@trac3er/oh-my-god 2.1.9 → 2.2.2

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/terminal-lane.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/terminal-lane.yaml",
+      "digest": {
+        "sha256": "518c2e3ebe6da4986ea92d47ac0152f37453becc5b5779f9b1dcde84593c53f7"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.627245+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.627245+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "ff18da8f5f0c90f6",
+    "value": "untrusted comment: signature from omg local signing key\njcKRxZ9pCSL9GHId8axk/yswKw+l7Bi7TZSQPfRWddWRZydzADgvBuq8joWDWuBrArqYTtrSbAdBwXlVZzUzCA==\ntrusted comment: type=omg-slsa-v1 keyid=ff18da8f5f0c90f6 issued_at=2026-03-13T21:11:22.627415+00:00 artifact=bundle/registry/bundles/terminal-lane.yaml sha256=518c2e3ebe6da4986ea92d47ac0152f37453becc5b5779f9b1dcde84593c53f7\n9Vwi1FigZRRIwSK4QBy3nFW4vALTMACOnWUe/9d+sgDFDiPgFT8FMhplAxKTSPN3armnNNhA9QJ8NvOtwGp1CQ==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=ff18da8f5f0c90f6 issued_at=2026-03-13T21:11:22.627415+00:00 artifact=bundle/registry/bundles/terminal-lane.yaml sha256=518c2e3ebe6da4986ea92d47ac0152f37453becc5b5779f9b1dcde84593c53f7"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/test-intent-lock.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+KEIDliiHDCkOip37zc2GIuXqfdXtlcL8T2cdTNg/3+01b24CKNNFBT+cjXFR9FntLQ3GGhNvdwxnXYzhoKR+DQ==
+trusted comment: type=omg-slsa-v1 keyid=fb3d98e65fe31654 issued_at=2026-03-13T21:11:22.628182+00:00 artifact=bundle/registry/bundles/test-intent-lock.yaml sha256=1bc9e631dda5fac529f49af66343caf25295cf68027127e1b5662d8f8faeb81e
+wTdsNp5YiG/Y71GJk9735o6vX9H5S96uh197LPAOPitRiSGUcsNSh05RrKPx48PuEXYgWkvn9/48c+1HJe8SAA==

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/test-intent-lock.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/test-intent-lock.yaml",
+      "digest": {
+        "sha256": "1bc9e631dda5fac529f49af66343caf25295cf68027127e1b5662d8f8faeb81e"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.628058+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.628058+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "fb3d98e65fe31654",
+    "value": "untrusted comment: signature from omg local signing key\nKEIDliiHDCkOip37zc2GIuXqfdXtlcL8T2cdTNg/3+01b24CKNNFBT+cjXFR9FntLQ3GGhNvdwxnXYzhoKR+DQ==\ntrusted comment: type=omg-slsa-v1 keyid=fb3d98e65fe31654 issued_at=2026-03-13T21:11:22.628182+00:00 artifact=bundle/registry/bundles/test-intent-lock.yaml sha256=1bc9e631dda5fac529f49af66343caf25295cf68027127e1b5662d8f8faeb81e\nwTdsNp5YiG/Y71GJk9735o6vX9H5S96uh197LPAOPitRiSGUcsNSh05RrKPx48PuEXYgWkvn9/48c+1HJe8SAA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=fb3d98e65fe31654 issued_at=2026-03-13T21:11:22.628182+00:00 artifact=bundle/registry/bundles/test-intent-lock.yaml sha256=1bc9e631dda5fac529f49af66343caf25295cf68027127e1b5662d8f8faeb81e"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/tracebank.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+53CdkIDlWjc+tQIUOowYOKylZw4f3Snj2XG21NeqeMTz0cf1fUzYyltYp2+jbj7Ddw/R4uTdvSZ8Z2d5dvnEBg==
+trusted comment: type=omg-slsa-v1 keyid=6b775388d3f60dbb issued_at=2026-03-13T21:11:22.628790+00:00 artifact=bundle/registry/bundles/tracebank.yaml sha256=ee1a5e9eee8d2a10730c002b71c4bb12ba1316c1bb167b54adbdba9f264d9d0b
+dA0wVA1znyc9sXQUR/4EcS1lkVZtoBcGNSWJ2izsn3KN61NWgMMjnzWEpmD5Qr79ODj1ezTE98CEM1KfNA5bBw==

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/tracebank.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/tracebank.yaml",
+      "digest": {
+        "sha256": "ee1a5e9eee8d2a10730c002b71c4bb12ba1316c1bb167b54adbdba9f264d9d0b"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.628675+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.628675+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "6b775388d3f60dbb",
+    "value": "untrusted comment: signature from omg local signing key\n53CdkIDlWjc+tQIUOowYOKylZw4f3Snj2XG21NeqeMTz0cf1fUzYyltYp2+jbj7Ddw/R4uTdvSZ8Z2d5dvnEBg==\ntrusted comment: type=omg-slsa-v1 keyid=6b775388d3f60dbb issued_at=2026-03-13T21:11:22.628790+00:00 artifact=bundle/registry/bundles/tracebank.yaml sha256=ee1a5e9eee8d2a10730c002b71c4bb12ba1316c1bb167b54adbdba9f264d9d0b\ndA0wVA1znyc9sXQUR/4EcS1lkVZtoBcGNSWJ2izsn3KN61NWgMMjnzWEpmD5Qr79ODj1ezTE98CEM1KfNA5bBw==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=6b775388d3f60dbb issued_at=2026-03-13T21:11:22.628790+00:00 artifact=bundle/registry/bundles/tracebank.yaml sha256=ee1a5e9eee8d2a10730c002b71c4bb12ba1316c1bb167b54adbdba9f264d9d0b"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/vision.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+2dfGv3CRnfmLpjxp1HdlgfB9DLYhWdbt++YdnXbk1xZKEFVHS1VIECERvIduDzGEiD1qjZGfr84KviH15DruAA==
+trusted comment: type=omg-slsa-v1 keyid=9ae6195d30b1e36c issued_at=2026-03-13T21:11:22.629381+00:00 artifact=bundle/registry/bundles/vision.yaml sha256=3e64993127e45e5b2899736368dc60c848d307b11f21450dc0d410b2cf615842
+gLQ+wP2T7huKcbUjn8voZydNRYOs2H4vRyoI3R+iMzh8X7YRJnALqGMGaGMW0rldojEj4EmmBVddQBSHlx7iBA==

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/vision.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/vision.yaml",
+      "digest": {
+        "sha256": "3e64993127e45e5b2899736368dc60c848d307b11f21450dc0d410b2cf615842"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.629266+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.629266+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "9ae6195d30b1e36c",
+    "value": "untrusted comment: signature from omg local signing key\n2dfGv3CRnfmLpjxp1HdlgfB9DLYhWdbt++YdnXbk1xZKEFVHS1VIECERvIduDzGEiD1qjZGfr84KviH15DruAA==\ntrusted comment: type=omg-slsa-v1 keyid=9ae6195d30b1e36c issued_at=2026-03-13T21:11:22.629381+00:00 artifact=bundle/registry/bundles/vision.yaml sha256=3e64993127e45e5b2899736368dc60c848d307b11f21450dc0d410b2cf615842\ngLQ+wP2T7huKcbUjn8voZydNRYOs2H4vRyoI3R+iMzh8X7YRJnALqGMGaGMW0rldojEj4EmmBVddQBSHlx7iBA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=9ae6195d30b1e36c issued_at=2026-03-13T21:11:22.629381+00:00 artifact=bundle/registry/bundles/vision.yaml sha256=3e64993127e45e5b2899736368dc60c848d307b11f21450dc0d410b2cf615842"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/registry/omg-capability.schema.json.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+09Etj8V8qxdwyTmOZjKrAxyFnzstjOkRTHVcaiaV3SUMW6pmuaCFgeyRuffC2QV68p0O99sX63M9z7uLldFtAQ==
+trusted comment: type=omg-slsa-v1 keyid=d1eb66dc0053247a issued_at=2026-03-13T21:11:22.629936+00:00 artifact=bundle/registry/omg-capability.schema.json sha256=ec9ef7f547774e9a5c8089695290bea10c351128a61b4fa09c108934acb64523
+I8xSOTo71prWR1Uh7FIsiSoxyKRGxPCqhYtx7yNt9YON3j7NSIyDMT0kKiH5QsacfHTqLT0RWHLon61FRgHFDw==

package/artifacts/public/dist/public/attestations/bundle/registry/omg-capability.schema.json.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/omg-capability.schema.json",
+      "digest": {
+        "sha256": "ec9ef7f547774e9a5c8089695290bea10c351128a61b4fa09c108934acb64523"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.629827+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.629827+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "d1eb66dc0053247a",
+    "value": "untrusted comment: signature from omg local signing key\n09Etj8V8qxdwyTmOZjKrAxyFnzstjOkRTHVcaiaV3SUMW6pmuaCFgeyRuffC2QV68p0O99sX63M9z7uLldFtAQ==\ntrusted comment: type=omg-slsa-v1 keyid=d1eb66dc0053247a issued_at=2026-03-13T21:11:22.629936+00:00 artifact=bundle/registry/omg-capability.schema.json sha256=ec9ef7f547774e9a5c8089695290bea10c351128a61b4fa09c108934acb64523\nI8xSOTo71prWR1Uh7FIsiSoxyKRGxPCqhYtx7yNt9YON3j7NSIyDMT0kKiH5QsacfHTqLT0RWHLon61FRgHFDw==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=d1eb66dc0053247a issued_at=2026-03-13T21:11:22.629936+00:00 artifact=bundle/registry/omg-capability.schema.json sha256=ec9ef7f547774e9a5c8089695290bea10c351128a61b4fa09c108934acb64523"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/settings.json.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+JMIARktrsOqEe+Y8CrtJVXwq94ktkrrDqGlzZSvZ966qhRcNHATChtfvcC6rSxmJknNvJv+H7P5bsVlfiS/gDQ==
+trusted comment: type=omg-slsa-v1 keyid=89debae9e5009a6b issued_at=2026-03-13T21:11:22.630588+00:00 artifact=bundle/settings.json sha256=4711dac8c968ccd8e9e80336fa0bf9fc331e53dca42aed6d2814429b018383b6
+M3KOjKw/Sn+ck0/LCZ+J3euWeCp6vxJ+qWGwO0rsYy+D4bMQ6xQHaAFhvfa4z09M6iFpFag2g1ttgustRN5rAA==

package/artifacts/public/dist/public/attestations/bundle/settings.json.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/settings.json",
+      "digest": {
+        "sha256": "4711dac8c968ccd8e9e80336fa0bf9fc331e53dca42aed6d2814429b018383b6"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.630422+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.630422+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "89debae9e5009a6b",
+    "value": "untrusted comment: signature from omg local signing key\nJMIARktrsOqEe+Y8CrtJVXwq94ktkrrDqGlzZSvZ966qhRcNHATChtfvcC6rSxmJknNvJv+H7P5bsVlfiS/gDQ==\ntrusted comment: type=omg-slsa-v1 keyid=89debae9e5009a6b issued_at=2026-03-13T21:11:22.630588+00:00 artifact=bundle/settings.json sha256=4711dac8c968ccd8e9e80336fa0bf9fc331e53dca42aed6d2814429b018383b6\nM3KOjKw/Sn+ck0/LCZ+J3euWeCp6vxJ+qWGwO0rsYy+D4bMQ6xQHaAFhvfa4z09M6iFpFag2g1ttgustRN5rAA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=89debae9e5009a6b issued_at=2026-03-13T21:11:22.630588+00:00 artifact=bundle/settings.json sha256=4711dac8c968ccd8e9e80336fa0bf9fc331e53dca42aed6d2814429b018383b6"
+  }
+}

package/artifacts/public/dist/public/bundle/.agents/skills/omg/AGENTS.fragment.md

@@ -0,0 +1,75 @@
+# OMG Codex Governance (channel: public)
+
+## Build & Test
+
+```bash
+python3 -m pytest tests -q
+python3 scripts/omg.py contract validate
+python3 scripts/omg.py contract compile --host codex --channel public
+```
+
+## Protected Paths
+
+The following paths require tier-gated review before mutation:
+
+- `.omg/**`
+- `.agents/**`
+- `.codex/**`
+- `.claude/**`
+
+## Release Audit
+
+Release readiness requires claim and compliance outcomes:
+
+- `claim_judge`
+- `compliance_governor`
+- `execution_primitives`
+Attestation requirements:
+- `registry.verify_artifact.sign_artifact_statement`
+- `registry.verify_artifact.verify_artifact_statement`
+
+## Evidence Contract
+
+Every production action must emit evidence containing these fields:
+
+- `attestation_statement`
+- `attestation_verifier`
+- `claim_judge_verdict`
+- `compliance_verdict`
+- `executor`
+- `lineage`
+- `timestamp`
+- `trace_id`
+
+## Required Skills
+
+- `omg/control-plane`
+- `omg/mcp-fabric`
+
+## Protected Planning Surface
+
+Council planning skills are protected and explicit-invocation only:
+
+- `omg/plan-council`
+
+## Web Search Policy
+
+- Prefer cached results over live network requests.
+- Do NOT initiate live web searches unless explicitly instructed.
+- Use `context7` or local documentation before external lookups.
+- Set `cached_web_search: prefer_cached` as the default.
+
+## Approval Constraints
+
+- Destructive file operations require explicit user approval.
+- `git push --force` and branch deletions require explicit approval.
+- Production deployments require explicit approval.
+- Mutations to protected paths require tier-gated approval.
+
+## Rules & Automations
+
+- Rules: `protected_paths, explicit_invocation`
+- Automations: `contract-compile, release-readiness`
+- Defer to the repo's `AGENTS.md` / `AGENTS.override.md` instruction hierarchy before OMG-specific guidance.
+- Do not mirror or override Codex built-in slash commands; OMG guidance applies through MCP, skills, and generated rules.
+- Require explicit invocation for protected production planning skills.

package/artifacts/public/dist/public/bundle/.agents/skills/omg/algorithms/SKILL.md

@@ -0,0 +1,11 @@
+---
+name: omg-algorithms
+description: "Determinism and benchmark attachments for algorithm-heavy work."
+---
+
+# OMG Algorithms Pack
+
+- Channel: `public`
+- Execution modes: `embedded, local_supervisor`
+- MCP servers: `omg-control`
+- Evidence outputs: `.omg/evals/latest.json`

package/artifacts/public/dist/public/bundle/.agents/skills/omg/algorithms/openai.yaml

@@ -0,0 +1,11 @@
+name: omg-algorithms
+description: "Determinism and benchmark attachments for algorithm-heavy work."
+allow_implicit_invocation: false
+metadata:
+  channel: public
+  bundle_id: algorithms
+  title: "OMG Algorithms Pack"
+mcp_servers:
+  - omg-control
+allowed_tools:
+  - "Read"

package/artifacts/public/dist/public/bundle/.agents/skills/omg/api-twin/SKILL.md

@@ -0,0 +1,11 @@
+---
+name: omg-api-twin
+description: "Versioned endpoint cassette replay with latency, drift, and cost reporting."
+---
+
+# OMG API Twin
+
+- Channel: `public`
+- Execution modes: `embedded, local_supervisor`
+- MCP servers: `omg-control`
+- Evidence outputs: `.omg/state/api_twin.json`

package/artifacts/public/dist/public/bundle/.agents/skills/omg/api-twin/openai.yaml

@@ -0,0 +1,12 @@
+name: omg-api-twin
+description: "Versioned endpoint cassette replay with latency, drift, and cost reporting."
+allow_implicit_invocation: false
+metadata:
+  channel: public
+  bundle_id: api-twin
+  title: "OMG API Twin"
+mcp_servers:
+  - omg-control
+allowed_tools:
+  - "Read"
+  - "Bash(python3:*)"

package/artifacts/public/dist/public/bundle/.agents/skills/omg/ast-pack/SKILL.md

@@ -0,0 +1,11 @@
+---
+name: omg-ast-pack
+description: "Governed AST search and replace lane with canonical approvals and proofs."
+---
+
+# OMG AST Pack Lane
+
+- Channel: `public`
+- Execution modes: `embedded, local_supervisor`
+- MCP servers: `omg-control`
+- Evidence outputs: `.omg/evidence/ast-pack-{run_id}.json`

package/artifacts/public/dist/public/bundle/.agents/skills/omg/ast-pack/openai.yaml

@@ -0,0 +1,12 @@
+name: omg-ast-pack
+description: "Governed AST search and replace lane with canonical approvals and proofs."
+allow_implicit_invocation: false
+metadata:
+  channel: public
+  bundle_id: ast-pack
+  title: "OMG AST Pack Lane"
+mcp_servers:
+  - omg-control
+allowed_tools:
+  - "Grep"
+  - "Edit"

package/artifacts/public/dist/public/bundle/.agents/skills/omg/claim-judge/SKILL.md

@@ -0,0 +1,11 @@
+---
+name: omg-claim-judge
+description: "Evidence-backed claim validator for structured release and completion claims."
+---
+
+# OMG Claim Judge
+
+- Channel: `public`
+- Execution modes: `embedded, local_supervisor`
+- MCP servers: `omg-control`
+- Evidence outputs: `.omg/evidence/claim-judge-*.json`

package/artifacts/public/dist/public/bundle/.agents/skills/omg/claim-judge/openai.yaml

@@ -0,0 +1,13 @@
+name: omg-claim-judge
+description: "Evidence-backed claim validator for structured release and completion claims."
+allow_implicit_invocation: false
+metadata:
+  channel: public
+  bundle_id: claim-judge
+  title: "OMG Claim Judge"
+mcp_servers:
+  - omg-control
+allowed_tools:
+  - "Read"
+  - "Grep"
+  - "Bash(python3:*)"

package/artifacts/public/dist/public/bundle/.agents/skills/omg/codex-mcp.toml

@@ -0,0 +1,4 @@
+[mcp_servers.omg-control]
+command = "python3"
+args = ["-m", "runtime.omg_mcp_server"]
+

package/artifacts/public/dist/public/bundle/.agents/skills/omg/codex-rules.md

@@ -0,0 +1,38 @@
+# OMG Codex Rules (channel: public)
+
+## Defaults
+
+- `cached_web_search: prefer_cached`
+- `live_network: deny_by_default`
+- `destructive_approval: required`
+
+## Protected Paths
+
+- `.omg/**`
+- `.agents/**`
+- `.codex/**`
+- `.claude/**`
+
+## Required Skills
+
+- `omg/control-plane`
+- `omg/mcp-fabric`
+
+## Host Interop
+
+- Respect the repo `AGENTS.md` / `AGENTS.override.md` chain before applying OMG-specific rules.
+- Keep OMG guidance separate from Codex built-in slash commands.
+
+## Protected Planning Surface
+
+- `omg/plan-council` (explicit invocation only)
+
+## Approval Matrix
+
+| Action | Approval Required |
+|--------|------------------|
+| Read / Grep | No |
+| Write to protected paths | Yes |
+| Bash (python3:*) | Yes (balanced+ tier) |
+| git push --force | Yes |
+| Production deploy | Yes |

package/artifacts/public/dist/public/bundle/.agents/skills/omg/control-plane/SKILL.md

@@ -0,0 +1,11 @@
+---
+name: omg-control-plane
+description: "Canonical production control plane bundle for Claude, Codex, Gemini, and Kimi."
+---
+
+# OMG Control Plane
+
+- Channel: `public`
+- Execution modes: `embedded, local_supervisor`
+- MCP servers: `omg-control, omg-memory`
+- Evidence outputs: `.omg/evidence/control-plane-compile.json, .omg/evidence/tool-fabric.json`

package/artifacts/public/dist/public/bundle/.agents/skills/omg/control-plane/openai.yaml

@@ -0,0 +1,14 @@
+name: omg-control-plane
+description: "Canonical production control plane bundle for Claude, Codex, Gemini, and Kimi."
+allow_implicit_invocation: false
+metadata:
+  channel: public
+  bundle_id: control-plane
+  title: "OMG Control Plane"
+mcp_servers:
+  - omg-control
+  - omg-memory
+allowed_tools:
+  - "Read"
+  - "Grep"
+  - "Bash(python3:*)"

package/artifacts/public/dist/public/bundle/.agents/skills/omg/data-lineage/SKILL.md

@@ -0,0 +1,11 @@
+---
+name: omg-data-lineage
+description: "Provenance and privacy tracking for traces, fixtures, examples, and synthetic artifacts."
+---
+
+# OMG Data Lineage
+
+- Channel: `public`
+- Execution modes: `embedded, local_supervisor`
+- MCP servers: `omg-control`
+- Evidence outputs: `.omg/lineage/*.json`

package/artifacts/public/dist/public/bundle/.agents/skills/omg/data-lineage/openai.yaml

@@ -0,0 +1,12 @@
+name: omg-data-lineage
+description: "Provenance and privacy tracking for traces, fixtures, examples, and synthetic artifacts."
+allow_implicit_invocation: true
+metadata:
+  channel: public
+  bundle_id: data-lineage
+  title: "OMG Data Lineage"
+mcp_servers:
+  - omg-control
+allowed_tools:
+  - "Read"
+  - "Bash(python3:*)"

package/artifacts/public/dist/public/bundle/.agents/skills/omg/delta-classifier/SKILL.md

@@ -0,0 +1,11 @@
+---
+name: omg-delta-classifier
+description: "Change classifier that attaches risk-aware checks, approvals, and packs."
+---
+
+# OMG Delta Classifier
+
+- Channel: `public`
+- Execution modes: `embedded, local_supervisor`
+- MCP servers: `omg-control`
+- Evidence outputs: `.omg/tracebank/events.jsonl`

package/artifacts/public/dist/public/bundle/.agents/skills/omg/delta-classifier/openai.yaml

@@ -0,0 +1,12 @@
+name: omg-delta-classifier
+description: "Change classifier that attaches risk-aware checks, approvals, and packs."
+allow_implicit_invocation: true
+metadata:
+  channel: public
+  bundle_id: delta-classifier
+  title: "OMG Delta Classifier"
+mcp_servers:
+  - omg-control
+allowed_tools:
+  - "Read"
+  - "Grep"

package/artifacts/public/dist/public/bundle/.agents/skills/omg/eval-gate/SKILL.md

@@ -0,0 +1,11 @@
+---
+name: omg-eval-gate
+description: "Reproducible evaluation gate that blocks regressions before release."
+---
+
+# OMG Eval Gate
+
+- Channel: `public`
+- Execution modes: `embedded, local_supervisor`
+- MCP servers: `omg-control`
+- Evidence outputs: `.omg/evals/latest.json`

package/artifacts/public/dist/public/bundle/.agents/skills/omg/eval-gate/openai.yaml

@@ -0,0 +1,12 @@
+name: omg-eval-gate
+description: "Reproducible evaluation gate that blocks regressions before release."
+allow_implicit_invocation: false
+metadata:
+  channel: public
+  bundle_id: eval-gate
+  title: "OMG Eval Gate"
+mcp_servers:
+  - omg-control
+allowed_tools:
+  - "Read"
+  - "Bash(python3:*)"

package/artifacts/public/dist/public/bundle/.agents/skills/omg/hash-edit/SKILL.md

@@ -0,0 +1,11 @@
+---
+name: omg-hash-edit
+description: "Governed hash-bound edit lane with signed approvals and evidence routing."
+---
+
+# OMG Hash Edit Lane
+
+- Channel: `public`
+- Execution modes: `embedded, local_supervisor`
+- MCP servers: `omg-control`
+- Evidence outputs: `.omg/evidence/hash-edit-{run_id}.json`

package/artifacts/public/dist/public/bundle/.agents/skills/omg/hash-edit/openai.yaml

@@ -0,0 +1,11 @@
+name: omg-hash-edit
+description: "Governed hash-bound edit lane with signed approvals and evidence routing."
+allow_implicit_invocation: false
+metadata:
+  channel: public
+  bundle_id: hash-edit
+  title: "OMG Hash Edit Lane"
+mcp_servers:
+  - omg-control
+allowed_tools:
+  - "Edit"

package/artifacts/public/dist/public/bundle/.agents/skills/omg/health/SKILL.md

@@ -0,0 +1,11 @@
+---
+name: omg-health
+description: "Health-sensitive approvals, provenance, and replay attachments."
+---
+
+# OMG Health Pack
+
+- Channel: `public`
+- Execution modes: `embedded, local_supervisor`
+- MCP servers: `omg-control`
+- Evidence outputs: `.omg/lineage/*.json`

package/artifacts/public/dist/public/bundle/.agents/skills/omg/health/openai.yaml

@@ -0,0 +1,11 @@
+name: omg-health
+description: "Health-sensitive approvals, provenance, and replay attachments."
+allow_implicit_invocation: false
+metadata:
+  channel: public
+  bundle_id: health
+  title: "OMG Health Pack"
+mcp_servers:
+  - omg-control
+allowed_tools:
+  - "Read"

package/artifacts/public/dist/public/bundle/.agents/skills/omg/hook-governor/SKILL.md

@@ -0,0 +1,11 @@
+---
+name: omg-hook-governor
+description: "Canonical hook ordering, policy reinjection, and protected-path governance."
+---
+
+# OMG Hook Governor
+
+- Channel: `public`
+- Execution modes: `embedded, local_supervisor`
+- MCP servers: `omg-control`
+- Evidence outputs: `.omg/state/ledger/tool-ledger.jsonl`