@trac3er/oh-my-god 2.1.4 → 2.1.7

package/dist/enterprise/attestations/bundle/registry/bundles/vision.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/vision.yaml",
+      "digest": {
+        "sha256": "efac126905e8e5beccfdfedaf7186c803b6ab6c24bdc63b19cb94c74bea4ab1b"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:44:52.228252+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:44:52.228252+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "3a2a2452c37d302b",
+    "value": "untrusted comment: signature from omg local signing key\nPxX6X9w0mpJHcF9j4bqn8pdH5kLN5u2RJs0rjJws66saz6bam2jAGeZIstjcC2ledlSY735FuIp5ksViSvcJAg==\ntrusted comment: type=omg-slsa-v1 keyid=3a2a2452c37d302b issued_at=2026-03-11T19:44:52.228370+00:00 artifact=bundle/registry/bundles/vision.yaml sha256=efac126905e8e5beccfdfedaf7186c803b6ab6c24bdc63b19cb94c74bea4ab1b\nUluIndXcpHE7ZhKl64a6J72K8x+u9Obv4F3dX3r7h2VpSjfA0TNUBeMWXL7KTkBvFIiVQfO5nQTbexSKhZeyBw==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=3a2a2452c37d302b issued_at=2026-03-11T19:44:52.228370+00:00 artifact=bundle/registry/bundles/vision.yaml sha256=efac126905e8e5beccfdfedaf7186c803b6ab6c24bdc63b19cb94c74bea4ab1b"
+  }
+}

package/dist/enterprise/attestations/bundle/registry/omg-capability.schema.json.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+/9dH0uZDWA88zBy/86P5k2QvTjx714FktcTU2UoNNH8W5Qr9p9EA4P9znCShHqIuAXaA5b5zEZ4zfFmut0eeCQ==
+trusted comment: type=omg-slsa-v1 keyid=f699a5272204ff61 issued_at=2026-03-11T19:44:52.229001+00:00 artifact=bundle/registry/omg-capability.schema.json sha256=e2975775ab890b495a55ebe2816a854ec86402f8acf41cfc11572682d55b2a49
+qgCtI4RDzWaJJqzywjuhNf2t9NUVq5afGE7JchLRywUQDBR1B+RKJkncqyO9MjcW5s7Lpg8UQIneir/H6y9fBA==

package/dist/enterprise/attestations/bundle/registry/omg-capability.schema.json.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/omg-capability.schema.json",
+      "digest": {
+        "sha256": "e2975775ab890b495a55ebe2816a854ec86402f8acf41cfc11572682d55b2a49"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:44:52.228884+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:44:52.228884+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "f699a5272204ff61",
+    "value": "untrusted comment: signature from omg local signing key\n/9dH0uZDWA88zBy/86P5k2QvTjx714FktcTU2UoNNH8W5Qr9p9EA4P9znCShHqIuAXaA5b5zEZ4zfFmut0eeCQ==\ntrusted comment: type=omg-slsa-v1 keyid=f699a5272204ff61 issued_at=2026-03-11T19:44:52.229001+00:00 artifact=bundle/registry/omg-capability.schema.json sha256=e2975775ab890b495a55ebe2816a854ec86402f8acf41cfc11572682d55b2a49\nqgCtI4RDzWaJJqzywjuhNf2t9NUVq5afGE7JchLRywUQDBR1B+RKJkncqyO9MjcW5s7Lpg8UQIneir/H6y9fBA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=f699a5272204ff61 issued_at=2026-03-11T19:44:52.229001+00:00 artifact=bundle/registry/omg-capability.schema.json sha256=e2975775ab890b495a55ebe2816a854ec86402f8acf41cfc11572682d55b2a49"
+  }
+}

package/dist/enterprise/attestations/bundle/settings.json.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+tPcoQ/Ay0aCYW8J0CQ6Yh3NQvCyzZLrwdH0S3K5DrinWHGVerQaTsku/gUaVV4xxjREgfWf2LhqXJxYbNYW9Aw==
+trusted comment: type=omg-slsa-v1 keyid=38695c047fca669a issued_at=2026-03-11T19:44:52.229658+00:00 artifact=bundle/settings.json sha256=70aa3ef36f1f8dbd8417059988047dd5664d9a896000d5dbda8486a94689332c
+8U1NG3Viyk7ObieKwXIZ2ZlQL7yWMKXpdbl1EjFmND28YQUClM2Neo1ttydW87BdCAlCA4eton9NsnMFwsB4AA==

package/dist/enterprise/attestations/bundle/settings.json.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/settings.json",
+      "digest": {
+        "sha256": "70aa3ef36f1f8dbd8417059988047dd5664d9a896000d5dbda8486a94689332c"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:44:52.229545+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:44:52.229545+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "38695c047fca669a",
+    "value": "untrusted comment: signature from omg local signing key\ntPcoQ/Ay0aCYW8J0CQ6Yh3NQvCyzZLrwdH0S3K5DrinWHGVerQaTsku/gUaVV4xxjREgfWf2LhqXJxYbNYW9Aw==\ntrusted comment: type=omg-slsa-v1 keyid=38695c047fca669a issued_at=2026-03-11T19:44:52.229658+00:00 artifact=bundle/settings.json sha256=70aa3ef36f1f8dbd8417059988047dd5664d9a896000d5dbda8486a94689332c\n8U1NG3Viyk7ObieKwXIZ2ZlQL7yWMKXpdbl1EjFmND28YQUClM2Neo1ttydW87BdCAlCA4eton9NsnMFwsB4AA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=38695c047fca669a issued_at=2026-03-11T19:44:52.229658+00:00 artifact=bundle/settings.json sha256=70aa3ef36f1f8dbd8417059988047dd5664d9a896000d5dbda8486a94689332c"
+  }
+}

package/dist/enterprise/bundle/.agents/skills/omg/AGENTS.fragment.md

@@ -17,10 +17,25 @@ The following paths require tier-gated review before mutation:
 - `.codex/**`
 - `.claude/**`
 
+## Release Audit
+
+Release readiness requires claim and compliance outcomes:
+
+- `claim_judge`
+- `compliance_governor`
+- `execution_primitives`
+Attestation requirements:
+- `registry.verify_artifact.sign_artifact_statement`
+- `registry.verify_artifact.verify_artifact_statement`
+
 ## Evidence Contract
 
 Every production action must emit evidence containing these fields:
 
+- `attestation_statement`
+- `attestation_verifier`
+- `claim_judge_verdict`
+- `compliance_verdict`
 - `executor`
 - `lineage`
 - `timestamp`

package/dist/enterprise/bundle/.agents/skills/omg/control-plane/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: omg-control-plane
-description: "Canonical production control plane bundle for Claude and Codex."
+description: "Canonical production control plane bundle for Claude, Codex, Gemini, and Kimi."
 ---
 
 # OMG Control Plane

package/dist/enterprise/bundle/.agents/skills/omg/control-plane/openai.yaml

@@ -1,5 +1,5 @@
 name: omg-control-plane
-description: "Canonical production control plane bundle for Claude and Codex."
+description: "Canonical production control plane bundle for Claude, Codex, Gemini, and Kimi."
 allow_implicit_invocation: false
 metadata:
   channel: enterprise

package/dist/enterprise/bundle/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
   },
   "metadata": {
     "description": "OMG - Oh-My-God for Claude Code and supported agent hosts",
-    "version": "2.1.4",
+    "version": "2.1.7",
     "homepage": "https://github.com/trac3er00/OMG",
     "repository": "https://github.com/trac3er00/OMG"
   },
@@ -14,7 +14,7 @@
     {
       "name": "omg",
       "description": "OMG plugin layer for Claude Code and supported agent hosts with native setup, orchestration, and interop.",
-      "version": "2.1.4",
+      "version": "2.1.7",
       "source": "./",
       "author": {
         "name": "trac3er00"
@@ -32,5 +32,5 @@
       ]
     }
   ],
-  "version": "2.1.4"
+  "version": "2.1.7"
 }

package/dist/enterprise/bundle/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "omg",
-  "version": "2.1.4",
+  "version": "2.1.7",
   "description": "OMG plugin layer for Claude Code with native setup, orchestration, and interop.",
   "author": {
     "name": "trac3er00"

package/dist/enterprise/bundle/OMG_COMPAT_CONTRACT.md

@@ -1,6 +1,6 @@
 ---
 title: OMG Production Control Plane
-version: 2.1.4
+version: 2.1.7
 canonical_hosts:
   - claude
   - codex

package/dist/enterprise/bundle/plugins/advanced/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "omg-advanced",
-  "version": "2.1.4",
+  "version": "2.1.7",
   "description": "Advanced OMG commands - deep planning, learning, code review, and specialized workflows",
   "type": "omg-plugin",
   "commands": {

package/dist/enterprise/bundle/registry/bundles/algorithms.yaml

@@ -1,6 +1,6 @@
 id: algorithms
 kind: domain-pack
-version: 2.1.4
+version: 2.1.7
 title: OMG Algorithms Pack
 description: Determinism and benchmark attachments for algorithm-heavy work.
 hosts:

package/dist/enterprise/bundle/registry/bundles/api-twin.yaml

@@ -1,6 +1,6 @@
 id: api-twin
 kind: simulation
-version: 2.1.4
+version: 2.1.7
 title: OMG API Twin
 description: Versioned endpoint cassette replay with latency, drift, and cost reporting.
 hosts:

package/dist/enterprise/bundle/registry/bundles/claim-judge.yaml

@@ -1,6 +1,6 @@
 id: claim-judge
 kind: proof
-version: 2.1.4
+version: 2.1.7
 title: OMG Claim Judge
 description: Evidence-backed claim validator for structured release and completion claims.
 hosts:

package/dist/enterprise/bundle/registry/bundles/control-plane.yaml

@@ -1,11 +1,13 @@
 id: control-plane
 kind: skill
-version: 2.1.4
+version: 2.1.7
 title: OMG Control Plane
-description: Canonical production control plane bundle for Claude and Codex.
+description: Canonical production control plane bundle for Claude, Codex, Gemini, and Kimi.
 hosts:
   - claude
   - codex
+  - gemini
+  - kimi
 assets:
   references:
     - OMG_COMPAT_CONTRACT.md
@@ -109,6 +111,10 @@ policy_model:
     executor: executor
     trace_id: trace_id
     lineage: lineage
+    attestation_statement: attestation_statement
+    attestation_verifier: attestation_verifier
+    claim_judge_verdict: claim_judge_verdict
+    compliance_verdict: compliance_verdict
   host_rules:
     claude:
       compilation_targets:
@@ -144,6 +150,26 @@ policy_model:
       automations:
         - contract-compile
         - release-readiness
+    gemini:
+      compilation_targets:
+        - .gemini/settings.json
+      mcp:
+        - omg-control
+      skills:
+        - omg/control-plane
+      automations:
+        - contract-compile
+        - release-readiness
+    kimi:
+      compilation_targets:
+        - .kimi/mcp.json
+      mcp:
+        - omg-control
+      skills:
+        - omg/control-plane
+      automations:
+        - contract-compile
+        - release-readiness
 channel_overrides:
   public:
     posture: self-serve

package/dist/enterprise/bundle/registry/bundles/data-lineage.yaml

@@ -1,6 +1,6 @@
 id: data-lineage
 kind: provenance
-version: 2.1.4
+version: 2.1.7
 title: OMG Data Lineage
 description: Provenance and privacy tracking for traces, fixtures, examples, and synthetic artifacts.
 hosts:

package/dist/enterprise/bundle/registry/bundles/delta-classifier.yaml

@@ -1,6 +1,6 @@
 id: delta-classifier
 kind: routing
-version: 2.1.4
+version: 2.1.7
 title: OMG Delta Classifier
 description: Change classifier that attaches risk-aware checks, approvals, and packs.
 hosts:

package/dist/enterprise/bundle/registry/bundles/eval-gate.yaml

@@ -1,6 +1,6 @@
 id: eval-gate
 kind: evaluation
-version: 2.1.4
+version: 2.1.7
 title: OMG Eval Gate
 description: Reproducible evaluation gate that blocks regressions before release.
 hosts:

package/dist/enterprise/bundle/registry/bundles/health.yaml

@@ -1,6 +1,6 @@
 id: health
 kind: domain-pack
-version: 2.1.4
+version: 2.1.7
 title: OMG Health Pack
 description: Health-sensitive approvals, provenance, and replay attachments.
 hosts:

package/dist/enterprise/bundle/registry/bundles/hook-governor.yaml

@@ -1,6 +1,6 @@
 id: hook-governor
 kind: governance
-version: 2.1.4
+version: 2.1.7
 title: OMG Hook Governor
 description: Canonical hook ordering, policy reinjection, and protected-path governance.
 hosts:

package/dist/enterprise/bundle/registry/bundles/incident-replay.yaml

@@ -1,6 +1,6 @@
 id: incident-replay
 kind: debugging
-version: 2.1.4
+version: 2.1.7
 title: OMG Incident Replay
 description: Replayable bug packs built from logs, failing tests, traces, and diffs.
 hosts:

package/dist/enterprise/bundle/registry/bundles/lsp-pack.yaml

@@ -1,6 +1,6 @@
 id: lsp-pack
 kind: diagnostics
-version: 2.1.4
+version: 2.1.7
 title: OMG LSP Pack
 description: Optional LSP-backed diagnostics and navigation bundle for production verification.
 hosts:

package/dist/enterprise/bundle/registry/bundles/mcp-fabric.yaml

@@ -1,6 +1,6 @@
 id: mcp-fabric
 kind: mcp
-version: 2.1.4
+version: 2.1.7
 title: OMG MCP Fabric
 description: Tools, prompts, resources, and server instructions for the OMG control plane.
 hosts:

package/dist/enterprise/bundle/registry/bundles/plan-council.yaml

@@ -1,14 +1,19 @@
 id: plan-council
 kind: planning
-version: 2.1.4
+version: 2.1.7
 title: OMG Plan Council
 description: Canonical council-style planning bundle for explicit, evidence-backed deep plans.
 hosts:
   - claude
   - codex
+  - gemini
+  - kimi
 assets:
   references:
     - plugins/advanced/commands/OMG:deep-plan.md
+    - commands/OMG:validate.md
+    - commands/OMG:profile-review.md
+    - commands/OMG:release-audit.md
 invocation_policy:
   user_invocable: true
   model_invocable: false

package/dist/enterprise/bundle/registry/bundles/preflight.yaml

@@ -1,6 +1,6 @@
 id: preflight
 kind: routing
-version: 2.1.4
+version: 2.1.7
 title: OMG Preflight
 description: Repo-aware route selection based on diff, manifests, and classified risk.
 hosts:

package/dist/enterprise/bundle/registry/bundles/proof-gate.yaml

@@ -1,6 +1,6 @@
 id: proof-gate
 kind: proof
-version: 2.1.4
+version: 2.1.7
 title: OMG Proof Gate
 description: Structured release proof gate that binds claims to required evidence artifacts and trace links.
 hosts:

package/dist/enterprise/bundle/registry/bundles/remote-supervisor.yaml

@@ -1,6 +1,6 @@
 id: remote-supervisor
 kind: orchestration
-version: 2.1.4
+version: 2.1.7
 title: OMG Remote Supervisor
 description: Local-only authenticated supervisor sessions for worker orchestration.
 hosts:

package/dist/enterprise/bundle/registry/bundles/robotics.yaml

@@ -1,6 +1,6 @@
 id: robotics
 kind: domain-pack
-version: 2.1.4
+version: 2.1.7
 title: OMG Robotics Pack
 description: Robotics safety policy, replay, and evaluation attachments.
 hosts:

package/dist/enterprise/bundle/registry/bundles/secure-worktree-pipeline.yaml

@@ -1,6 +1,6 @@
 id: secure-worktree-pipeline
 kind: runtime
-version: 2.1.4
+version: 2.1.7
 title: OMG Secure Worktree Pipeline
 description: Ephemeral worktree execution and supervisor-safe worker dispatch for production jobs.
 hosts:

package/dist/enterprise/bundle/registry/bundles/security-check.yaml

@@ -1,6 +1,6 @@
 id: security-check
 kind: security
-version: 2.1.4
+version: 2.1.7
 title: OMG Security Check
 description: Canonical security audit bundle with provenance, trust scoring, and deterministic evidence.
 hosts:

package/dist/enterprise/bundle/registry/bundles/test-intent-lock.yaml

@@ -1,6 +1,6 @@
 id: test-intent-lock
 kind: proof
-version: 2.1.4
+version: 2.1.7
 title: OMG Test Intent Lock
 description: Structured test-delta guard that blocks weakened tests unless explicit override evidence is present.
 hosts:

package/dist/enterprise/bundle/registry/bundles/tracebank.yaml

@@ -1,6 +1,6 @@
 id: tracebank
 kind: evidence
-version: 2.1.4
+version: 2.1.7
 title: OMG Tracebank
 description: Structured plan-to-patch-to-verify trace capture for OMG routes.
 hosts:

package/dist/enterprise/bundle/registry/bundles/vision.yaml

@@ -1,6 +1,6 @@
 id: vision
 kind: domain-pack
-version: 2.1.4
+version: 2.1.7
 title: OMG Vision Pack
 description: Vision-specific lineage, drift, and replay attachments.
 hosts:

package/dist/enterprise/bundle/registry/omg-capability.schema.json

@@ -2,7 +2,7 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://github.com/trac3er00/OMG/registry/omg-capability.schema.json",
   "title": "OMG Capability Bundle",
-  "version": "2.1.4",
+  "version": "2.1.7",
   "type": "object",
   "required": [
     "id",

package/dist/enterprise/bundle/settings.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json.schemastore.org/claude-code-settings.json",
-  "_comment": "OMG 2.1.4 - project-level config with hook registrations, presets, and feature flags.",
+  "_comment": "OMG 2.1.7 - project-level config with hook registrations, presets, and feature flags.",
   "permissions": {
     "allow": [
       "Agent",
@@ -316,7 +316,7 @@
     ]
   },
   "_omg": {
-    "_version": "2.1.4",
+    "_version": "2.1.7",
     "preset": "safe",
     "omgMode": "focused",
     "default_mode": "ulw+ralph",
@@ -367,10 +367,16 @@
       "TEST_GENERATION": false,
       "DEP_HEALTH": false,
       "CODEBASE_VIZ": false,
-      "CONTEXT_MANAGER": false
+      "CONTEXT_MANAGER": false,
+      "DATA_ENFORCEMENT": false,
+      "WEB_ENFORCEMENT": false,
+      "TERMS_ENFORCEMENT": false,
+      "COUNCIL_ROUTING": false,
+      "FORGE_ALL_DOMAINS": false,
+      "NOTEBOOKLM": false
     },
     "generated": {
-      "contract_version": "2.1.4",
+      "contract_version": "2.1.7",
       "channel": "enterprise",
       "required_bundles": [
         "control-plane",
@@ -508,7 +514,11 @@
           "timestamp": "timestamp",
           "executor": "executor",
           "trace_id": "trace_id",
-          "lineage": "lineage"
+          "lineage": "lineage",
+          "attestation_statement": "attestation_statement",
+          "attestation_verifier": "attestation_verifier",
+          "claim_judge_verdict": "claim_judge_verdict",
+          "compliance_verdict": "compliance_verdict"
         },
         "host_rules": {
           "claude": {
@@ -555,6 +565,36 @@
               "contract-compile",
               "release-readiness"
             ]
+          },
+          "gemini": {
+            "compilation_targets": [
+              ".gemini/settings.json"
+            ],
+            "mcp": [
+              "omg-control"
+            ],
+            "skills": [
+              "omg/control-plane"
+            ],
+            "automations": [
+              "contract-compile",
+              "release-readiness"
+            ]
+          },
+          "kimi": {
+            "compilation_targets": [
+              ".kimi/mcp.json"
+            ],
+            "mcp": [
+              "omg-control"
+            ],
+            "skills": [
+              "omg/control-plane"
+            ],
+            "automations": [
+              "contract-compile",
+              "release-readiness"
+            ]
           }
         }
       },
@@ -603,7 +643,32 @@
           "name": "omg/hook-governor",
           "source": ".agents/skills/omg/hook-governor/"
         }
-      ]
+      ],
+      "phase1_release_contract": {
+        "forge_specialist_surfaces": [
+          "forge-profile-review",
+          "forge-release-audit",
+          "forge-validate"
+        ],
+        "release_surfaces": [
+          "OMG:profile-review",
+          "OMG:release-audit",
+          "OMG:validate"
+        ],
+        "attestation_requirements": [
+          "registry.verify_artifact.sign_artifact_statement",
+          "registry.verify_artifact.verify_artifact_statement"
+        ],
+        "compliance_governor_expectations": [
+          "runtime.compliance_governor.evaluate_release_compliance",
+          "runtime.compliance_governor.evaluate_tool_compliance"
+        ],
+        "release_readiness_checks": [
+          "claim_judge",
+          "compliance_governor",
+          "execution_primitives"
+        ]
+      }
     }
   }
 }