@trac3er/oh-my-god 2.1.9 → 2.2.2

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/eval-gate.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/eval-gate.yaml",
+      "digest": {
+        "sha256": "f8d4cc8db65a568bea308da4ce4bd3aeade4cbbeabb6063ef930b9595c3ff0ce"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.617913+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.617913+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "e8dacb5a38ab30e9",
+    "value": "untrusted comment: signature from omg local signing key\nwkIiJKTl7UjrAGm6mdaTP8W1gXrcB/4NSXiuHWWfAEZiYSfXbBs0rdnaL+Fj1kATGzBAxJn9X+fKKEJPkv5BDQ==\ntrusted comment: type=omg-slsa-v1 keyid=e8dacb5a38ab30e9 issued_at=2026-03-13T21:11:22.618027+00:00 artifact=bundle/registry/bundles/eval-gate.yaml sha256=f8d4cc8db65a568bea308da4ce4bd3aeade4cbbeabb6063ef930b9595c3ff0ce\nY0D4vHgCKeSSScMkPcxL9Y3fI7JkvqLBCcciZTAtJgLAHmK1Y3IUgALjbEOLj1MLHaHbtfQPAAZ6VktY2GNuAA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=e8dacb5a38ab30e9 issued_at=2026-03-13T21:11:22.618027+00:00 artifact=bundle/registry/bundles/eval-gate.yaml sha256=f8d4cc8db65a568bea308da4ce4bd3aeade4cbbeabb6063ef930b9595c3ff0ce"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/hash-edit.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+rt2JXMLMEl/5X0lZwz+o8TzQh9iPuZwUBURk7IVPWQ/ilrOO7LRRxJVgsyOiB99cbFmmL6eKatlVsq08YzjsDA==
+trusted comment: type=omg-slsa-v1 keyid=347275ae7091ab89 issued_at=2026-03-13T21:11:22.618562+00:00 artifact=bundle/registry/bundles/hash-edit.yaml sha256=4b4178753bc3cfdc4c485288152341c42c4afd12e1357ec249cbf7d9291fcb62
+BwF8gLUe1cBI3Jdpafti327V+qYOPM1ymYY2qpnQvMLSRRagArG+G4LxzBXEGgm8DjnZ2W5Ze58nCmI/WUMWAg==

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/hash-edit.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/hash-edit.yaml",
+      "digest": {
+        "sha256": "4b4178753bc3cfdc4c485288152341c42c4afd12e1357ec249cbf7d9291fcb62"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.618455+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.618455+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "347275ae7091ab89",
+    "value": "untrusted comment: signature from omg local signing key\nrt2JXMLMEl/5X0lZwz+o8TzQh9iPuZwUBURk7IVPWQ/ilrOO7LRRxJVgsyOiB99cbFmmL6eKatlVsq08YzjsDA==\ntrusted comment: type=omg-slsa-v1 keyid=347275ae7091ab89 issued_at=2026-03-13T21:11:22.618562+00:00 artifact=bundle/registry/bundles/hash-edit.yaml sha256=4b4178753bc3cfdc4c485288152341c42c4afd12e1357ec249cbf7d9291fcb62\nBwF8gLUe1cBI3Jdpafti327V+qYOPM1ymYY2qpnQvMLSRRagArG+G4LxzBXEGgm8DjnZ2W5Ze58nCmI/WUMWAg==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=347275ae7091ab89 issued_at=2026-03-13T21:11:22.618562+00:00 artifact=bundle/registry/bundles/hash-edit.yaml sha256=4b4178753bc3cfdc4c485288152341c42c4afd12e1357ec249cbf7d9291fcb62"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/health.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+nZ4m/i5DoMltWNssYm4OYIGl1dzUbMwElZmJYBIploF8h0ABu3hELCuJrX5OHFtaAQZ15zj1UcmdwrFDmrS+Bw==
+trusted comment: type=omg-slsa-v1 keyid=1b7c7ce0f38cdbec issued_at=2026-03-13T21:11:22.619091+00:00 artifact=bundle/registry/bundles/health.yaml sha256=391260606cae41dc5ef80432599ec8460a6ee968811c3213b33ec00df81cfe78
+iYgcJgeext+Lh3Ko0MfA42tM1eIzU+KtT7Ls8TLMhpmIRFNWCcAsP9FDeldmsJmS/Rto2mfVXAmimwXYqnv8Cw==

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/health.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/health.yaml",
+      "digest": {
+        "sha256": "391260606cae41dc5ef80432599ec8460a6ee968811c3213b33ec00df81cfe78"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.618986+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.618986+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "1b7c7ce0f38cdbec",
+    "value": "untrusted comment: signature from omg local signing key\nnZ4m/i5DoMltWNssYm4OYIGl1dzUbMwElZmJYBIploF8h0ABu3hELCuJrX5OHFtaAQZ15zj1UcmdwrFDmrS+Bw==\ntrusted comment: type=omg-slsa-v1 keyid=1b7c7ce0f38cdbec issued_at=2026-03-13T21:11:22.619091+00:00 artifact=bundle/registry/bundles/health.yaml sha256=391260606cae41dc5ef80432599ec8460a6ee968811c3213b33ec00df81cfe78\niYgcJgeext+Lh3Ko0MfA42tM1eIzU+KtT7Ls8TLMhpmIRFNWCcAsP9FDeldmsJmS/Rto2mfVXAmimwXYqnv8Cw==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=1b7c7ce0f38cdbec issued_at=2026-03-13T21:11:22.619091+00:00 artifact=bundle/registry/bundles/health.yaml sha256=391260606cae41dc5ef80432599ec8460a6ee968811c3213b33ec00df81cfe78"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/hook-governor.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+z4Oy58FEG8XQWaD8KdeSttFFltRqiJ4vgs7rNQKF0k1Z6tvK/o8cUeFfJaRPxEeuCvD4+L2809NjCaURvctDCA==
+trusted comment: type=omg-slsa-v1 keyid=f0ad7bebc06c0104 issued_at=2026-03-13T21:11:22.619610+00:00 artifact=bundle/registry/bundles/hook-governor.yaml sha256=c9b52245cc6a70c0d1d0a3b636cbce409dcf179f1ab4cbd7148099bcc3abb43f
+AmJ1X5kvm+c1xBizqDCjM1l1KcX0xNxgRuClnuN0ymSA9T2WJuTin4/U/TQ+GS7YzDrNPNfNT3xXXtJs3rRWAg==

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/hook-governor.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/hook-governor.yaml",
+      "digest": {
+        "sha256": "c9b52245cc6a70c0d1d0a3b636cbce409dcf179f1ab4cbd7148099bcc3abb43f"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.619505+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.619505+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "f0ad7bebc06c0104",
+    "value": "untrusted comment: signature from omg local signing key\nz4Oy58FEG8XQWaD8KdeSttFFltRqiJ4vgs7rNQKF0k1Z6tvK/o8cUeFfJaRPxEeuCvD4+L2809NjCaURvctDCA==\ntrusted comment: type=omg-slsa-v1 keyid=f0ad7bebc06c0104 issued_at=2026-03-13T21:11:22.619610+00:00 artifact=bundle/registry/bundles/hook-governor.yaml sha256=c9b52245cc6a70c0d1d0a3b636cbce409dcf179f1ab4cbd7148099bcc3abb43f\nAmJ1X5kvm+c1xBizqDCjM1l1KcX0xNxgRuClnuN0ymSA9T2WJuTin4/U/TQ+GS7YzDrNPNfNT3xXXtJs3rRWAg==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=f0ad7bebc06c0104 issued_at=2026-03-13T21:11:22.619610+00:00 artifact=bundle/registry/bundles/hook-governor.yaml sha256=c9b52245cc6a70c0d1d0a3b636cbce409dcf179f1ab4cbd7148099bcc3abb43f"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/incident-replay.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+J/fL0BLFow1GPKX+zq31mgCJh00kqq8ibDfqFTU3YW+G2SVNn/2BLI2zw/6xXaQ+7qV4Qyxap9sbVzD2AaoODQ==
+trusted comment: type=omg-slsa-v1 keyid=79453c1a87a50781 issued_at=2026-03-13T21:11:22.620466+00:00 artifact=bundle/registry/bundles/incident-replay.yaml sha256=75ca3a1ce18590f5cf521fb50316c43a40b8b843b4d52e8a7cbc57b38546341f
+rP0assESfc1VTZVAGIphy6cmNhn4UnlJQSsWb+qxF+XMmNa1KbywBhCgCcDwrk8dmy55EaM66oPxZAAqr79ADA==

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/incident-replay.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/incident-replay.yaml",
+      "digest": {
+        "sha256": "75ca3a1ce18590f5cf521fb50316c43a40b8b843b4d52e8a7cbc57b38546341f"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.620309+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.620309+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "79453c1a87a50781",
+    "value": "untrusted comment: signature from omg local signing key\nJ/fL0BLFow1GPKX+zq31mgCJh00kqq8ibDfqFTU3YW+G2SVNn/2BLI2zw/6xXaQ+7qV4Qyxap9sbVzD2AaoODQ==\ntrusted comment: type=omg-slsa-v1 keyid=79453c1a87a50781 issued_at=2026-03-13T21:11:22.620466+00:00 artifact=bundle/registry/bundles/incident-replay.yaml sha256=75ca3a1ce18590f5cf521fb50316c43a40b8b843b4d52e8a7cbc57b38546341f\nrP0assESfc1VTZVAGIphy6cmNhn4UnlJQSsWb+qxF+XMmNa1KbywBhCgCcDwrk8dmy55EaM66oPxZAAqr79ADA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=79453c1a87a50781 issued_at=2026-03-13T21:11:22.620466+00:00 artifact=bundle/registry/bundles/incident-replay.yaml sha256=75ca3a1ce18590f5cf521fb50316c43a40b8b843b4d52e8a7cbc57b38546341f"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/lsp-pack.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+B9Q+DJlD7xW7u7faRuQW83iFBQeLLkkI/hPlkOj3QW/IE30J4vChl83Aw8F02pY3VD70uFE9/K9j+0jXOvQ+BA==
+trusted comment: type=omg-slsa-v1 keyid=fbcc443b423e212c issued_at=2026-03-13T21:11:22.621420+00:00 artifact=bundle/registry/bundles/lsp-pack.yaml sha256=951186b7d8a9e29b72246ca66ea3e4aca05c1067254a18b8650663fd94e73361
+Ar8nlutm85YbYP4hiMEIo7Uf2rirYcxo2Kk4if2ErZ8r/uhJfXcFDk2YtCdieME31r41P+bLMcUfHSNrHyaXBQ==

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/lsp-pack.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/lsp-pack.yaml",
+      "digest": {
+        "sha256": "951186b7d8a9e29b72246ca66ea3e4aca05c1067254a18b8650663fd94e73361"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.621294+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.621294+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "fbcc443b423e212c",
+    "value": "untrusted comment: signature from omg local signing key\nB9Q+DJlD7xW7u7faRuQW83iFBQeLLkkI/hPlkOj3QW/IE30J4vChl83Aw8F02pY3VD70uFE9/K9j+0jXOvQ+BA==\ntrusted comment: type=omg-slsa-v1 keyid=fbcc443b423e212c issued_at=2026-03-13T21:11:22.621420+00:00 artifact=bundle/registry/bundles/lsp-pack.yaml sha256=951186b7d8a9e29b72246ca66ea3e4aca05c1067254a18b8650663fd94e73361\nAr8nlutm85YbYP4hiMEIo7Uf2rirYcxo2Kk4if2ErZ8r/uhJfXcFDk2YtCdieME31r41P+bLMcUfHSNrHyaXBQ==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=fbcc443b423e212c issued_at=2026-03-13T21:11:22.621420+00:00 artifact=bundle/registry/bundles/lsp-pack.yaml sha256=951186b7d8a9e29b72246ca66ea3e4aca05c1067254a18b8650663fd94e73361"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/mcp-fabric.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+KnLheFNmLdKfHCOHVrXZSSLoGsZdtFAeFuNONWYZxcNdzfAAzHu/nc7f9Yv1clxoCae2uVBrLnw8WqWuFk9eDw==
+trusted comment: type=omg-slsa-v1 keyid=e2234dd2a22bcf49 issued_at=2026-03-13T21:11:22.622233+00:00 artifact=bundle/registry/bundles/mcp-fabric.yaml sha256=54ccd784cae04d285aa0a86b00662a7ee618dd4e645f67177d77b76af486f036
+Sz25SlGZjk8CZ3MUFbPni10yIqD7ZjcNkUITpgPavJv0jYoprO7duHIoU/eZIMfpw2zHRMp7HcEUL5ZQwj5WBA==

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/mcp-fabric.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/mcp-fabric.yaml",
+      "digest": {
+        "sha256": "54ccd784cae04d285aa0a86b00662a7ee618dd4e645f67177d77b76af486f036"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.622122+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.622122+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "e2234dd2a22bcf49",
+    "value": "untrusted comment: signature from omg local signing key\nKnLheFNmLdKfHCOHVrXZSSLoGsZdtFAeFuNONWYZxcNdzfAAzHu/nc7f9Yv1clxoCae2uVBrLnw8WqWuFk9eDw==\ntrusted comment: type=omg-slsa-v1 keyid=e2234dd2a22bcf49 issued_at=2026-03-13T21:11:22.622233+00:00 artifact=bundle/registry/bundles/mcp-fabric.yaml sha256=54ccd784cae04d285aa0a86b00662a7ee618dd4e645f67177d77b76af486f036\nSz25SlGZjk8CZ3MUFbPni10yIqD7ZjcNkUITpgPavJv0jYoprO7duHIoU/eZIMfpw2zHRMp7HcEUL5ZQwj5WBA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=e2234dd2a22bcf49 issued_at=2026-03-13T21:11:22.622233+00:00 artifact=bundle/registry/bundles/mcp-fabric.yaml sha256=54ccd784cae04d285aa0a86b00662a7ee618dd4e645f67177d77b76af486f036"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/plan-council.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+71jyOMjzDq8DI5BKG7DWki1RQR/B7cettTPf3a/i1pNTenK036rBRci4DP8+KPlZrsPGEiieqJ0xHwpIctGKDA==
+trusted comment: type=omg-slsa-v1 keyid=2a8776c1ceec472f issued_at=2026-03-13T21:11:22.622834+00:00 artifact=bundle/registry/bundles/plan-council.yaml sha256=cbd56d0f5c82205923d53527e01456b79d31772bd9289f88e37657933d6eb432
+Sev4a7a7lG0UMIg9U0cTwWCmL7OtbugxL01xblFJ1/pNH+lZ1uoaI3bgg4lkBgqVSTS0fnsPXVHbEOtfzfQ2AA==

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/plan-council.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/plan-council.yaml",
+      "digest": {
+        "sha256": "cbd56d0f5c82205923d53527e01456b79d31772bd9289f88e37657933d6eb432"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.622723+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.622723+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "2a8776c1ceec472f",
+    "value": "untrusted comment: signature from omg local signing key\n71jyOMjzDq8DI5BKG7DWki1RQR/B7cettTPf3a/i1pNTenK036rBRci4DP8+KPlZrsPGEiieqJ0xHwpIctGKDA==\ntrusted comment: type=omg-slsa-v1 keyid=2a8776c1ceec472f issued_at=2026-03-13T21:11:22.622834+00:00 artifact=bundle/registry/bundles/plan-council.yaml sha256=cbd56d0f5c82205923d53527e01456b79d31772bd9289f88e37657933d6eb432\nSev4a7a7lG0UMIg9U0cTwWCmL7OtbugxL01xblFJ1/pNH+lZ1uoaI3bgg4lkBgqVSTS0fnsPXVHbEOtfzfQ2AA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=2a8776c1ceec472f issued_at=2026-03-13T21:11:22.622834+00:00 artifact=bundle/registry/bundles/plan-council.yaml sha256=cbd56d0f5c82205923d53527e01456b79d31772bd9289f88e37657933d6eb432"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/preflight.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+mCheXmvkAYlP2ObyWPMWa6Uirx28KEFqN5cTOmoeROZCfM5ERFNJ9A153BpjE3N3bd2Lp5d5OMOKhmsutzWiBg==
+trusted comment: type=omg-slsa-v1 keyid=7d0d123ddbc3dbdf issued_at=2026-03-13T21:11:22.623512+00:00 artifact=bundle/registry/bundles/preflight.yaml sha256=eb6342b0dd7c3df68e18800883f4f0109609b602a661610b03949d913409f948
+F/1p0LKCxSxVUIKYECISccNoR2rEIICPBYjA2GDlmJGNLAiM0B+e37TjxaIkSh4LcxxznKTLdAW/nFFaemkUCA==

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/preflight.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/preflight.yaml",
+      "digest": {
+        "sha256": "eb6342b0dd7c3df68e18800883f4f0109609b602a661610b03949d913409f948"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.623403+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.623403+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "7d0d123ddbc3dbdf",
+    "value": "untrusted comment: signature from omg local signing key\nmCheXmvkAYlP2ObyWPMWa6Uirx28KEFqN5cTOmoeROZCfM5ERFNJ9A153BpjE3N3bd2Lp5d5OMOKhmsutzWiBg==\ntrusted comment: type=omg-slsa-v1 keyid=7d0d123ddbc3dbdf issued_at=2026-03-13T21:11:22.623512+00:00 artifact=bundle/registry/bundles/preflight.yaml sha256=eb6342b0dd7c3df68e18800883f4f0109609b602a661610b03949d913409f948\nF/1p0LKCxSxVUIKYECISccNoR2rEIICPBYjA2GDlmJGNLAiM0B+e37TjxaIkSh4LcxxznKTLdAW/nFFaemkUCA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=7d0d123ddbc3dbdf issued_at=2026-03-13T21:11:22.623512+00:00 artifact=bundle/registry/bundles/preflight.yaml sha256=eb6342b0dd7c3df68e18800883f4f0109609b602a661610b03949d913409f948"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/proof-gate.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+oIVVIjNcrHSJzgAaOMK+HgpG4TEkNyNJp4OPiYuSrzr+WBhDkxnpnuffDqEo6WdU4gLV++qJjZlnu2sRd1/kCQ==
+trusted comment: type=omg-slsa-v1 keyid=68cef69fd11acdd7 issued_at=2026-03-13T21:11:22.624107+00:00 artifact=bundle/registry/bundles/proof-gate.yaml sha256=205c9fe0e96043886b0ad6ad4382e8adb65961898cf7b45b84bb0c53cec132b7
+lwd17vsQw1qFF2K+XwOnzccaebseydgNNLs1FkOxFyHk2KbDx3qPy9iAS6an+/w+k9UMmYxMCEJsHom1LKSVDQ==

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/proof-gate.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/proof-gate.yaml",
+      "digest": {
+        "sha256": "205c9fe0e96043886b0ad6ad4382e8adb65961898cf7b45b84bb0c53cec132b7"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.623996+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.623996+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "68cef69fd11acdd7",
+    "value": "untrusted comment: signature from omg local signing key\noIVVIjNcrHSJzgAaOMK+HgpG4TEkNyNJp4OPiYuSrzr+WBhDkxnpnuffDqEo6WdU4gLV++qJjZlnu2sRd1/kCQ==\ntrusted comment: type=omg-slsa-v1 keyid=68cef69fd11acdd7 issued_at=2026-03-13T21:11:22.624107+00:00 artifact=bundle/registry/bundles/proof-gate.yaml sha256=205c9fe0e96043886b0ad6ad4382e8adb65961898cf7b45b84bb0c53cec132b7\nlwd17vsQw1qFF2K+XwOnzccaebseydgNNLs1FkOxFyHk2KbDx3qPy9iAS6an+/w+k9UMmYxMCEJsHom1LKSVDQ==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=68cef69fd11acdd7 issued_at=2026-03-13T21:11:22.624107+00:00 artifact=bundle/registry/bundles/proof-gate.yaml sha256=205c9fe0e96043886b0ad6ad4382e8adb65961898cf7b45b84bb0c53cec132b7"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/remote-supervisor.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+BsNQIcTu5xCX+OwI9xFIq2fMbkyvz/+CpXqU/6FjNmqwuHdrBkY2EwAxjgT++eWyg1aPbVv1L6yFxHXztFCFCQ==
+trusted comment: type=omg-slsa-v1 keyid=1ea09f4388394f57 issued_at=2026-03-13T21:11:22.624647+00:00 artifact=bundle/registry/bundles/remote-supervisor.yaml sha256=c5c289534581995ab6c137c8997b093420845cb523259e967fabe78ce016a33a
+fElxnDUF1uK3yshTJZgReQfhTyrESX+OJSVAWWLRNEscEXFjXFWQIorm4fwf6q2q8z2MJmeWK94PvLK+GLcOCA==

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/remote-supervisor.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/remote-supervisor.yaml",
+      "digest": {
+        "sha256": "c5c289534581995ab6c137c8997b093420845cb523259e967fabe78ce016a33a"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.624539+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.624539+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "1ea09f4388394f57",
+    "value": "untrusted comment: signature from omg local signing key\nBsNQIcTu5xCX+OwI9xFIq2fMbkyvz/+CpXqU/6FjNmqwuHdrBkY2EwAxjgT++eWyg1aPbVv1L6yFxHXztFCFCQ==\ntrusted comment: type=omg-slsa-v1 keyid=1ea09f4388394f57 issued_at=2026-03-13T21:11:22.624647+00:00 artifact=bundle/registry/bundles/remote-supervisor.yaml sha256=c5c289534581995ab6c137c8997b093420845cb523259e967fabe78ce016a33a\nfElxnDUF1uK3yshTJZgReQfhTyrESX+OJSVAWWLRNEscEXFjXFWQIorm4fwf6q2q8z2MJmeWK94PvLK+GLcOCA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=1ea09f4388394f57 issued_at=2026-03-13T21:11:22.624647+00:00 artifact=bundle/registry/bundles/remote-supervisor.yaml sha256=c5c289534581995ab6c137c8997b093420845cb523259e967fabe78ce016a33a"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/robotics.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+SAJseVZs3ZYLmdRg1sy1FdSHHDFbhr/StDCX/p0ocDxtcZti6VVb1p/ItPbdXp69p/DklbQctQNOOPMEZoaSAg==
+trusted comment: type=omg-slsa-v1 keyid=a00bf804c419a48d issued_at=2026-03-13T21:11:22.625180+00:00 artifact=bundle/registry/bundles/robotics.yaml sha256=863c5847b561b4fb0705cdaa9d021dec08fd5b2993cf4530a400de5e0f86d76a
+gxF6YKqI0//pAmBXGXhTW1foOqsjf3ADzoubcVwwdxwO4JCsDPv30ZS0ngGCFWs7ACuy75dVzdsng6gvB2RtDg==

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/robotics.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/robotics.yaml",
+      "digest": {
+        "sha256": "863c5847b561b4fb0705cdaa9d021dec08fd5b2993cf4530a400de5e0f86d76a"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.625071+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.625071+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "a00bf804c419a48d",
+    "value": "untrusted comment: signature from omg local signing key\nSAJseVZs3ZYLmdRg1sy1FdSHHDFbhr/StDCX/p0ocDxtcZti6VVb1p/ItPbdXp69p/DklbQctQNOOPMEZoaSAg==\ntrusted comment: type=omg-slsa-v1 keyid=a00bf804c419a48d issued_at=2026-03-13T21:11:22.625180+00:00 artifact=bundle/registry/bundles/robotics.yaml sha256=863c5847b561b4fb0705cdaa9d021dec08fd5b2993cf4530a400de5e0f86d76a\ngxF6YKqI0//pAmBXGXhTW1foOqsjf3ADzoubcVwwdxwO4JCsDPv30ZS0ngGCFWs7ACuy75dVzdsng6gvB2RtDg==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=a00bf804c419a48d issued_at=2026-03-13T21:11:22.625180+00:00 artifact=bundle/registry/bundles/robotics.yaml sha256=863c5847b561b4fb0705cdaa9d021dec08fd5b2993cf4530a400de5e0f86d76a"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/secure-worktree-pipeline.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+UAoF3IEo1vm9ysUBE+3KbWMEnARf+hNFRhmHpFMVHgeveTk6yk4QmW7Zy5uDg1aYfw5UWpJMpJUpra0hqO7qDQ==
+trusted comment: type=omg-slsa-v1 keyid=d56404e89012ed8a issued_at=2026-03-13T21:11:22.625701+00:00 artifact=bundle/registry/bundles/secure-worktree-pipeline.yaml sha256=a906e2ce83028a49d58b74c334e6ba9376a2f3b98501f17515598355e33ddf07
+BdjTXzm2fOHr9VNsCTaA991ZL1mR6SZhWr7eXMbVtsjonvasAxfzsOjeOvf2bAA4S8xmwnAmwCO+YTjcrsiqCA==

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/secure-worktree-pipeline.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/secure-worktree-pipeline.yaml",
+      "digest": {
+        "sha256": "a906e2ce83028a49d58b74c334e6ba9376a2f3b98501f17515598355e33ddf07"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.625594+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.625594+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "d56404e89012ed8a",
+    "value": "untrusted comment: signature from omg local signing key\nUAoF3IEo1vm9ysUBE+3KbWMEnARf+hNFRhmHpFMVHgeveTk6yk4QmW7Zy5uDg1aYfw5UWpJMpJUpra0hqO7qDQ==\ntrusted comment: type=omg-slsa-v1 keyid=d56404e89012ed8a issued_at=2026-03-13T21:11:22.625701+00:00 artifact=bundle/registry/bundles/secure-worktree-pipeline.yaml sha256=a906e2ce83028a49d58b74c334e6ba9376a2f3b98501f17515598355e33ddf07\nBdjTXzm2fOHr9VNsCTaA991ZL1mR6SZhWr7eXMbVtsjonvasAxfzsOjeOvf2bAA4S8xmwnAmwCO+YTjcrsiqCA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=d56404e89012ed8a issued_at=2026-03-13T21:11:22.625701+00:00 artifact=bundle/registry/bundles/secure-worktree-pipeline.yaml sha256=a906e2ce83028a49d58b74c334e6ba9376a2f3b98501f17515598355e33ddf07"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/security-check.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+UKoJANhuiG/jUMGR/FpCbjUNUF4oQKRBYVUb3/nHdoDdxPNoa8dwKyi/1tFm/WRdoZd3xTlAxy5xZatimANfAQ==
+trusted comment: type=omg-slsa-v1 keyid=ba8999e138408311 issued_at=2026-03-13T21:11:22.626226+00:00 artifact=bundle/registry/bundles/security-check.yaml sha256=3594b1fe4491c11f85e9a2bec243bde0661a0d8fca347ebbec7601324311a608
+CNryrCzsOxQxfl4KuxwIo0XzeTnfI+9/aPqILWfqzKWhJmsYrIIKjY2AUzH49omGThr35uUx7pxL1DlX4jynBQ==

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/security-check.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/registry/bundles/security-check.yaml",
+      "digest": {
+        "sha256": "3594b1fe4491c11f85e9a2bec243bde0661a0d8fca347ebbec7601324311a608"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.626118+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.626118+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "ba8999e138408311",
+    "value": "untrusted comment: signature from omg local signing key\nUKoJANhuiG/jUMGR/FpCbjUNUF4oQKRBYVUb3/nHdoDdxPNoa8dwKyi/1tFm/WRdoZd3xTlAxy5xZatimANfAQ==\ntrusted comment: type=omg-slsa-v1 keyid=ba8999e138408311 issued_at=2026-03-13T21:11:22.626226+00:00 artifact=bundle/registry/bundles/security-check.yaml sha256=3594b1fe4491c11f85e9a2bec243bde0661a0d8fca347ebbec7601324311a608\nCNryrCzsOxQxfl4KuxwIo0XzeTnfI+9/aPqILWfqzKWhJmsYrIIKjY2AUzH49omGThr35uUx7pxL1DlX4jynBQ==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=ba8999e138408311 issued_at=2026-03-13T21:11:22.626226+00:00 artifact=bundle/registry/bundles/security-check.yaml sha256=3594b1fe4491c11f85e9a2bec243bde0661a0d8fca347ebbec7601324311a608"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/registry/bundles/terminal-lane.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+jcKRxZ9pCSL9GHId8axk/yswKw+l7Bi7TZSQPfRWddWRZydzADgvBuq8joWDWuBrArqYTtrSbAdBwXlVZzUzCA==
+trusted comment: type=omg-slsa-v1 keyid=ff18da8f5f0c90f6 issued_at=2026-03-13T21:11:22.627415+00:00 artifact=bundle/registry/bundles/terminal-lane.yaml sha256=518c2e3ebe6da4986ea92d47ac0152f37453becc5b5779f9b1dcde84593c53f7
+9Vwi1FigZRRIwSK4QBy3nFW4vALTMACOnWUe/9d+sgDFDiPgFT8FMhplAxKTSPN3armnNNhA9QJ8NvOtwGp1CQ==