@trac3er/oh-my-god 2.1.4 → 2.1.7

package/artifacts/release/dist/enterprise/attestations/bundle/.agents/skills/omg/robotics/SKILL.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.agents/skills/omg/robotics/SKILL.md",
+      "digest": {
+        "sha256": "1a54e7292d39aaced9f296bcdc65cc86b41dfa41d95f063582e1dc249ffb48c5"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:41:24.729677+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:41:24.729677+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "695bcd92d605e3f7",
+    "value": "untrusted comment: signature from omg local signing key\nHfYAXvMcxkav/OOGaBMHD2jSS6do5Anuf1Qa00M0d9lf8seLZAYvEU0c+IgcM+gkfMj7X2LuMZxQZQKtYLr+Bw==\ntrusted comment: type=omg-slsa-v1 keyid=695bcd92d605e3f7 issued_at=2026-03-11T19:41:24.729793+00:00 artifact=bundle/.agents/skills/omg/robotics/SKILL.md sha256=1a54e7292d39aaced9f296bcdc65cc86b41dfa41d95f063582e1dc249ffb48c5\n1vb5Rq0YQ+JxryUqxRM2aJui+T/U1Ugba5HdUQqj5AkXgtP8QmWFWj8vkwTMPsmVHmqoCHH30FIyo4SHab5MBA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=695bcd92d605e3f7 issued_at=2026-03-11T19:41:24.729793+00:00 artifact=bundle/.agents/skills/omg/robotics/SKILL.md sha256=1a54e7292d39aaced9f296bcdc65cc86b41dfa41d95f063582e1dc249ffb48c5"
+  }
+}

package/artifacts/release/dist/enterprise/attestations/bundle/.agents/skills/omg/robotics/openai.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+ss7vNvvlLkI38zaP8OIWwjYMgKlF3HFe4R3i/+yPp5QPkZFBb9my0D553bFkgARdhDShnvkS4wGNdEoXnOy9Dg==
+trusted comment: type=omg-slsa-v1 keyid=7d8567dca444a014 issued_at=2026-03-11T19:41:24.730399+00:00 artifact=bundle/.agents/skills/omg/robotics/openai.yaml sha256=8d6b6539867cb4080c4502d3325f9f32954290ace6bbc2bb20e9acbf619b61a5
+bEvOqQFvI8xKyA13Izf3xIpcGDMdZh7yi2EAjlyPsTW+R1Sdc/AUI5O+NcZwXjbYK31CjlVBijXNfG7851ExAg==

package/artifacts/release/dist/enterprise/attestations/bundle/.agents/skills/omg/robotics/openai.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.agents/skills/omg/robotics/openai.yaml",
+      "digest": {
+        "sha256": "8d6b6539867cb4080c4502d3325f9f32954290ace6bbc2bb20e9acbf619b61a5"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:41:24.730284+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:41:24.730284+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "7d8567dca444a014",
+    "value": "untrusted comment: signature from omg local signing key\nss7vNvvlLkI38zaP8OIWwjYMgKlF3HFe4R3i/+yPp5QPkZFBb9my0D553bFkgARdhDShnvkS4wGNdEoXnOy9Dg==\ntrusted comment: type=omg-slsa-v1 keyid=7d8567dca444a014 issued_at=2026-03-11T19:41:24.730399+00:00 artifact=bundle/.agents/skills/omg/robotics/openai.yaml sha256=8d6b6539867cb4080c4502d3325f9f32954290ace6bbc2bb20e9acbf619b61a5\nbEvOqQFvI8xKyA13Izf3xIpcGDMdZh7yi2EAjlyPsTW+R1Sdc/AUI5O+NcZwXjbYK31CjlVBijXNfG7851ExAg==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=7d8567dca444a014 issued_at=2026-03-11T19:41:24.730399+00:00 artifact=bundle/.agents/skills/omg/robotics/openai.yaml sha256=8d6b6539867cb4080c4502d3325f9f32954290ace6bbc2bb20e9acbf619b61a5"
+  }
+}

package/artifacts/release/dist/enterprise/attestations/bundle/.agents/skills/omg/secure-worktree-pipeline/SKILL.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+nWmLKtxJCJVIcVEPj2u7fNaF6EwK03oMEYfwXu3XkDRA+g8KqSV9lY5z0sjJS6vE13SrDnjyJp7a1jD4hvZEBg==
+trusted comment: type=omg-slsa-v1 keyid=1524f22c0d006805 issued_at=2026-03-11T19:41:24.731036+00:00 artifact=bundle/.agents/skills/omg/secure-worktree-pipeline/SKILL.md sha256=a11292d0122844f7c185e21943d3a39ef3213cf5348f40f006c8fdc8b62f252f
+2gVPbvdUaoNCoRLejA2A+fFEYFQcQ7k2Kzfj3SuBWcFXY/NwQDSs6hWb1gNkV68pktqsDX3UX1QuY6uiWXxKAA==

package/artifacts/release/dist/enterprise/attestations/bundle/.agents/skills/omg/secure-worktree-pipeline/SKILL.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.agents/skills/omg/secure-worktree-pipeline/SKILL.md",
+      "digest": {
+        "sha256": "a11292d0122844f7c185e21943d3a39ef3213cf5348f40f006c8fdc8b62f252f"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:41:24.730919+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:41:24.730919+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "1524f22c0d006805",
+    "value": "untrusted comment: signature from omg local signing key\nnWmLKtxJCJVIcVEPj2u7fNaF6EwK03oMEYfwXu3XkDRA+g8KqSV9lY5z0sjJS6vE13SrDnjyJp7a1jD4hvZEBg==\ntrusted comment: type=omg-slsa-v1 keyid=1524f22c0d006805 issued_at=2026-03-11T19:41:24.731036+00:00 artifact=bundle/.agents/skills/omg/secure-worktree-pipeline/SKILL.md sha256=a11292d0122844f7c185e21943d3a39ef3213cf5348f40f006c8fdc8b62f252f\n2gVPbvdUaoNCoRLejA2A+fFEYFQcQ7k2Kzfj3SuBWcFXY/NwQDSs6hWb1gNkV68pktqsDX3UX1QuY6uiWXxKAA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=1524f22c0d006805 issued_at=2026-03-11T19:41:24.731036+00:00 artifact=bundle/.agents/skills/omg/secure-worktree-pipeline/SKILL.md sha256=a11292d0122844f7c185e21943d3a39ef3213cf5348f40f006c8fdc8b62f252f"
+  }
+}

package/artifacts/release/dist/enterprise/attestations/bundle/.agents/skills/omg/secure-worktree-pipeline/openai.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+ObKaax2puMnuVM2ogoQyupIxRloMjOoR16J5WDctiNtWRBDbVCgoeLGuKMs3l+Sh/BAunln4Hqdw6BKre2quAA==
+trusted comment: type=omg-slsa-v1 keyid=692e8198a2641915 issued_at=2026-03-11T19:41:24.731628+00:00 artifact=bundle/.agents/skills/omg/secure-worktree-pipeline/openai.yaml sha256=c766a383969893fd29fcd1da712e29e0422709a7b9f665e53e1ca8187c2bd207
+QMBH0Tk1jM0eS0Rz9s4kjPTHzUivnJmnltAhc8nOOpG2AMVWF14wocoxCNZt3TSxsF1yS/KWSJTBprdkEfNSCw==

package/artifacts/release/dist/enterprise/attestations/bundle/.agents/skills/omg/secure-worktree-pipeline/openai.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.agents/skills/omg/secure-worktree-pipeline/openai.yaml",
+      "digest": {
+        "sha256": "c766a383969893fd29fcd1da712e29e0422709a7b9f665e53e1ca8187c2bd207"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:41:24.731514+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:41:24.731514+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "692e8198a2641915",
+    "value": "untrusted comment: signature from omg local signing key\nObKaax2puMnuVM2ogoQyupIxRloMjOoR16J5WDctiNtWRBDbVCgoeLGuKMs3l+Sh/BAunln4Hqdw6BKre2quAA==\ntrusted comment: type=omg-slsa-v1 keyid=692e8198a2641915 issued_at=2026-03-11T19:41:24.731628+00:00 artifact=bundle/.agents/skills/omg/secure-worktree-pipeline/openai.yaml sha256=c766a383969893fd29fcd1da712e29e0422709a7b9f665e53e1ca8187c2bd207\nQMBH0Tk1jM0eS0Rz9s4kjPTHzUivnJmnltAhc8nOOpG2AMVWF14wocoxCNZt3TSxsF1yS/KWSJTBprdkEfNSCw==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=692e8198a2641915 issued_at=2026-03-11T19:41:24.731628+00:00 artifact=bundle/.agents/skills/omg/secure-worktree-pipeline/openai.yaml sha256=c766a383969893fd29fcd1da712e29e0422709a7b9f665e53e1ca8187c2bd207"
+  }
+}

package/artifacts/release/dist/enterprise/attestations/bundle/.agents/skills/omg/security-check/SKILL.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+pT2PUcs6rZ/DKbhTXCJ8XyBg3uIkzd3DXP81pa6PkNSXnBeGp85bCvm2PMYMKVQmQdkeKVGZTlG8YLPeSuKpCQ==
+trusted comment: type=omg-slsa-v1 keyid=09a7117512a3bc96 issued_at=2026-03-11T19:41:24.732249+00:00 artifact=bundle/.agents/skills/omg/security-check/SKILL.md sha256=30cc33d0b6c3d7d4c968f917121bcea3d696be80c3896da2635a63a01c4afa91
+YuI8mLgr8oj20sFU+sWLlpHY6ZaSyw1L8Jj0KffjoYKhu3hp8Zbf+346Vn9IyZtBSqh4WPNMgp6zWUTYi0owAA==

package/artifacts/release/dist/enterprise/attestations/bundle/.agents/skills/omg/security-check/SKILL.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.agents/skills/omg/security-check/SKILL.md",
+      "digest": {
+        "sha256": "30cc33d0b6c3d7d4c968f917121bcea3d696be80c3896da2635a63a01c4afa91"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:41:24.732138+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:41:24.732138+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "09a7117512a3bc96",
+    "value": "untrusted comment: signature from omg local signing key\npT2PUcs6rZ/DKbhTXCJ8XyBg3uIkzd3DXP81pa6PkNSXnBeGp85bCvm2PMYMKVQmQdkeKVGZTlG8YLPeSuKpCQ==\ntrusted comment: type=omg-slsa-v1 keyid=09a7117512a3bc96 issued_at=2026-03-11T19:41:24.732249+00:00 artifact=bundle/.agents/skills/omg/security-check/SKILL.md sha256=30cc33d0b6c3d7d4c968f917121bcea3d696be80c3896da2635a63a01c4afa91\nYuI8mLgr8oj20sFU+sWLlpHY6ZaSyw1L8Jj0KffjoYKhu3hp8Zbf+346Vn9IyZtBSqh4WPNMgp6zWUTYi0owAA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=09a7117512a3bc96 issued_at=2026-03-11T19:41:24.732249+00:00 artifact=bundle/.agents/skills/omg/security-check/SKILL.md sha256=30cc33d0b6c3d7d4c968f917121bcea3d696be80c3896da2635a63a01c4afa91"
+  }
+}

package/artifacts/release/dist/enterprise/attestations/bundle/.agents/skills/omg/security-check/openai.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+SS/5glYgQJDc93KiA5iES3EMlXHZf5ileOO+UxhnJQerkOyWJm5Bh4cZW4UY1lJi0Ij0L/uFDHBlFwZDhLDCCA==
+trusted comment: type=omg-slsa-v1 keyid=9ec360b9135a2412 issued_at=2026-03-11T19:41:24.732929+00:00 artifact=bundle/.agents/skills/omg/security-check/openai.yaml sha256=9c47e9fa2ddcb341fa75d4307c5e36e0b928b06fdb28bd7b69ca6cb5941f6b77
+GuTbgfRfOploH+l6w3CttMEukcgC/t/B8cg7EoNjR8QFWIW/x6IHAguxnwIvTsPbdaGMkwwc/h4j8rk4VD5pBg==

package/artifacts/release/dist/enterprise/attestations/bundle/.agents/skills/omg/security-check/openai.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.agents/skills/omg/security-check/openai.yaml",
+      "digest": {
+        "sha256": "9c47e9fa2ddcb341fa75d4307c5e36e0b928b06fdb28bd7b69ca6cb5941f6b77"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:41:24.732815+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:41:24.732815+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "9ec360b9135a2412",
+    "value": "untrusted comment: signature from omg local signing key\nSS/5glYgQJDc93KiA5iES3EMlXHZf5ileOO+UxhnJQerkOyWJm5Bh4cZW4UY1lJi0Ij0L/uFDHBlFwZDhLDCCA==\ntrusted comment: type=omg-slsa-v1 keyid=9ec360b9135a2412 issued_at=2026-03-11T19:41:24.732929+00:00 artifact=bundle/.agents/skills/omg/security-check/openai.yaml sha256=9c47e9fa2ddcb341fa75d4307c5e36e0b928b06fdb28bd7b69ca6cb5941f6b77\nGuTbgfRfOploH+l6w3CttMEukcgC/t/B8cg7EoNjR8QFWIW/x6IHAguxnwIvTsPbdaGMkwwc/h4j8rk4VD5pBg==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=9ec360b9135a2412 issued_at=2026-03-11T19:41:24.732929+00:00 artifact=bundle/.agents/skills/omg/security-check/openai.yaml sha256=9c47e9fa2ddcb341fa75d4307c5e36e0b928b06fdb28bd7b69ca6cb5941f6b77"
+  }
+}

package/artifacts/release/dist/enterprise/attestations/bundle/.agents/skills/omg/test-intent-lock/SKILL.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+EJLEJnxBpHMerDHxHJ06xRssKnzFnEHyS6JQITv06+exfq0xVsqqe+kSGh3vn84ELSM7YwQ5quUWTC25Iv9tBw==
+trusted comment: type=omg-slsa-v1 keyid=d8e777e94d3bd748 issued_at=2026-03-11T19:41:24.733561+00:00 artifact=bundle/.agents/skills/omg/test-intent-lock/SKILL.md sha256=98eca9c53d5228dddd218c29914aab8af5d94eb4ad19ed54e9947af4e53f959c
+ASaeDgL/lUvKsmZPkW9QjIp4/s6bkBRx4BfofJ7PeoFSo/N77VEOi5nkU/L8oA6JQO30nHh39rDhmJ0urdvjCg==

package/artifacts/release/dist/enterprise/attestations/bundle/.agents/skills/omg/test-intent-lock/SKILL.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.agents/skills/omg/test-intent-lock/SKILL.md",
+      "digest": {
+        "sha256": "98eca9c53d5228dddd218c29914aab8af5d94eb4ad19ed54e9947af4e53f959c"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:41:24.733450+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:41:24.733450+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "d8e777e94d3bd748",
+    "value": "untrusted comment: signature from omg local signing key\nEJLEJnxBpHMerDHxHJ06xRssKnzFnEHyS6JQITv06+exfq0xVsqqe+kSGh3vn84ELSM7YwQ5quUWTC25Iv9tBw==\ntrusted comment: type=omg-slsa-v1 keyid=d8e777e94d3bd748 issued_at=2026-03-11T19:41:24.733561+00:00 artifact=bundle/.agents/skills/omg/test-intent-lock/SKILL.md sha256=98eca9c53d5228dddd218c29914aab8af5d94eb4ad19ed54e9947af4e53f959c\nASaeDgL/lUvKsmZPkW9QjIp4/s6bkBRx4BfofJ7PeoFSo/N77VEOi5nkU/L8oA6JQO30nHh39rDhmJ0urdvjCg==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=d8e777e94d3bd748 issued_at=2026-03-11T19:41:24.733561+00:00 artifact=bundle/.agents/skills/omg/test-intent-lock/SKILL.md sha256=98eca9c53d5228dddd218c29914aab8af5d94eb4ad19ed54e9947af4e53f959c"
+  }
+}

package/artifacts/release/dist/enterprise/attestations/bundle/.agents/skills/omg/test-intent-lock/openai.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+wjoATZeiskra7yTcci//XKyG/CsVB83uh44yWDnCjeV0D8fa6kJX+d1/dSceozha8MJ9kOk7zhZvZKK7NaEJCg==
+trusted comment: type=omg-slsa-v1 keyid=08fae33a0a3a7cd9 issued_at=2026-03-11T19:41:24.734201+00:00 artifact=bundle/.agents/skills/omg/test-intent-lock/openai.yaml sha256=62934b4eef9e0bd516d7db4864cf178e8367d47c7b5a5f9f883427c633e416fa
+YUHVIbMZerIF9zC/tHtzgVVj7zdY4+Gs92QF30ratRjDFTRwvE/ZGn3wb/xpQVHLjjGs9XCghNoxs9MxxNwpDg==

package/artifacts/release/dist/enterprise/attestations/bundle/.agents/skills/omg/test-intent-lock/openai.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.agents/skills/omg/test-intent-lock/openai.yaml",
+      "digest": {
+        "sha256": "62934b4eef9e0bd516d7db4864cf178e8367d47c7b5a5f9f883427c633e416fa"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:41:24.734090+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:41:24.734090+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "08fae33a0a3a7cd9",
+    "value": "untrusted comment: signature from omg local signing key\nwjoATZeiskra7yTcci//XKyG/CsVB83uh44yWDnCjeV0D8fa6kJX+d1/dSceozha8MJ9kOk7zhZvZKK7NaEJCg==\ntrusted comment: type=omg-slsa-v1 keyid=08fae33a0a3a7cd9 issued_at=2026-03-11T19:41:24.734201+00:00 artifact=bundle/.agents/skills/omg/test-intent-lock/openai.yaml sha256=62934b4eef9e0bd516d7db4864cf178e8367d47c7b5a5f9f883427c633e416fa\nYUHVIbMZerIF9zC/tHtzgVVj7zdY4+Gs92QF30ratRjDFTRwvE/ZGn3wb/xpQVHLjjGs9XCghNoxs9MxxNwpDg==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=08fae33a0a3a7cd9 issued_at=2026-03-11T19:41:24.734201+00:00 artifact=bundle/.agents/skills/omg/test-intent-lock/openai.yaml sha256=62934b4eef9e0bd516d7db4864cf178e8367d47c7b5a5f9f883427c633e416fa"
+  }
+}

package/artifacts/release/dist/enterprise/attestations/bundle/.agents/skills/omg/tracebank/SKILL.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+ozzGHipF+0Dkk7DCcotrRDf0h0jV6BunNvg/lOAYXtYIyZjAgE69Vo9blU27y06VsOv+Zil6zf5RyueZtikzCw==
+trusted comment: type=omg-slsa-v1 keyid=990443906c6f2e35 issued_at=2026-03-11T19:41:24.734815+00:00 artifact=bundle/.agents/skills/omg/tracebank/SKILL.md sha256=5bac45273cd62373fb4387f8e64a63c4fb69f984a44ee79938be2273b5913b03
+UsqRzZDT7vQ7X5d8/UyP8znx9C3rqbi7Yo3ANaFIql/SZAYMdVuevdqhSguS6ajOZZ3+u22JGZHd6Lqq+72mCQ==

package/artifacts/release/dist/enterprise/attestations/bundle/.agents/skills/omg/tracebank/SKILL.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.agents/skills/omg/tracebank/SKILL.md",
+      "digest": {
+        "sha256": "5bac45273cd62373fb4387f8e64a63c4fb69f984a44ee79938be2273b5913b03"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:41:24.734706+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:41:24.734706+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "990443906c6f2e35",
+    "value": "untrusted comment: signature from omg local signing key\nozzGHipF+0Dkk7DCcotrRDf0h0jV6BunNvg/lOAYXtYIyZjAgE69Vo9blU27y06VsOv+Zil6zf5RyueZtikzCw==\ntrusted comment: type=omg-slsa-v1 keyid=990443906c6f2e35 issued_at=2026-03-11T19:41:24.734815+00:00 artifact=bundle/.agents/skills/omg/tracebank/SKILL.md sha256=5bac45273cd62373fb4387f8e64a63c4fb69f984a44ee79938be2273b5913b03\nUsqRzZDT7vQ7X5d8/UyP8znx9C3rqbi7Yo3ANaFIql/SZAYMdVuevdqhSguS6ajOZZ3+u22JGZHd6Lqq+72mCQ==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=990443906c6f2e35 issued_at=2026-03-11T19:41:24.734815+00:00 artifact=bundle/.agents/skills/omg/tracebank/SKILL.md sha256=5bac45273cd62373fb4387f8e64a63c4fb69f984a44ee79938be2273b5913b03"
+  }
+}

package/artifacts/release/dist/enterprise/attestations/bundle/.agents/skills/omg/tracebank/openai.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+C66ItKF36z3ilSZu/l4rpZAwPq80uxXxpy1LbJc44EDJUZiP10z2w2gbHAC4zWXxqBObHtZo8AQFRwtPLx6MBA==
+trusted comment: type=omg-slsa-v1 keyid=836570e349bc344c issued_at=2026-03-11T19:41:24.735463+00:00 artifact=bundle/.agents/skills/omg/tracebank/openai.yaml sha256=5896ef1980b5a13171756eb27f317d3b32b7d084133552f1d11dfea12d8742ab
+pQGh5Ijtj1lSZfWwulgHkPCMLPvlwqcjgWzn7qf+h7dH2xVQCylsygU8NaSAaZWuHcBHVkAAiWHkkYvRwDH9BQ==

package/artifacts/release/dist/enterprise/attestations/bundle/.agents/skills/omg/tracebank/openai.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.agents/skills/omg/tracebank/openai.yaml",
+      "digest": {
+        "sha256": "5896ef1980b5a13171756eb27f317d3b32b7d084133552f1d11dfea12d8742ab"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:41:24.735352+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:41:24.735352+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "836570e349bc344c",
+    "value": "untrusted comment: signature from omg local signing key\nC66ItKF36z3ilSZu/l4rpZAwPq80uxXxpy1LbJc44EDJUZiP10z2w2gbHAC4zWXxqBObHtZo8AQFRwtPLx6MBA==\ntrusted comment: type=omg-slsa-v1 keyid=836570e349bc344c issued_at=2026-03-11T19:41:24.735463+00:00 artifact=bundle/.agents/skills/omg/tracebank/openai.yaml sha256=5896ef1980b5a13171756eb27f317d3b32b7d084133552f1d11dfea12d8742ab\npQGh5Ijtj1lSZfWwulgHkPCMLPvlwqcjgWzn7qf+h7dH2xVQCylsygU8NaSAaZWuHcBHVkAAiWHkkYvRwDH9BQ==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=836570e349bc344c issued_at=2026-03-11T19:41:24.735463+00:00 artifact=bundle/.agents/skills/omg/tracebank/openai.yaml sha256=5896ef1980b5a13171756eb27f317d3b32b7d084133552f1d11dfea12d8742ab"
+  }
+}

package/artifacts/release/dist/enterprise/attestations/bundle/.agents/skills/omg/vision/SKILL.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+Xd3pFg5v4uFLcjefmBWkdxJ0aJVVluFiRzPkBSoSRf6nWyfV9e03WHuatRh+fQ5HmHfJ0zXkO7c4VxarCmg7BA==
+trusted comment: type=omg-slsa-v1 keyid=fb8a11784db05d63 issued_at=2026-03-11T19:41:24.736118+00:00 artifact=bundle/.agents/skills/omg/vision/SKILL.md sha256=9cd5405640edc6e80a8110234f59f6aeb197ececa37a145619d30083ee2263d4
+PbjRAKX0UzHkBuXs/n2930yfF0gH8ssRx77zVrnU+ER1/P32QE/Jk94rvl/Ju4vTpLdtKbcKkbiPoyHYr980AQ==

package/artifacts/release/dist/enterprise/attestations/bundle/.agents/skills/omg/vision/SKILL.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.agents/skills/omg/vision/SKILL.md",
+      "digest": {
+        "sha256": "9cd5405640edc6e80a8110234f59f6aeb197ececa37a145619d30083ee2263d4"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:41:24.736003+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:41:24.736003+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "fb8a11784db05d63",
+    "value": "untrusted comment: signature from omg local signing key\nXd3pFg5v4uFLcjefmBWkdxJ0aJVVluFiRzPkBSoSRf6nWyfV9e03WHuatRh+fQ5HmHfJ0zXkO7c4VxarCmg7BA==\ntrusted comment: type=omg-slsa-v1 keyid=fb8a11784db05d63 issued_at=2026-03-11T19:41:24.736118+00:00 artifact=bundle/.agents/skills/omg/vision/SKILL.md sha256=9cd5405640edc6e80a8110234f59f6aeb197ececa37a145619d30083ee2263d4\nPbjRAKX0UzHkBuXs/n2930yfF0gH8ssRx77zVrnU+ER1/P32QE/Jk94rvl/Ju4vTpLdtKbcKkbiPoyHYr980AQ==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=fb8a11784db05d63 issued_at=2026-03-11T19:41:24.736118+00:00 artifact=bundle/.agents/skills/omg/vision/SKILL.md sha256=9cd5405640edc6e80a8110234f59f6aeb197ececa37a145619d30083ee2263d4"
+  }
+}

package/artifacts/release/dist/enterprise/attestations/bundle/.agents/skills/omg/vision/openai.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+4W98iE+rBoX33nHPBjhxqAuvcKOI52RjvHNh1g9ZwuVrGgEQqBn5eZm/9PuzdIUbkUM3KrVlKnWyderK0bSCBw==
+trusted comment: type=omg-slsa-v1 keyid=22cde326d5621d38 issued_at=2026-03-11T19:41:24.736775+00:00 artifact=bundle/.agents/skills/omg/vision/openai.yaml sha256=8a6f4e40c91ffff3686af47f6902043cf090df7afc530b052f1344efe9cc8e0a
+XOsAWDarnXM8qCbsn1zyPYwwZmQYikZ/VCvsttxM56V2ZPfi90fnB0EvBb6w/uw6WzmeeGXlZgFD6Mg4fufCDQ==

package/artifacts/release/dist/enterprise/attestations/bundle/.agents/skills/omg/vision/openai.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.agents/skills/omg/vision/openai.yaml",
+      "digest": {
+        "sha256": "8a6f4e40c91ffff3686af47f6902043cf090df7afc530b052f1344efe9cc8e0a"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:41:24.736664+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:41:24.736664+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "22cde326d5621d38",
+    "value": "untrusted comment: signature from omg local signing key\n4W98iE+rBoX33nHPBjhxqAuvcKOI52RjvHNh1g9ZwuVrGgEQqBn5eZm/9PuzdIUbkUM3KrVlKnWyderK0bSCBw==\ntrusted comment: type=omg-slsa-v1 keyid=22cde326d5621d38 issued_at=2026-03-11T19:41:24.736775+00:00 artifact=bundle/.agents/skills/omg/vision/openai.yaml sha256=8a6f4e40c91ffff3686af47f6902043cf090df7afc530b052f1344efe9cc8e0a\nXOsAWDarnXM8qCbsn1zyPYwwZmQYikZ/VCvsttxM56V2ZPfi90fnB0EvBb6w/uw6WzmeeGXlZgFD6Mg4fufCDQ==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=22cde326d5621d38 issued_at=2026-03-11T19:41:24.736775+00:00 artifact=bundle/.agents/skills/omg/vision/openai.yaml sha256=8a6f4e40c91ffff3686af47f6902043cf090df7afc530b052f1344efe9cc8e0a"
+  }
+}

package/artifacts/release/dist/enterprise/attestations/bundle/.claude-plugin/marketplace.json.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+U1t56wChlYEarAyzQPQE1dsdIBxRszEPgYvJODp35fpHieVbxfxQi6hDcIaXSlj5NP1dDrzbqMHLDmZpOkQgCQ==
+trusted comment: type=omg-slsa-v1 keyid=82f55db816b68647 issued_at=2026-03-11T19:41:24.737375+00:00 artifact=bundle/.claude-plugin/marketplace.json sha256=ebb8154cf1af563739a6b82eb1ec8623b00e8da987505fb668bc51c970c46778
+3xK1DfZ14VI+2sFl4+lC9XWm/Q7s8bkYM9JJh5wdhWcIqrWBCRSe/lQ6M5xLOTioYpRPLhS6yL+qnWaRNeTZBQ==

package/artifacts/release/dist/enterprise/attestations/bundle/.claude-plugin/marketplace.json.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.claude-plugin/marketplace.json",
+      "digest": {
+        "sha256": "ebb8154cf1af563739a6b82eb1ec8623b00e8da987505fb668bc51c970c46778"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:41:24.737266+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:41:24.737266+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "82f55db816b68647",
+    "value": "untrusted comment: signature from omg local signing key\nU1t56wChlYEarAyzQPQE1dsdIBxRszEPgYvJODp35fpHieVbxfxQi6hDcIaXSlj5NP1dDrzbqMHLDmZpOkQgCQ==\ntrusted comment: type=omg-slsa-v1 keyid=82f55db816b68647 issued_at=2026-03-11T19:41:24.737375+00:00 artifact=bundle/.claude-plugin/marketplace.json sha256=ebb8154cf1af563739a6b82eb1ec8623b00e8da987505fb668bc51c970c46778\n3xK1DfZ14VI+2sFl4+lC9XWm/Q7s8bkYM9JJh5wdhWcIqrWBCRSe/lQ6M5xLOTioYpRPLhS6yL+qnWaRNeTZBQ==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=82f55db816b68647 issued_at=2026-03-11T19:41:24.737375+00:00 artifact=bundle/.claude-plugin/marketplace.json sha256=ebb8154cf1af563739a6b82eb1ec8623b00e8da987505fb668bc51c970c46778"
+  }
+}

package/artifacts/release/dist/enterprise/attestations/bundle/.claude-plugin/mcp.json.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+rKFnIyDg9cFMyVUBIPPo4BJlEoszWkT6wdQf0ZGGVDFvJCRNaaSY5qMqhgKnJCmXmGDHNA1Qu6qD5VeTwAFmCQ==
+trusted comment: type=omg-slsa-v1 keyid=65a8462d8f1b7aba issued_at=2026-03-11T19:41:24.738001+00:00 artifact=bundle/.claude-plugin/mcp.json sha256=14208140297f635cc5155cfe063c9b8a6193a3d0a264e0686cf3b80789208f27
+9PX2RAVmKoP6LgS5BetL/TiMd8wdg1on3Jh+qvZDlBS4gKAfCa1XeVdK4U3qxvMksMlUC91JNAQjXXMD74iuDQ==

package/artifacts/release/dist/enterprise/attestations/bundle/.claude-plugin/mcp.json.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.claude-plugin/mcp.json",
+      "digest": {
+        "sha256": "14208140297f635cc5155cfe063c9b8a6193a3d0a264e0686cf3b80789208f27"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:41:24.737888+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:41:24.737888+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "65a8462d8f1b7aba",
+    "value": "untrusted comment: signature from omg local signing key\nrKFnIyDg9cFMyVUBIPPo4BJlEoszWkT6wdQf0ZGGVDFvJCRNaaSY5qMqhgKnJCmXmGDHNA1Qu6qD5VeTwAFmCQ==\ntrusted comment: type=omg-slsa-v1 keyid=65a8462d8f1b7aba issued_at=2026-03-11T19:41:24.738001+00:00 artifact=bundle/.claude-plugin/mcp.json sha256=14208140297f635cc5155cfe063c9b8a6193a3d0a264e0686cf3b80789208f27\n9PX2RAVmKoP6LgS5BetL/TiMd8wdg1on3Jh+qvZDlBS4gKAfCa1XeVdK4U3qxvMksMlUC91JNAQjXXMD74iuDQ==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=65a8462d8f1b7aba issued_at=2026-03-11T19:41:24.738001+00:00 artifact=bundle/.claude-plugin/mcp.json sha256=14208140297f635cc5155cfe063c9b8a6193a3d0a264e0686cf3b80789208f27"
+  }
+}

package/artifacts/release/dist/enterprise/attestations/bundle/.claude-plugin/plugin.json.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+6/urFxyAoS3Wm9S+m4ygSUB0zJDxaOyUZ78cg6L5o4JXn9n4k5ygtSx3zQKZcFlYAL7gWSvWMZVZjMk5PjagAA==
+trusted comment: type=omg-slsa-v1 keyid=69168b0149509e0c issued_at=2026-03-11T19:41:24.738623+00:00 artifact=bundle/.claude-plugin/plugin.json sha256=325eac02b6e9c00bde933c080095c127e142aaf78092c7659d13cb7f706a3966
+2P9XVHQJb7RepBbZX0r+Tu5B1OJlhrwLf048jrk4JHVCckyeaPLqSzQrLnzSCBrTT2X7iRMw/zJuTPjwcDlXDg==