@trac3er/oh-my-god 2.1.9 → 2.2.2

package/artifacts/public/dist/public/attestations/bundle/plugins/advanced/commands/OMG:maintainer.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/plugins/advanced/commands/OMG:maintainer.md",
+      "digest": {
+        "sha256": "1a29d4cb6839dd6de8c11b88b93a72fb9a371cfb7784bfe409d5e5ef0a825508"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.608147+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.608147+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "de17bddfc6f886e7",
+    "value": "untrusted comment: signature from omg local signing key\ng5o0GR4yUSPuhkBJuH6xyI87Nh56rnlkzpR+s4Fr0jcnpj2p6kCZt7AbVb8RHPqK07dPqCpGA6Yz2J5KVuuHAw==\ntrusted comment: type=omg-slsa-v1 keyid=de17bddfc6f886e7 issued_at=2026-03-13T21:11:22.608263+00:00 artifact=bundle/plugins/advanced/commands/OMG:maintainer.md sha256=1a29d4cb6839dd6de8c11b88b93a72fb9a371cfb7784bfe409d5e5ef0a825508\nHh7K9WliYJevPHS8nxXJRPOtuERDgMRuOM1mEbnEEfdXyfvOAbgbishNuAMW5BVfsfU7lbt3NM3hZ0hbwECRCQ==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=de17bddfc6f886e7 issued_at=2026-03-13T21:11:22.608263+00:00 artifact=bundle/plugins/advanced/commands/OMG:maintainer.md sha256=1a29d4cb6839dd6de8c11b88b93a72fb9a371cfb7784bfe409d5e5ef0a825508"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/plugins/advanced/commands/OMG:ralph-start.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+LSZLkEQJ7u/upTDHjw1y0gOx/kAC1rlBGU+bL2f7mi4CmHU1z+q4I84TJGvjn3YGAkMosJQ4IusSnPaHTceeBQ==
+trusted comment: type=omg-slsa-v1 keyid=123c9ee581c56e0a issued_at=2026-03-13T21:11:22.608833+00:00 artifact=bundle/plugins/advanced/commands/OMG:ralph-start.md sha256=31b2aded6032b5f061dbb7cd92dff53bbe3b527b9e9ba93d5043cad2847a6365
+jjF3LODPve8qOzZriyLQXrkCSaJ74ulVvX4aDY2DF94kxjb5J0DVVq70oMIILLdSxMHSpo7AEX4s9eSNM8JcCQ==

package/artifacts/public/dist/public/attestations/bundle/plugins/advanced/commands/OMG:ralph-start.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/plugins/advanced/commands/OMG:ralph-start.md",
+      "digest": {
+        "sha256": "31b2aded6032b5f061dbb7cd92dff53bbe3b527b9e9ba93d5043cad2847a6365"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.608724+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.608724+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "123c9ee581c56e0a",
+    "value": "untrusted comment: signature from omg local signing key\nLSZLkEQJ7u/upTDHjw1y0gOx/kAC1rlBGU+bL2f7mi4CmHU1z+q4I84TJGvjn3YGAkMosJQ4IusSnPaHTceeBQ==\ntrusted comment: type=omg-slsa-v1 keyid=123c9ee581c56e0a issued_at=2026-03-13T21:11:22.608833+00:00 artifact=bundle/plugins/advanced/commands/OMG:ralph-start.md sha256=31b2aded6032b5f061dbb7cd92dff53bbe3b527b9e9ba93d5043cad2847a6365\njjF3LODPve8qOzZriyLQXrkCSaJ74ulVvX4aDY2DF94kxjb5J0DVVq70oMIILLdSxMHSpo7AEX4s9eSNM8JcCQ==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=123c9ee581c56e0a issued_at=2026-03-13T21:11:22.608833+00:00 artifact=bundle/plugins/advanced/commands/OMG:ralph-start.md sha256=31b2aded6032b5f061dbb7cd92dff53bbe3b527b9e9ba93d5043cad2847a6365"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/plugins/advanced/commands/OMG:ralph-stop.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+5XTpS4YMliVOLBN6ATnOXI4vWjHs8++e0+B6c7ly/jQUgk+HgsAg3RtsX+exGWslVUxrjdkGYtQKoWr5qUUlBQ==
+trusted comment: type=omg-slsa-v1 keyid=b88a6371b52a69b9 issued_at=2026-03-13T21:11:22.609396+00:00 artifact=bundle/plugins/advanced/commands/OMG:ralph-stop.md sha256=b43acad180bd205ddd78d42f1c7ecf315e521a0c345bf9d42b24d8c4d3913ce3
+HDvGBu9jg7yNzj130GAum5loXONkp2pSHxBb5DCLAEfdEXINzCKMOCSXesRJnI2WXbBR0ZjTMdEwcFcvsu0oCA==

package/artifacts/public/dist/public/attestations/bundle/plugins/advanced/commands/OMG:ralph-stop.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/plugins/advanced/commands/OMG:ralph-stop.md",
+      "digest": {
+        "sha256": "b43acad180bd205ddd78d42f1c7ecf315e521a0c345bf9d42b24d8c4d3913ce3"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.609284+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.609284+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "b88a6371b52a69b9",
+    "value": "untrusted comment: signature from omg local signing key\n5XTpS4YMliVOLBN6ATnOXI4vWjHs8++e0+B6c7ly/jQUgk+HgsAg3RtsX+exGWslVUxrjdkGYtQKoWr5qUUlBQ==\ntrusted comment: type=omg-slsa-v1 keyid=b88a6371b52a69b9 issued_at=2026-03-13T21:11:22.609396+00:00 artifact=bundle/plugins/advanced/commands/OMG:ralph-stop.md sha256=b43acad180bd205ddd78d42f1c7ecf315e521a0c345bf9d42b24d8c4d3913ce3\nHDvGBu9jg7yNzj130GAum5loXONkp2pSHxBb5DCLAEfdEXINzCKMOCSXesRJnI2WXbBR0ZjTMdEwcFcvsu0oCA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=b88a6371b52a69b9 issued_at=2026-03-13T21:11:22.609396+00:00 artifact=bundle/plugins/advanced/commands/OMG:ralph-stop.md sha256=b43acad180bd205ddd78d42f1c7ecf315e521a0c345bf9d42b24d8c4d3913ce3"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/plugins/advanced/commands/OMG:security-review.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+Zja5624vy63a7vdThIENjxdiZlRQkTqf9A1kwOrQC4JMadohiq2VxihFMVOetzyIJbcif+AyJ9Wx1LKTW/mfAg==
+trusted comment: type=omg-slsa-v1 keyid=6fd8910e305c3021 issued_at=2026-03-13T21:11:22.610336+00:00 artifact=bundle/plugins/advanced/commands/OMG:security-review.md sha256=f2a0e1a61b4110ac88202e2e5c166191867423235bf61030ef9cc082d964cc22
+WJn6hLFFP9m/cji9Kwlhleu9QOvTQrkG1zPoP9whu2K08NEtaYTf3RQoz/7G7TL2VhcK/EkvH9vxFWNKfZz0BQ==

package/artifacts/public/dist/public/attestations/bundle/plugins/advanced/commands/OMG:security-review.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/plugins/advanced/commands/OMG:security-review.md",
+      "digest": {
+        "sha256": "f2a0e1a61b4110ac88202e2e5c166191867423235bf61030ef9cc082d964cc22"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.610173+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.610173+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "6fd8910e305c3021",
+    "value": "untrusted comment: signature from omg local signing key\nZja5624vy63a7vdThIENjxdiZlRQkTqf9A1kwOrQC4JMadohiq2VxihFMVOetzyIJbcif+AyJ9Wx1LKTW/mfAg==\ntrusted comment: type=omg-slsa-v1 keyid=6fd8910e305c3021 issued_at=2026-03-13T21:11:22.610336+00:00 artifact=bundle/plugins/advanced/commands/OMG:security-review.md sha256=f2a0e1a61b4110ac88202e2e5c166191867423235bf61030ef9cc082d964cc22\nWJn6hLFFP9m/cji9Kwlhleu9QOvTQrkG1zPoP9whu2K08NEtaYTf3RQoz/7G7TL2VhcK/EkvH9vxFWNKfZz0BQ==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=6fd8910e305c3021 issued_at=2026-03-13T21:11:22.610336+00:00 artifact=bundle/plugins/advanced/commands/OMG:security-review.md sha256=f2a0e1a61b4110ac88202e2e5c166191867423235bf61030ef9cc082d964cc22"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/plugins/advanced/commands/OMG:sequential-thinking.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+WMejqNS35slxJLhlfI+vIGLVPFYHfFcVZaHZTSMInCgp8rwpAI7Gq6bzeKWr2o/LFG5j1/mnkhFh/CraSFaHCw==
+trusted comment: type=omg-slsa-v1 keyid=346d40250604666f issued_at=2026-03-13T21:11:22.611130+00:00 artifact=bundle/plugins/advanced/commands/OMG:sequential-thinking.md sha256=1830de63009cb07c80cbcecf143f6df7560e7f031ac5b1d509b726d184e441da
+wSswedte5Cs3srOmzDdoSxxf+9+b6X/2FumPzW0aneefekuZVvyHIi0gr59LroONzZwmj3RfcKmJ7HFGHxxjAg==

package/artifacts/public/dist/public/attestations/bundle/plugins/advanced/commands/OMG:sequential-thinking.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/plugins/advanced/commands/OMG:sequential-thinking.md",
+      "digest": {
+        "sha256": "1830de63009cb07c80cbcecf143f6df7560e7f031ac5b1d509b726d184e441da"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.610996+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.610996+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "346d40250604666f",
+    "value": "untrusted comment: signature from omg local signing key\nWMejqNS35slxJLhlfI+vIGLVPFYHfFcVZaHZTSMInCgp8rwpAI7Gq6bzeKWr2o/LFG5j1/mnkhFh/CraSFaHCw==\ntrusted comment: type=omg-slsa-v1 keyid=346d40250604666f issued_at=2026-03-13T21:11:22.611130+00:00 artifact=bundle/plugins/advanced/commands/OMG:sequential-thinking.md sha256=1830de63009cb07c80cbcecf143f6df7560e7f031ac5b1d509b726d184e441da\nwSswedte5Cs3srOmzDdoSxxf+9+b6X/2FumPzW0aneefekuZVvyHIi0gr59LroONzZwmj3RfcKmJ7HFGHxxjAg==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=346d40250604666f issued_at=2026-03-13T21:11:22.611130+00:00 artifact=bundle/plugins/advanced/commands/OMG:sequential-thinking.md sha256=1830de63009cb07c80cbcecf143f6df7560e7f031ac5b1d509b726d184e441da"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/plugins/advanced/commands/OMG:ship.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+yorKEIU5TwwGWkyFN2B7yP6BHsLsXdO7cEKM9XflHw0bwLcMyNpHJR+kc7oIBTKn6+TezczLTOC5cq5Ewh4EAA==
+trusted comment: type=omg-slsa-v1 keyid=016605ccba7f5fef issued_at=2026-03-13T21:11:22.611875+00:00 artifact=bundle/plugins/advanced/commands/OMG:ship.md sha256=3a44016f71a4d73de04043f0c13a6655541c090498908b2bc858c29514a653d4
+Ro6NuMrP5CwojtCg26vasYR3Qf6avCmEreG4U7GcTBS5qetaqMiCX01q+mPG9+OiLnJqF1PEmEeGIUdRP9eDDw==

package/artifacts/public/dist/public/attestations/bundle/plugins/advanced/commands/OMG:ship.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/plugins/advanced/commands/OMG:ship.md",
+      "digest": {
+        "sha256": "3a44016f71a4d73de04043f0c13a6655541c090498908b2bc858c29514a653d4"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.611744+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.611744+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "016605ccba7f5fef",
+    "value": "untrusted comment: signature from omg local signing key\nyorKEIU5TwwGWkyFN2B7yP6BHsLsXdO7cEKM9XflHw0bwLcMyNpHJR+kc7oIBTKn6+TezczLTOC5cq5Ewh4EAA==\ntrusted comment: type=omg-slsa-v1 keyid=016605ccba7f5fef issued_at=2026-03-13T21:11:22.611875+00:00 artifact=bundle/plugins/advanced/commands/OMG:ship.md sha256=3a44016f71a4d73de04043f0c13a6655541c090498908b2bc858c29514a653d4\nRo6NuMrP5CwojtCg26vasYR3Qf6avCmEreG4U7GcTBS5qetaqMiCX01q+mPG9+OiLnJqF1PEmEeGIUdRP9eDDw==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=016605ccba7f5fef issued_at=2026-03-13T21:11:22.611875+00:00 artifact=bundle/plugins/advanced/commands/OMG:ship.md sha256=3a44016f71a4d73de04043f0c13a6655541c090498908b2bc858c29514a653d4"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/plugins/advanced/plugin.json.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+T/26TBaQIXHDDzQpqWNN1llPe/5Evt5HGGCzVHL+z/kIY5ILg+1TGsPUZUKnX6jH9/aHFv8JD3QbfyLL5k1wAQ==
+trusted comment: type=omg-slsa-v1 keyid=70daa6ffd63a90c4 issued_at=2026-03-13T21:11:22.612449+00:00 artifact=bundle/plugins/advanced/plugin.json sha256=a53fe70547cc5e4fa8fc2e52468c1d3dba9e34e47843fe4a5f0e153560df6069
+YrVhpdvLdzsJnAwuG5R41m+E2yPrL5ycUrnwRG3qD7gxh5rXfEsf8SJgMHOhDhNeGEx1KCH8LnofK46aj0MlBw==

package/artifacts/public/dist/public/attestations/bundle/plugins/advanced/plugin.json.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/plugins/advanced/plugin.json",
+      "digest": {
+        "sha256": "a53fe70547cc5e4fa8fc2e52468c1d3dba9e34e47843fe4a5f0e153560df6069"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.612340+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.612340+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "70daa6ffd63a90c4",
+    "value": "untrusted comment: signature from omg local signing key\nT/26TBaQIXHDDzQpqWNN1llPe/5Evt5HGGCzVHL+z/kIY5ILg+1TGsPUZUKnX6jH9/aHFv8JD3QbfyLL5k1wAQ==\ntrusted comment: type=omg-slsa-v1 keyid=70daa6ffd63a90c4 issued_at=2026-03-13T21:11:22.612449+00:00 artifact=bundle/plugins/advanced/plugin.json sha256=a53fe70547cc5e4fa8fc2e52468c1d3dba9e34e47843fe4a5f0e153560df6069\nYrVhpdvLdzsJnAwuG5R41m+E2yPrL5ycUrnwRG3qD7gxh5rXfEsf8SJgMHOhDhNeGEx1KCH8LnofK46aj0MlBw==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=70daa6ffd63a90c4 issued_at=2026-03-13T21:11:22.612449+00:00 artifact=bundle/plugins/advanced/plugin.json sha256=a53fe70547cc5e4fa8fc2e52468c1d3dba9e34e47843fe4a5f0e153560df6069"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/algorithms.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+/IqLa4Kf87ElpmCnzxkF2+ShO+Xb8uDpsTyAdaA0rXe3A/XfGmGJK/k1WumBdU9k6c12LLw51zq7ZhpMJe07AA==
+trusted comment: type=omg-slsa-v1 keyid=c7eef53ed946f853 issued_at=2026-03-13T21:11:22.613026+00:00 artifact=bundle/registry/bundles/algorithms.yaml sha256=aabbff24e4880e77527522ed90633b809a43f681528b754dc3d09e3540c1294c
+J9Nk4FXvQljkRFoZZKVQQ1k1LMkSY3y0AuRSoSSldspKOP8sIYo27Wi1jVl98QO0ehZU1WB8xMyGvuKKM643Bw==

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/algorithms.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/algorithms.yaml",
+      "digest": {
+        "sha256": "aabbff24e4880e77527522ed90633b809a43f681528b754dc3d09e3540c1294c"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.612918+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.612918+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "c7eef53ed946f853",
+    "value": "untrusted comment: signature from omg local signing key\n/IqLa4Kf87ElpmCnzxkF2+ShO+Xb8uDpsTyAdaA0rXe3A/XfGmGJK/k1WumBdU9k6c12LLw51zq7ZhpMJe07AA==\ntrusted comment: type=omg-slsa-v1 keyid=c7eef53ed946f853 issued_at=2026-03-13T21:11:22.613026+00:00 artifact=bundle/registry/bundles/algorithms.yaml sha256=aabbff24e4880e77527522ed90633b809a43f681528b754dc3d09e3540c1294c\nJ9Nk4FXvQljkRFoZZKVQQ1k1LMkSY3y0AuRSoSSldspKOP8sIYo27Wi1jVl98QO0ehZU1WB8xMyGvuKKM643Bw==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=c7eef53ed946f853 issued_at=2026-03-13T21:11:22.613026+00:00 artifact=bundle/registry/bundles/algorithms.yaml sha256=aabbff24e4880e77527522ed90633b809a43f681528b754dc3d09e3540c1294c"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/api-twin.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
++YFBxme6MK2+n6dhnwoPxPVoCMRn3BpUIDHwLJQtDMML/Vv0Lx2GvTqeyL10rTSu4md0boditEv6mOlqhy3YCw==
+trusted comment: type=omg-slsa-v1 keyid=96c5c2cea84d2158 issued_at=2026-03-13T21:11:22.614134+00:00 artifact=bundle/registry/bundles/api-twin.yaml sha256=9341efdbac9ce2d362b90910d921433a31e28ab7309a8d33d305e75a34207d42
+hkd33zcaaoL9WRZhQ02yB/0A4e2KV1un+fmTdhxaZDfmlRR4G4l3+KwvFvl+fEQaUyNkCOENWwqmweSBompkBQ==

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/api-twin.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/api-twin.yaml",
+      "digest": {
+        "sha256": "9341efdbac9ce2d362b90910d921433a31e28ab7309a8d33d305e75a34207d42"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.613978+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.613978+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "96c5c2cea84d2158",
+    "value": "untrusted comment: signature from omg local signing key\n+YFBxme6MK2+n6dhnwoPxPVoCMRn3BpUIDHwLJQtDMML/Vv0Lx2GvTqeyL10rTSu4md0boditEv6mOlqhy3YCw==\ntrusted comment: type=omg-slsa-v1 keyid=96c5c2cea84d2158 issued_at=2026-03-13T21:11:22.614134+00:00 artifact=bundle/registry/bundles/api-twin.yaml sha256=9341efdbac9ce2d362b90910d921433a31e28ab7309a8d33d305e75a34207d42\nhkd33zcaaoL9WRZhQ02yB/0A4e2KV1un+fmTdhxaZDfmlRR4G4l3+KwvFvl+fEQaUyNkCOENWwqmweSBompkBQ==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=96c5c2cea84d2158 issued_at=2026-03-13T21:11:22.614134+00:00 artifact=bundle/registry/bundles/api-twin.yaml sha256=9341efdbac9ce2d362b90910d921433a31e28ab7309a8d33d305e75a34207d42"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/ast-pack.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+wsqFYaeI97juPmEEIKxCMeFF8nKkREVx5ytSMB4lQy3WYUgqxGj6Rq885JTbjmXOQMdhLzajVM0xZcdMswIBDA==
+trusted comment: type=omg-slsa-v1 keyid=2ce4729aa310b5bf issued_at=2026-03-13T21:11:22.614763+00:00 artifact=bundle/registry/bundles/ast-pack.yaml sha256=394cc9168fe138151afa694f34ba504e49827c6e6abb913e42550e34a69fdf31
+mBR79zY3ABd2rM5TEs36+MFjgE6+rdS+p2SNJFrUEDHwPxZukbmV3VnwhH8XPNfItmHe7hhN6WSl0Q2mE2e1Dw==

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/ast-pack.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/ast-pack.yaml",
+      "digest": {
+        "sha256": "394cc9168fe138151afa694f34ba504e49827c6e6abb913e42550e34a69fdf31"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.614646+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.614646+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "2ce4729aa310b5bf",
+    "value": "untrusted comment: signature from omg local signing key\nwsqFYaeI97juPmEEIKxCMeFF8nKkREVx5ytSMB4lQy3WYUgqxGj6Rq885JTbjmXOQMdhLzajVM0xZcdMswIBDA==\ntrusted comment: type=omg-slsa-v1 keyid=2ce4729aa310b5bf issued_at=2026-03-13T21:11:22.614763+00:00 artifact=bundle/registry/bundles/ast-pack.yaml sha256=394cc9168fe138151afa694f34ba504e49827c6e6abb913e42550e34a69fdf31\nmBR79zY3ABd2rM5TEs36+MFjgE6+rdS+p2SNJFrUEDHwPxZukbmV3VnwhH8XPNfItmHe7hhN6WSl0Q2mE2e1Dw==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=2ce4729aa310b5bf issued_at=2026-03-13T21:11:22.614763+00:00 artifact=bundle/registry/bundles/ast-pack.yaml sha256=394cc9168fe138151afa694f34ba504e49827c6e6abb913e42550e34a69fdf31"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/claim-judge.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+ErJm3JEIk5bRqC0MgwJAhb16Bo3kQHjy7aVwNOY3mH3JmbwEW+BSn65Yikl49KC39YiJ7rC7fQD3D9FCd7YMDw==
+trusted comment: type=omg-slsa-v1 keyid=db7b1c81aa5b1a12 issued_at=2026-03-13T21:11:22.615355+00:00 artifact=bundle/registry/bundles/claim-judge.yaml sha256=005a7c0f657a20e85416c7bc95fee253f0f73917de719ce2558042a73f6af112
+ltBx6Vaiz9kKSrPAMTHmjZZI7i9iU7PDoj0FoChQTZnCVZN2o37v4lc6/FurCQVodA96L8PBvJIZBVj2+QQOBg==

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/claim-judge.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/claim-judge.yaml",
+      "digest": {
+        "sha256": "005a7c0f657a20e85416c7bc95fee253f0f73917de719ce2558042a73f6af112"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.615241+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.615241+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "db7b1c81aa5b1a12",
+    "value": "untrusted comment: signature from omg local signing key\nErJm3JEIk5bRqC0MgwJAhb16Bo3kQHjy7aVwNOY3mH3JmbwEW+BSn65Yikl49KC39YiJ7rC7fQD3D9FCd7YMDw==\ntrusted comment: type=omg-slsa-v1 keyid=db7b1c81aa5b1a12 issued_at=2026-03-13T21:11:22.615355+00:00 artifact=bundle/registry/bundles/claim-judge.yaml sha256=005a7c0f657a20e85416c7bc95fee253f0f73917de719ce2558042a73f6af112\nltBx6Vaiz9kKSrPAMTHmjZZI7i9iU7PDoj0FoChQTZnCVZN2o37v4lc6/FurCQVodA96L8PBvJIZBVj2+QQOBg==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=db7b1c81aa5b1a12 issued_at=2026-03-13T21:11:22.615355+00:00 artifact=bundle/registry/bundles/claim-judge.yaml sha256=005a7c0f657a20e85416c7bc95fee253f0f73917de719ce2558042a73f6af112"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/control-plane.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+GZVktbepYZMNa0HW4icQmWyQthE9MrbErAHdJbnOdLiVgzadgmfM6qkdry5fjhQ8A0wMnaMlZT9CFX1+N/6fCw==
+trusted comment: type=omg-slsa-v1 keyid=9054f0e6d8b98b5f issued_at=2026-03-13T21:11:22.615967+00:00 artifact=bundle/registry/bundles/control-plane.yaml sha256=c68597109f9712ef8ff893592ccd532ab518507e7406d13d44a8b8452aecdea8
+uF180P2EmnGWGNn1Zo7bb7hedy5Sdoi9V3wEghaZEfJA65lEbm8G5YO8hUYBI4S+/G+60lNGjWPK8zefX/zHAA==

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/control-plane.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/control-plane.yaml",
+      "digest": {
+        "sha256": "c68597109f9712ef8ff893592ccd532ab518507e7406d13d44a8b8452aecdea8"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.615854+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.615854+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "9054f0e6d8b98b5f",
+    "value": "untrusted comment: signature from omg local signing key\nGZVktbepYZMNa0HW4icQmWyQthE9MrbErAHdJbnOdLiVgzadgmfM6qkdry5fjhQ8A0wMnaMlZT9CFX1+N/6fCw==\ntrusted comment: type=omg-slsa-v1 keyid=9054f0e6d8b98b5f issued_at=2026-03-13T21:11:22.615967+00:00 artifact=bundle/registry/bundles/control-plane.yaml sha256=c68597109f9712ef8ff893592ccd532ab518507e7406d13d44a8b8452aecdea8\nuF180P2EmnGWGNn1Zo7bb7hedy5Sdoi9V3wEghaZEfJA65lEbm8G5YO8hUYBI4S+/G+60lNGjWPK8zefX/zHAA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=9054f0e6d8b98b5f issued_at=2026-03-13T21:11:22.615967+00:00 artifact=bundle/registry/bundles/control-plane.yaml sha256=c68597109f9712ef8ff893592ccd532ab518507e7406d13d44a8b8452aecdea8"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/data-lineage.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+xz+y2GF+XMrK4bAhG2E7wnxuSA6dPa73l7hB3vwJR+eliL9K92+wCB2vmAXuexKblk5WgxPfLqnATa6wU7mQCg==
+trusted comment: type=omg-slsa-v1 keyid=8c156c93ad0d8fca issued_at=2026-03-13T21:11:22.616648+00:00 artifact=bundle/registry/bundles/data-lineage.yaml sha256=47d7d2e1718fbb0fcb74a6e51ee7d85a7a9392768eaa2f12c3dfc19243c7d161
+7x/HTuUKl4II7aqfQF6O4GRrpnPYdkvWC9a6DvkLHYu4L3ZOLy+56W3x4SoBAPyaRRCTeOoSlee6MGBNpYarAg==

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/data-lineage.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/data-lineage.yaml",
+      "digest": {
+        "sha256": "47d7d2e1718fbb0fcb74a6e51ee7d85a7a9392768eaa2f12c3dfc19243c7d161"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.616528+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.616528+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "8c156c93ad0d8fca",
+    "value": "untrusted comment: signature from omg local signing key\nxz+y2GF+XMrK4bAhG2E7wnxuSA6dPa73l7hB3vwJR+eliL9K92+wCB2vmAXuexKblk5WgxPfLqnATa6wU7mQCg==\ntrusted comment: type=omg-slsa-v1 keyid=8c156c93ad0d8fca issued_at=2026-03-13T21:11:22.616648+00:00 artifact=bundle/registry/bundles/data-lineage.yaml sha256=47d7d2e1718fbb0fcb74a6e51ee7d85a7a9392768eaa2f12c3dfc19243c7d161\n7x/HTuUKl4II7aqfQF6O4GRrpnPYdkvWC9a6DvkLHYu4L3ZOLy+56W3x4SoBAPyaRRCTeOoSlee6MGBNpYarAg==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=8c156c93ad0d8fca issued_at=2026-03-13T21:11:22.616648+00:00 artifact=bundle/registry/bundles/data-lineage.yaml sha256=47d7d2e1718fbb0fcb74a6e51ee7d85a7a9392768eaa2f12c3dfc19243c7d161"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/delta-classifier.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+pM5Wtg05XSmFegp3f1/kadQgOrRNE00SAdO3s1ohpQuiKRg9E4TAKNeEQv5QtWvA5uEHjZhtqblAgtLB/fjrDQ==
+trusted comment: type=omg-slsa-v1 keyid=2c88bb1036c00b61 issued_at=2026-03-13T21:11:22.617199+00:00 artifact=bundle/registry/bundles/delta-classifier.yaml sha256=b7465f9989998bbbfe085883fe8687bacb9999047327715098db34e6ceb9db6c
+X++Xl9OxY3nO7+7nxdCSanJCiQ7GF7cnCP2CI80UvSFZ5MCZqsjCnqcRIwNqRBCaclypDK0Bbr/IRAFrO8QBCA==

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/delta-classifier.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/delta-classifier.yaml",
+      "digest": {
+        "sha256": "b7465f9989998bbbfe085883fe8687bacb9999047327715098db34e6ceb9db6c"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.617093+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.617093+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "2c88bb1036c00b61",
+    "value": "untrusted comment: signature from omg local signing key\npM5Wtg05XSmFegp3f1/kadQgOrRNE00SAdO3s1ohpQuiKRg9E4TAKNeEQv5QtWvA5uEHjZhtqblAgtLB/fjrDQ==\ntrusted comment: type=omg-slsa-v1 keyid=2c88bb1036c00b61 issued_at=2026-03-13T21:11:22.617199+00:00 artifact=bundle/registry/bundles/delta-classifier.yaml sha256=b7465f9989998bbbfe085883fe8687bacb9999047327715098db34e6ceb9db6c\nX++Xl9OxY3nO7+7nxdCSanJCiQ7GF7cnCP2CI80UvSFZ5MCZqsjCnqcRIwNqRBCaclypDK0Bbr/IRAFrO8QBCA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=2c88bb1036c00b61 issued_at=2026-03-13T21:11:22.617199+00:00 artifact=bundle/registry/bundles/delta-classifier.yaml sha256=b7465f9989998bbbfe085883fe8687bacb9999047327715098db34e6ceb9db6c"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/eval-gate.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+wkIiJKTl7UjrAGm6mdaTP8W1gXrcB/4NSXiuHWWfAEZiYSfXbBs0rdnaL+Fj1kATGzBAxJn9X+fKKEJPkv5BDQ==
+trusted comment: type=omg-slsa-v1 keyid=e8dacb5a38ab30e9 issued_at=2026-03-13T21:11:22.618027+00:00 artifact=bundle/registry/bundles/eval-gate.yaml sha256=f8d4cc8db65a568bea308da4ce4bd3aeade4cbbeabb6063ef930b9595c3ff0ce
+Y0D4vHgCKeSSScMkPcxL9Y3fI7JkvqLBCcciZTAtJgLAHmK1Y3IUgALjbEOLj1MLHaHbtfQPAAZ6VktY2GNuAA==