@trac3er/oh-my-god 2.1.4 → 2.1.7

package/dist/public/attestations/bundle/registry/bundles/secure-worktree-pipeline.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/secure-worktree-pipeline.yaml",
+      "digest": {
+        "sha256": "5d75ac83ab9edd69e019d1473928e8bd15168c494796078203f2379fe365e311"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:44:50.860987+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:44:50.860987+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "fa348cb4b5d14af6",
+    "value": "untrusted comment: signature from omg local signing key\nXVF6etcOuJ/cxlrA7r59BFnuMEbgYFh5iQEu5BodDrLb2cBTa/4soLe9hCxZ8Kgc3X+PR2ODGV6HSvy9hrSBAQ==\ntrusted comment: type=omg-slsa-v1 keyid=fa348cb4b5d14af6 issued_at=2026-03-11T19:44:50.861138+00:00 artifact=bundle/registry/bundles/secure-worktree-pipeline.yaml sha256=5d75ac83ab9edd69e019d1473928e8bd15168c494796078203f2379fe365e311\n4MReEouAvK3BH0p2MJaa3JCAGz3+KRSHMTxl6iSD8auN1XJ1SVRoa458SdBcyBLlam8LWUsLZ8wTA6jp+xsaBQ==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=fa348cb4b5d14af6 issued_at=2026-03-11T19:44:50.861138+00:00 artifact=bundle/registry/bundles/secure-worktree-pipeline.yaml sha256=5d75ac83ab9edd69e019d1473928e8bd15168c494796078203f2379fe365e311"
+  }
+}

package/dist/public/attestations/bundle/registry/bundles/security-check.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+MVw9CDDxbeGjxsVm9QbRvByRmMPEEqv8fcI76gudkRGC9GZV4bLJaX+TLDtm9Gi+Lk+Bj/RLq02CySMoNuf8Cg==
+trusted comment: type=omg-slsa-v1 keyid=6e597d7083c58b01 issued_at=2026-03-11T19:44:50.861920+00:00 artifact=bundle/registry/bundles/security-check.yaml sha256=c94db611d2fcc1df64fb28a2cc6ffaa21c2a1934de966bc0b332aa122aad521a
+PlC5mT2xxPp3+rSYkrwFmzqKUw/xzM38X19qzFDTQ0lIzWke3RMtXG1GQQBQU/uRB3Ry0QK+PNfmd4VcKTylCg==

package/dist/public/attestations/bundle/registry/bundles/security-check.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/security-check.yaml",
+      "digest": {
+        "sha256": "c94db611d2fcc1df64fb28a2cc6ffaa21c2a1934de966bc0b332aa122aad521a"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:44:50.861802+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:44:50.861802+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "6e597d7083c58b01",
+    "value": "untrusted comment: signature from omg local signing key\nMVw9CDDxbeGjxsVm9QbRvByRmMPEEqv8fcI76gudkRGC9GZV4bLJaX+TLDtm9Gi+Lk+Bj/RLq02CySMoNuf8Cg==\ntrusted comment: type=omg-slsa-v1 keyid=6e597d7083c58b01 issued_at=2026-03-11T19:44:50.861920+00:00 artifact=bundle/registry/bundles/security-check.yaml sha256=c94db611d2fcc1df64fb28a2cc6ffaa21c2a1934de966bc0b332aa122aad521a\nPlC5mT2xxPp3+rSYkrwFmzqKUw/xzM38X19qzFDTQ0lIzWke3RMtXG1GQQBQU/uRB3Ry0QK+PNfmd4VcKTylCg==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=6e597d7083c58b01 issued_at=2026-03-11T19:44:50.861920+00:00 artifact=bundle/registry/bundles/security-check.yaml sha256=c94db611d2fcc1df64fb28a2cc6ffaa21c2a1934de966bc0b332aa122aad521a"
+  }
+}

package/dist/public/attestations/bundle/registry/bundles/test-intent-lock.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+DNa6/TKN73yYARKod5DFj/lDzbD+s4DSTQIFym9DZtEMnL/j7zHmE/l54SVjjgQ4OVSSGlz5VTf+O/YbfFoXDg==
+trusted comment: type=omg-slsa-v1 keyid=1b8fb1fabd951cac issued_at=2026-03-11T19:44:50.862609+00:00 artifact=bundle/registry/bundles/test-intent-lock.yaml sha256=08bb64f5d5625fd5b236f27238cc0b42683807eb29b4013a49cc6ba25ef37649
+q2i4LY6lOebulZAPVkv4FEDPZIlkcAxr58qfOWSEb/wI1v9x6/uCAx7q8RK+jIeT1xvl1b04nBM4B+ToEYP/Cg==

package/dist/public/attestations/bundle/registry/bundles/test-intent-lock.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/test-intent-lock.yaml",
+      "digest": {
+        "sha256": "08bb64f5d5625fd5b236f27238cc0b42683807eb29b4013a49cc6ba25ef37649"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:44:50.862494+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:44:50.862494+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "1b8fb1fabd951cac",
+    "value": "untrusted comment: signature from omg local signing key\nDNa6/TKN73yYARKod5DFj/lDzbD+s4DSTQIFym9DZtEMnL/j7zHmE/l54SVjjgQ4OVSSGlz5VTf+O/YbfFoXDg==\ntrusted comment: type=omg-slsa-v1 keyid=1b8fb1fabd951cac issued_at=2026-03-11T19:44:50.862609+00:00 artifact=bundle/registry/bundles/test-intent-lock.yaml sha256=08bb64f5d5625fd5b236f27238cc0b42683807eb29b4013a49cc6ba25ef37649\nq2i4LY6lOebulZAPVkv4FEDPZIlkcAxr58qfOWSEb/wI1v9x6/uCAx7q8RK+jIeT1xvl1b04nBM4B+ToEYP/Cg==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=1b8fb1fabd951cac issued_at=2026-03-11T19:44:50.862609+00:00 artifact=bundle/registry/bundles/test-intent-lock.yaml sha256=08bb64f5d5625fd5b236f27238cc0b42683807eb29b4013a49cc6ba25ef37649"
+  }
+}

package/dist/public/attestations/bundle/registry/bundles/tracebank.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+bFD/fr9MuzKlDho23ipWt8yreTgqBfcTkQ/orRidgBqWGiAMTuX43ZqsepUDyQoHjSSdVGtWtMq9mnbMkvVRCw==
+trusted comment: type=omg-slsa-v1 keyid=438723f82e3e4629 issued_at=2026-03-11T19:44:50.863247+00:00 artifact=bundle/registry/bundles/tracebank.yaml sha256=ff2f9fb605e84292a8d913138bfb1d1ff0021ff19bda2032fb7463ceeb4b2628
+2IM4iGWnUXjKhG1/u27sXpQdASslSQSFdp0oCi+ap6fwhc1pMpiwXZsK9P4XuuO/HuYYaJwHCWdSScyaP0vzDg==

package/dist/public/attestations/bundle/registry/bundles/tracebank.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/tracebank.yaml",
+      "digest": {
+        "sha256": "ff2f9fb605e84292a8d913138bfb1d1ff0021ff19bda2032fb7463ceeb4b2628"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:44:50.863133+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:44:50.863133+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "438723f82e3e4629",
+    "value": "untrusted comment: signature from omg local signing key\nbFD/fr9MuzKlDho23ipWt8yreTgqBfcTkQ/orRidgBqWGiAMTuX43ZqsepUDyQoHjSSdVGtWtMq9mnbMkvVRCw==\ntrusted comment: type=omg-slsa-v1 keyid=438723f82e3e4629 issued_at=2026-03-11T19:44:50.863247+00:00 artifact=bundle/registry/bundles/tracebank.yaml sha256=ff2f9fb605e84292a8d913138bfb1d1ff0021ff19bda2032fb7463ceeb4b2628\n2IM4iGWnUXjKhG1/u27sXpQdASslSQSFdp0oCi+ap6fwhc1pMpiwXZsK9P4XuuO/HuYYaJwHCWdSScyaP0vzDg==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=438723f82e3e4629 issued_at=2026-03-11T19:44:50.863247+00:00 artifact=bundle/registry/bundles/tracebank.yaml sha256=ff2f9fb605e84292a8d913138bfb1d1ff0021ff19bda2032fb7463ceeb4b2628"
+  }
+}

package/dist/public/attestations/bundle/registry/bundles/vision.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+tOo6F6Tl1KSkqEjTRp0GFMS5xyM83ZiCq3Nac+uhlLpM/eg4/9dwm6OIL6JY21AeVDi+haOgISGSkZ9DKqnpCQ==
+trusted comment: type=omg-slsa-v1 keyid=fb12294c0d86fd95 issued_at=2026-03-11T19:44:50.863920+00:00 artifact=bundle/registry/bundles/vision.yaml sha256=efac126905e8e5beccfdfedaf7186c803b6ab6c24bdc63b19cb94c74bea4ab1b
+Uhx0ra37tNEb0QGrSzUhFh+EHljprvKJNDSG7GUAJYsmIqgEEYUzZ6YZGGGcHOgow6lJRGyDRnCelO8xvdPfBQ==

package/dist/public/attestations/bundle/registry/bundles/vision.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/vision.yaml",
+      "digest": {
+        "sha256": "efac126905e8e5beccfdfedaf7186c803b6ab6c24bdc63b19cb94c74bea4ab1b"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:44:50.863804+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:44:50.863804+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "fb12294c0d86fd95",
+    "value": "untrusted comment: signature from omg local signing key\ntOo6F6Tl1KSkqEjTRp0GFMS5xyM83ZiCq3Nac+uhlLpM/eg4/9dwm6OIL6JY21AeVDi+haOgISGSkZ9DKqnpCQ==\ntrusted comment: type=omg-slsa-v1 keyid=fb12294c0d86fd95 issued_at=2026-03-11T19:44:50.863920+00:00 artifact=bundle/registry/bundles/vision.yaml sha256=efac126905e8e5beccfdfedaf7186c803b6ab6c24bdc63b19cb94c74bea4ab1b\nUhx0ra37tNEb0QGrSzUhFh+EHljprvKJNDSG7GUAJYsmIqgEEYUzZ6YZGGGcHOgow6lJRGyDRnCelO8xvdPfBQ==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=fb12294c0d86fd95 issued_at=2026-03-11T19:44:50.863920+00:00 artifact=bundle/registry/bundles/vision.yaml sha256=efac126905e8e5beccfdfedaf7186c803b6ab6c24bdc63b19cb94c74bea4ab1b"
+  }
+}

package/dist/public/attestations/bundle/registry/omg-capability.schema.json.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+cqlrmXYc16MsSzxzA2o1neRAtANMsiteLfk42UihZtzU/BCEZ/GI717R9MMDNCSp6mVFUKEdYkVN6DE6pG03Dw==
+trusted comment: type=omg-slsa-v1 keyid=64d0e41944d09108 issued_at=2026-03-11T19:44:50.864576+00:00 artifact=bundle/registry/omg-capability.schema.json sha256=e2975775ab890b495a55ebe2816a854ec86402f8acf41cfc11572682d55b2a49
+ycNMqOUVbNT1QPqoY/h3/+2nBuLD3xCa9sg7SF44TH0mf8UAPuerk2P1C2Jtef4LCad51E7+Pq0CjQbCCMmFBg==

package/dist/public/attestations/bundle/registry/omg-capability.schema.json.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/omg-capability.schema.json",
+      "digest": {
+        "sha256": "e2975775ab890b495a55ebe2816a854ec86402f8acf41cfc11572682d55b2a49"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:44:50.864462+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:44:50.864462+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "64d0e41944d09108",
+    "value": "untrusted comment: signature from omg local signing key\ncqlrmXYc16MsSzxzA2o1neRAtANMsiteLfk42UihZtzU/BCEZ/GI717R9MMDNCSp6mVFUKEdYkVN6DE6pG03Dw==\ntrusted comment: type=omg-slsa-v1 keyid=64d0e41944d09108 issued_at=2026-03-11T19:44:50.864576+00:00 artifact=bundle/registry/omg-capability.schema.json sha256=e2975775ab890b495a55ebe2816a854ec86402f8acf41cfc11572682d55b2a49\nycNMqOUVbNT1QPqoY/h3/+2nBuLD3xCa9sg7SF44TH0mf8UAPuerk2P1C2Jtef4LCad51E7+Pq0CjQbCCMmFBg==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=64d0e41944d09108 issued_at=2026-03-11T19:44:50.864576+00:00 artifact=bundle/registry/omg-capability.schema.json sha256=e2975775ab890b495a55ebe2816a854ec86402f8acf41cfc11572682d55b2a49"
+  }
+}

package/dist/public/attestations/bundle/settings.json.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+UFgmO6Pffk823GrVCpkD9t4mZ1xNpghQ3DfyUc1CkZRobNjTvIlpNNo3Mcq9M92n7DFsUw0Cr70CKPR6He20DA==
+trusted comment: type=omg-slsa-v1 keyid=9160089ad4193029 issued_at=2026-03-11T19:44:50.865204+00:00 artifact=bundle/settings.json sha256=d18d8c98d859a2a12d9e75bdb0db741c39b3b73bf44f8ee6bb4cc507c361ff30
+YBpAT9Tr9nixXXYh3r9hKag4jolFes4pdJUz7R7aB5f10MDuvReTYmNUfUU1EPMhXuvKc/3IvLWb/BDIkSfZCg==

package/dist/public/attestations/bundle/settings.json.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/settings.json",
+      "digest": {
+        "sha256": "d18d8c98d859a2a12d9e75bdb0db741c39b3b73bf44f8ee6bb4cc507c361ff30"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:44:50.865092+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:44:50.865092+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "9160089ad4193029",
+    "value": "untrusted comment: signature from omg local signing key\nUFgmO6Pffk823GrVCpkD9t4mZ1xNpghQ3DfyUc1CkZRobNjTvIlpNNo3Mcq9M92n7DFsUw0Cr70CKPR6He20DA==\ntrusted comment: type=omg-slsa-v1 keyid=9160089ad4193029 issued_at=2026-03-11T19:44:50.865204+00:00 artifact=bundle/settings.json sha256=d18d8c98d859a2a12d9e75bdb0db741c39b3b73bf44f8ee6bb4cc507c361ff30\nYBpAT9Tr9nixXXYh3r9hKag4jolFes4pdJUz7R7aB5f10MDuvReTYmNUfUU1EPMhXuvKc/3IvLWb/BDIkSfZCg==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=9160089ad4193029 issued_at=2026-03-11T19:44:50.865204+00:00 artifact=bundle/settings.json sha256=d18d8c98d859a2a12d9e75bdb0db741c39b3b73bf44f8ee6bb4cc507c361ff30"
+  }
+}

package/dist/public/bundle/.agents/skills/omg/AGENTS.fragment.md

@@ -17,10 +17,25 @@ The following paths require tier-gated review before mutation:
 - `.codex/**`
 - `.claude/**`
 
+## Release Audit
+
+Release readiness requires claim and compliance outcomes:
+
+- `claim_judge`
+- `compliance_governor`
+- `execution_primitives`
+Attestation requirements:
+- `registry.verify_artifact.sign_artifact_statement`
+- `registry.verify_artifact.verify_artifact_statement`
+
 ## Evidence Contract
 
 Every production action must emit evidence containing these fields:
 
+- `attestation_statement`
+- `attestation_verifier`
+- `claim_judge_verdict`
+- `compliance_verdict`
 - `executor`
 - `lineage`
 - `timestamp`

package/dist/public/bundle/.agents/skills/omg/control-plane/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: omg-control-plane
-description: "Canonical production control plane bundle for Claude and Codex."
+description: "Canonical production control plane bundle for Claude, Codex, Gemini, and Kimi."
 ---
 
 # OMG Control Plane

package/dist/public/bundle/.agents/skills/omg/control-plane/openai.yaml

@@ -1,5 +1,5 @@
 name: omg-control-plane
-description: "Canonical production control plane bundle for Claude and Codex."
+description: "Canonical production control plane bundle for Claude, Codex, Gemini, and Kimi."
 allow_implicit_invocation: false
 metadata:
   channel: public

package/dist/public/bundle/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
   },
   "metadata": {
     "description": "OMG - Oh-My-God for Claude Code and supported agent hosts",
-    "version": "2.1.4",
+    "version": "2.1.7",
     "homepage": "https://github.com/trac3er00/OMG",
     "repository": "https://github.com/trac3er00/OMG"
   },
@@ -14,7 +14,7 @@
     {
       "name": "omg",
       "description": "OMG plugin layer for Claude Code and supported agent hosts with native setup, orchestration, and interop.",
-      "version": "2.1.4",
+      "version": "2.1.7",
       "source": "./",
       "author": {
         "name": "trac3er00"
@@ -32,5 +32,5 @@
       ]
     }
   ],
-  "version": "2.1.4"
+  "version": "2.1.7"
 }

package/dist/public/bundle/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "omg",
-  "version": "2.1.4",
+  "version": "2.1.7",
   "description": "OMG plugin layer for Claude Code with native setup, orchestration, and interop.",
   "author": {
     "name": "trac3er00"

package/dist/public/bundle/OMG_COMPAT_CONTRACT.md

@@ -1,6 +1,6 @@
 ---
 title: OMG Production Control Plane
-version: 2.1.4
+version: 2.1.7
 canonical_hosts:
   - claude
   - codex

package/dist/public/bundle/plugins/advanced/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "omg-advanced",
-  "version": "2.1.4",
+  "version": "2.1.7",
   "description": "Advanced OMG commands - deep planning, learning, code review, and specialized workflows",
   "type": "omg-plugin",
   "commands": {

package/dist/public/bundle/registry/bundles/algorithms.yaml

@@ -1,6 +1,6 @@
 id: algorithms
 kind: domain-pack
-version: 2.1.4
+version: 2.1.7
 title: OMG Algorithms Pack
 description: Determinism and benchmark attachments for algorithm-heavy work.
 hosts:

package/dist/public/bundle/registry/bundles/api-twin.yaml

@@ -1,6 +1,6 @@
 id: api-twin
 kind: simulation
-version: 2.1.4
+version: 2.1.7
 title: OMG API Twin
 description: Versioned endpoint cassette replay with latency, drift, and cost reporting.
 hosts:

package/dist/public/bundle/registry/bundles/claim-judge.yaml

@@ -1,6 +1,6 @@
 id: claim-judge
 kind: proof
-version: 2.1.4
+version: 2.1.7
 title: OMG Claim Judge
 description: Evidence-backed claim validator for structured release and completion claims.
 hosts:

package/dist/public/bundle/registry/bundles/control-plane.yaml

@@ -1,11 +1,13 @@
 id: control-plane
 kind: skill
-version: 2.1.4
+version: 2.1.7
 title: OMG Control Plane
-description: Canonical production control plane bundle for Claude and Codex.
+description: Canonical production control plane bundle for Claude, Codex, Gemini, and Kimi.
 hosts:
   - claude
   - codex
+  - gemini
+  - kimi
 assets:
   references:
     - OMG_COMPAT_CONTRACT.md
@@ -109,6 +111,10 @@ policy_model:
     executor: executor
     trace_id: trace_id
     lineage: lineage
+    attestation_statement: attestation_statement
+    attestation_verifier: attestation_verifier
+    claim_judge_verdict: claim_judge_verdict
+    compliance_verdict: compliance_verdict
   host_rules:
     claude:
       compilation_targets:
@@ -144,6 +150,26 @@ policy_model:
       automations:
         - contract-compile
         - release-readiness
+    gemini:
+      compilation_targets:
+        - .gemini/settings.json
+      mcp:
+        - omg-control
+      skills:
+        - omg/control-plane
+      automations:
+        - contract-compile
+        - release-readiness
+    kimi:
+      compilation_targets:
+        - .kimi/mcp.json
+      mcp:
+        - omg-control
+      skills:
+        - omg/control-plane
+      automations:
+        - contract-compile
+        - release-readiness
 channel_overrides:
   public:
     posture: self-serve

package/dist/public/bundle/registry/bundles/data-lineage.yaml

@@ -1,6 +1,6 @@
 id: data-lineage
 kind: provenance
-version: 2.1.4
+version: 2.1.7
 title: OMG Data Lineage
 description: Provenance and privacy tracking for traces, fixtures, examples, and synthetic artifacts.
 hosts:

package/dist/public/bundle/registry/bundles/delta-classifier.yaml

@@ -1,6 +1,6 @@
 id: delta-classifier
 kind: routing
-version: 2.1.4
+version: 2.1.7
 title: OMG Delta Classifier
 description: Change classifier that attaches risk-aware checks, approvals, and packs.
 hosts:

package/dist/public/bundle/registry/bundles/eval-gate.yaml

@@ -1,6 +1,6 @@
 id: eval-gate
 kind: evaluation
-version: 2.1.4
+version: 2.1.7
 title: OMG Eval Gate
 description: Reproducible evaluation gate that blocks regressions before release.
 hosts:

package/dist/public/bundle/registry/bundles/health.yaml

@@ -1,6 +1,6 @@
 id: health
 kind: domain-pack
-version: 2.1.4
+version: 2.1.7
 title: OMG Health Pack
 description: Health-sensitive approvals, provenance, and replay attachments.
 hosts:

package/dist/public/bundle/registry/bundles/hook-governor.yaml

@@ -1,6 +1,6 @@
 id: hook-governor
 kind: governance
-version: 2.1.4
+version: 2.1.7
 title: OMG Hook Governor
 description: Canonical hook ordering, policy reinjection, and protected-path governance.
 hosts:

package/dist/public/bundle/registry/bundles/incident-replay.yaml

@@ -1,6 +1,6 @@
 id: incident-replay
 kind: debugging
-version: 2.1.4
+version: 2.1.7
 title: OMG Incident Replay
 description: Replayable bug packs built from logs, failing tests, traces, and diffs.
 hosts:

package/dist/public/bundle/registry/bundles/lsp-pack.yaml

@@ -1,6 +1,6 @@
 id: lsp-pack
 kind: diagnostics
-version: 2.1.4
+version: 2.1.7
 title: OMG LSP Pack
 description: Optional LSP-backed diagnostics and navigation bundle for production verification.
 hosts:

package/dist/public/bundle/registry/bundles/mcp-fabric.yaml

@@ -1,6 +1,6 @@
 id: mcp-fabric
 kind: mcp
-version: 2.1.4
+version: 2.1.7
 title: OMG MCP Fabric
 description: Tools, prompts, resources, and server instructions for the OMG control plane.
 hosts:

package/dist/public/bundle/registry/bundles/plan-council.yaml

@@ -1,14 +1,19 @@
 id: plan-council
 kind: planning
-version: 2.1.4
+version: 2.1.7
 title: OMG Plan Council
 description: Canonical council-style planning bundle for explicit, evidence-backed deep plans.
 hosts:
   - claude
   - codex
+  - gemini
+  - kimi
 assets:
   references:
     - plugins/advanced/commands/OMG:deep-plan.md
+    - commands/OMG:validate.md
+    - commands/OMG:profile-review.md
+    - commands/OMG:release-audit.md
 invocation_policy:
   user_invocable: true
   model_invocable: false

package/dist/public/bundle/registry/bundles/preflight.yaml

@@ -1,6 +1,6 @@
 id: preflight
 kind: routing
-version: 2.1.4
+version: 2.1.7
 title: OMG Preflight
 description: Repo-aware route selection based on diff, manifests, and classified risk.
 hosts:

package/dist/public/bundle/registry/bundles/proof-gate.yaml

@@ -1,6 +1,6 @@
 id: proof-gate
 kind: proof
-version: 2.1.4
+version: 2.1.7
 title: OMG Proof Gate
 description: Structured release proof gate that binds claims to required evidence artifacts and trace links.
 hosts:

package/dist/public/bundle/registry/bundles/remote-supervisor.yaml

@@ -1,6 +1,6 @@
 id: remote-supervisor
 kind: orchestration
-version: 2.1.4
+version: 2.1.7
 title: OMG Remote Supervisor
 description: Local-only authenticated supervisor sessions for worker orchestration.
 hosts:

package/dist/public/bundle/registry/bundles/robotics.yaml

@@ -1,6 +1,6 @@
 id: robotics
 kind: domain-pack
-version: 2.1.4
+version: 2.1.7
 title: OMG Robotics Pack
 description: Robotics safety policy, replay, and evaluation attachments.
 hosts:

package/dist/public/bundle/registry/bundles/secure-worktree-pipeline.yaml

@@ -1,6 +1,6 @@
 id: secure-worktree-pipeline
 kind: runtime
-version: 2.1.4
+version: 2.1.7
 title: OMG Secure Worktree Pipeline
 description: Ephemeral worktree execution and supervisor-safe worker dispatch for production jobs.
 hosts:

package/dist/public/bundle/registry/bundles/security-check.yaml

@@ -1,6 +1,6 @@
 id: security-check
 kind: security
-version: 2.1.4
+version: 2.1.7
 title: OMG Security Check
 description: Canonical security audit bundle with provenance, trust scoring, and deterministic evidence.
 hosts:

package/dist/public/bundle/registry/bundles/test-intent-lock.yaml

@@ -1,6 +1,6 @@
 id: test-intent-lock
 kind: proof
-version: 2.1.4
+version: 2.1.7
 title: OMG Test Intent Lock
 description: Structured test-delta guard that blocks weakened tests unless explicit override evidence is present.
 hosts:

package/dist/public/bundle/registry/bundles/tracebank.yaml

@@ -1,6 +1,6 @@
 id: tracebank
 kind: evidence
-version: 2.1.4
+version: 2.1.7
 title: OMG Tracebank
 description: Structured plan-to-patch-to-verify trace capture for OMG routes.
 hosts: