@trac3er/oh-my-god 2.1.8 → 2.2.2

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/api-twin.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/api-twin.yaml",
+      "digest": {
+        "sha256": "9341efdbac9ce2d362b90910d921433a31e28ab7309a8d33d305e75a34207d42"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.613978+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.613978+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "96c5c2cea84d2158",
+    "value": "untrusted comment: signature from omg local signing key\n+YFBxme6MK2+n6dhnwoPxPVoCMRn3BpUIDHwLJQtDMML/Vv0Lx2GvTqeyL10rTSu4md0boditEv6mOlqhy3YCw==\ntrusted comment: type=omg-slsa-v1 keyid=96c5c2cea84d2158 issued_at=2026-03-13T21:11:22.614134+00:00 artifact=bundle/registry/bundles/api-twin.yaml sha256=9341efdbac9ce2d362b90910d921433a31e28ab7309a8d33d305e75a34207d42\nhkd33zcaaoL9WRZhQ02yB/0A4e2KV1un+fmTdhxaZDfmlRR4G4l3+KwvFvl+fEQaUyNkCOENWwqmweSBompkBQ==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=96c5c2cea84d2158 issued_at=2026-03-13T21:11:22.614134+00:00 artifact=bundle/registry/bundles/api-twin.yaml sha256=9341efdbac9ce2d362b90910d921433a31e28ab7309a8d33d305e75a34207d42"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/ast-pack.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+wsqFYaeI97juPmEEIKxCMeFF8nKkREVx5ytSMB4lQy3WYUgqxGj6Rq885JTbjmXOQMdhLzajVM0xZcdMswIBDA==
+trusted comment: type=omg-slsa-v1 keyid=2ce4729aa310b5bf issued_at=2026-03-13T21:11:22.614763+00:00 artifact=bundle/registry/bundles/ast-pack.yaml sha256=394cc9168fe138151afa694f34ba504e49827c6e6abb913e42550e34a69fdf31
+mBR79zY3ABd2rM5TEs36+MFjgE6+rdS+p2SNJFrUEDHwPxZukbmV3VnwhH8XPNfItmHe7hhN6WSl0Q2mE2e1Dw==

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/ast-pack.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/ast-pack.yaml",
+      "digest": {
+        "sha256": "394cc9168fe138151afa694f34ba504e49827c6e6abb913e42550e34a69fdf31"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.614646+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.614646+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "2ce4729aa310b5bf",
+    "value": "untrusted comment: signature from omg local signing key\nwsqFYaeI97juPmEEIKxCMeFF8nKkREVx5ytSMB4lQy3WYUgqxGj6Rq885JTbjmXOQMdhLzajVM0xZcdMswIBDA==\ntrusted comment: type=omg-slsa-v1 keyid=2ce4729aa310b5bf issued_at=2026-03-13T21:11:22.614763+00:00 artifact=bundle/registry/bundles/ast-pack.yaml sha256=394cc9168fe138151afa694f34ba504e49827c6e6abb913e42550e34a69fdf31\nmBR79zY3ABd2rM5TEs36+MFjgE6+rdS+p2SNJFrUEDHwPxZukbmV3VnwhH8XPNfItmHe7hhN6WSl0Q2mE2e1Dw==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=2ce4729aa310b5bf issued_at=2026-03-13T21:11:22.614763+00:00 artifact=bundle/registry/bundles/ast-pack.yaml sha256=394cc9168fe138151afa694f34ba504e49827c6e6abb913e42550e34a69fdf31"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/claim-judge.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+ErJm3JEIk5bRqC0MgwJAhb16Bo3kQHjy7aVwNOY3mH3JmbwEW+BSn65Yikl49KC39YiJ7rC7fQD3D9FCd7YMDw==
+trusted comment: type=omg-slsa-v1 keyid=db7b1c81aa5b1a12 issued_at=2026-03-13T21:11:22.615355+00:00 artifact=bundle/registry/bundles/claim-judge.yaml sha256=005a7c0f657a20e85416c7bc95fee253f0f73917de719ce2558042a73f6af112
+ltBx6Vaiz9kKSrPAMTHmjZZI7i9iU7PDoj0FoChQTZnCVZN2o37v4lc6/FurCQVodA96L8PBvJIZBVj2+QQOBg==

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/claim-judge.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/claim-judge.yaml",
+      "digest": {
+        "sha256": "005a7c0f657a20e85416c7bc95fee253f0f73917de719ce2558042a73f6af112"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.615241+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.615241+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "db7b1c81aa5b1a12",
+    "value": "untrusted comment: signature from omg local signing key\nErJm3JEIk5bRqC0MgwJAhb16Bo3kQHjy7aVwNOY3mH3JmbwEW+BSn65Yikl49KC39YiJ7rC7fQD3D9FCd7YMDw==\ntrusted comment: type=omg-slsa-v1 keyid=db7b1c81aa5b1a12 issued_at=2026-03-13T21:11:22.615355+00:00 artifact=bundle/registry/bundles/claim-judge.yaml sha256=005a7c0f657a20e85416c7bc95fee253f0f73917de719ce2558042a73f6af112\nltBx6Vaiz9kKSrPAMTHmjZZI7i9iU7PDoj0FoChQTZnCVZN2o37v4lc6/FurCQVodA96L8PBvJIZBVj2+QQOBg==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=db7b1c81aa5b1a12 issued_at=2026-03-13T21:11:22.615355+00:00 artifact=bundle/registry/bundles/claim-judge.yaml sha256=005a7c0f657a20e85416c7bc95fee253f0f73917de719ce2558042a73f6af112"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/control-plane.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+GZVktbepYZMNa0HW4icQmWyQthE9MrbErAHdJbnOdLiVgzadgmfM6qkdry5fjhQ8A0wMnaMlZT9CFX1+N/6fCw==
+trusted comment: type=omg-slsa-v1 keyid=9054f0e6d8b98b5f issued_at=2026-03-13T21:11:22.615967+00:00 artifact=bundle/registry/bundles/control-plane.yaml sha256=c68597109f9712ef8ff893592ccd532ab518507e7406d13d44a8b8452aecdea8
+uF180P2EmnGWGNn1Zo7bb7hedy5Sdoi9V3wEghaZEfJA65lEbm8G5YO8hUYBI4S+/G+60lNGjWPK8zefX/zHAA==

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/control-plane.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/control-plane.yaml",
+      "digest": {
+        "sha256": "c68597109f9712ef8ff893592ccd532ab518507e7406d13d44a8b8452aecdea8"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.615854+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.615854+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "9054f0e6d8b98b5f",
+    "value": "untrusted comment: signature from omg local signing key\nGZVktbepYZMNa0HW4icQmWyQthE9MrbErAHdJbnOdLiVgzadgmfM6qkdry5fjhQ8A0wMnaMlZT9CFX1+N/6fCw==\ntrusted comment: type=omg-slsa-v1 keyid=9054f0e6d8b98b5f issued_at=2026-03-13T21:11:22.615967+00:00 artifact=bundle/registry/bundles/control-plane.yaml sha256=c68597109f9712ef8ff893592ccd532ab518507e7406d13d44a8b8452aecdea8\nuF180P2EmnGWGNn1Zo7bb7hedy5Sdoi9V3wEghaZEfJA65lEbm8G5YO8hUYBI4S+/G+60lNGjWPK8zefX/zHAA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=9054f0e6d8b98b5f issued_at=2026-03-13T21:11:22.615967+00:00 artifact=bundle/registry/bundles/control-plane.yaml sha256=c68597109f9712ef8ff893592ccd532ab518507e7406d13d44a8b8452aecdea8"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/data-lineage.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+xz+y2GF+XMrK4bAhG2E7wnxuSA6dPa73l7hB3vwJR+eliL9K92+wCB2vmAXuexKblk5WgxPfLqnATa6wU7mQCg==
+trusted comment: type=omg-slsa-v1 keyid=8c156c93ad0d8fca issued_at=2026-03-13T21:11:22.616648+00:00 artifact=bundle/registry/bundles/data-lineage.yaml sha256=47d7d2e1718fbb0fcb74a6e51ee7d85a7a9392768eaa2f12c3dfc19243c7d161
+7x/HTuUKl4II7aqfQF6O4GRrpnPYdkvWC9a6DvkLHYu4L3ZOLy+56W3x4SoBAPyaRRCTeOoSlee6MGBNpYarAg==

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/data-lineage.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/data-lineage.yaml",
+      "digest": {
+        "sha256": "47d7d2e1718fbb0fcb74a6e51ee7d85a7a9392768eaa2f12c3dfc19243c7d161"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.616528+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.616528+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "8c156c93ad0d8fca",
+    "value": "untrusted comment: signature from omg local signing key\nxz+y2GF+XMrK4bAhG2E7wnxuSA6dPa73l7hB3vwJR+eliL9K92+wCB2vmAXuexKblk5WgxPfLqnATa6wU7mQCg==\ntrusted comment: type=omg-slsa-v1 keyid=8c156c93ad0d8fca issued_at=2026-03-13T21:11:22.616648+00:00 artifact=bundle/registry/bundles/data-lineage.yaml sha256=47d7d2e1718fbb0fcb74a6e51ee7d85a7a9392768eaa2f12c3dfc19243c7d161\n7x/HTuUKl4II7aqfQF6O4GRrpnPYdkvWC9a6DvkLHYu4L3ZOLy+56W3x4SoBAPyaRRCTeOoSlee6MGBNpYarAg==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=8c156c93ad0d8fca issued_at=2026-03-13T21:11:22.616648+00:00 artifact=bundle/registry/bundles/data-lineage.yaml sha256=47d7d2e1718fbb0fcb74a6e51ee7d85a7a9392768eaa2f12c3dfc19243c7d161"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/delta-classifier.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+pM5Wtg05XSmFegp3f1/kadQgOrRNE00SAdO3s1ohpQuiKRg9E4TAKNeEQv5QtWvA5uEHjZhtqblAgtLB/fjrDQ==
+trusted comment: type=omg-slsa-v1 keyid=2c88bb1036c00b61 issued_at=2026-03-13T21:11:22.617199+00:00 artifact=bundle/registry/bundles/delta-classifier.yaml sha256=b7465f9989998bbbfe085883fe8687bacb9999047327715098db34e6ceb9db6c
+X++Xl9OxY3nO7+7nxdCSanJCiQ7GF7cnCP2CI80UvSFZ5MCZqsjCnqcRIwNqRBCaclypDK0Bbr/IRAFrO8QBCA==

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/delta-classifier.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/delta-classifier.yaml",
+      "digest": {
+        "sha256": "b7465f9989998bbbfe085883fe8687bacb9999047327715098db34e6ceb9db6c"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.617093+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.617093+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "2c88bb1036c00b61",
+    "value": "untrusted comment: signature from omg local signing key\npM5Wtg05XSmFegp3f1/kadQgOrRNE00SAdO3s1ohpQuiKRg9E4TAKNeEQv5QtWvA5uEHjZhtqblAgtLB/fjrDQ==\ntrusted comment: type=omg-slsa-v1 keyid=2c88bb1036c00b61 issued_at=2026-03-13T21:11:22.617199+00:00 artifact=bundle/registry/bundles/delta-classifier.yaml sha256=b7465f9989998bbbfe085883fe8687bacb9999047327715098db34e6ceb9db6c\nX++Xl9OxY3nO7+7nxdCSanJCiQ7GF7cnCP2CI80UvSFZ5MCZqsjCnqcRIwNqRBCaclypDK0Bbr/IRAFrO8QBCA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=2c88bb1036c00b61 issued_at=2026-03-13T21:11:22.617199+00:00 artifact=bundle/registry/bundles/delta-classifier.yaml sha256=b7465f9989998bbbfe085883fe8687bacb9999047327715098db34e6ceb9db6c"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/eval-gate.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+wkIiJKTl7UjrAGm6mdaTP8W1gXrcB/4NSXiuHWWfAEZiYSfXbBs0rdnaL+Fj1kATGzBAxJn9X+fKKEJPkv5BDQ==
+trusted comment: type=omg-slsa-v1 keyid=e8dacb5a38ab30e9 issued_at=2026-03-13T21:11:22.618027+00:00 artifact=bundle/registry/bundles/eval-gate.yaml sha256=f8d4cc8db65a568bea308da4ce4bd3aeade4cbbeabb6063ef930b9595c3ff0ce
+Y0D4vHgCKeSSScMkPcxL9Y3fI7JkvqLBCcciZTAtJgLAHmK1Y3IUgALjbEOLj1MLHaHbtfQPAAZ6VktY2GNuAA==

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/eval-gate.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/eval-gate.yaml",
+      "digest": {
+        "sha256": "f8d4cc8db65a568bea308da4ce4bd3aeade4cbbeabb6063ef930b9595c3ff0ce"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.617913+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.617913+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "e8dacb5a38ab30e9",
+    "value": "untrusted comment: signature from omg local signing key\nwkIiJKTl7UjrAGm6mdaTP8W1gXrcB/4NSXiuHWWfAEZiYSfXbBs0rdnaL+Fj1kATGzBAxJn9X+fKKEJPkv5BDQ==\ntrusted comment: type=omg-slsa-v1 keyid=e8dacb5a38ab30e9 issued_at=2026-03-13T21:11:22.618027+00:00 artifact=bundle/registry/bundles/eval-gate.yaml sha256=f8d4cc8db65a568bea308da4ce4bd3aeade4cbbeabb6063ef930b9595c3ff0ce\nY0D4vHgCKeSSScMkPcxL9Y3fI7JkvqLBCcciZTAtJgLAHmK1Y3IUgALjbEOLj1MLHaHbtfQPAAZ6VktY2GNuAA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=e8dacb5a38ab30e9 issued_at=2026-03-13T21:11:22.618027+00:00 artifact=bundle/registry/bundles/eval-gate.yaml sha256=f8d4cc8db65a568bea308da4ce4bd3aeade4cbbeabb6063ef930b9595c3ff0ce"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/hash-edit.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+rt2JXMLMEl/5X0lZwz+o8TzQh9iPuZwUBURk7IVPWQ/ilrOO7LRRxJVgsyOiB99cbFmmL6eKatlVsq08YzjsDA==
+trusted comment: type=omg-slsa-v1 keyid=347275ae7091ab89 issued_at=2026-03-13T21:11:22.618562+00:00 artifact=bundle/registry/bundles/hash-edit.yaml sha256=4b4178753bc3cfdc4c485288152341c42c4afd12e1357ec249cbf7d9291fcb62
+BwF8gLUe1cBI3Jdpafti327V+qYOPM1ymYY2qpnQvMLSRRagArG+G4LxzBXEGgm8DjnZ2W5Ze58nCmI/WUMWAg==

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/hash-edit.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/hash-edit.yaml",
+      "digest": {
+        "sha256": "4b4178753bc3cfdc4c485288152341c42c4afd12e1357ec249cbf7d9291fcb62"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.618455+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.618455+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "347275ae7091ab89",
+    "value": "untrusted comment: signature from omg local signing key\nrt2JXMLMEl/5X0lZwz+o8TzQh9iPuZwUBURk7IVPWQ/ilrOO7LRRxJVgsyOiB99cbFmmL6eKatlVsq08YzjsDA==\ntrusted comment: type=omg-slsa-v1 keyid=347275ae7091ab89 issued_at=2026-03-13T21:11:22.618562+00:00 artifact=bundle/registry/bundles/hash-edit.yaml sha256=4b4178753bc3cfdc4c485288152341c42c4afd12e1357ec249cbf7d9291fcb62\nBwF8gLUe1cBI3Jdpafti327V+qYOPM1ymYY2qpnQvMLSRRagArG+G4LxzBXEGgm8DjnZ2W5Ze58nCmI/WUMWAg==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=347275ae7091ab89 issued_at=2026-03-13T21:11:22.618562+00:00 artifact=bundle/registry/bundles/hash-edit.yaml sha256=4b4178753bc3cfdc4c485288152341c42c4afd12e1357ec249cbf7d9291fcb62"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/health.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+nZ4m/i5DoMltWNssYm4OYIGl1dzUbMwElZmJYBIploF8h0ABu3hELCuJrX5OHFtaAQZ15zj1UcmdwrFDmrS+Bw==
+trusted comment: type=omg-slsa-v1 keyid=1b7c7ce0f38cdbec issued_at=2026-03-13T21:11:22.619091+00:00 artifact=bundle/registry/bundles/health.yaml sha256=391260606cae41dc5ef80432599ec8460a6ee968811c3213b33ec00df81cfe78
+iYgcJgeext+Lh3Ko0MfA42tM1eIzU+KtT7Ls8TLMhpmIRFNWCcAsP9FDeldmsJmS/Rto2mfVXAmimwXYqnv8Cw==

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/health.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/health.yaml",
+      "digest": {
+        "sha256": "391260606cae41dc5ef80432599ec8460a6ee968811c3213b33ec00df81cfe78"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.618986+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.618986+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "1b7c7ce0f38cdbec",
+    "value": "untrusted comment: signature from omg local signing key\nnZ4m/i5DoMltWNssYm4OYIGl1dzUbMwElZmJYBIploF8h0ABu3hELCuJrX5OHFtaAQZ15zj1UcmdwrFDmrS+Bw==\ntrusted comment: type=omg-slsa-v1 keyid=1b7c7ce0f38cdbec issued_at=2026-03-13T21:11:22.619091+00:00 artifact=bundle/registry/bundles/health.yaml sha256=391260606cae41dc5ef80432599ec8460a6ee968811c3213b33ec00df81cfe78\niYgcJgeext+Lh3Ko0MfA42tM1eIzU+KtT7Ls8TLMhpmIRFNWCcAsP9FDeldmsJmS/Rto2mfVXAmimwXYqnv8Cw==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=1b7c7ce0f38cdbec issued_at=2026-03-13T21:11:22.619091+00:00 artifact=bundle/registry/bundles/health.yaml sha256=391260606cae41dc5ef80432599ec8460a6ee968811c3213b33ec00df81cfe78"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/hook-governor.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+z4Oy58FEG8XQWaD8KdeSttFFltRqiJ4vgs7rNQKF0k1Z6tvK/o8cUeFfJaRPxEeuCvD4+L2809NjCaURvctDCA==
+trusted comment: type=omg-slsa-v1 keyid=f0ad7bebc06c0104 issued_at=2026-03-13T21:11:22.619610+00:00 artifact=bundle/registry/bundles/hook-governor.yaml sha256=c9b52245cc6a70c0d1d0a3b636cbce409dcf179f1ab4cbd7148099bcc3abb43f
+AmJ1X5kvm+c1xBizqDCjM1l1KcX0xNxgRuClnuN0ymSA9T2WJuTin4/U/TQ+GS7YzDrNPNfNT3xXXtJs3rRWAg==

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/hook-governor.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/hook-governor.yaml",
+      "digest": {
+        "sha256": "c9b52245cc6a70c0d1d0a3b636cbce409dcf179f1ab4cbd7148099bcc3abb43f"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.619505+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.619505+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "f0ad7bebc06c0104",
+    "value": "untrusted comment: signature from omg local signing key\nz4Oy58FEG8XQWaD8KdeSttFFltRqiJ4vgs7rNQKF0k1Z6tvK/o8cUeFfJaRPxEeuCvD4+L2809NjCaURvctDCA==\ntrusted comment: type=omg-slsa-v1 keyid=f0ad7bebc06c0104 issued_at=2026-03-13T21:11:22.619610+00:00 artifact=bundle/registry/bundles/hook-governor.yaml sha256=c9b52245cc6a70c0d1d0a3b636cbce409dcf179f1ab4cbd7148099bcc3abb43f\nAmJ1X5kvm+c1xBizqDCjM1l1KcX0xNxgRuClnuN0ymSA9T2WJuTin4/U/TQ+GS7YzDrNPNfNT3xXXtJs3rRWAg==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=f0ad7bebc06c0104 issued_at=2026-03-13T21:11:22.619610+00:00 artifact=bundle/registry/bundles/hook-governor.yaml sha256=c9b52245cc6a70c0d1d0a3b636cbce409dcf179f1ab4cbd7148099bcc3abb43f"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/incident-replay.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+J/fL0BLFow1GPKX+zq31mgCJh00kqq8ibDfqFTU3YW+G2SVNn/2BLI2zw/6xXaQ+7qV4Qyxap9sbVzD2AaoODQ==
+trusted comment: type=omg-slsa-v1 keyid=79453c1a87a50781 issued_at=2026-03-13T21:11:22.620466+00:00 artifact=bundle/registry/bundles/incident-replay.yaml sha256=75ca3a1ce18590f5cf521fb50316c43a40b8b843b4d52e8a7cbc57b38546341f
+rP0assESfc1VTZVAGIphy6cmNhn4UnlJQSsWb+qxF+XMmNa1KbywBhCgCcDwrk8dmy55EaM66oPxZAAqr79ADA==

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/incident-replay.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/incident-replay.yaml",
+      "digest": {
+        "sha256": "75ca3a1ce18590f5cf521fb50316c43a40b8b843b4d52e8a7cbc57b38546341f"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.620309+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.620309+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "79453c1a87a50781",
+    "value": "untrusted comment: signature from omg local signing key\nJ/fL0BLFow1GPKX+zq31mgCJh00kqq8ibDfqFTU3YW+G2SVNn/2BLI2zw/6xXaQ+7qV4Qyxap9sbVzD2AaoODQ==\ntrusted comment: type=omg-slsa-v1 keyid=79453c1a87a50781 issued_at=2026-03-13T21:11:22.620466+00:00 artifact=bundle/registry/bundles/incident-replay.yaml sha256=75ca3a1ce18590f5cf521fb50316c43a40b8b843b4d52e8a7cbc57b38546341f\nrP0assESfc1VTZVAGIphy6cmNhn4UnlJQSsWb+qxF+XMmNa1KbywBhCgCcDwrk8dmy55EaM66oPxZAAqr79ADA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=79453c1a87a50781 issued_at=2026-03-13T21:11:22.620466+00:00 artifact=bundle/registry/bundles/incident-replay.yaml sha256=75ca3a1ce18590f5cf521fb50316c43a40b8b843b4d52e8a7cbc57b38546341f"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/lsp-pack.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+B9Q+DJlD7xW7u7faRuQW83iFBQeLLkkI/hPlkOj3QW/IE30J4vChl83Aw8F02pY3VD70uFE9/K9j+0jXOvQ+BA==
+trusted comment: type=omg-slsa-v1 keyid=fbcc443b423e212c issued_at=2026-03-13T21:11:22.621420+00:00 artifact=bundle/registry/bundles/lsp-pack.yaml sha256=951186b7d8a9e29b72246ca66ea3e4aca05c1067254a18b8650663fd94e73361
+Ar8nlutm85YbYP4hiMEIo7Uf2rirYcxo2Kk4if2ErZ8r/uhJfXcFDk2YtCdieME31r41P+bLMcUfHSNrHyaXBQ==

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/lsp-pack.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/lsp-pack.yaml",
+      "digest": {
+        "sha256": "951186b7d8a9e29b72246ca66ea3e4aca05c1067254a18b8650663fd94e73361"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.621294+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.621294+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "fbcc443b423e212c",
+    "value": "untrusted comment: signature from omg local signing key\nB9Q+DJlD7xW7u7faRuQW83iFBQeLLkkI/hPlkOj3QW/IE30J4vChl83Aw8F02pY3VD70uFE9/K9j+0jXOvQ+BA==\ntrusted comment: type=omg-slsa-v1 keyid=fbcc443b423e212c issued_at=2026-03-13T21:11:22.621420+00:00 artifact=bundle/registry/bundles/lsp-pack.yaml sha256=951186b7d8a9e29b72246ca66ea3e4aca05c1067254a18b8650663fd94e73361\nAr8nlutm85YbYP4hiMEIo7Uf2rirYcxo2Kk4if2ErZ8r/uhJfXcFDk2YtCdieME31r41P+bLMcUfHSNrHyaXBQ==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=fbcc443b423e212c issued_at=2026-03-13T21:11:22.621420+00:00 artifact=bundle/registry/bundles/lsp-pack.yaml sha256=951186b7d8a9e29b72246ca66ea3e4aca05c1067254a18b8650663fd94e73361"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/mcp-fabric.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+KnLheFNmLdKfHCOHVrXZSSLoGsZdtFAeFuNONWYZxcNdzfAAzHu/nc7f9Yv1clxoCae2uVBrLnw8WqWuFk9eDw==
+trusted comment: type=omg-slsa-v1 keyid=e2234dd2a22bcf49 issued_at=2026-03-13T21:11:22.622233+00:00 artifact=bundle/registry/bundles/mcp-fabric.yaml sha256=54ccd784cae04d285aa0a86b00662a7ee618dd4e645f67177d77b76af486f036
+Sz25SlGZjk8CZ3MUFbPni10yIqD7ZjcNkUITpgPavJv0jYoprO7duHIoU/eZIMfpw2zHRMp7HcEUL5ZQwj5WBA==

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/mcp-fabric.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/mcp-fabric.yaml",
+      "digest": {
+        "sha256": "54ccd784cae04d285aa0a86b00662a7ee618dd4e645f67177d77b76af486f036"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.622122+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.622122+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "e2234dd2a22bcf49",
+    "value": "untrusted comment: signature from omg local signing key\nKnLheFNmLdKfHCOHVrXZSSLoGsZdtFAeFuNONWYZxcNdzfAAzHu/nc7f9Yv1clxoCae2uVBrLnw8WqWuFk9eDw==\ntrusted comment: type=omg-slsa-v1 keyid=e2234dd2a22bcf49 issued_at=2026-03-13T21:11:22.622233+00:00 artifact=bundle/registry/bundles/mcp-fabric.yaml sha256=54ccd784cae04d285aa0a86b00662a7ee618dd4e645f67177d77b76af486f036\nSz25SlGZjk8CZ3MUFbPni10yIqD7ZjcNkUITpgPavJv0jYoprO7duHIoU/eZIMfpw2zHRMp7HcEUL5ZQwj5WBA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=e2234dd2a22bcf49 issued_at=2026-03-13T21:11:22.622233+00:00 artifact=bundle/registry/bundles/mcp-fabric.yaml sha256=54ccd784cae04d285aa0a86b00662a7ee618dd4e645f67177d77b76af486f036"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/plan-council.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+71jyOMjzDq8DI5BKG7DWki1RQR/B7cettTPf3a/i1pNTenK036rBRci4DP8+KPlZrsPGEiieqJ0xHwpIctGKDA==
+trusted comment: type=omg-slsa-v1 keyid=2a8776c1ceec472f issued_at=2026-03-13T21:11:22.622834+00:00 artifact=bundle/registry/bundles/plan-council.yaml sha256=cbd56d0f5c82205923d53527e01456b79d31772bd9289f88e37657933d6eb432
+Sev4a7a7lG0UMIg9U0cTwWCmL7OtbugxL01xblFJ1/pNH+lZ1uoaI3bgg4lkBgqVSTS0fnsPXVHbEOtfzfQ2AA==

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/plan-council.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/plan-council.yaml",
+      "digest": {
+        "sha256": "cbd56d0f5c82205923d53527e01456b79d31772bd9289f88e37657933d6eb432"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.622723+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.622723+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "2a8776c1ceec472f",
+    "value": "untrusted comment: signature from omg local signing key\n71jyOMjzDq8DI5BKG7DWki1RQR/B7cettTPf3a/i1pNTenK036rBRci4DP8+KPlZrsPGEiieqJ0xHwpIctGKDA==\ntrusted comment: type=omg-slsa-v1 keyid=2a8776c1ceec472f issued_at=2026-03-13T21:11:22.622834+00:00 artifact=bundle/registry/bundles/plan-council.yaml sha256=cbd56d0f5c82205923d53527e01456b79d31772bd9289f88e37657933d6eb432\nSev4a7a7lG0UMIg9U0cTwWCmL7OtbugxL01xblFJ1/pNH+lZ1uoaI3bgg4lkBgqVSTS0fnsPXVHbEOtfzfQ2AA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=2a8776c1ceec472f issued_at=2026-03-13T21:11:22.622834+00:00 artifact=bundle/registry/bundles/plan-council.yaml sha256=cbd56d0f5c82205923d53527e01456b79d31772bd9289f88e37657933d6eb432"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/preflight.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+mCheXmvkAYlP2ObyWPMWa6Uirx28KEFqN5cTOmoeROZCfM5ERFNJ9A153BpjE3N3bd2Lp5d5OMOKhmsutzWiBg==
+trusted comment: type=omg-slsa-v1 keyid=7d0d123ddbc3dbdf issued_at=2026-03-13T21:11:22.623512+00:00 artifact=bundle/registry/bundles/preflight.yaml sha256=eb6342b0dd7c3df68e18800883f4f0109609b602a661610b03949d913409f948
+F/1p0LKCxSxVUIKYECISccNoR2rEIICPBYjA2GDlmJGNLAiM0B+e37TjxaIkSh4LcxxznKTLdAW/nFFaemkUCA==