@trac3er/oh-my-god 2.1.4 → 2.1.7

package/artifacts/release/dist/enterprise/attestations/bundle/.claude-plugin/plugin.json.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.claude-plugin/plugin.json",
+      "digest": {
+        "sha256": "325eac02b6e9c00bde933c080095c127e142aaf78092c7659d13cb7f706a3966"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:41:24.738511+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:41:24.738511+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "69168b0149509e0c",
+    "value": "untrusted comment: signature from omg local signing key\n6/urFxyAoS3Wm9S+m4ygSUB0zJDxaOyUZ78cg6L5o4JXn9n4k5ygtSx3zQKZcFlYAL7gWSvWMZVZjMk5PjagAA==\ntrusted comment: type=omg-slsa-v1 keyid=69168b0149509e0c issued_at=2026-03-11T19:41:24.738623+00:00 artifact=bundle/.claude-plugin/plugin.json sha256=325eac02b6e9c00bde933c080095c127e142aaf78092c7659d13cb7f706a3966\n2P9XVHQJb7RepBbZX0r+Tu5B1OJlhrwLf048jrk4JHVCckyeaPLqSzQrLnzSCBrTT2X7iRMw/zJuTPjwcDlXDg==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=69168b0149509e0c issued_at=2026-03-11T19:41:24.738623+00:00 artifact=bundle/.claude-plugin/plugin.json sha256=325eac02b6e9c00bde933c080095c127e142aaf78092c7659d13cb7f706a3966"
+  }
+}

package/artifacts/release/dist/enterprise/attestations/bundle/.mcp.json.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+q2TiJb6nw8nvss7TA5D7u8+fScKcDT+Nmk6oC6x8+HPzmdntiLwHthKgQWkktnf9rzXtnxlusA1zMf8IaY+JCg==
+trusted comment: type=omg-slsa-v1 keyid=754c60e86ff4ddd6 issued_at=2026-03-11T19:41:24.739263+00:00 artifact=bundle/.mcp.json sha256=e16897732dbd20ba7f47e5c0513b146a8d847454c8c13aa9e0a6031e5a498fa4
+CWRQZwn7gbg43cz+5YyTn+ye1GL5Q4bv0i0lnpxHC9L392kLfUb4ZGinnEWHvbJnwb1j9TiTkzNT29PiEy8NBQ==

package/artifacts/release/dist/enterprise/attestations/bundle/.mcp.json.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.mcp.json",
+      "digest": {
+        "sha256": "e16897732dbd20ba7f47e5c0513b146a8d847454c8c13aa9e0a6031e5a498fa4"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:41:24.739151+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:41:24.739151+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "754c60e86ff4ddd6",
+    "value": "untrusted comment: signature from omg local signing key\nq2TiJb6nw8nvss7TA5D7u8+fScKcDT+Nmk6oC6x8+HPzmdntiLwHthKgQWkktnf9rzXtnxlusA1zMf8IaY+JCg==\ntrusted comment: type=omg-slsa-v1 keyid=754c60e86ff4ddd6 issued_at=2026-03-11T19:41:24.739263+00:00 artifact=bundle/.mcp.json sha256=e16897732dbd20ba7f47e5c0513b146a8d847454c8c13aa9e0a6031e5a498fa4\nCWRQZwn7gbg43cz+5YyTn+ye1GL5Q4bv0i0lnpxHC9L392kLfUb4ZGinnEWHvbJnwb1j9TiTkzNT29PiEy8NBQ==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=754c60e86ff4ddd6 issued_at=2026-03-11T19:41:24.739263+00:00 artifact=bundle/.mcp.json sha256=e16897732dbd20ba7f47e5c0513b146a8d847454c8c13aa9e0a6031e5a498fa4"
+  }
+}

package/artifacts/release/dist/enterprise/attestations/bundle/OMG_COMPAT_CONTRACT.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+aO0JofspLcGOU6DxQn7iUTbc8PdqbgufqxRJQg9J4R/TE7fem6kM7KcS96+/0UlZkc6U5coxUkWqkUj3o8ggCw==
+trusted comment: type=omg-slsa-v1 keyid=5f3dce2829da8fe1 issued_at=2026-03-11T19:41:24.739951+00:00 artifact=bundle/OMG_COMPAT_CONTRACT.md sha256=1655c8df26a2abd48c306fa509b6b380b643df0cccfb7e5dbd19e16bf10fe8c3
+u0yUmyFIvr3T5RG0nCwVoedjMPW6jfuK5E9bWaExu2wQ4UUAiz5BhnaClrZaGqKAW5SInoRWIYYcRmB61jRlAA==

package/artifacts/release/dist/enterprise/attestations/bundle/OMG_COMPAT_CONTRACT.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/OMG_COMPAT_CONTRACT.md",
+      "digest": {
+        "sha256": "1655c8df26a2abd48c306fa509b6b380b643df0cccfb7e5dbd19e16bf10fe8c3"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:41:24.739840+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:41:24.739840+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "5f3dce2829da8fe1",
+    "value": "untrusted comment: signature from omg local signing key\naO0JofspLcGOU6DxQn7iUTbc8PdqbgufqxRJQg9J4R/TE7fem6kM7KcS96+/0UlZkc6U5coxUkWqkUj3o8ggCw==\ntrusted comment: type=omg-slsa-v1 keyid=5f3dce2829da8fe1 issued_at=2026-03-11T19:41:24.739951+00:00 artifact=bundle/OMG_COMPAT_CONTRACT.md sha256=1655c8df26a2abd48c306fa509b6b380b643df0cccfb7e5dbd19e16bf10fe8c3\nu0yUmyFIvr3T5RG0nCwVoedjMPW6jfuK5E9bWaExu2wQ4UUAiz5BhnaClrZaGqKAW5SInoRWIYYcRmB61jRlAA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=5f3dce2829da8fe1 issued_at=2026-03-11T19:41:24.739951+00:00 artifact=bundle/OMG_COMPAT_CONTRACT.md sha256=1655c8df26a2abd48c306fa509b6b380b643df0cccfb7e5dbd19e16bf10fe8c3"
+  }
+}

package/artifacts/release/dist/enterprise/attestations/bundle/plugins/advanced/commands/OMG:code-review.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+C0mrWELxske6p+zhwanmIsyzRclm/63ckVmuKS3HsLMTOQao6N4AlfFTknfduZK1Vbgs//kSmBCnA/RSG16fDw==
+trusted comment: type=omg-slsa-v1 keyid=92dfd9e82a771dbf issued_at=2026-03-11T19:41:24.740592+00:00 artifact=bundle/plugins/advanced/commands/OMG:code-review.md sha256=99ba9756586924d0ebdd43c4ca65f925b86f6c4bf6bc98d355f0cb9a17f9f6b0
+C9dOegxN+8xPpjzowZz64bBtL4WxEs8ZoJ+PbkAjiK0hZ2SYYGf2lXiJqCUCPtLXatvcuCOFWDPL4hsw7DxwAw==

package/artifacts/release/dist/enterprise/attestations/bundle/plugins/advanced/commands/OMG:code-review.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/plugins/advanced/commands/OMG:code-review.md",
+      "digest": {
+        "sha256": "99ba9756586924d0ebdd43c4ca65f925b86f6c4bf6bc98d355f0cb9a17f9f6b0"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:41:24.740481+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:41:24.740481+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "92dfd9e82a771dbf",
+    "value": "untrusted comment: signature from omg local signing key\nC0mrWELxske6p+zhwanmIsyzRclm/63ckVmuKS3HsLMTOQao6N4AlfFTknfduZK1Vbgs//kSmBCnA/RSG16fDw==\ntrusted comment: type=omg-slsa-v1 keyid=92dfd9e82a771dbf issued_at=2026-03-11T19:41:24.740592+00:00 artifact=bundle/plugins/advanced/commands/OMG:code-review.md sha256=99ba9756586924d0ebdd43c4ca65f925b86f6c4bf6bc98d355f0cb9a17f9f6b0\nC9dOegxN+8xPpjzowZz64bBtL4WxEs8ZoJ+PbkAjiK0hZ2SYYGf2lXiJqCUCPtLXatvcuCOFWDPL4hsw7DxwAw==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=92dfd9e82a771dbf issued_at=2026-03-11T19:41:24.740592+00:00 artifact=bundle/plugins/advanced/commands/OMG:code-review.md sha256=99ba9756586924d0ebdd43c4ca65f925b86f6c4bf6bc98d355f0cb9a17f9f6b0"
+  }
+}

package/artifacts/release/dist/enterprise/attestations/bundle/plugins/advanced/commands/OMG:deep-plan.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+iw69J6yKAv+fNTca8+iMvs66FP7BI6KxwHwSEWxIM3vyT2PcZAJFl/ymwFAjUKEMleUQ8QsY1Z9H1OOjDRs+Bg==
+trusted comment: type=omg-slsa-v1 keyid=e6a5897cc0451a82 issued_at=2026-03-11T19:41:24.741226+00:00 artifact=bundle/plugins/advanced/commands/OMG:deep-plan.md sha256=ccc235efa52643afd5550765bb0a3b9697be40bf4731392fde3f1c0e5c43f9e0
+jeLPF7KMiwz6HIpF6GiH4hDZo5l/R50RRU4nyiFKINpTLRlI8M104LCpUCer2EmY5J1BfQ2kcax15/VOYg4fBQ==

package/artifacts/release/dist/enterprise/attestations/bundle/plugins/advanced/commands/OMG:deep-plan.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/plugins/advanced/commands/OMG:deep-plan.md",
+      "digest": {
+        "sha256": "ccc235efa52643afd5550765bb0a3b9697be40bf4731392fde3f1c0e5c43f9e0"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:41:24.741116+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:41:24.741116+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "e6a5897cc0451a82",
+    "value": "untrusted comment: signature from omg local signing key\niw69J6yKAv+fNTca8+iMvs66FP7BI6KxwHwSEWxIM3vyT2PcZAJFl/ymwFAjUKEMleUQ8QsY1Z9H1OOjDRs+Bg==\ntrusted comment: type=omg-slsa-v1 keyid=e6a5897cc0451a82 issued_at=2026-03-11T19:41:24.741226+00:00 artifact=bundle/plugins/advanced/commands/OMG:deep-plan.md sha256=ccc235efa52643afd5550765bb0a3b9697be40bf4731392fde3f1c0e5c43f9e0\njeLPF7KMiwz6HIpF6GiH4hDZo5l/R50RRU4nyiFKINpTLRlI8M104LCpUCer2EmY5J1BfQ2kcax15/VOYg4fBQ==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=e6a5897cc0451a82 issued_at=2026-03-11T19:41:24.741226+00:00 artifact=bundle/plugins/advanced/commands/OMG:deep-plan.md sha256=ccc235efa52643afd5550765bb0a3b9697be40bf4731392fde3f1c0e5c43f9e0"
+  }
+}

package/artifacts/release/dist/enterprise/attestations/bundle/plugins/advanced/commands/OMG:handoff.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+CL9Rvm+gY6Np17gqERvREaSWvQpUVb+WEyUP2JjuDXlLdd5GovcKnVHy8dN2h6P2bElE1mhZPkr5/vttxBTRDg==
+trusted comment: type=omg-slsa-v1 keyid=8a8fa2ef228bd6ac issued_at=2026-03-11T19:41:24.741896+00:00 artifact=bundle/plugins/advanced/commands/OMG:handoff.md sha256=eea0da517e14abb0a9bc6fe661f310a81c0282ff666803da4ae1be47fb597011
+a6AiSSniYr//8fbKzTs+U4WHIyjis/1t+5V+UV29PCw/yiWyco42/MO7DJX4cyT7KxkPeuPKj5dQe16qs91BAg==

package/artifacts/release/dist/enterprise/attestations/bundle/plugins/advanced/commands/OMG:handoff.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/plugins/advanced/commands/OMG:handoff.md",
+      "digest": {
+        "sha256": "eea0da517e14abb0a9bc6fe661f310a81c0282ff666803da4ae1be47fb597011"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:41:24.741782+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:41:24.741782+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "8a8fa2ef228bd6ac",
+    "value": "untrusted comment: signature from omg local signing key\nCL9Rvm+gY6Np17gqERvREaSWvQpUVb+WEyUP2JjuDXlLdd5GovcKnVHy8dN2h6P2bElE1mhZPkr5/vttxBTRDg==\ntrusted comment: type=omg-slsa-v1 keyid=8a8fa2ef228bd6ac issued_at=2026-03-11T19:41:24.741896+00:00 artifact=bundle/plugins/advanced/commands/OMG:handoff.md sha256=eea0da517e14abb0a9bc6fe661f310a81c0282ff666803da4ae1be47fb597011\na6AiSSniYr//8fbKzTs+U4WHIyjis/1t+5V+UV29PCw/yiWyco42/MO7DJX4cyT7KxkPeuPKj5dQe16qs91BAg==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=8a8fa2ef228bd6ac issued_at=2026-03-11T19:41:24.741896+00:00 artifact=bundle/plugins/advanced/commands/OMG:handoff.md sha256=eea0da517e14abb0a9bc6fe661f310a81c0282ff666803da4ae1be47fb597011"
+  }
+}

package/artifacts/release/dist/enterprise/attestations/bundle/plugins/advanced/commands/OMG:learn.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+In3JuCgHNwm+W7waHax2zfRgxzr569b7N8qyHzA7qzWr4PH5pSM2Nn/0nRexUlSVJgz3k2fNA3szeCxoe8d+Bw==
+trusted comment: type=omg-slsa-v1 keyid=afe9eadb927c12a7 issued_at=2026-03-11T19:41:24.742526+00:00 artifact=bundle/plugins/advanced/commands/OMG:learn.md sha256=338f87222db65114f8c83de2185a21c7c2538832395524ac39ea38a0e09d73b3
+nNrMIPdpYEGvNKSqvyIokmz/ycPRoz0GKfBHNqsSuvslCLr4q13PUs16NiO8/qDnd69O1qgWLRp0Z4i9NHsXAA==

package/artifacts/release/dist/enterprise/attestations/bundle/plugins/advanced/commands/OMG:learn.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/plugins/advanced/commands/OMG:learn.md",
+      "digest": {
+        "sha256": "338f87222db65114f8c83de2185a21c7c2538832395524ac39ea38a0e09d73b3"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:41:24.742414+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:41:24.742414+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "afe9eadb927c12a7",
+    "value": "untrusted comment: signature from omg local signing key\nIn3JuCgHNwm+W7waHax2zfRgxzr569b7N8qyHzA7qzWr4PH5pSM2Nn/0nRexUlSVJgz3k2fNA3szeCxoe8d+Bw==\ntrusted comment: type=omg-slsa-v1 keyid=afe9eadb927c12a7 issued_at=2026-03-11T19:41:24.742526+00:00 artifact=bundle/plugins/advanced/commands/OMG:learn.md sha256=338f87222db65114f8c83de2185a21c7c2538832395524ac39ea38a0e09d73b3\nnNrMIPdpYEGvNKSqvyIokmz/ycPRoz0GKfBHNqsSuvslCLr4q13PUs16NiO8/qDnd69O1qgWLRp0Z4i9NHsXAA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=afe9eadb927c12a7 issued_at=2026-03-11T19:41:24.742526+00:00 artifact=bundle/plugins/advanced/commands/OMG:learn.md sha256=338f87222db65114f8c83de2185a21c7c2538832395524ac39ea38a0e09d73b3"
+  }
+}

package/artifacts/release/dist/enterprise/attestations/bundle/plugins/advanced/commands/OMG:maintainer.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
++V8wfCQYRobS0hWqgcrBW+BsbJn/g/RrA6/ZCTkmDeG7I+IELfGZY9m6r+BrMfWykAd2lKlhdSKX8m+9+YI+Dg==
+trusted comment: type=omg-slsa-v1 keyid=12089026a99e5ef2 issued_at=2026-03-11T19:41:24.743162+00:00 artifact=bundle/plugins/advanced/commands/OMG:maintainer.md sha256=1a29d4cb6839dd6de8c11b88b93a72fb9a371cfb7784bfe409d5e5ef0a825508
+9A6BJ9D/X7N+/S1CBKZVzGUtOarrjf8CBkR6U+Z1SKkdJV92hLZ0z2UsooMmMLPnaZNxd8gQWQ4YPZGZYRqWAQ==

package/artifacts/release/dist/enterprise/attestations/bundle/plugins/advanced/commands/OMG:maintainer.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/plugins/advanced/commands/OMG:maintainer.md",
+      "digest": {
+        "sha256": "1a29d4cb6839dd6de8c11b88b93a72fb9a371cfb7784bfe409d5e5ef0a825508"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:41:24.743050+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:41:24.743050+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "12089026a99e5ef2",
+    "value": "untrusted comment: signature from omg local signing key\n+V8wfCQYRobS0hWqgcrBW+BsbJn/g/RrA6/ZCTkmDeG7I+IELfGZY9m6r+BrMfWykAd2lKlhdSKX8m+9+YI+Dg==\ntrusted comment: type=omg-slsa-v1 keyid=12089026a99e5ef2 issued_at=2026-03-11T19:41:24.743162+00:00 artifact=bundle/plugins/advanced/commands/OMG:maintainer.md sha256=1a29d4cb6839dd6de8c11b88b93a72fb9a371cfb7784bfe409d5e5ef0a825508\n9A6BJ9D/X7N+/S1CBKZVzGUtOarrjf8CBkR6U+Z1SKkdJV92hLZ0z2UsooMmMLPnaZNxd8gQWQ4YPZGZYRqWAQ==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=12089026a99e5ef2 issued_at=2026-03-11T19:41:24.743162+00:00 artifact=bundle/plugins/advanced/commands/OMG:maintainer.md sha256=1a29d4cb6839dd6de8c11b88b93a72fb9a371cfb7784bfe409d5e5ef0a825508"
+  }
+}

package/artifacts/release/dist/enterprise/attestations/bundle/plugins/advanced/commands/OMG:ralph-start.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+tRADXqI4lznv4U3wCStfcGXOQEk6ZCa1sYADLD7rFUxI3tiHrqi3G7vhYEqYJqNUrlfzj/zcswzX3l9RpCg9BA==
+trusted comment: type=omg-slsa-v1 keyid=5fdcbbaa96241ff8 issued_at=2026-03-11T19:41:24.743863+00:00 artifact=bundle/plugins/advanced/commands/OMG:ralph-start.md sha256=31b2aded6032b5f061dbb7cd92dff53bbe3b527b9e9ba93d5043cad2847a6365
+4dPFz+JsMKh+PqAgbwwq3ePdURrIu/GXl1DZjwMXXQZ+1EgIpRjulV3qHHdt3OXKp92FPMxbS9USv9q1gGU8DA==

package/artifacts/release/dist/enterprise/attestations/bundle/plugins/advanced/commands/OMG:ralph-start.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/plugins/advanced/commands/OMG:ralph-start.md",
+      "digest": {
+        "sha256": "31b2aded6032b5f061dbb7cd92dff53bbe3b527b9e9ba93d5043cad2847a6365"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:41:24.743751+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:41:24.743751+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "5fdcbbaa96241ff8",
+    "value": "untrusted comment: signature from omg local signing key\ntRADXqI4lznv4U3wCStfcGXOQEk6ZCa1sYADLD7rFUxI3tiHrqi3G7vhYEqYJqNUrlfzj/zcswzX3l9RpCg9BA==\ntrusted comment: type=omg-slsa-v1 keyid=5fdcbbaa96241ff8 issued_at=2026-03-11T19:41:24.743863+00:00 artifact=bundle/plugins/advanced/commands/OMG:ralph-start.md sha256=31b2aded6032b5f061dbb7cd92dff53bbe3b527b9e9ba93d5043cad2847a6365\n4dPFz+JsMKh+PqAgbwwq3ePdURrIu/GXl1DZjwMXXQZ+1EgIpRjulV3qHHdt3OXKp92FPMxbS9USv9q1gGU8DA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=5fdcbbaa96241ff8 issued_at=2026-03-11T19:41:24.743863+00:00 artifact=bundle/plugins/advanced/commands/OMG:ralph-start.md sha256=31b2aded6032b5f061dbb7cd92dff53bbe3b527b9e9ba93d5043cad2847a6365"
+  }
+}

package/artifacts/release/dist/enterprise/attestations/bundle/plugins/advanced/commands/OMG:ralph-stop.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+xQ1Q3hadsTBI/1F5neImrEnV3s3oTpPYTmabEOU4X3jqbz0VzlNLSCvoi3H8Ndn0qNTpBTUlTDJZzNZi5yIuBg==
+trusted comment: type=omg-slsa-v1 keyid=ead54ba0dbb0e867 issued_at=2026-03-11T19:41:24.744554+00:00 artifact=bundle/plugins/advanced/commands/OMG:ralph-stop.md sha256=b43acad180bd205ddd78d42f1c7ecf315e521a0c345bf9d42b24d8c4d3913ce3
+BBkFiiupibrp4O6Z9JFcaO92mqtjMHnYY1qGrdAE4fRF8x0aVLFUXuErnwMrfSDfGZaehNOSX4SYKmSCt7VRDg==

package/artifacts/release/dist/enterprise/attestations/bundle/plugins/advanced/commands/OMG:ralph-stop.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/plugins/advanced/commands/OMG:ralph-stop.md",
+      "digest": {
+        "sha256": "b43acad180bd205ddd78d42f1c7ecf315e521a0c345bf9d42b24d8c4d3913ce3"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:41:24.744429+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:41:24.744429+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "ead54ba0dbb0e867",
+    "value": "untrusted comment: signature from omg local signing key\nxQ1Q3hadsTBI/1F5neImrEnV3s3oTpPYTmabEOU4X3jqbz0VzlNLSCvoi3H8Ndn0qNTpBTUlTDJZzNZi5yIuBg==\ntrusted comment: type=omg-slsa-v1 keyid=ead54ba0dbb0e867 issued_at=2026-03-11T19:41:24.744554+00:00 artifact=bundle/plugins/advanced/commands/OMG:ralph-stop.md sha256=b43acad180bd205ddd78d42f1c7ecf315e521a0c345bf9d42b24d8c4d3913ce3\nBBkFiiupibrp4O6Z9JFcaO92mqtjMHnYY1qGrdAE4fRF8x0aVLFUXuErnwMrfSDfGZaehNOSX4SYKmSCt7VRDg==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=ead54ba0dbb0e867 issued_at=2026-03-11T19:41:24.744554+00:00 artifact=bundle/plugins/advanced/commands/OMG:ralph-stop.md sha256=b43acad180bd205ddd78d42f1c7ecf315e521a0c345bf9d42b24d8c4d3913ce3"
+  }
+}

package/artifacts/release/dist/enterprise/attestations/bundle/plugins/advanced/commands/OMG:security-review.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+yiA+tPbrAP/DlHpFHjxXdjC616IzLbfRBJDGMhKOFI/JHrsl+TIvs10Ty6JJcfzuYid+kuU62eWLo5Nu2Y+SBA==
+trusted comment: type=omg-slsa-v1 keyid=2c52c20bfa4c9be4 issued_at=2026-03-11T19:41:24.745254+00:00 artifact=bundle/plugins/advanced/commands/OMG:security-review.md sha256=f2a0e1a61b4110ac88202e2e5c166191867423235bf61030ef9cc082d964cc22
+DGLeVXWsKQkygNzwnaXkAhQc5z5z/5IPH5aItXzZbzJvlCKf5soNw3dfjGJShcHLr5lpO9Y3wfLhgO9WHEYGCQ==

package/artifacts/release/dist/enterprise/attestations/bundle/plugins/advanced/commands/OMG:security-review.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/plugins/advanced/commands/OMG:security-review.md",
+      "digest": {
+        "sha256": "f2a0e1a61b4110ac88202e2e5c166191867423235bf61030ef9cc082d964cc22"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:41:24.745139+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:41:24.745139+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "2c52c20bfa4c9be4",
+    "value": "untrusted comment: signature from omg local signing key\nyiA+tPbrAP/DlHpFHjxXdjC616IzLbfRBJDGMhKOFI/JHrsl+TIvs10Ty6JJcfzuYid+kuU62eWLo5Nu2Y+SBA==\ntrusted comment: type=omg-slsa-v1 keyid=2c52c20bfa4c9be4 issued_at=2026-03-11T19:41:24.745254+00:00 artifact=bundle/plugins/advanced/commands/OMG:security-review.md sha256=f2a0e1a61b4110ac88202e2e5c166191867423235bf61030ef9cc082d964cc22\nDGLeVXWsKQkygNzwnaXkAhQc5z5z/5IPH5aItXzZbzJvlCKf5soNw3dfjGJShcHLr5lpO9Y3wfLhgO9WHEYGCQ==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=2c52c20bfa4c9be4 issued_at=2026-03-11T19:41:24.745254+00:00 artifact=bundle/plugins/advanced/commands/OMG:security-review.md sha256=f2a0e1a61b4110ac88202e2e5c166191867423235bf61030ef9cc082d964cc22"
+  }
+}

package/artifacts/release/dist/enterprise/attestations/bundle/plugins/advanced/commands/OMG:sequential-thinking.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+ozOYk9CxRTH55qeQQ/w96r9RHJrkj9qwFebP/vPs95uyvOjSpaR4aMHCoZeS8SzsD9RCXdDv+KWCc5R7wF5BAg==
+trusted comment: type=omg-slsa-v1 keyid=221031acef787b74 issued_at=2026-03-11T19:41:24.745912+00:00 artifact=bundle/plugins/advanced/commands/OMG:sequential-thinking.md sha256=1830de63009cb07c80cbcecf143f6df7560e7f031ac5b1d509b726d184e441da
+VuzosI5aanq7LJIJvHDCf/CbgoMlHN6kEYauPPCI2rLkH+SF8UPOH/11dsnBZPI1WVWuZeA6I/oluqLLaHmfDw==

package/artifacts/release/dist/enterprise/attestations/bundle/plugins/advanced/commands/OMG:sequential-thinking.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/plugins/advanced/commands/OMG:sequential-thinking.md",
+      "digest": {
+        "sha256": "1830de63009cb07c80cbcecf143f6df7560e7f031ac5b1d509b726d184e441da"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:41:24.745798+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:41:24.745798+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "221031acef787b74",
+    "value": "untrusted comment: signature from omg local signing key\nozOYk9CxRTH55qeQQ/w96r9RHJrkj9qwFebP/vPs95uyvOjSpaR4aMHCoZeS8SzsD9RCXdDv+KWCc5R7wF5BAg==\ntrusted comment: type=omg-slsa-v1 keyid=221031acef787b74 issued_at=2026-03-11T19:41:24.745912+00:00 artifact=bundle/plugins/advanced/commands/OMG:sequential-thinking.md sha256=1830de63009cb07c80cbcecf143f6df7560e7f031ac5b1d509b726d184e441da\nVuzosI5aanq7LJIJvHDCf/CbgoMlHN6kEYauPPCI2rLkH+SF8UPOH/11dsnBZPI1WVWuZeA6I/oluqLLaHmfDw==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=221031acef787b74 issued_at=2026-03-11T19:41:24.745912+00:00 artifact=bundle/plugins/advanced/commands/OMG:sequential-thinking.md sha256=1830de63009cb07c80cbcecf143f6df7560e7f031ac5b1d509b726d184e441da"
+  }
+}

package/artifacts/release/dist/enterprise/attestations/bundle/plugins/advanced/commands/OMG:ship.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+oYUV21boYSOZLkXWnzXq9tnLtunFQBQzaKu8TGACPyS2dqRo2JpVrnsBV81/LcExJKgokonCTdHeg9y8v0WZAA==
+trusted comment: type=omg-slsa-v1 keyid=7ec8a584a16cb7ff issued_at=2026-03-11T19:41:24.746535+00:00 artifact=bundle/plugins/advanced/commands/OMG:ship.md sha256=3a44016f71a4d73de04043f0c13a6655541c090498908b2bc858c29514a653d4
+6yjkka5Nzs6DWjQL1Br6tq1jzKk1+yVaGGdwTkTB9SFWZ9xKtVM93Vg+F5tG5+szykLplgYupUdSHPa2xyJbCw==

package/artifacts/release/dist/enterprise/attestations/bundle/plugins/advanced/commands/OMG:ship.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/plugins/advanced/commands/OMG:ship.md",
+      "digest": {
+        "sha256": "3a44016f71a4d73de04043f0c13a6655541c090498908b2bc858c29514a653d4"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:41:24.746424+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:41:24.746424+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "7ec8a584a16cb7ff",
+    "value": "untrusted comment: signature from omg local signing key\noYUV21boYSOZLkXWnzXq9tnLtunFQBQzaKu8TGACPyS2dqRo2JpVrnsBV81/LcExJKgokonCTdHeg9y8v0WZAA==\ntrusted comment: type=omg-slsa-v1 keyid=7ec8a584a16cb7ff issued_at=2026-03-11T19:41:24.746535+00:00 artifact=bundle/plugins/advanced/commands/OMG:ship.md sha256=3a44016f71a4d73de04043f0c13a6655541c090498908b2bc858c29514a653d4\n6yjkka5Nzs6DWjQL1Br6tq1jzKk1+yVaGGdwTkTB9SFWZ9xKtVM93Vg+F5tG5+szykLplgYupUdSHPa2xyJbCw==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=7ec8a584a16cb7ff issued_at=2026-03-11T19:41:24.746535+00:00 artifact=bundle/plugins/advanced/commands/OMG:ship.md sha256=3a44016f71a4d73de04043f0c13a6655541c090498908b2bc858c29514a653d4"
+  }
+}

package/artifacts/release/dist/enterprise/attestations/bundle/plugins/advanced/plugin.json.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
++I/brn/wSoA5fzyNl01QKA/3FoDPbCJlf1cpxtFS0f0xEQGwwTNs3n/oFSvsemfotzl8tBo6vNp4ZmFVhyKjBg==
+trusted comment: type=omg-slsa-v1 keyid=b0519af49ae47556 issued_at=2026-03-11T19:41:24.747107+00:00 artifact=bundle/plugins/advanced/plugin.json sha256=b4941ca9c087b7d696227f538e532e2eedef902df60da070547f0410ea856277
+kVgFrmj0sAIoF1fgFYkgtTiNhO5H7U7eXM2grFSvObCZP3sAtoAMd72DS8OHlDvlyAWC0IBixgotkmnFpgOQDw==

package/artifacts/release/dist/enterprise/attestations/bundle/plugins/advanced/plugin.json.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/plugins/advanced/plugin.json",
+      "digest": {
+        "sha256": "b4941ca9c087b7d696227f538e532e2eedef902df60da070547f0410ea856277"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:41:24.746996+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:41:24.746996+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "b0519af49ae47556",
+    "value": "untrusted comment: signature from omg local signing key\n+I/brn/wSoA5fzyNl01QKA/3FoDPbCJlf1cpxtFS0f0xEQGwwTNs3n/oFSvsemfotzl8tBo6vNp4ZmFVhyKjBg==\ntrusted comment: type=omg-slsa-v1 keyid=b0519af49ae47556 issued_at=2026-03-11T19:41:24.747107+00:00 artifact=bundle/plugins/advanced/plugin.json sha256=b4941ca9c087b7d696227f538e532e2eedef902df60da070547f0410ea856277\nkVgFrmj0sAIoF1fgFYkgtTiNhO5H7U7eXM2grFSvObCZP3sAtoAMd72DS8OHlDvlyAWC0IBixgotkmnFpgOQDw==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=b0519af49ae47556 issued_at=2026-03-11T19:41:24.747107+00:00 artifact=bundle/plugins/advanced/plugin.json sha256=b4941ca9c087b7d696227f538e532e2eedef902df60da070547f0410ea856277"
+  }
+}

package/artifacts/release/dist/enterprise/attestations/bundle/registry/bundles/algorithms.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+exctAjnTpeFkbBDeWJe7kaROnaHWco4uJqT4G0/u/vHXi5ZOGcjTI2EJivTXwb9XM8jnGJLd1k4OKw7iX6vpCA==
+trusted comment: type=omg-slsa-v1 keyid=bb28056987ef5c7a issued_at=2026-03-11T19:41:24.747734+00:00 artifact=bundle/registry/bundles/algorithms.yaml sha256=fae0ee5471222455b35e5e62a4b41d05b0333d014d9ef71952cdb78ea5e2cd7b
+rZjTkPyg4HKdSnO9zcN8MFz2d+xDUBzhtF8gx4wVDq+BWZlzzqrkKzYv31LizAKk1IvveV8mfQbswqAcaDGfBw==