@trac3er/oh-my-god 2.1.4 → 2.1.7

package/dist/plugins/advanced/commands/OMG:ralph-stop.md

@@ -0,0 +1,23 @@
+---
+description: "Stop Ralph autonomous loop — deactivates the state file."
+allowed-tools: Read, Write, Edit, Bash
+argument-hint: ""
+---
+
+# /OMG:ralph-stop — Stop Ralph Autonomous Loop
+
+## Purpose
+Stops an active Ralph loop by deactivating the state file.
+
+## Usage
+```
+/OMG:ralph-stop
+```
+
+## How it Works
+1. Read `.omg/state/ralph-loop.json`
+2. Set `active: false` in the state file (preserve iteration count for review)
+3. Report: "Ralph loop stopped after N iterations. Gomg was: [original_prompt]"
+
+## If No Active Loop
+Report: "No active Ralph loop found. Nothing to stop."

package/dist/plugins/advanced/commands/OMG:security-review.md

@@ -0,0 +1,16 @@
+---
+description: Deprecated alias to OMG's canonical security-check pipeline.
+allowed-tools: Read, Grep, Glob, Bash(python3:*), Bash(rg:*)
+argument-hint: "[path or '.' for the current project]"
+---
+
+# /OMG:security-review — Deprecated Alias
+
+`/OMG:security-review` remains available only for compatibility.
+
+Use `/OMG:security-check` instead. The canonical pipeline now owns:
+
+- normalized security findings
+- dependency and AST enrichment
+- evidence-ready provenance and trust scores
+- reuse across CLI, compat routing, control plane, MCP, and ship flows

package/dist/plugins/advanced/commands/OMG:sequential-thinking.md

@@ -0,0 +1,20 @@
+---
+description: Structured multi-step reasoning using sequential-thinking tool for complex debugging and planning.
+allowed-tools: sequential-thinking_sequentialthinking, Read, Grep, Glob
+argument-hint: "[problem statement to reason through]"
+---
+
+# /OMG:sequential-thinking
+
+Use the sequential-thinking tool when the task needs explicit step-by-step reasoning,
+branching, and hypothesis verification.
+
+Execution contract:
+- Start with an initial thought budget
+- Revise or branch when new evidence appears
+- End only when a verified conclusion is reached
+
+Output contract:
+- Return final conclusion
+- Return key assumptions
+- Return verification steps used

package/dist/plugins/advanced/commands/OMG:ship.md

@@ -0,0 +1,46 @@
+---
+description: Ship pipeline — Idea -> Plan -> Execute -> Evidence -> PR-ready summary
+allowed-tools: Read, Write, Edit, MultiEdit, Grep, Glob, Bash(git:*), Bash(rg:*), Bash(find:*), Bash(cat:*), Bash(python3:*), Bash(pytest:*), Bash(npm test:*), Bash(go test:*), Bash(cargo test:*), Bash(jest:*), Bash(vitest:*)
+argument-hint: "[goal or optional path to .omg/idea.yml]"
+---
+
+# /OMG:ship — Idea -> Evidence -> PR
+
+## Step 1: Load idea contract
+- Prefer `.omg/idea.yml`.
+- If missing, scaffold from `~/.claude/templates/omg/idea.yml` and ask user for minimum fields:
+  - `goal`, `constraints`, `acceptance`, `risk`, `evidence_required`.
+
+## Step 2: Convert idea to execution plan
+- Consume plan artifacts generated by `/OMG:deep-plan`.
+- Require `.omg/plans/deep-plan.md` and `.omg/plans/deep-plan.json` to already encode the business workflow contract.
+- If missing, invoke `/OMG:deep-plan` first and return after those artifacts are created.
+- Use the deep-plan workflow path and task metadata as the execution source of truth.
+
+## Step 3: Execute with Shadow + Evidence discipline
+- Implement changes.
+- Run verification commands.
+- Build an evidence pack at `.omg/evidence/<run-id>.json` containing:
+  - `tests[]`, `security_scans[]`, `diff_summary`, `reproducibility`, `unresolved_risks[]`.
+
+## Step 4: Security and trust checks
+- Run `/OMG:security-check` for auth/payment/database/sensitive changes.
+- If config/hook/MCP changes are involved, ensure trust manifest is updated at `.omg/trust/manifest.lock.json`.
+
+## Step 5: PR-ready output
+Return:
+1. Goal and scope delivered
+2. Files changed
+3. Verification evidence (command + exit code)
+4. Risks/unknowns
+5. Suggested PR title + body
+
+## Full-power sub-agent protocol
+- Prefer parallel background sub-agent launches for independent workstreams.
+- Do not finalize until every launched track is collected via `background_output`.
+- Use `sequential-thinking` to reconcile conflicts and enforce execution order.
+
+## Anti-patterns
+- Do not claim done without evidence.
+- Do not edit tests to hide product bugs.
+- Do not skip trust review for `.claude/.omg` or MCP changes.

package/dist/plugins/advanced/plugin.json

@@ -0,0 +1,104 @@
+{
+  "name": "omg-advanced",
+  "version": "2.1.7",
+  "description": "Advanced OMG commands - deep planning, learning, code review, and specialized workflows",
+  "type": "omg-plugin",
+  "commands": {
+    "deep-plan": {
+      "path": "commands/OMG:deep-plan.md",
+      "description": "Deep strategic planning with domain awareness",
+      "category": "planning"
+    },
+    "learn": {
+      "path": "commands/OMG:learn.md",
+      "description": "Create reusable skills from patterns",
+      "category": "knowledge"
+    },
+    "code-review": {
+      "path": "commands/OMG:code-review.md",
+      "description": "Deep code review with line-by-line analysis",
+      "category": "quality"
+    },
+    "ship": {
+      "path": "commands/OMG:ship.md",
+      "description": "Ship pipeline - idea to PR-ready summary",
+      "category": "delivery"
+    },
+    "handoff": {
+      "path": "commands/OMG:handoff.md",
+      "description": "Intelligent session transfer",
+      "category": "collaboration"
+    },
+    "maintainer": {
+      "path": "commands/OMG:maintainer.md",
+      "description": "Open-source maintainer workflows",
+      "category": "oss"
+    },
+    "sequential-thinking": {
+      "path": "commands/OMG:sequential-thinking.md",
+      "description": "Structured multi-step reasoning",
+      "category": "thinking"
+    },
+    "ralph-start": {
+      "path": "commands/OMG:ralph-start.md",
+      "description": "Start Ralph autonomous loop",
+      "category": "automation"
+    },
+    "ralph-stop": {
+      "path": "commands/OMG:ralph-stop.md",
+      "description": "Stop Ralph autonomous loop",
+      "category": "automation"
+    }
+  },
+  "categories": {
+    "planning": {
+      "description": "Strategic planning and architecture",
+      "commands": [
+        "deep-plan"
+      ]
+    },
+    "quality": {
+      "description": "Code quality and review",
+      "commands": [
+        "code-review"
+      ]
+    },
+    "knowledge": {
+      "description": "Learning and skill creation",
+      "commands": [
+        "learn"
+      ]
+    },
+    "delivery": {
+      "description": "Shipping and release workflows",
+      "commands": [
+        "ship"
+      ]
+    },
+    "collaboration": {
+      "description": "Team collaboration and handoff",
+      "commands": [
+        "handoff"
+      ]
+    },
+    "automation": {
+      "description": "Autonomous execution modes",
+      "commands": [
+        "ralph-start",
+        "ralph-stop"
+      ]
+    },
+    "thinking": {
+      "description": "Structured thinking tools",
+      "commands": [
+        "sequential-thinking"
+      ]
+    },
+    "oss": {
+      "description": "Open source maintainer tools",
+      "commands": [
+        "maintainer"
+      ]
+    }
+  }
+}

package/dist/public/attestations/bundle/.agents/skills/omg/AGENTS.fragment.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+fppIo7o6ddS7YIDrGGCo8kqYlZ30B4Rwey+KxN9IpGRRTKPxSrvhWq9UoIu52qNcRfBoSrAi2XLaPH3BmUxCCw==
+trusted comment: type=omg-slsa-v1 keyid=226eff5b5043790a issued_at=2026-03-11T19:44:50.787871+00:00 artifact=bundle/.agents/skills/omg/AGENTS.fragment.md sha256=bfab46adfdb8a2b5ea760dd4c8680bb91f0bde4b3431de12a5518810bda0bf78
+qN70k/wIXSehm3ndrcxYPdcpXhaoGabMFMIzPjLDVVe6gHWf3qt7ZdWZ9/yj3cObi5g14+OKD7VwhqGXwuW/AA==

package/dist/public/attestations/bundle/.agents/skills/omg/AGENTS.fragment.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.agents/skills/omg/AGENTS.fragment.md",
+      "digest": {
+        "sha256": "bfab46adfdb8a2b5ea760dd4c8680bb91f0bde4b3431de12a5518810bda0bf78"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:44:50.782717+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:44:50.782717+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "226eff5b5043790a",
+    "value": "untrusted comment: signature from omg local signing key\nfppIo7o6ddS7YIDrGGCo8kqYlZ30B4Rwey+KxN9IpGRRTKPxSrvhWq9UoIu52qNcRfBoSrAi2XLaPH3BmUxCCw==\ntrusted comment: type=omg-slsa-v1 keyid=226eff5b5043790a issued_at=2026-03-11T19:44:50.787871+00:00 artifact=bundle/.agents/skills/omg/AGENTS.fragment.md sha256=bfab46adfdb8a2b5ea760dd4c8680bb91f0bde4b3431de12a5518810bda0bf78\nqN70k/wIXSehm3ndrcxYPdcpXhaoGabMFMIzPjLDVVe6gHWf3qt7ZdWZ9/yj3cObi5g14+OKD7VwhqGXwuW/AA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=226eff5b5043790a issued_at=2026-03-11T19:44:50.787871+00:00 artifact=bundle/.agents/skills/omg/AGENTS.fragment.md sha256=bfab46adfdb8a2b5ea760dd4c8680bb91f0bde4b3431de12a5518810bda0bf78"
+  }
+}

package/dist/public/attestations/bundle/.agents/skills/omg/algorithms/SKILL.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+kqLRwma50P8XeGwmnLZf7XlXeiOd7Xat0W0OT4quyxNLsxhk8QHzhiaShnZXy65nlwEVv5Qn+Y5um11xx25ADQ==
+trusted comment: type=omg-slsa-v1 keyid=84f37a2231baed88 issued_at=2026-03-11T19:44:50.789051+00:00 artifact=bundle/.agents/skills/omg/algorithms/SKILL.md sha256=48042e7ab674ef67c2d8a71a75abdd81aeee4363cb5e97c775c320d4edab33fb
+Pr+J4C5//TYWoB1mZYx9tmVTqB+aInZqG1GzPbLuxvgxjPAAtNJPELdwRzXz3WHZKKAG4lFLHFCTx4IzQp8fAw==

package/dist/public/attestations/bundle/.agents/skills/omg/algorithms/SKILL.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.agents/skills/omg/algorithms/SKILL.md",
+      "digest": {
+        "sha256": "48042e7ab674ef67c2d8a71a75abdd81aeee4363cb5e97c775c320d4edab33fb"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:44:50.788911+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:44:50.788911+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "84f37a2231baed88",
+    "value": "untrusted comment: signature from omg local signing key\nkqLRwma50P8XeGwmnLZf7XlXeiOd7Xat0W0OT4quyxNLsxhk8QHzhiaShnZXy65nlwEVv5Qn+Y5um11xx25ADQ==\ntrusted comment: type=omg-slsa-v1 keyid=84f37a2231baed88 issued_at=2026-03-11T19:44:50.789051+00:00 artifact=bundle/.agents/skills/omg/algorithms/SKILL.md sha256=48042e7ab674ef67c2d8a71a75abdd81aeee4363cb5e97c775c320d4edab33fb\nPr+J4C5//TYWoB1mZYx9tmVTqB+aInZqG1GzPbLuxvgxjPAAtNJPELdwRzXz3WHZKKAG4lFLHFCTx4IzQp8fAw==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=84f37a2231baed88 issued_at=2026-03-11T19:44:50.789051+00:00 artifact=bundle/.agents/skills/omg/algorithms/SKILL.md sha256=48042e7ab674ef67c2d8a71a75abdd81aeee4363cb5e97c775c320d4edab33fb"
+  }
+}

package/dist/public/attestations/bundle/.agents/skills/omg/algorithms/openai.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+aON4cEecHCzE/f2uBen/DgHEGGejQTEzKr5wukukajNpC4BkHv6fSCG+eO2zVYzxhuyA5Ot6RCg95c0SSqVJBA==
+trusted comment: type=omg-slsa-v1 keyid=2ea40be85f7f7355 issued_at=2026-03-11T19:44:50.789736+00:00 artifact=bundle/.agents/skills/omg/algorithms/openai.yaml sha256=6196d26b4daf429292565142d3ed7233024402cc9206fd5df9e5f848231a79c6
+EwXj0MjahIJ5sQCICL+ZG3aCPRJrIlwIhTij/eud2RGFpMRU/xEhn6bOY94vBg2mKq8t5wOIFR0WzDLWt+u6Cg==

package/dist/public/attestations/bundle/.agents/skills/omg/algorithms/openai.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.agents/skills/omg/algorithms/openai.yaml",
+      "digest": {
+        "sha256": "6196d26b4daf429292565142d3ed7233024402cc9206fd5df9e5f848231a79c6"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:44:50.789616+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:44:50.789616+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "2ea40be85f7f7355",
+    "value": "untrusted comment: signature from omg local signing key\naON4cEecHCzE/f2uBen/DgHEGGejQTEzKr5wukukajNpC4BkHv6fSCG+eO2zVYzxhuyA5Ot6RCg95c0SSqVJBA==\ntrusted comment: type=omg-slsa-v1 keyid=2ea40be85f7f7355 issued_at=2026-03-11T19:44:50.789736+00:00 artifact=bundle/.agents/skills/omg/algorithms/openai.yaml sha256=6196d26b4daf429292565142d3ed7233024402cc9206fd5df9e5f848231a79c6\nEwXj0MjahIJ5sQCICL+ZG3aCPRJrIlwIhTij/eud2RGFpMRU/xEhn6bOY94vBg2mKq8t5wOIFR0WzDLWt+u6Cg==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=2ea40be85f7f7355 issued_at=2026-03-11T19:44:50.789736+00:00 artifact=bundle/.agents/skills/omg/algorithms/openai.yaml sha256=6196d26b4daf429292565142d3ed7233024402cc9206fd5df9e5f848231a79c6"
+  }
+}

package/dist/public/attestations/bundle/.agents/skills/omg/api-twin/SKILL.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+pG/GhXo+v9g/O0XIL9/smwhSFVUGW0WLQsm7Ro+1W8aD1Jild/d2nL590JudGjUPp5QNkV472XuOI8vspDUkBQ==
+trusted comment: type=omg-slsa-v1 keyid=8e4267d79caaf751 issued_at=2026-03-11T19:44:50.790395+00:00 artifact=bundle/.agents/skills/omg/api-twin/SKILL.md sha256=b394b7779173318ed29662c3c11bfa05b5d037d3a927b16bea28560a62752437
+mLVe8KA9jWNsH/espwAep0dt/0Qaov1rKqWATsQd/lVIA4dFiF60F1nUngbGDgE5erUq1oXh5cyLJCIIhSqjAA==

package/dist/public/attestations/bundle/.agents/skills/omg/api-twin/SKILL.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.agents/skills/omg/api-twin/SKILL.md",
+      "digest": {
+        "sha256": "b394b7779173318ed29662c3c11bfa05b5d037d3a927b16bea28560a62752437"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:44:50.790279+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:44:50.790279+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "8e4267d79caaf751",
+    "value": "untrusted comment: signature from omg local signing key\npG/GhXo+v9g/O0XIL9/smwhSFVUGW0WLQsm7Ro+1W8aD1Jild/d2nL590JudGjUPp5QNkV472XuOI8vspDUkBQ==\ntrusted comment: type=omg-slsa-v1 keyid=8e4267d79caaf751 issued_at=2026-03-11T19:44:50.790395+00:00 artifact=bundle/.agents/skills/omg/api-twin/SKILL.md sha256=b394b7779173318ed29662c3c11bfa05b5d037d3a927b16bea28560a62752437\nmLVe8KA9jWNsH/espwAep0dt/0Qaov1rKqWATsQd/lVIA4dFiF60F1nUngbGDgE5erUq1oXh5cyLJCIIhSqjAA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=8e4267d79caaf751 issued_at=2026-03-11T19:44:50.790395+00:00 artifact=bundle/.agents/skills/omg/api-twin/SKILL.md sha256=b394b7779173318ed29662c3c11bfa05b5d037d3a927b16bea28560a62752437"
+  }
+}

package/dist/public/attestations/bundle/.agents/skills/omg/api-twin/openai.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+xQjvxQzulnFd6JtEFZ33NHMkNJu4fi32M5/q1kvpGjbq6EOtq9eShbBttush+b7CvDzisttbsLe9gkXXq/00Cg==
+trusted comment: type=omg-slsa-v1 keyid=10644e8198a75e92 issued_at=2026-03-11T19:44:50.791043+00:00 artifact=bundle/.agents/skills/omg/api-twin/openai.yaml sha256=8b711205c230c16695702b1eeeb426d844aa76a87c55f220298cdaf105ceee1d
+rUSoeTYDC7IX4x+dbQkH+AlWR1359XtpLAlXdcb/M//WSDCCvtuoCumXlNg1zXjNQYruukGfCVPjU7IoHVw4BA==

package/dist/public/attestations/bundle/.agents/skills/omg/api-twin/openai.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.agents/skills/omg/api-twin/openai.yaml",
+      "digest": {
+        "sha256": "8b711205c230c16695702b1eeeb426d844aa76a87c55f220298cdaf105ceee1d"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:44:50.790925+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:44:50.790925+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "10644e8198a75e92",
+    "value": "untrusted comment: signature from omg local signing key\nxQjvxQzulnFd6JtEFZ33NHMkNJu4fi32M5/q1kvpGjbq6EOtq9eShbBttush+b7CvDzisttbsLe9gkXXq/00Cg==\ntrusted comment: type=omg-slsa-v1 keyid=10644e8198a75e92 issued_at=2026-03-11T19:44:50.791043+00:00 artifact=bundle/.agents/skills/omg/api-twin/openai.yaml sha256=8b711205c230c16695702b1eeeb426d844aa76a87c55f220298cdaf105ceee1d\nrUSoeTYDC7IX4x+dbQkH+AlWR1359XtpLAlXdcb/M//WSDCCvtuoCumXlNg1zXjNQYruukGfCVPjU7IoHVw4BA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=10644e8198a75e92 issued_at=2026-03-11T19:44:50.791043+00:00 artifact=bundle/.agents/skills/omg/api-twin/openai.yaml sha256=8b711205c230c16695702b1eeeb426d844aa76a87c55f220298cdaf105ceee1d"
+  }
+}

package/dist/public/attestations/bundle/.agents/skills/omg/claim-judge/SKILL.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+WHjgISHfhEU9064WEBhlzRu36AjTI7D2a4i/ksD2aAb9Q9UvL7W39vJjjkbcYk34cWQPA97ghUAEC8fvFX3IBQ==
+trusted comment: type=omg-slsa-v1 keyid=a51a3810570e388e issued_at=2026-03-11T19:44:50.791659+00:00 artifact=bundle/.agents/skills/omg/claim-judge/SKILL.md sha256=cc65993357813c41fb81502de8781743e84e529088da19dbf8735e0a22f8519c
+3Cv13aOCT1ZfdG3eICLzYULu8eNGQwfmyP5TNfiSq+/OIcArX3pIz/irXaPvRmWXp+vEUVZ29yr2/GATaYiICg==

package/dist/public/attestations/bundle/.agents/skills/omg/claim-judge/SKILL.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.agents/skills/omg/claim-judge/SKILL.md",
+      "digest": {
+        "sha256": "cc65993357813c41fb81502de8781743e84e529088da19dbf8735e0a22f8519c"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:44:50.791545+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:44:50.791545+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "a51a3810570e388e",
+    "value": "untrusted comment: signature from omg local signing key\nWHjgISHfhEU9064WEBhlzRu36AjTI7D2a4i/ksD2aAb9Q9UvL7W39vJjjkbcYk34cWQPA97ghUAEC8fvFX3IBQ==\ntrusted comment: type=omg-slsa-v1 keyid=a51a3810570e388e issued_at=2026-03-11T19:44:50.791659+00:00 artifact=bundle/.agents/skills/omg/claim-judge/SKILL.md sha256=cc65993357813c41fb81502de8781743e84e529088da19dbf8735e0a22f8519c\n3Cv13aOCT1ZfdG3eICLzYULu8eNGQwfmyP5TNfiSq+/OIcArX3pIz/irXaPvRmWXp+vEUVZ29yr2/GATaYiICg==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=a51a3810570e388e issued_at=2026-03-11T19:44:50.791659+00:00 artifact=bundle/.agents/skills/omg/claim-judge/SKILL.md sha256=cc65993357813c41fb81502de8781743e84e529088da19dbf8735e0a22f8519c"
+  }
+}

package/dist/public/attestations/bundle/.agents/skills/omg/claim-judge/openai.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+c8Lz1A/DhYJyFNOu6gIyqozL38waPZ1MkY2SPrpvyfx/C4/CdB5Qf17ycEIQFV5Ujmr2c+frF1C4VFpYN5XEBw==
+trusted comment: type=omg-slsa-v1 keyid=d077c0ce0882c146 issued_at=2026-03-11T19:44:50.792345+00:00 artifact=bundle/.agents/skills/omg/claim-judge/openai.yaml sha256=b64dc801159a6e9adcd704326122f64c1bad7f71d87f22ada47918f7527151cc
+qdsSAd/+bvWgbHHuXCI5yZy+3xEb+/PciwlzCXVWfuNbdbIVeeHF1HO+AFcmEY7EFnlcVHMyXlQm7z0byXtTBA==

package/dist/public/attestations/bundle/.agents/skills/omg/claim-judge/openai.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.agents/skills/omg/claim-judge/openai.yaml",
+      "digest": {
+        "sha256": "b64dc801159a6e9adcd704326122f64c1bad7f71d87f22ada47918f7527151cc"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:44:50.792234+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:44:50.792234+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "d077c0ce0882c146",
+    "value": "untrusted comment: signature from omg local signing key\nc8Lz1A/DhYJyFNOu6gIyqozL38waPZ1MkY2SPrpvyfx/C4/CdB5Qf17ycEIQFV5Ujmr2c+frF1C4VFpYN5XEBw==\ntrusted comment: type=omg-slsa-v1 keyid=d077c0ce0882c146 issued_at=2026-03-11T19:44:50.792345+00:00 artifact=bundle/.agents/skills/omg/claim-judge/openai.yaml sha256=b64dc801159a6e9adcd704326122f64c1bad7f71d87f22ada47918f7527151cc\nqdsSAd/+bvWgbHHuXCI5yZy+3xEb+/PciwlzCXVWfuNbdbIVeeHF1HO+AFcmEY7EFnlcVHMyXlQm7z0byXtTBA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=d077c0ce0882c146 issued_at=2026-03-11T19:44:50.792345+00:00 artifact=bundle/.agents/skills/omg/claim-judge/openai.yaml sha256=b64dc801159a6e9adcd704326122f64c1bad7f71d87f22ada47918f7527151cc"
+  }
+}

package/dist/public/attestations/bundle/.agents/skills/omg/codex-mcp.toml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+VHuQnuq/bE/zCm+hIXwRMVRUPlD2zP5Fc/q2vDp5ldW/1PLPFmQSp7QWB9A+cqWcCcMdbABS3i0pcO+rw1P5AQ==
+trusted comment: type=omg-slsa-v1 keyid=ab91b9d58c3123d6 issued_at=2026-03-11T19:44:50.793101+00:00 artifact=bundle/.agents/skills/omg/codex-mcp.toml sha256=a56de208a369a2b318d2e66e150eef4cba1fac1ecf32bda6db1a1e4b65db7311
+95OoOVlez9Flh/TD5LyEH/0khEMB88XzrYkUHrlTI2mORXjnQ+blbE4C4vXgYEK5qBpNC6H/RvTFcaUsYlL1AA==

package/dist/public/attestations/bundle/.agents/skills/omg/codex-mcp.toml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.agents/skills/omg/codex-mcp.toml",
+      "digest": {
+        "sha256": "a56de208a369a2b318d2e66e150eef4cba1fac1ecf32bda6db1a1e4b65db7311"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:44:50.792933+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:44:50.792933+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "ab91b9d58c3123d6",
+    "value": "untrusted comment: signature from omg local signing key\nVHuQnuq/bE/zCm+hIXwRMVRUPlD2zP5Fc/q2vDp5ldW/1PLPFmQSp7QWB9A+cqWcCcMdbABS3i0pcO+rw1P5AQ==\ntrusted comment: type=omg-slsa-v1 keyid=ab91b9d58c3123d6 issued_at=2026-03-11T19:44:50.793101+00:00 artifact=bundle/.agents/skills/omg/codex-mcp.toml sha256=a56de208a369a2b318d2e66e150eef4cba1fac1ecf32bda6db1a1e4b65db7311\n95OoOVlez9Flh/TD5LyEH/0khEMB88XzrYkUHrlTI2mORXjnQ+blbE4C4vXgYEK5qBpNC6H/RvTFcaUsYlL1AA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=ab91b9d58c3123d6 issued_at=2026-03-11T19:44:50.793101+00:00 artifact=bundle/.agents/skills/omg/codex-mcp.toml sha256=a56de208a369a2b318d2e66e150eef4cba1fac1ecf32bda6db1a1e4b65db7311"
+  }
+}

package/dist/public/attestations/bundle/.agents/skills/omg/codex-rules.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+JDbMBXVCevaBn0FQyzsHY2cIVP35cK5oKtdbonFlMED7vB5wP8gEtBxzKcJFGU/ssaQI9h2Tu7mHb4u4BS/aCQ==
+trusted comment: type=omg-slsa-v1 keyid=00cf4096aa303e20 issued_at=2026-03-11T19:44:50.796492+00:00 artifact=bundle/.agents/skills/omg/codex-rules.md sha256=939b128a1904e0d8b2b21208a308b558bcd51bd6c0de32e60e59d6744821e9d0
+10b3vQUj0pN3sKzSNL1l6ux3Rz+jxPz8SORTtKhiGNQQl49H6coczIyuqs5XF9hzzh9oicmbJyrypXsnitzgDA==

package/dist/public/attestations/bundle/.agents/skills/omg/codex-rules.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.agents/skills/omg/codex-rules.md",
+      "digest": {
+        "sha256": "939b128a1904e0d8b2b21208a308b558bcd51bd6c0de32e60e59d6744821e9d0"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:44:50.796340+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:44:50.796340+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "00cf4096aa303e20",
+    "value": "untrusted comment: signature from omg local signing key\nJDbMBXVCevaBn0FQyzsHY2cIVP35cK5oKtdbonFlMED7vB5wP8gEtBxzKcJFGU/ssaQI9h2Tu7mHb4u4BS/aCQ==\ntrusted comment: type=omg-slsa-v1 keyid=00cf4096aa303e20 issued_at=2026-03-11T19:44:50.796492+00:00 artifact=bundle/.agents/skills/omg/codex-rules.md sha256=939b128a1904e0d8b2b21208a308b558bcd51bd6c0de32e60e59d6744821e9d0\n10b3vQUj0pN3sKzSNL1l6ux3Rz+jxPz8SORTtKhiGNQQl49H6coczIyuqs5XF9hzzh9oicmbJyrypXsnitzgDA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=00cf4096aa303e20 issued_at=2026-03-11T19:44:50.796492+00:00 artifact=bundle/.agents/skills/omg/codex-rules.md sha256=939b128a1904e0d8b2b21208a308b558bcd51bd6c0de32e60e59d6744821e9d0"
+  }
+}

package/dist/public/attestations/bundle/.agents/skills/omg/control-plane/SKILL.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+Ty0ume86N7SB5HqUVhlFpMaEWOkiJIZJJlEjQ5i6pV80Dk2VFuESv3t/dTGo7NuO8fFm1PXt9EuRERLKGzBUDA==
+trusted comment: type=omg-slsa-v1 keyid=901a60c8bc8afc1b issued_at=2026-03-11T19:44:50.797217+00:00 artifact=bundle/.agents/skills/omg/control-plane/SKILL.md sha256=5c6a077e0aaf6c52c5ba572e4b50ee9e250ace13807e172fd4296da47511b767
+V0ms4DFpgjEq/uZ+djRvfZ1lsXijnlGBIL10O9zoOcikHrDCO2BvVWg8PWnuIPYp10t+DW5C6yWPg3uKLFWjAw==

package/dist/public/attestations/bundle/.agents/skills/omg/control-plane/SKILL.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.agents/skills/omg/control-plane/SKILL.md",
+      "digest": {
+        "sha256": "5c6a077e0aaf6c52c5ba572e4b50ee9e250ace13807e172fd4296da47511b767"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:44:50.797093+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:44:50.797093+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "901a60c8bc8afc1b",
+    "value": "untrusted comment: signature from omg local signing key\nTy0ume86N7SB5HqUVhlFpMaEWOkiJIZJJlEjQ5i6pV80Dk2VFuESv3t/dTGo7NuO8fFm1PXt9EuRERLKGzBUDA==\ntrusted comment: type=omg-slsa-v1 keyid=901a60c8bc8afc1b issued_at=2026-03-11T19:44:50.797217+00:00 artifact=bundle/.agents/skills/omg/control-plane/SKILL.md sha256=5c6a077e0aaf6c52c5ba572e4b50ee9e250ace13807e172fd4296da47511b767\nV0ms4DFpgjEq/uZ+djRvfZ1lsXijnlGBIL10O9zoOcikHrDCO2BvVWg8PWnuIPYp10t+DW5C6yWPg3uKLFWjAw==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=901a60c8bc8afc1b issued_at=2026-03-11T19:44:50.797217+00:00 artifact=bundle/.agents/skills/omg/control-plane/SKILL.md sha256=5c6a077e0aaf6c52c5ba572e4b50ee9e250ace13807e172fd4296da47511b767"
+  }
+}