@trac3er/oh-my-god 2.1.9 → 2.2.3

package/artifacts/release/dist/enterprise/attestations/bundle/registry/bundles/tracebank.yaml.statement.json

@@ -5,7 +5,7 @@
     {
       "name": "bundle/registry/bundles/tracebank.yaml",
       "digest": {
-        "sha256": "ee1a5e9eee8d2a10730c002b71c4bb12ba1316c1bb167b54adbdba9f264d9d0b"
+        "sha256": "956e6f21e68f1813250aaea9250762338e9e89c4feae1e3627b49febc0b244cc"
       }
     }
   ],
@@ -17,7 +17,7 @@
         "algorithm": "ed25519-minisign",
         "mode": "local-offline"
       },
-      "timestamp": "2026-03-13T00:09:45.339337+00:00"
+      "timestamp": "2026-03-14T19:07:32.902634+00:00"
     }
   },
   "signer": {
@@ -25,11 +25,11 @@
     "algorithm": "ed25519-minisign",
     "mode": "local-offline"
   },
-  "issued_at": "2026-03-13T00:09:45.339337+00:00",
+  "issued_at": "2026-03-14T19:07:32.902634+00:00",
   "signature": {
     "alg": "ed25519-minisign",
-    "keyid": "dd0ec8766c21a8d4",
-    "value": "untrusted comment: signature from omg local signing key\n4NmG0HhIiMZSrPNPQGfDctdRO1hE/S7Ho8lfCp5Ccd793qWXuje7GkX8ycOCPR0eNAn9+BXKgFivkFrIQYSGBg==\ntrusted comment: type=omg-slsa-v1 keyid=dd0ec8766c21a8d4 issued_at=2026-03-13T00:09:45.339525+00:00 artifact=bundle/registry/bundles/tracebank.yaml sha256=ee1a5e9eee8d2a10730c002b71c4bb12ba1316c1bb167b54adbdba9f264d9d0b\nrUDO/TEYM0yPlbyMcQhtnUXHN4zBEU1mOGI5iijiJOaybY6I90ShCvJhoFsHJltNdLVCYQM8tkhyzO3TcfQsBw==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=dd0ec8766c21a8d4 issued_at=2026-03-13T00:09:45.339525+00:00 artifact=bundle/registry/bundles/tracebank.yaml sha256=ee1a5e9eee8d2a10730c002b71c4bb12ba1316c1bb167b54adbdba9f264d9d0b"
+    "keyid": "440e25f56363ff34",
+    "value": "untrusted comment: signature from omg local signing key\ne5YK8vWi+nWvEXkRgKEWEBDLhaU2xnHFpD1tARvOR6Vv2jUEXsXjfTV5j3x/xi1ABYEUiWnFw90HNZi2r94qCA==\ntrusted comment: type=omg-slsa-v1 keyid=440e25f56363ff34 issued_at=2026-03-14T19:07:32.902755+00:00 artifact=bundle/registry/bundles/tracebank.yaml sha256=956e6f21e68f1813250aaea9250762338e9e89c4feae1e3627b49febc0b244cc\nFzAXy+VNVrzfjhrFfL+ztIPZhd/NXfWJ060aBdYM61zHOcbMCcNN/vimMx/6CEYZE8s8Hze+CMHVyF4E0HcSAA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=440e25f56363ff34 issued_at=2026-03-14T19:07:32.902755+00:00 artifact=bundle/registry/bundles/tracebank.yaml sha256=956e6f21e68f1813250aaea9250762338e9e89c4feae1e3627b49febc0b244cc"
   }
 }

package/artifacts/release/dist/enterprise/attestations/bundle/registry/bundles/vision.yaml.minisig

@@ -1,4 +1,4 @@
 untrusted comment: signature from omg local signing key
-/4TidgIX34VvlBQQOGUUsPwQBhY14WuVktPVpYTp1euiigpZ0P+a1CuhcMFk5uj1XgMqM3kYb7uz5ejXoHK5Bg==
-trusted comment: type=omg-slsa-v1 keyid=bc927bce852210e5 issued_at=2026-03-13T00:09:45.340253+00:00 artifact=bundle/registry/bundles/vision.yaml sha256=3e64993127e45e5b2899736368dc60c848d307b11f21450dc0d410b2cf615842
-daxa5Yx+bRY2cd9t6hKC20DDt5ftNUG+3wciL6UeDwT7wyDgNps0WbC+zZ/AC2Y8fy3ByPd0Tyv/q3EbjfahAA==
+cz0PlC5VFWxD1+Jeu/DkW5T79dCfHSJHKq1UKe4Tk/nFPxyUJCXn0Rn9GNzQUCL6uzPOoptApXUKaYAL+rtFBQ==
+trusted comment: type=omg-slsa-v1 keyid=bb7ba8e576b6db58 issued_at=2026-03-14T19:07:32.903347+00:00 artifact=bundle/registry/bundles/vision.yaml sha256=a2ae08d310a2872057a7dec0202c1eca65180ebe4a82ec1655d86f186386aefb
+hPwMtiT9IxY9xAaat7j79QZSvq0S8TCMGX1hdsQimV8x5vLO8UwIP/OkUNz/QHYaMPO7nGPOnr1PL4fkYAQaAA==

package/artifacts/release/dist/enterprise/attestations/bundle/registry/bundles/vision.yaml.statement.json

@@ -5,7 +5,7 @@
     {
       "name": "bundle/registry/bundles/vision.yaml",
       "digest": {
-        "sha256": "3e64993127e45e5b2899736368dc60c848d307b11f21450dc0d410b2cf615842"
+        "sha256": "a2ae08d310a2872057a7dec0202c1eca65180ebe4a82ec1655d86f186386aefb"
       }
     }
   ],
@@ -17,7 +17,7 @@
         "algorithm": "ed25519-minisign",
         "mode": "local-offline"
       },
-      "timestamp": "2026-03-13T00:09:45.340129+00:00"
+      "timestamp": "2026-03-14T19:07:32.903233+00:00"
     }
   },
   "signer": {
@@ -25,11 +25,11 @@
     "algorithm": "ed25519-minisign",
     "mode": "local-offline"
   },
-  "issued_at": "2026-03-13T00:09:45.340129+00:00",
+  "issued_at": "2026-03-14T19:07:32.903233+00:00",
   "signature": {
     "alg": "ed25519-minisign",
-    "keyid": "bc927bce852210e5",
-    "value": "untrusted comment: signature from omg local signing key\n/4TidgIX34VvlBQQOGUUsPwQBhY14WuVktPVpYTp1euiigpZ0P+a1CuhcMFk5uj1XgMqM3kYb7uz5ejXoHK5Bg==\ntrusted comment: type=omg-slsa-v1 keyid=bc927bce852210e5 issued_at=2026-03-13T00:09:45.340253+00:00 artifact=bundle/registry/bundles/vision.yaml sha256=3e64993127e45e5b2899736368dc60c848d307b11f21450dc0d410b2cf615842\ndaxa5Yx+bRY2cd9t6hKC20DDt5ftNUG+3wciL6UeDwT7wyDgNps0WbC+zZ/AC2Y8fy3ByPd0Tyv/q3EbjfahAA==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=bc927bce852210e5 issued_at=2026-03-13T00:09:45.340253+00:00 artifact=bundle/registry/bundles/vision.yaml sha256=3e64993127e45e5b2899736368dc60c848d307b11f21450dc0d410b2cf615842"
+    "keyid": "bb7ba8e576b6db58",
+    "value": "untrusted comment: signature from omg local signing key\ncz0PlC5VFWxD1+Jeu/DkW5T79dCfHSJHKq1UKe4Tk/nFPxyUJCXn0Rn9GNzQUCL6uzPOoptApXUKaYAL+rtFBQ==\ntrusted comment: type=omg-slsa-v1 keyid=bb7ba8e576b6db58 issued_at=2026-03-14T19:07:32.903347+00:00 artifact=bundle/registry/bundles/vision.yaml sha256=a2ae08d310a2872057a7dec0202c1eca65180ebe4a82ec1655d86f186386aefb\nhPwMtiT9IxY9xAaat7j79QZSvq0S8TCMGX1hdsQimV8x5vLO8UwIP/OkUNz/QHYaMPO7nGPOnr1PL4fkYAQaAA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=bb7ba8e576b6db58 issued_at=2026-03-14T19:07:32.903347+00:00 artifact=bundle/registry/bundles/vision.yaml sha256=a2ae08d310a2872057a7dec0202c1eca65180ebe4a82ec1655d86f186386aefb"
   }
 }

package/artifacts/release/dist/enterprise/attestations/bundle/registry/omg-capability.schema.json.minisig

@@ -1,4 +1,4 @@
 untrusted comment: signature from omg local signing key
-KOuvUlX6VOTeE6B6/+jeTjzPycjo2uJfi9RRdV9Xx4iF4nsnw95s1Fd1sJ6BTITdWzMDN5LrYPabxzCYA7NkCQ==
-trusted comment: type=omg-slsa-v1 keyid=66fa8a48e823e59b issued_at=2026-03-13T00:09:45.340840+00:00 artifact=bundle/registry/omg-capability.schema.json sha256=ec9ef7f547774e9a5c8089695290bea10c351128a61b4fa09c108934acb64523
-FaAMkzNaVK5Kylo0HdzB8M0LqvdfO4PKv/6RATGfILnIPmdBiZEogK/PvaAQLV5hdTrctXbtgOYzsntEKyvFCg==
+iq1IEdylN1qpce8V9d0DZl8DQECsBeCRV6AVVAmXTG0rJHmzw61ZAX2J+NtKkacUPGnaGbyGTj34KvtaESU+Cw==
+trusted comment: type=omg-slsa-v1 keyid=1c08c2ef3d089693 issued_at=2026-03-14T19:07:32.903972+00:00 artifact=bundle/registry/omg-capability.schema.json sha256=d1938a2741e122db172f16360c02fe298c75cc72212a0c10a9ff663bbace2bac
+euYg4RyNiHOuYLajhDR/bZDCtVuEz6qkGmmzHZiMHr2M1JN19zkT/pRjQVsb1mZzqj9eKD1o9E8mXjtuzOjmCA==

package/artifacts/release/dist/enterprise/attestations/bundle/registry/omg-capability.schema.json.statement.json

@@ -5,7 +5,7 @@
     {
       "name": "bundle/registry/omg-capability.schema.json",
       "digest": {
-        "sha256": "ec9ef7f547774e9a5c8089695290bea10c351128a61b4fa09c108934acb64523"
+        "sha256": "d1938a2741e122db172f16360c02fe298c75cc72212a0c10a9ff663bbace2bac"
       }
     }
   ],
@@ -17,7 +17,7 @@
         "algorithm": "ed25519-minisign",
         "mode": "local-offline"
       },
-      "timestamp": "2026-03-13T00:09:45.340728+00:00"
+      "timestamp": "2026-03-14T19:07:32.903853+00:00"
     }
   },
   "signer": {
@@ -25,11 +25,11 @@
     "algorithm": "ed25519-minisign",
     "mode": "local-offline"
   },
-  "issued_at": "2026-03-13T00:09:45.340728+00:00",
+  "issued_at": "2026-03-14T19:07:32.903853+00:00",
   "signature": {
     "alg": "ed25519-minisign",
-    "keyid": "66fa8a48e823e59b",
-    "value": "untrusted comment: signature from omg local signing key\nKOuvUlX6VOTeE6B6/+jeTjzPycjo2uJfi9RRdV9Xx4iF4nsnw95s1Fd1sJ6BTITdWzMDN5LrYPabxzCYA7NkCQ==\ntrusted comment: type=omg-slsa-v1 keyid=66fa8a48e823e59b issued_at=2026-03-13T00:09:45.340840+00:00 artifact=bundle/registry/omg-capability.schema.json sha256=ec9ef7f547774e9a5c8089695290bea10c351128a61b4fa09c108934acb64523\nFaAMkzNaVK5Kylo0HdzB8M0LqvdfO4PKv/6RATGfILnIPmdBiZEogK/PvaAQLV5hdTrctXbtgOYzsntEKyvFCg==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=66fa8a48e823e59b issued_at=2026-03-13T00:09:45.340840+00:00 artifact=bundle/registry/omg-capability.schema.json sha256=ec9ef7f547774e9a5c8089695290bea10c351128a61b4fa09c108934acb64523"
+    "keyid": "1c08c2ef3d089693",
+    "value": "untrusted comment: signature from omg local signing key\niq1IEdylN1qpce8V9d0DZl8DQECsBeCRV6AVVAmXTG0rJHmzw61ZAX2J+NtKkacUPGnaGbyGTj34KvtaESU+Cw==\ntrusted comment: type=omg-slsa-v1 keyid=1c08c2ef3d089693 issued_at=2026-03-14T19:07:32.903972+00:00 artifact=bundle/registry/omg-capability.schema.json sha256=d1938a2741e122db172f16360c02fe298c75cc72212a0c10a9ff663bbace2bac\neuYg4RyNiHOuYLajhDR/bZDCtVuEz6qkGmmzHZiMHr2M1JN19zkT/pRjQVsb1mZzqj9eKD1o9E8mXjtuzOjmCA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=1c08c2ef3d089693 issued_at=2026-03-14T19:07:32.903972+00:00 artifact=bundle/registry/omg-capability.schema.json sha256=d1938a2741e122db172f16360c02fe298c75cc72212a0c10a9ff663bbace2bac"
   }
 }

package/artifacts/release/dist/enterprise/attestations/bundle/settings.json.minisig

@@ -1,4 +1,4 @@
 untrusted comment: signature from omg local signing key
-pJ2Wf/YrXZdh40nASr5VcdihlQrB/OrmXrKYx/mVCjXq5DIjuFfYHNyEnfrwIG4GF66X8LEyekGSGURbRgetBQ==
-trusted comment: type=omg-slsa-v1 keyid=4345fe3b548765e3 issued_at=2026-03-13T00:09:45.341408+00:00 artifact=bundle/settings.json sha256=fddb41ebf4b6a8e5a606988fa3528dd4d25afc824ba73428909e31e04f15b76c
-mWw1YpDvrHBnbOyhfPwDWDe5hlDw7kZRLbz7stM5/QQd+5urt/NtmyUZXdJB33shUddhC9e22QjGukh6G9mhAA==
+mzpwYxhSSFiBAtQ3Y0o2MwqlN7pbdSDBnczOrckHu1n8zQkuMNXckYHsfLAjs3d9Y87Rk0pdDmpUysHhVyioDw==
+trusted comment: type=omg-slsa-v1 keyid=2be3a42988a3e4a5 issued_at=2026-03-14T19:07:32.904605+00:00 artifact=bundle/settings.json sha256=2991ed52c9f569658b3230925a8a52de303bd1744bc5c3be7a173b7b0d8257a0
+H1WLLscmYR8kfY/VKO6+LNuyjJKRRNLH9CMu0nYKpB++zx3xAqnHoZggzUPic4tazYGvU+EqcjR2lyIXXHPWCw==

package/artifacts/release/dist/enterprise/attestations/bundle/settings.json.statement.json

@@ -5,7 +5,7 @@
     {
       "name": "bundle/settings.json",
       "digest": {
-        "sha256": "fddb41ebf4b6a8e5a606988fa3528dd4d25afc824ba73428909e31e04f15b76c"
+        "sha256": "2991ed52c9f569658b3230925a8a52de303bd1744bc5c3be7a173b7b0d8257a0"
       }
     }
   ],
@@ -17,7 +17,7 @@
         "algorithm": "ed25519-minisign",
         "mode": "local-offline"
       },
-      "timestamp": "2026-03-13T00:09:45.341298+00:00"
+      "timestamp": "2026-03-14T19:07:32.904486+00:00"
     }
   },
   "signer": {
@@ -25,11 +25,11 @@
     "algorithm": "ed25519-minisign",
     "mode": "local-offline"
   },
-  "issued_at": "2026-03-13T00:09:45.341298+00:00",
+  "issued_at": "2026-03-14T19:07:32.904486+00:00",
   "signature": {
     "alg": "ed25519-minisign",
-    "keyid": "4345fe3b548765e3",
-    "value": "untrusted comment: signature from omg local signing key\npJ2Wf/YrXZdh40nASr5VcdihlQrB/OrmXrKYx/mVCjXq5DIjuFfYHNyEnfrwIG4GF66X8LEyekGSGURbRgetBQ==\ntrusted comment: type=omg-slsa-v1 keyid=4345fe3b548765e3 issued_at=2026-03-13T00:09:45.341408+00:00 artifact=bundle/settings.json sha256=fddb41ebf4b6a8e5a606988fa3528dd4d25afc824ba73428909e31e04f15b76c\nmWw1YpDvrHBnbOyhfPwDWDe5hlDw7kZRLbz7stM5/QQd+5urt/NtmyUZXdJB33shUddhC9e22QjGukh6G9mhAA==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=4345fe3b548765e3 issued_at=2026-03-13T00:09:45.341408+00:00 artifact=bundle/settings.json sha256=fddb41ebf4b6a8e5a606988fa3528dd4d25afc824ba73428909e31e04f15b76c"
+    "keyid": "2be3a42988a3e4a5",
+    "value": "untrusted comment: signature from omg local signing key\nmzpwYxhSSFiBAtQ3Y0o2MwqlN7pbdSDBnczOrckHu1n8zQkuMNXckYHsfLAjs3d9Y87Rk0pdDmpUysHhVyioDw==\ntrusted comment: type=omg-slsa-v1 keyid=2be3a42988a3e4a5 issued_at=2026-03-14T19:07:32.904605+00:00 artifact=bundle/settings.json sha256=2991ed52c9f569658b3230925a8a52de303bd1744bc5c3be7a173b7b0d8257a0\nH1WLLscmYR8kfY/VKO6+LNuyjJKRRNLH9CMu0nYKpB++zx3xAqnHoZggzUPic4tazYGvU+EqcjR2lyIXXHPWCw==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=2be3a42988a3e4a5 issued_at=2026-03-14T19:07:32.904605+00:00 artifact=bundle/settings.json sha256=2991ed52c9f569658b3230925a8a52de303bd1744bc5c3be7a173b7b0d8257a0"
   }
 }

package/artifacts/release/dist/enterprise/bundle/.agents/skills/omg/ast-pack/SKILL.md

@@ -0,0 +1,11 @@
+---
+name: omg-ast-pack
+description: "Governed AST search and replace lane with canonical approvals and proofs."
+---
+
+# OMG AST Pack Lane
+
+- Channel: `enterprise`
+- Execution modes: `embedded, local_supervisor`
+- MCP servers: `omg-control`
+- Evidence outputs: `.omg/evidence/ast-pack-{run_id}.json`

package/artifacts/release/dist/enterprise/bundle/.agents/skills/omg/ast-pack/openai.yaml

@@ -0,0 +1,12 @@
+name: omg-ast-pack
+description: "Governed AST search and replace lane with canonical approvals and proofs."
+allow_implicit_invocation: false
+metadata:
+  channel: enterprise
+  bundle_id: ast-pack
+  title: "OMG AST Pack Lane"
+mcp_servers:
+  - omg-control
+allowed_tools:
+  - "Grep"
+  - "Edit"

package/artifacts/release/dist/enterprise/bundle/.agents/skills/omg/control-plane/SKILL.md

@@ -8,4 +8,4 @@ description: "Canonical production control plane bundle for Claude, Codex, Gemin
 - Channel: `enterprise`
 - Execution modes: `embedded, local_supervisor`
 - MCP servers: `omg-control, omg-memory`
-- Evidence outputs: `.omg/evidence/control-plane-compile.json`
+- Evidence outputs: `.omg/evidence/control-plane-compile.json, .omg/evidence/tool-fabric.json`

package/artifacts/release/dist/enterprise/bundle/.agents/skills/omg/hash-edit/SKILL.md

@@ -0,0 +1,11 @@
+---
+name: omg-hash-edit
+description: "Governed hash-bound edit lane with signed approvals and evidence routing."
+---
+
+# OMG Hash Edit Lane
+
+- Channel: `enterprise`
+- Execution modes: `embedded, local_supervisor`
+- MCP servers: `omg-control`
+- Evidence outputs: `.omg/evidence/hash-edit-{run_id}.json`

package/artifacts/release/dist/enterprise/bundle/.agents/skills/omg/hash-edit/openai.yaml

@@ -0,0 +1,11 @@
+name: omg-hash-edit
+description: "Governed hash-bound edit lane with signed approvals and evidence routing."
+allow_implicit_invocation: false
+metadata:
+  channel: enterprise
+  bundle_id: hash-edit
+  title: "OMG Hash Edit Lane"
+mcp_servers:
+  - omg-control
+allowed_tools:
+  - "Edit"

package/artifacts/release/dist/enterprise/bundle/.agents/skills/omg/lsp-pack/SKILL.md

@@ -8,4 +8,4 @@ description: "Optional LSP-backed diagnostics and navigation bundle for producti
 - Channel: `enterprise`
 - Execution modes: `embedded, local_supervisor`
 - MCP servers: `omg-control`
-- Evidence outputs: `.omg/evidence/lsp-diagnostics.json`
+- Evidence outputs: `.omg/evidence/lsp-pack-{run_id}.json`

package/artifacts/release/dist/enterprise/bundle/.agents/skills/omg/lsp-pack/openai.yaml

@@ -9,3 +9,4 @@ mcp_servers:
   - omg-control
 allowed_tools:
   - "Read"
+  - "Edit"

package/artifacts/release/dist/enterprise/bundle/.agents/skills/omg/secure-worktree-pipeline/SKILL.md

@@ -8,4 +8,4 @@ description: "Ephemeral worktree execution and supervisor-safe worker dispatch f
 - Channel: `enterprise`
 - Execution modes: `automation, ephemeral_worktree, local_supervisor`
 - MCP servers: `omg-control`
-- Evidence outputs: `.omg/evidence/subagents/*.json`
+- Evidence outputs: `.omg/evidence/subagents/*.json, .omg/evidence/merge-writer-*.json, .omg/state/exec-kernel/*.json, .omg/state/merge-writer.lock`

package/artifacts/release/dist/enterprise/bundle/.agents/skills/omg/terminal-lane/SKILL.md

@@ -0,0 +1,11 @@
+---
+name: omg-terminal-lane
+description: "Highest-risk governed terminal execution lane with strict approval and attestation."
+---
+
+# OMG Terminal Lane
+
+- Channel: `enterprise`
+- Execution modes: `embedded, local_supervisor`
+- MCP servers: `omg-control`
+- Evidence outputs: `.omg/evidence/terminal-lane-{run_id}.json`

package/artifacts/release/dist/enterprise/bundle/.agents/skills/omg/terminal-lane/openai.yaml

@@ -0,0 +1,11 @@
+name: omg-terminal-lane
+description: "Highest-risk governed terminal execution lane with strict approval and attestation."
+allow_implicit_invocation: false
+metadata:
+  channel: enterprise
+  bundle_id: terminal-lane
+  title: "OMG Terminal Lane"
+mcp_servers:
+  - omg-control
+allowed_tools:
+  - "Bash"

package/artifacts/release/dist/enterprise/bundle/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
   },
   "metadata": {
     "description": "OMG - Oh-My-God for Claude Code and supported agent hosts",
-    "version": "2.1.9",
+    "version": "2.2.3",
     "homepage": "https://github.com/trac3er00/OMG",
     "repository": "https://github.com/trac3er00/OMG"
   },
@@ -14,7 +14,7 @@
     {
       "name": "omg",
       "description": "OMG plugin layer for Claude Code and supported agent hosts with native setup, orchestration, and interop.",
-      "version": "2.1.9",
+      "version": "2.2.3",
       "source": "./",
       "author": {
         "name": "trac3er00"
@@ -32,5 +32,5 @@
       ]
     }
   ],
-  "version": "2.1.9"
+  "version": "2.2.3"
 }

package/artifacts/release/dist/enterprise/bundle/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "omg",
-  "version": "2.1.9",
+  "version": "2.2.3",
   "description": "OMG plugin layer for Claude Code with native setup, orchestration, and interop.",
   "author": {
     "name": "trac3er00"

package/artifacts/release/dist/enterprise/bundle/.gemini/settings.json

@@ -0,0 +1,72 @@
+{
+  "mcpServers": {
+    "omg-control": {
+      "command": "python3",
+      "args": [
+        "-m",
+        "runtime.omg_mcp_server"
+      ]
+    }
+  },
+  "_omg": {
+    "_version": "2.2.3",
+    "generated": {
+      "contract_version": "2.2.3",
+      "channel": "enterprise",
+      "required_bundles": [
+        "control-plane",
+        "plan-council",
+        "claim-judge",
+        "test-intent-lock",
+        "proof-gate",
+        "hook-governor",
+        "mcp-fabric",
+        "lsp-pack",
+        "secure-worktree-pipeline",
+        "security-check",
+        "api-twin",
+        "preflight",
+        "robotics",
+        "vision",
+        "algorithms",
+        "health",
+        "tracebank",
+        "eval-gate",
+        "delta-classifier",
+        "incident-replay",
+        "data-lineage",
+        "remote-supervisor"
+      ],
+      "phase1_release_contract": {
+        "forge_specialist_surfaces": [
+          "forge-profile-review",
+          "forge-release-audit",
+          "forge-validate"
+        ],
+        "release_surfaces": [
+          "OMG:profile-review",
+          "OMG:release-audit",
+          "OMG:validate"
+        ],
+        "attestation_requirements": [
+          "registry.verify_artifact.sign_artifact_statement",
+          "registry.verify_artifact.verify_artifact_statement"
+        ],
+        "compliance_governor_expectations": [
+          "runtime.compliance_governor.evaluate_release_compliance",
+          "runtime.compliance_governor.evaluate_tool_compliance"
+        ],
+        "release_readiness_checks": [
+          "claim_judge",
+          "compliance_governor",
+          "execution_primitives"
+        ],
+        "runtime_behavior_surfaces": [
+          "execution_primitives",
+          "provider_host_parity",
+          "host_semantic_parity"
+        ]
+      }
+    }
+  }
+}

package/artifacts/release/dist/enterprise/bundle/.kimi/mcp.json

@@ -0,0 +1,72 @@
+{
+  "mcpServers": {
+    "omg-control": {
+      "command": "python3",
+      "args": [
+        "-m",
+        "runtime.omg_mcp_server"
+      ]
+    }
+  },
+  "_omg": {
+    "_version": "2.2.3",
+    "generated": {
+      "contract_version": "2.2.3",
+      "channel": "enterprise",
+      "required_bundles": [
+        "control-plane",
+        "plan-council",
+        "claim-judge",
+        "test-intent-lock",
+        "proof-gate",
+        "hook-governor",
+        "mcp-fabric",
+        "lsp-pack",
+        "secure-worktree-pipeline",
+        "security-check",
+        "api-twin",
+        "preflight",
+        "robotics",
+        "vision",
+        "algorithms",
+        "health",
+        "tracebank",
+        "eval-gate",
+        "delta-classifier",
+        "incident-replay",
+        "data-lineage",
+        "remote-supervisor"
+      ],
+      "phase1_release_contract": {
+        "forge_specialist_surfaces": [
+          "forge-profile-review",
+          "forge-release-audit",
+          "forge-validate"
+        ],
+        "release_surfaces": [
+          "OMG:profile-review",
+          "OMG:release-audit",
+          "OMG:validate"
+        ],
+        "attestation_requirements": [
+          "registry.verify_artifact.sign_artifact_statement",
+          "registry.verify_artifact.verify_artifact_statement"
+        ],
+        "compliance_governor_expectations": [
+          "runtime.compliance_governor.evaluate_release_compliance",
+          "runtime.compliance_governor.evaluate_tool_compliance"
+        ],
+        "release_readiness_checks": [
+          "claim_judge",
+          "compliance_governor",
+          "execution_primitives"
+        ],
+        "runtime_behavior_surfaces": [
+          "execution_primitives",
+          "provider_host_parity",
+          "host_semantic_parity"
+        ]
+      }
+    }
+  }
+}

package/artifacts/release/dist/enterprise/bundle/OMG_COMPAT_CONTRACT.md

@@ -1,11 +1,13 @@
 ---
 title: OMG Production Control Plane
-version: 2.1.9
+version: 2.2.3
 canonical_hosts:
   - claude
   - codex
   - gemini
   - kimi
+compatibility_only_hosts:
+  - opencode
 status: active
 ---
 
@@ -15,14 +17,16 @@ status: active
 
 ## provider_tiers
 
-OMG defines four canonical hosts and their host-rule contracts.
+OMG defines four canonical behavior-parity hosts and their host-rule contracts.
 
 - `claude`: requires `compilation_targets`, `hooks`, `subagents`, and `skills`.
 - `codex`: requires `compilation_targets`, `skills`, `agents_fragments`, `rules`, and `automations`.
 - `gemini`: requires `compilation_targets`, `mcp`, `skills`, and `automations`.
 - `kimi`: requires `compilation_targets`, `mcp`, `skills`, and `automations`.
 
-Gemini and Kimi are canonical hosts for contract validation and policy declaration. Their contracts do not require Claude/Codex hook semantics.
+Gemini and Kimi are canonical behavior-parity hosts for contract validation and policy declaration. Their contracts do not require Claude/Codex hook semantics.
+
+OpenCode remains compatibility-only in v2.2.3. It is supported through compatibility MCP wiring and interop diagnostics, but it is not part of the canonical behavior-parity contract set.
 
 ## metadata
 

package/artifacts/release/dist/enterprise/bundle/plugins/advanced/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "omg-advanced",
-  "version": "2.1.9",
+  "version": "2.2.3",
   "description": "Advanced OMG commands - deep planning, learning, code review, and specialized workflows",
   "type": "omg-plugin",
   "commands": {

package/artifacts/release/dist/enterprise/bundle/registry/bundles/algorithms.yaml

@@ -1,6 +1,6 @@
 id: algorithms
 kind: domain-pack
-version: 2.1.9
+version: 2.2.3
 title: OMG Algorithms Pack
 description: Determinism and benchmark attachments for algorithm-heavy work.
 hosts:

package/artifacts/release/dist/enterprise/bundle/registry/bundles/api-twin.yaml

@@ -1,6 +1,6 @@
 id: api-twin
 kind: simulation
-version: 2.1.9
+version: 2.2.3
 title: OMG API Twin
 description: Versioned endpoint cassette replay with latency, drift, and cost reporting.
 hosts:

package/artifacts/release/dist/enterprise/bundle/registry/bundles/ast-pack.yaml

@@ -0,0 +1,80 @@
+id: ast-pack
+kind: governance
+version: 2.2.3
+title: OMG AST Pack Lane
+description: Governed AST search and replace lane with canonical approvals and proofs.
+hosts:
+  - claude
+  - codex
+assets:
+  references:
+    - runtime/tool_fabric.py
+    - registry/verify_artifact.py
+invocation_policy:
+  user_invocable: true
+  model_invocable: true
+  allow_implicit_invocation: false
+tool_policy:
+  side_effect_level: medium
+  allowed_tools:
+    claude:
+      - Grep
+      - Edit
+    codex:
+      - Grep
+      - Edit
+lifecycle_hooks:
+  native:
+    - PreToolUse
+    - PostToolUse
+  emulated:
+    - TaskCompleted
+mcp_contract:
+  servers:
+    - omg-control
+lsp_contract:
+  languages:
+    - python
+    - typescript
+evidence_outputs:
+  artifacts:
+    - .omg/evidence/ast-pack-{run_id}.json
+execution_contract:
+  modes:
+    - embedded
+    - local_supervisor
+tool_fabric:
+  lane: ast-pack
+  enforcement_order:
+    - tool_selection
+    - approval_state
+    - evidence_requirements
+    - attestation_proof_validation
+    - execution
+  tools:
+    - Grep
+    - Edit
+  semantic_operations:
+    - name: ast_search
+      tool: Grep
+      mutation_capable: false
+      requires_explicit_promotion: false
+    - name: ast_rewrite
+      tool: Edit
+      mutation_capable: true
+      requires_explicit_promotion: true
+  requires_signed_approval: true
+  requires_signed_approval_for_mutation: true
+  requires_attestation: false
+  requires_attestation_for_mutation: true
+  dry_run_first: true
+  require_run_scoped_evidence: true
+  require_fresh_evidence: true
+  evidence_max_age_seconds: 3600
+  required_evidence:
+    - .omg/evidence/ast-pack-{run_id}.json
+channel_overrides:
+  public:
+    posture: advisory
+  enterprise:
+    posture: managed

package/artifacts/release/dist/enterprise/bundle/registry/bundles/claim-judge.yaml

@@ -1,6 +1,6 @@
 id: claim-judge
 kind: proof
-version: 2.1.9
+version: 2.2.3
 title: OMG Claim Judge
 description: Evidence-backed claim validator for structured release and completion claims.
 hosts:

package/artifacts/release/dist/enterprise/bundle/registry/bundles/control-plane.yaml

@@ -1,6 +1,6 @@
 id: control-plane
 kind: skill
-version: 2.1.9
+version: 2.2.3
 title: OMG Control Plane
 description: Canonical production control plane bundle for Claude, Codex, Gemini, and Kimi.
 hosts:
@@ -42,6 +42,8 @@ mcp_contract:
     - omg-memory
   prompts:
     - omg_contract_summary
+  tools:
+    - omg_tool_fabric_request
   resources:
     - resource://omg/contract
     - resource://omg/release-checklist
@@ -52,6 +54,7 @@ lsp_contract:
 evidence_outputs:
   artifacts:
     - .omg/evidence/control-plane-compile.json
+    - .omg/evidence/tool-fabric.json
 execution_contract:
   modes:
     - embedded
@@ -97,6 +100,18 @@ policy_model:
     - tool_name: Bash(python3:*)
       allowed_tiers: [balanced, interop, labs]
       requires_approval: true
+  tool_fabric_contract:
+    enforcement_order:
+      - tool_selection
+      - approval_state
+      - evidence_requirements
+      - attestation_proof_validation
+      - execution
+    lanes:
+      - lsp-pack
+      - hash-edit
+      - ast-pack
+      - terminal-lane
   protected_paths:
     - path_pattern: .omg/**
       required_tier: balanced