@trac3er/oh-my-god 2.1.9 → 2.2.3

package/artifacts/public/.claude-plugin/plugin.json

@@ -0,0 +1,23 @@
+{
+  "name": "omg",
+  "version": "2.1.9",
+  "description": "OMG plugin layer for Claude Code with native setup, orchestration, and interop.",
+  "author": {
+    "name": "trac3er00"
+  },
+  "repository": "https://github.com/trac3er00/OMG",
+  "homepage": "https://github.com/trac3er00/OMG",
+  "license": "MIT",
+  "keywords": [
+    "claude-code",
+    "plugin",
+    "orchestration",
+    "multi-agent",
+    "omg",
+    "codex",
+    "gemini",
+    "crazy-mode",
+    "escalation"
+  ],
+  "mcpServers": "./.claude-plugin/mcp.json"
+}

package/artifacts/public/.gemini/settings.json

@@ -0,0 +1,72 @@
+{
+  "mcpServers": {
+    "omg-control": {
+      "command": "python3",
+      "args": [
+        "-m",
+        "runtime.omg_mcp_server"
+      ]
+    }
+  },
+  "_omg": {
+    "_version": "2.1.9",
+    "generated": {
+      "contract_version": "2.1.9",
+      "channel": "public",
+      "required_bundles": [
+        "control-plane",
+        "plan-council",
+        "claim-judge",
+        "test-intent-lock",
+        "proof-gate",
+        "hook-governor",
+        "mcp-fabric",
+        "lsp-pack",
+        "secure-worktree-pipeline",
+        "security-check",
+        "api-twin",
+        "preflight",
+        "robotics",
+        "vision",
+        "algorithms",
+        "health",
+        "tracebank",
+        "eval-gate",
+        "delta-classifier",
+        "incident-replay",
+        "data-lineage",
+        "remote-supervisor"
+      ],
+      "phase1_release_contract": {
+        "forge_specialist_surfaces": [
+          "forge-profile-review",
+          "forge-release-audit",
+          "forge-validate"
+        ],
+        "release_surfaces": [
+          "OMG:profile-review",
+          "OMG:release-audit",
+          "OMG:validate"
+        ],
+        "attestation_requirements": [
+          "registry.verify_artifact.sign_artifact_statement",
+          "registry.verify_artifact.verify_artifact_statement"
+        ],
+        "compliance_governor_expectations": [
+          "runtime.compliance_governor.evaluate_release_compliance",
+          "runtime.compliance_governor.evaluate_tool_compliance"
+        ],
+        "release_readiness_checks": [
+          "claim_judge",
+          "compliance_governor",
+          "execution_primitives"
+        ],
+        "runtime_behavior_surfaces": [
+          "execution_primitives",
+          "provider_host_parity",
+          "host_semantic_parity"
+        ]
+      }
+    }
+  }
+}

package/artifacts/public/.kimi/mcp.json

@@ -0,0 +1,72 @@
+{
+  "mcpServers": {
+    "omg-control": {
+      "command": "python3",
+      "args": [
+        "-m",
+        "runtime.omg_mcp_server"
+      ]
+    }
+  },
+  "_omg": {
+    "_version": "2.1.9",
+    "generated": {
+      "contract_version": "2.1.9",
+      "channel": "public",
+      "required_bundles": [
+        "control-plane",
+        "plan-council",
+        "claim-judge",
+        "test-intent-lock",
+        "proof-gate",
+        "hook-governor",
+        "mcp-fabric",
+        "lsp-pack",
+        "secure-worktree-pipeline",
+        "security-check",
+        "api-twin",
+        "preflight",
+        "robotics",
+        "vision",
+        "algorithms",
+        "health",
+        "tracebank",
+        "eval-gate",
+        "delta-classifier",
+        "incident-replay",
+        "data-lineage",
+        "remote-supervisor"
+      ],
+      "phase1_release_contract": {
+        "forge_specialist_surfaces": [
+          "forge-profile-review",
+          "forge-release-audit",
+          "forge-validate"
+        ],
+        "release_surfaces": [
+          "OMG:profile-review",
+          "OMG:release-audit",
+          "OMG:validate"
+        ],
+        "attestation_requirements": [
+          "registry.verify_artifact.sign_artifact_statement",
+          "registry.verify_artifact.verify_artifact_statement"
+        ],
+        "compliance_governor_expectations": [
+          "runtime.compliance_governor.evaluate_release_compliance",
+          "runtime.compliance_governor.evaluate_tool_compliance"
+        ],
+        "release_readiness_checks": [
+          "claim_judge",
+          "compliance_governor",
+          "execution_primitives"
+        ],
+        "runtime_behavior_surfaces": [
+          "execution_primitives",
+          "provider_host_parity",
+          "host_semantic_parity"
+        ]
+      }
+    }
+  }
+}

package/artifacts/public/.mcp.json

@@ -0,0 +1,18 @@
+{
+  "mcpServers": {
+    "filesystem": {
+      "command": "npx",
+      "args": [
+        "@modelcontextprotocol/server-filesystem@2026.1.14",
+        "."
+      ]
+    },
+    "omg-control": {
+      "command": "python3",
+      "args": [
+        "-m",
+        "runtime.omg_mcp_server"
+      ]
+    }
+  }
+}

package/artifacts/public/OMG_COMPAT_CONTRACT.md

@@ -0,0 +1,111 @@
+---
+title: OMG Production Control Plane
+version: 2.1.9
+canonical_hosts:
+  - claude
+  - codex
+  - gemini
+  - kimi
+compatibility_only_hosts:
+  - opencode
+status: active
+---
+
+# OMG Production Control Plane
+
+`OMG_COMPAT_CONTRACT.md` is the normative human-readable contract for OMG capability bundles. Machine-readable manifests in `registry/bundles/` are executable inputs and must remain version-locked to this document.
+
+## provider_tiers
+
+OMG defines four canonical behavior-parity hosts and their host-rule contracts.
+
+- `claude`: requires `compilation_targets`, `hooks`, `subagents`, and `skills`.
+- `codex`: requires `compilation_targets`, `skills`, `agents_fragments`, `rules`, and `automations`.
+- `gemini`: requires `compilation_targets`, `mcp`, `skills`, and `automations`.
+- `kimi`: requires `compilation_targets`, `mcp`, `skills`, and `automations`.
+
+Gemini and Kimi are canonical behavior-parity hosts for contract validation and policy declaration. Their contracts do not require Claude/Codex hook semantics.
+
+OpenCode remains compatibility-only in v2.1.9. It is supported through compatibility MCP wiring and interop diagnostics, but it is not part of the canonical behavior-parity contract set.
+
+## metadata
+
+Every bundle must declare `id`, `kind`, `version`, `title`, `description`, `hosts`, and `assets`.
+
+## invocation_policy
+
+Every bundle must declare whether it is user invocable, model invocable, and whether implicit invocation is allowed. Production bundles default to explicit invocation only.
+
+## tool_policy
+
+Every bundle must declare `side_effect_level` and host-specific allowed tools. Production policy protects `.omg/`, `.agents/`, `.codex/`, and `.claude/` as control-plane state.
+
+## lifecycle_hooks
+
+Canonical OMG events:
+
+- `SessionStart`
+- `SessionEnd`
+- `PreToolUse`
+- `PostToolUse`
+- `PostToolUseFailure`
+- `Stop`
+- `PreCompact`
+- `ConfigChange`
+- `WorktreeCreate`
+- `WorktreeRemove`
+- `SubagentStart`
+- `SubagentStop`
+- `TaskCompleted`
+
+Hosts compile native events where available and emulate the rest with OMG runtime wrappers.
+
+## mcp_contract
+
+Bundles may declare MCP servers, prompts, resources, and server instructions. `omg-control` is the primary stdio server. HTTP control-plane exposure is loopback-only and not a production launch dependency.
+
+## lsp_contract
+
+LSP packs declare supported languages, diagnostics expectations, and evidence outputs for post-edit checks.
+
+## evidence_outputs
+
+Bundles declare reproducible evidence artifacts under `.omg/evidence/` or `.omg/state/`. Release-ready bundles must emit deterministic outputs suitable for CI drift checks.
+
+## execution_contract
+
+Supported execution modes:
+
+- `embedded`
+- `local_supervisor`
+- `automation`
+- `ephemeral_worktree`
+
+`local_supervisor` means a same-machine orchestrator driving Claude and Codex workers through local CLI or stdio MCP integration. Remote multi-tenant control planes are out of scope for this version.
+
+## host_compilation_rules
+
+Claude outputs compile to:
+
+- `.claude-plugin/plugin.json`
+- `.claude-plugin/marketplace.json`
+- `.mcp.json`
+- generated hook configuration consumed by `settings.json`
+
+Codex outputs compile to:
+
+- `.agents/skills/omg/<bundle>/SKILL.md`
+- `.agents/skills/omg/<bundle>/openai.yaml`
+- generated Codex MCP and rule fragments under `.agents/skills/omg/`
+
+Codex compilation must remain compatible with the host's native instruction hierarchy (`AGENTS.md`, `AGENTS.override.md`) and progressive-disclosure skill loading. OMG-generated artifacts document and constrain OMG behavior; they do not replace Codex built-in slash commands.
+
+## roadmap_extensions
+
+The contract reserves compilation anchors for:
+
+- `omg.skill-compiler`
+- `omg.hook-governor`
+- `omg.mcp-fabric`
+- `omg.lsp-pack`
+- `omg.secure-worktree-pipeline`

package/artifacts/public/dist/public/attestations/bundle/.agents/skills/omg/AGENTS.fragment.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+oRHnjnMG2j5faIOwLPVhFqFTmKKF51/iYd3kM/FzcihIXyU7JqXHM//wkyBMY7uCC8c9Vrg1quM7gWu+cpnHCQ==
+trusted comment: type=omg-slsa-v1 keyid=14d6e5172a3a3955 issued_at=2026-03-13T21:11:22.561999+00:00 artifact=bundle/.agents/skills/omg/AGENTS.fragment.md sha256=b9580a43adbbcab22843ecef71cc1883ae1673742b6766089d0c031ea636350c
+Z4RTnNMPv/c50wfrxyIvnmR3Npv9XEIbSW+LcyuO2jgsIfREd06Jyk7ne72GQ2D2N3DVfReejEX6It7eHfIKCg==

package/artifacts/public/dist/public/attestations/bundle/.agents/skills/omg/AGENTS.fragment.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.agents/skills/omg/AGENTS.fragment.md",
+      "digest": {
+        "sha256": "b9580a43adbbcab22843ecef71cc1883ae1673742b6766089d0c031ea636350c"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.549614+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.549614+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "14d6e5172a3a3955",
+    "value": "untrusted comment: signature from omg local signing key\noRHnjnMG2j5faIOwLPVhFqFTmKKF51/iYd3kM/FzcihIXyU7JqXHM//wkyBMY7uCC8c9Vrg1quM7gWu+cpnHCQ==\ntrusted comment: type=omg-slsa-v1 keyid=14d6e5172a3a3955 issued_at=2026-03-13T21:11:22.561999+00:00 artifact=bundle/.agents/skills/omg/AGENTS.fragment.md sha256=b9580a43adbbcab22843ecef71cc1883ae1673742b6766089d0c031ea636350c\nZ4RTnNMPv/c50wfrxyIvnmR3Npv9XEIbSW+LcyuO2jgsIfREd06Jyk7ne72GQ2D2N3DVfReejEX6It7eHfIKCg==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=14d6e5172a3a3955 issued_at=2026-03-13T21:11:22.561999+00:00 artifact=bundle/.agents/skills/omg/AGENTS.fragment.md sha256=b9580a43adbbcab22843ecef71cc1883ae1673742b6766089d0c031ea636350c"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/.agents/skills/omg/algorithms/SKILL.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+KKMSo87NX2oUm8/AnisSi1YWq/TMNU/uOtTcELpvKF/KRq0zeHOgLDWpuU/HGjEkYYUsHmnAGQnUcfoxIsNfBg==
+trusted comment: type=omg-slsa-v1 keyid=d6e3e08891757540 issued_at=2026-03-13T21:11:22.563124+00:00 artifact=bundle/.agents/skills/omg/algorithms/SKILL.md sha256=48042e7ab674ef67c2d8a71a75abdd81aeee4363cb5e97c775c320d4edab33fb
+3qrtlycTprxlYBWdnspMv2/nq05s9NsXZVCIIwoZJjW1SQI8s/91slX0qC5SN/wGww/TIcCnpTCbSyvqgqm6DQ==

package/artifacts/public/dist/public/attestations/bundle/.agents/skills/omg/algorithms/SKILL.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.agents/skills/omg/algorithms/SKILL.md",
+      "digest": {
+        "sha256": "48042e7ab674ef67c2d8a71a75abdd81aeee4363cb5e97c775c320d4edab33fb"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.562981+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.562981+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "d6e3e08891757540",
+    "value": "untrusted comment: signature from omg local signing key\nKKMSo87NX2oUm8/AnisSi1YWq/TMNU/uOtTcELpvKF/KRq0zeHOgLDWpuU/HGjEkYYUsHmnAGQnUcfoxIsNfBg==\ntrusted comment: type=omg-slsa-v1 keyid=d6e3e08891757540 issued_at=2026-03-13T21:11:22.563124+00:00 artifact=bundle/.agents/skills/omg/algorithms/SKILL.md sha256=48042e7ab674ef67c2d8a71a75abdd81aeee4363cb5e97c775c320d4edab33fb\n3qrtlycTprxlYBWdnspMv2/nq05s9NsXZVCIIwoZJjW1SQI8s/91slX0qC5SN/wGww/TIcCnpTCbSyvqgqm6DQ==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=d6e3e08891757540 issued_at=2026-03-13T21:11:22.563124+00:00 artifact=bundle/.agents/skills/omg/algorithms/SKILL.md sha256=48042e7ab674ef67c2d8a71a75abdd81aeee4363cb5e97c775c320d4edab33fb"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/.agents/skills/omg/algorithms/openai.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+RrLq0NaZyv/3Jw2eq2d6gfJJNhCpGYZjqDphcoqlOVR1t9l76nAXwhAgBvLPBIcT3sxX8xC5et+v7yUpsWHwBQ==
+trusted comment: type=omg-slsa-v1 keyid=59362b76a57827b2 issued_at=2026-03-13T21:11:22.563739+00:00 artifact=bundle/.agents/skills/omg/algorithms/openai.yaml sha256=6196d26b4daf429292565142d3ed7233024402cc9206fd5df9e5f848231a79c6
+hLe9o1KTWAWlxVVjzKHjT72BZAotJwF4R5DqbGAP5Ig0GxWIRb6loPpaoOFnCGlM3klhpZdrYAd0tT9Hq2uMDA==

package/artifacts/public/dist/public/attestations/bundle/.agents/skills/omg/algorithms/openai.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.agents/skills/omg/algorithms/openai.yaml",
+      "digest": {
+        "sha256": "6196d26b4daf429292565142d3ed7233024402cc9206fd5df9e5f848231a79c6"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.563626+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.563626+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "59362b76a57827b2",
+    "value": "untrusted comment: signature from omg local signing key\nRrLq0NaZyv/3Jw2eq2d6gfJJNhCpGYZjqDphcoqlOVR1t9l76nAXwhAgBvLPBIcT3sxX8xC5et+v7yUpsWHwBQ==\ntrusted comment: type=omg-slsa-v1 keyid=59362b76a57827b2 issued_at=2026-03-13T21:11:22.563739+00:00 artifact=bundle/.agents/skills/omg/algorithms/openai.yaml sha256=6196d26b4daf429292565142d3ed7233024402cc9206fd5df9e5f848231a79c6\nhLe9o1KTWAWlxVVjzKHjT72BZAotJwF4R5DqbGAP5Ig0GxWIRb6loPpaoOFnCGlM3klhpZdrYAd0tT9Hq2uMDA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=59362b76a57827b2 issued_at=2026-03-13T21:11:22.563739+00:00 artifact=bundle/.agents/skills/omg/algorithms/openai.yaml sha256=6196d26b4daf429292565142d3ed7233024402cc9206fd5df9e5f848231a79c6"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/.agents/skills/omg/api-twin/SKILL.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+kpBMyW3jEQ4akyll8d8Yahep9Z1j6taz0RFpjJmEuwWMsQ56ERwqAtciVLrZIQjejbp0wV4lwY/DKNGVZhD2CQ==
+trusted comment: type=omg-slsa-v1 keyid=e291d293c6a3045a issued_at=2026-03-13T21:11:22.564319+00:00 artifact=bundle/.agents/skills/omg/api-twin/SKILL.md sha256=b394b7779173318ed29662c3c11bfa05b5d037d3a927b16bea28560a62752437
+shw3Ds0KyDSnGqnewZPdFzhXAXPNTyIQdvF0gMu8ijT+x/yTzKJdAjIGjuHWkt032LRXLh5LkSePBbSBCnBYBQ==

package/artifacts/public/dist/public/attestations/bundle/.agents/skills/omg/api-twin/SKILL.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.agents/skills/omg/api-twin/SKILL.md",
+      "digest": {
+        "sha256": "b394b7779173318ed29662c3c11bfa05b5d037d3a927b16bea28560a62752437"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.564206+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.564206+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "e291d293c6a3045a",
+    "value": "untrusted comment: signature from omg local signing key\nkpBMyW3jEQ4akyll8d8Yahep9Z1j6taz0RFpjJmEuwWMsQ56ERwqAtciVLrZIQjejbp0wV4lwY/DKNGVZhD2CQ==\ntrusted comment: type=omg-slsa-v1 keyid=e291d293c6a3045a issued_at=2026-03-13T21:11:22.564319+00:00 artifact=bundle/.agents/skills/omg/api-twin/SKILL.md sha256=b394b7779173318ed29662c3c11bfa05b5d037d3a927b16bea28560a62752437\nshw3Ds0KyDSnGqnewZPdFzhXAXPNTyIQdvF0gMu8ijT+x/yTzKJdAjIGjuHWkt032LRXLh5LkSePBbSBCnBYBQ==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=e291d293c6a3045a issued_at=2026-03-13T21:11:22.564319+00:00 artifact=bundle/.agents/skills/omg/api-twin/SKILL.md sha256=b394b7779173318ed29662c3c11bfa05b5d037d3a927b16bea28560a62752437"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/.agents/skills/omg/api-twin/openai.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+WauqjWXCApAw0+ObLSSYLQ8sufPmMV2mPvzXU+JFD70pg8t50AF10WjrHC7hPVuENW6PnebODE6L1DDEOMrIBg==
+trusted comment: type=omg-slsa-v1 keyid=bc93f5e0c55e40d6 issued_at=2026-03-13T21:11:22.564890+00:00 artifact=bundle/.agents/skills/omg/api-twin/openai.yaml sha256=8b711205c230c16695702b1eeeb426d844aa76a87c55f220298cdaf105ceee1d
+ZpS32WiFwipFYcywvd9FkmJtiC+ZxsiG4TZ6d8pRV2p71YmoM6PZkyZhWxogZlBzuRAx+qeJSsUgFG0TzN03CQ==

package/artifacts/public/dist/public/attestations/bundle/.agents/skills/omg/api-twin/openai.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.agents/skills/omg/api-twin/openai.yaml",
+      "digest": {
+        "sha256": "8b711205c230c16695702b1eeeb426d844aa76a87c55f220298cdaf105ceee1d"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.564782+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.564782+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "bc93f5e0c55e40d6",
+    "value": "untrusted comment: signature from omg local signing key\nWauqjWXCApAw0+ObLSSYLQ8sufPmMV2mPvzXU+JFD70pg8t50AF10WjrHC7hPVuENW6PnebODE6L1DDEOMrIBg==\ntrusted comment: type=omg-slsa-v1 keyid=bc93f5e0c55e40d6 issued_at=2026-03-13T21:11:22.564890+00:00 artifact=bundle/.agents/skills/omg/api-twin/openai.yaml sha256=8b711205c230c16695702b1eeeb426d844aa76a87c55f220298cdaf105ceee1d\nZpS32WiFwipFYcywvd9FkmJtiC+ZxsiG4TZ6d8pRV2p71YmoM6PZkyZhWxogZlBzuRAx+qeJSsUgFG0TzN03CQ==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=bc93f5e0c55e40d6 issued_at=2026-03-13T21:11:22.564890+00:00 artifact=bundle/.agents/skills/omg/api-twin/openai.yaml sha256=8b711205c230c16695702b1eeeb426d844aa76a87c55f220298cdaf105ceee1d"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/.agents/skills/omg/ast-pack/SKILL.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+91G1dCreHmo1jaZlcmFtr/DUSjNfFO1wBQwrknDj3/7FuPhqZaIs083nJJT6I02bo1Ep607zpuIRknehRTJcAA==
+trusted comment: type=omg-slsa-v1 keyid=64fae88d3a2501b4 issued_at=2026-03-13T21:11:22.565421+00:00 artifact=bundle/.agents/skills/omg/ast-pack/SKILL.md sha256=43240715ced1de5b0f2b810babc7801ce916c3f9e4e8fb26788334be18b953ae
+ksd1jymdvl9Zuq+cOVLNfYKAnTQ9Hy/SRcJFCCxXUmoMTlidPnPdPxYpRA5Bsm0n+aEL+uq3rKFavc6sfeJZBw==

package/artifacts/public/dist/public/attestations/bundle/.agents/skills/omg/ast-pack/SKILL.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.agents/skills/omg/ast-pack/SKILL.md",
+      "digest": {
+        "sha256": "43240715ced1de5b0f2b810babc7801ce916c3f9e4e8fb26788334be18b953ae"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.565314+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.565314+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "64fae88d3a2501b4",
+    "value": "untrusted comment: signature from omg local signing key\n91G1dCreHmo1jaZlcmFtr/DUSjNfFO1wBQwrknDj3/7FuPhqZaIs083nJJT6I02bo1Ep607zpuIRknehRTJcAA==\ntrusted comment: type=omg-slsa-v1 keyid=64fae88d3a2501b4 issued_at=2026-03-13T21:11:22.565421+00:00 artifact=bundle/.agents/skills/omg/ast-pack/SKILL.md sha256=43240715ced1de5b0f2b810babc7801ce916c3f9e4e8fb26788334be18b953ae\nksd1jymdvl9Zuq+cOVLNfYKAnTQ9Hy/SRcJFCCxXUmoMTlidPnPdPxYpRA5Bsm0n+aEL+uq3rKFavc6sfeJZBw==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=64fae88d3a2501b4 issued_at=2026-03-13T21:11:22.565421+00:00 artifact=bundle/.agents/skills/omg/ast-pack/SKILL.md sha256=43240715ced1de5b0f2b810babc7801ce916c3f9e4e8fb26788334be18b953ae"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/.agents/skills/omg/ast-pack/openai.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+V0MzVazyOIlUWQtU8wekfdQWltD7IYGSBd27HIgNzgSNp5eXsT5/3BKWaeVuvXnwneqzFs7LbaEGMy3atINxDQ==
+trusted comment: type=omg-slsa-v1 keyid=878a90633251400d issued_at=2026-03-13T21:11:22.565959+00:00 artifact=bundle/.agents/skills/omg/ast-pack/openai.yaml sha256=0824fed4d861e8d78bf87a80fdbf2715c2f56c5da410011373fd0007987cb75c
+/s8w5RrmZFKW9UY2dJf5vLJmYHPO1k3yauo+6pTHkGVfYJzKL4UsaUxowWRSziQ7p1KI1w3YWm+KAJTmSk9BDQ==

package/artifacts/public/dist/public/attestations/bundle/.agents/skills/omg/ast-pack/openai.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.agents/skills/omg/ast-pack/openai.yaml",
+      "digest": {
+        "sha256": "0824fed4d861e8d78bf87a80fdbf2715c2f56c5da410011373fd0007987cb75c"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.565850+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.565850+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "878a90633251400d",
+    "value": "untrusted comment: signature from omg local signing key\nV0MzVazyOIlUWQtU8wekfdQWltD7IYGSBd27HIgNzgSNp5eXsT5/3BKWaeVuvXnwneqzFs7LbaEGMy3atINxDQ==\ntrusted comment: type=omg-slsa-v1 keyid=878a90633251400d issued_at=2026-03-13T21:11:22.565959+00:00 artifact=bundle/.agents/skills/omg/ast-pack/openai.yaml sha256=0824fed4d861e8d78bf87a80fdbf2715c2f56c5da410011373fd0007987cb75c\n/s8w5RrmZFKW9UY2dJf5vLJmYHPO1k3yauo+6pTHkGVfYJzKL4UsaUxowWRSziQ7p1KI1w3YWm+KAJTmSk9BDQ==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=878a90633251400d issued_at=2026-03-13T21:11:22.565959+00:00 artifact=bundle/.agents/skills/omg/ast-pack/openai.yaml sha256=0824fed4d861e8d78bf87a80fdbf2715c2f56c5da410011373fd0007987cb75c"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/.agents/skills/omg/claim-judge/SKILL.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+Z6YmL2bIwYtBTVWRoO4LcpdAF+MVpqpuPljUyoJii05uuGkDkaiZ2+z6TZCFZZy0SNDmJlrfY4beoX6baft+AA==
+trusted comment: type=omg-slsa-v1 keyid=38eef4872cec2d19 issued_at=2026-03-13T21:11:22.566504+00:00 artifact=bundle/.agents/skills/omg/claim-judge/SKILL.md sha256=cc65993357813c41fb81502de8781743e84e529088da19dbf8735e0a22f8519c
+Zi3eE+zwO8Mc/Y9M0AVLOvWb02hQ72GQ1YiE+OS3kkFFiyWT8KPCiUQOu4uMenICjkKxTK/gkYRePyQLc1ttDQ==

package/artifacts/public/dist/public/attestations/bundle/.agents/skills/omg/claim-judge/SKILL.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.agents/skills/omg/claim-judge/SKILL.md",
+      "digest": {
+        "sha256": "cc65993357813c41fb81502de8781743e84e529088da19dbf8735e0a22f8519c"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-13T21:11:22.566392+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-13T21:11:22.566392+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "38eef4872cec2d19",
+    "value": "untrusted comment: signature from omg local signing key\nZ6YmL2bIwYtBTVWRoO4LcpdAF+MVpqpuPljUyoJii05uuGkDkaiZ2+z6TZCFZZy0SNDmJlrfY4beoX6baft+AA==\ntrusted comment: type=omg-slsa-v1 keyid=38eef4872cec2d19 issued_at=2026-03-13T21:11:22.566504+00:00 artifact=bundle/.agents/skills/omg/claim-judge/SKILL.md sha256=cc65993357813c41fb81502de8781743e84e529088da19dbf8735e0a22f8519c\nZi3eE+zwO8Mc/Y9M0AVLOvWb02hQ72GQ1YiE+OS3kkFFiyWT8KPCiUQOu4uMenICjkKxTK/gkYRePyQLc1ttDQ==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=38eef4872cec2d19 issued_at=2026-03-13T21:11:22.566504+00:00 artifact=bundle/.agents/skills/omg/claim-judge/SKILL.md sha256=cc65993357813c41fb81502de8781743e84e529088da19dbf8735e0a22f8519c"
+  }
+}

package/artifacts/public/dist/public/attestations/bundle/.agents/skills/omg/claim-judge/openai.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+8jxTmn941esJFE3+HVW8DPJNExTGvX2j4nXYzv1PlPubT9lPmGQ1DTwC06Ei/qN5br4EqekDbRrR61qIPjvTDw==
+trusted comment: type=omg-slsa-v1 keyid=a6f52b6739c9f9c2 issued_at=2026-03-13T21:11:22.567094+00:00 artifact=bundle/.agents/skills/omg/claim-judge/openai.yaml sha256=b64dc801159a6e9adcd704326122f64c1bad7f71d87f22ada47918f7527151cc
+LkhVm/MVamqyVJkPjnp7EzARwR24E+ghgkErs6oMFyBjs+2aV/4jMI1XRtbdFFdshmWwhbylfGQr2yIzKbacAQ==