11 @@
+---
+name: omg-robotics
+description: "Robotics safety policy, replay, and evaluation attachments."
+---
+
+# OMG Robotics Pack
+
+- Channel: `public`
+- Execution modes: `embedded, local_supervisor`
+- MCP servers: `omg-control`
+- Evidence outputs: `.omg/incidents/*.json`

package/dist/.agents/skills/omg/robotics/openai.yaml

@@ -0,0 +1,11 @@
+name: omg-robotics
+description: "Robotics safety policy, replay, and evaluation attachments."
+allow_implicit_invocation: false
+metadata:
+  channel: public
+  bundle_id: robotics
+  title: "OMG Robotics Pack"
+mcp_servers:
+  - omg-control
+allowed_tools:
+  - "Read"

package/dist/.agents/skills/omg/secure-worktree-pipeline/SKILL.md

@@ -0,0 +1,11 @@
+---
+name: omg-secure-worktree-pipeline
+description: "Ephemeral worktree execution and supervisor-safe worker dispatch for production jobs."
+---
+
+# OMG Secure Worktree Pipeline
+
+- Channel: `public`
+- Execution modes: `automation, ephemeral_worktree, local_supervisor`
+- MCP servers: `omg-control`
+- Evidence outputs: `.omg/evidence/subagents/*.json`

package/dist/.agents/skills/omg/secure-worktree-pipeline/openai.yaml

@@ -0,0 +1,12 @@
+name: omg-secure-worktree-pipeline
+description: "Ephemeral worktree execution and supervisor-safe worker dispatch for production jobs."
+allow_implicit_invocation: false
+metadata:
+  channel: public
+  bundle_id: secure-worktree-pipeline
+  title: "OMG Secure Worktree Pipeline"
+mcp_servers:
+  - omg-control
+allowed_tools:
+  - "Read"
+  - "Bash(git:*)"

package/dist/.agents/skills/omg/security-check/SKILL.md

@@ -0,0 +1,11 @@
+---
+name: omg-security-check
+description: "Canonical security audit bundle with provenance, trust scoring, and deterministic evidence."
+---
+
+# OMG Security Check
+
+- Channel: `public`
+- Execution modes: `embedded, local_supervisor`
+- MCP servers: `omg-control`
+- Evidence outputs: `.omg/evidence/security-check-*.json`

package/dist/.agents/skills/omg/security-check/openai.yaml

@@ -0,0 +1,13 @@
+name: omg-security-check
+description: "Canonical security audit bundle with provenance, trust scoring, and deterministic evidence."
+allow_implicit_invocation: false
+metadata:
+  channel: public
+  bundle_id: security-check
+  title: "OMG Security Check"
+mcp_servers:
+  - omg-control
+allowed_tools:
+  - "Read"
+  - "Grep"
+  - "Bash(python3:*)"

package/dist/.agents/skills/omg/test-intent-lock/SKILL.md

@@ -0,0 +1,11 @@
+---
+name: omg-test-intent-lock
+description: "Structured test-delta guard that blocks weakened tests unless explicit override evidence is present."
+---
+
+# OMG Test Intent Lock
+
+- Channel: `public`
+- Execution modes: `embedded, local_supervisor`
+- MCP servers: `omg-control`
+- Evidence outputs: `.omg/evidence/test-intent-lock-*.json`

package/dist/.agents/skills/omg/test-intent-lock/openai.yaml

@@ -0,0 +1,13 @@
+name: omg-test-intent-lock
+description: "Structured test-delta guard that blocks weakened tests unless explicit override evidence is present."
+allow_implicit_invocation: false
+metadata:
+  channel: public
+  bundle_id: test-intent-lock
+  title: "OMG Test Intent Lock"
+mcp_servers:
+  - omg-control
+allowed_tools:
+  - "Read"
+  - "Grep"
+  - "Bash(python3:*)"

package/dist/.agents/skills/omg/tracebank/SKILL.md

@@ -0,0 +1,11 @@
+---
+name: omg-tracebank
+description: "Structured plan-to-patch-to-verify trace capture for OMG routes."
+---
+
+# OMG Tracebank
+
+- Channel: `public`
+- Execution modes: `embedded, local_supervisor`
+- MCP servers: `omg-control`
+- Evidence outputs: `.omg/tracebank/events.jsonl`

package/dist/.agents/skills/omg/tracebank/openai.yaml

@@ -0,0 +1,12 @@
+name: omg-tracebank
+description: "Structured plan-to-patch-to-verify trace capture for OMG routes."
+allow_implicit_invocation: true
+metadata:
+  channel: public
+  bundle_id: tracebank
+  title: "OMG Tracebank"
+mcp_servers:
+  - omg-control
+allowed_tools:
+  - "Read"
+  - "Bash(python3:*)"

package/dist/.agents/skills/omg/vision/SKILL.md

@@ -0,0 +1,11 @@
+---
+name: omg-vision
+description: "Vision-specific lineage, drift, and replay attachments."
+---
+
+# OMG Vision Pack
+
+- Channel: `public`
+- Execution modes: `embedded, local_supervisor`
+- MCP servers: `omg-control`
+- Evidence outputs: `.omg/lineage/*.json`

package/dist/.agents/skills/omg/vision/openai.yaml

@@ -0,0 +1,11 @@
+name: omg-vision
+description: "Vision-specific lineage, drift, and replay attachments."
+allow_implicit_invocation: false
+metadata:
+  channel: public
+  bundle_id: vision
+  title: "OMG Vision Pack"
+mcp_servers:
+  - omg-control
+allowed_tools:
+  - "Read"

package/dist/.claude-plugin/marketplace.json

@@ -0,0 +1,36 @@
+{
+  "name": "omg",
+  "description": "Marketplace metadata for the OMG Claude plugin",
+  "owner": {
+    "name": "trac3er00"
+  },
+  "metadata": {
+    "description": "OMG - Oh-My-God for Claude Code and supported agent hosts",
+    "version": "2.1.7",
+    "homepage": "https://github.com/trac3er00/OMG",
+    "repository": "https://github.com/trac3er00/OMG"
+  },
+  "plugins": [
+    {
+      "name": "omg",
+      "description": "OMG plugin layer for Claude Code and supported agent hosts with native setup, orchestration, and interop.",
+      "version": "2.1.7",
+      "source": "./",
+      "author": {
+        "name": "trac3er00"
+      },
+      "license": "MIT",
+      "category": "productivity",
+      "tags": [
+        "orchestration",
+        "automation",
+        "multi-agent",
+        "omg",
+        "codex",
+        "gemini",
+        "crazy-mode"
+      ]
+    }
+  ],
+  "version": "2.1.7"
+}

package/dist/.claude-plugin/mcp.json

@@ -0,0 +1,11 @@
+{
+  "mcpServers": {
+    "omg-control": {
+      "command": "python3",
+      "args": [
+        "-m",
+        "runtime.omg_mcp_server"
+      ]
+    }
+  }
+}

package/dist/.claude-plugin/plugin.json

@@ -0,0 +1,23 @@
+{
+  "name": "omg",
+  "version": "2.1.7",
+  "description": "OMG plugin layer for Claude Code with native setup, orchestration, and interop.",
+  "author": {
+    "name": "trac3er00"
+  },
+  "repository": "https://github.com/trac3er00/OMG",
+  "homepage": "https://github.com/trac3er00/OMG",
+  "license": "MIT",
+  "keywords": [
+    "claude-code",
+    "plugin",
+    "orchestration",
+    "multi-agent",
+    "omg",
+    "codex",
+    "gemini",
+    "crazy-mode",
+    "escalation"
+  ],
+  "mcpServers": "./.claude-plugin/mcp.json"
+}

package/dist/.mcp.json

@@ -0,0 +1,18 @@
+{
+  "mcpServers": {
+    "filesystem": {
+      "command": "npx",
+      "args": [
+        "@modelcontextprotocol/server-filesystem@2026.1.14",
+        "."
+      ]
+    },
+    "omg-control": {
+      "command": "python3",
+      "args": [
+        "-m",
+        "runtime.omg_mcp_server"
+      ]
+    }
+  }
+}

package/dist/OMG_COMPAT_CONTRACT.md

@@ -0,0 +1,105 @@
+---
+title: OMG Production Control Plane
+version: 2.1.7
+canonical_hosts:
+  - claude
+  - codex
+  - gemini
+  - kimi
+status: active
+---
+
+# OMG Production Control Plane
+
+`OMG_COMPAT_CONTRACT.md` is the normative human-readable contract for OMG capability bundles. Machine-readable manifests in `registry/bundles/` are executable inputs and must remain version-locked to this document.
+
+## provider_tiers
+
+OMG defines four canonical hosts and their host-rule contracts.
+
+- `claude`: requires `compilation_targets`, `hooks`, `subagents`, and `skills`.
+- `codex`: requires `compilation_targets`, `skills`, `agents_fragments`, `rules`, and `automations`.
+- `gemini`: requires `compilation_targets`, `mcp`, `skills`, and `automations`.
+- `kimi`: requires `compilation_targets`, `mcp`, `skills`, and `automations`.
+
+Gemini and Kimi are canonical hosts for contract validation and policy declaration. Their contracts do not require Claude/Codex hook semantics.
+
+## metadata
+
+Every bundle must declare `id`, `kind`, `version`, `title`, `description`, `hosts`, and `assets`.
+
+## invocation_policy
+
+Every bundle must declare whether it is user invocable, model invocable, and whether implicit invocation is allowed. Production bundles default to explicit invocation only.
+
+## tool_policy
+
+Every bundle must declare `side_effect_level` and host-specific allowed tools. Production policy protects `.omg/`, `.agents/`, `.codex/`, and `.claude/` as control-plane state.
+
+## lifecycle_hooks
+
+Canonical OMG events:
+
+- `SessionStart`
+- `SessionEnd`
+- `PreToolUse`
+- `PostToolUse`
+- `PostToolUseFailure`
+- `Stop`
+- `PreCompact`
+- `ConfigChange`
+- `WorktreeCreate`
+- `WorktreeRemove`
+- `SubagentStart`
+- `SubagentStop`
+- `TaskCompleted`
+
+Hosts compile native events where available and emulate the rest with OMG runtime wrappers.
+
+## mcp_contract
+
+Bundles may declare MCP servers, prompts, resources, and server instructions. `omg-control` is the primary stdio server. HTTP control-plane exposure is loopback-only and not a production launch dependency.
+
+## lsp_contract
+
+LSP packs declare supported languages, diagnostics expectations, and evidence outputs for post-edit checks.
+
+## evidence_outputs
+
+Bundles declare reproducible evidence artifacts under `.omg/evidence/` or `.omg/state/`. Release-ready bundles must emit deterministic outputs suitable for CI drift checks.
+
+## execution_contract
+
+Supported execution modes:
+
+- `embedded`
+- `local_supervisor`
+- `automation`
+- `ephemeral_worktree`
+
+`local_supervisor` means a same-machine orchestrator driving Claude and Codex workers through local CLI or stdio MCP integration. Remote multi-tenant control planes are out of scope for this version.
+
+## host_compilation_rules
+
+Claude outputs compile to:
+
+- `.claude-plugin/plugin.json`
+- `.claude-plugin/marketplace.json`
+- `.mcp.json`
+- generated hook configuration consumed by `settings.json`
+
+Codex outputs compile to:
+
+- `.agents/skills/omg/<bundle>/SKILL.md`
+- `.agents/skills/omg/<bundle>/openai.yaml`
+- generated Codex MCP and rule fragments under `.agents/skills/omg/`
+
+## roadmap_extensions
+
+The contract reserves compilation anchors for:
+
+- `omg.skill-compiler`
+- `omg.hook-governor`
+- `omg.mcp-fabric`
+- `omg.lsp-pack`
+- `omg.secure-worktree-pipeline`

package/dist/dist/enterprise/attestations/bundle/.agents/skills/omg/AGENTS.fragment.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+gKdnbhBzfgMKIj4fbnqCD5cUEy1oAMJJkU5aCYt2iUNxGzx9bnTA6MlAnQ8milQREUzHolc6oEkYfNymHDEbBA==
+trusted comment: type=omg-slsa-v1 keyid=53c71fa49d71f18f issued_at=2026-03-11T19:41:23.268951+00:00 artifact=bundle/.agents/skills/omg/AGENTS.fragment.md sha256=2cf0340fbea7f8f39660ed6e6f7bd0fc3df6e210302c3328915e871b0ac8606d
+jh0TJCGq7t2TzyL/jf3lrxPj412sY2VpbL+8M4r94ZAsfHPLwrzJNcIo7jMXTKcou98LBDDObDiMQz8RS4T6BA==

package/dist/dist/enterprise/attestations/bundle/.agents/skills/omg/AGENTS.fragment.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.agents/skills/omg/AGENTS.fragment.md",
+      "digest": {
+        "sha256": "2cf0340fbea7f8f39660ed6e6f7bd0fc3df6e210302c3328915e871b0ac8606d"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:41:23.265002+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:41:23.265002+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "53c71fa49d71f18f",
+    "value": "untrusted comment: signature from omg local signing key\ngKdnbhBzfgMKIj4fbnqCD5cUEy1oAMJJkU5aCYt2iUNxGzx9bnTA6MlAnQ8milQREUzHolc6oEkYfNymHDEbBA==\ntrusted comment: type=omg-slsa-v1 keyid=53c71fa49d71f18f issued_at=2026-03-11T19:41:23.268951+00:00 artifact=bundle/.agents/skills/omg/AGENTS.fragment.md sha256=2cf0340fbea7f8f39660ed6e6f7bd0fc3df6e210302c3328915e871b0ac8606d\njh0TJCGq7t2TzyL/jf3lrxPj412sY2VpbL+8M4r94ZAsfHPLwrzJNcIo7jMXTKcou98LBDDObDiMQz8RS4T6BA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=53c71fa49d71f18f issued_at=2026-03-11T19:41:23.268951+00:00 artifact=bundle/.agents/skills/omg/AGENTS.fragment.md sha256=2cf0340fbea7f8f39660ed6e6f7bd0fc3df6e210302c3328915e871b0ac8606d"
+  }
+}

package/dist/dist/enterprise/attestations/bundle/.agents/skills/omg/algorithms/SKILL.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+9CIOSx65LExzm1OI7+W46GZu3jElnWJ/SqQBecZN0YTFVUa0SdoZIHVnarewU+eiYpRrSgDdtm94C3ieOTcpAg==
+trusted comment: type=omg-slsa-v1 keyid=195ab640d9c9b540 issued_at=2026-03-11T19:41:23.270437+00:00 artifact=bundle/.agents/skills/omg/algorithms/SKILL.md sha256=9f007935886f168e43cd76b69857e81c579f9cce8174e14f9b6b0173739c337d
+UxBqVG7pEf78zjDAWPXd3qC94EiNLUoWC/qJCMiCQxxw5ZsDY7imAnV4KUtH5mkpZOZgXLvGKitTiIPIZss5CQ==

package/dist/dist/enterprise/attestations/bundle/.agents/skills/omg/algorithms/SKILL.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.agents/skills/omg/algorithms/SKILL.md",
+      "digest": {
+        "sha256": "9f007935886f168e43cd76b69857e81c579f9cce8174e14f9b6b0173739c337d"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:41:23.270312+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:41:23.270312+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "195ab640d9c9b540",
+    "value": "untrusted comment: signature from omg local signing key\n9CIOSx65LExzm1OI7+W46GZu3jElnWJ/SqQBecZN0YTFVUa0SdoZIHVnarewU+eiYpRrSgDdtm94C3ieOTcpAg==\ntrusted comment: type=omg-slsa-v1 keyid=195ab640d9c9b540 issued_at=2026-03-11T19:41:23.270437+00:00 artifact=bundle/.agents/skills/omg/algorithms/SKILL.md sha256=9f007935886f168e43cd76b69857e81c579f9cce8174e14f9b6b0173739c337d\nUxBqVG7pEf78zjDAWPXd3qC94EiNLUoWC/qJCMiCQxxw5ZsDY7imAnV4KUtH5mkpZOZgXLvGKitTiIPIZss5CQ==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=195ab640d9c9b540 issued_at=2026-03-11T19:41:23.270437+00:00 artifact=bundle/.agents/skills/omg/algorithms/SKILL.md sha256=9f007935886f168e43cd76b69857e81c579f9cce8174e14f9b6b0173739c337d"
+  }
+}

package/dist/dist/enterprise/attestations/bundle/.agents/skills/omg/algorithms/openai.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+z5i72vUTdvIDD5uT8/fJbDi/eJ4hoBzBVfm+/EcRgVkcRRs7BCE4EqNAZ8+zFUNm4Kel0mbk7WY6gaq254CmBw==
+trusted comment: type=omg-slsa-v1 keyid=acbf4eb8c58b9830 issued_at=2026-03-11T19:41:23.271238+00:00 artifact=bundle/.agents/skills/omg/algorithms/openai.yaml sha256=879d3b5bcdb3ffa17387eae31634bd5ce7e2695c0e6dd3b478017843a024300d
+3d+L9btUcQKy5Wm6ql4Zf2qHhY7aG8PqX5Fe+YAjp9Lep+ThtzasXd+fjva4P+fPye8veNVQN4CW+eYa2keMDQ==

package/dist/dist/enterprise/attestations/bundle/.agents/skills/omg/algorithms/openai.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.agents/skills/omg/algorithms/openai.yaml",
+      "digest": {
+        "sha256": "879d3b5bcdb3ffa17387eae31634bd5ce7e2695c0e6dd3b478017843a024300d"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:41:23.271121+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:41:23.271121+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "acbf4eb8c58b9830",
+    "value": "untrusted comment: signature from omg local signing key\nz5i72vUTdvIDD5uT8/fJbDi/eJ4hoBzBVfm+/EcRgVkcRRs7BCE4EqNAZ8+zFUNm4Kel0mbk7WY6gaq254CmBw==\ntrusted comment: type=omg-slsa-v1 keyid=acbf4eb8c58b9830 issued_at=2026-03-11T19:41:23.271238+00:00 artifact=bundle/.agents/skills/omg/algorithms/openai.yaml sha256=879d3b5bcdb3ffa17387eae31634bd5ce7e2695c0e6dd3b478017843a024300d\n3d+L9btUcQKy5Wm6ql4Zf2qHhY7aG8PqX5Fe+YAjp9Lep+ThtzasXd+fjva4P+fPye8veNVQN4CW+eYa2keMDQ==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=acbf4eb8c58b9830 issued_at=2026-03-11T19:41:23.271238+00:00 artifact=bundle/.agents/skills/omg/algorithms/openai.yaml sha256=879d3b5bcdb3ffa17387eae31634bd5ce7e2695c0e6dd3b478017843a024300d"
+  }
+}

package/dist/dist/enterprise/attestations/bundle/.agents/skills/omg/api-twin/SKILL.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+Rs0Vn5u+XH7/6YNHoJNykaeGx3xDaGOnXFIT0SjlCC7/8xsqlOM8I5NrBx6MdhF5ndEO2og47XzPG8+bggWFAw==
+trusted comment: type=omg-slsa-v1 keyid=7d4dbd5f323c1ab8 issued_at=2026-03-11T19:41:23.271950+00:00 artifact=bundle/.agents/skills/omg/api-twin/SKILL.md sha256=482db7bf01f80d8695f71f3bdbae8e9a179cf05355e736f90c40c1a3c9136fef
+NCM2Pqohzb3n/pODRs+6S8JynmOAYhe1XeHDrwk/1X4DPBTT0Wq6wPF1toGXgej/99lUDTsKG7EQlzoXwfeyBg==

package/dist/dist/enterprise/attestations/bundle/.agents/skills/omg/api-twin/SKILL.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.agents/skills/omg/api-twin/SKILL.md",
+      "digest": {
+        "sha256": "482db7bf01f80d8695f71f3bdbae8e9a179cf05355e736f90c40c1a3c9136fef"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:41:23.271835+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:41:23.271835+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "7d4dbd5f323c1ab8",
+    "value": "untrusted comment: signature from omg local signing key\nRs0Vn5u+XH7/6YNHoJNykaeGx3xDaGOnXFIT0SjlCC7/8xsqlOM8I5NrBx6MdhF5ndEO2og47XzPG8+bggWFAw==\ntrusted comment: type=omg-slsa-v1 keyid=7d4dbd5f323c1ab8 issued_at=2026-03-11T19:41:23.271950+00:00 artifact=bundle/.agents/skills/omg/api-twin/SKILL.md sha256=482db7bf01f80d8695f71f3bdbae8e9a179cf05355e736f90c40c1a3c9136fef\nNCM2Pqohzb3n/pODRs+6S8JynmOAYhe1XeHDrwk/1X4DPBTT0Wq6wPF1toGXgej/99lUDTsKG7EQlzoXwfeyBg==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=7d4dbd5f323c1ab8 issued_at=2026-03-11T19:41:23.271950+00:00 artifact=bundle/.agents/skills/omg/api-twin/SKILL.md sha256=482db7bf01f80d8695f71f3bdbae8e9a179cf05355e736f90c40c1a3c9136fef"
+  }
+}

package/dist/dist/enterprise/attestations/bundle/.agents/skills/omg/api-twin/openai.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+zhQklvabeiY6t72jGh4Dv+ZpmucEpVV0RRugjIsnPSZdKAbusJ08VCIdAg5TespbXB0Dv+yrglaHuenpXpuiBQ==
+trusted comment: type=omg-slsa-v1 keyid=3c01f13926adbcc1 issued_at=2026-03-11T19:41:23.272695+00:00 artifact=bundle/.agents/skills/omg/api-twin/openai.yaml sha256=a6caee113518bda5e2a470ca7d166d18969392bde1470ef2a47f8ead2c0e33ab
+V/UgnDQu+RKQoU2oRQqyD+IvVENgOiSsGTEMz2KLoWBFU50g6j7Vc9PTK5XxmWJeOSb+vm1BQIVD/yKVyP2JBQ==