@trac3er/oh-my-god 2.2.2 → 2.2.3

package/build/lib/runtime/release_run_coordinator.py

@@ -18,7 +18,7 @@ from runtime.verification_controller import VerificationController
 from runtime.claim_judge import evaluate_claims_for_release
 from runtime.exec_kernel import get_exec_kernel
 from runtime.worker_watchdog import get_worker_watchdog
-from runtime.merge_writer import get_merge_writer
+from runtime.merge_writer import get_merge_writer, create_write_lease, is_lease_valid, WriteLease
 
 
 class RunIdConflictError(ValueError):
@@ -32,15 +32,20 @@ class ResolvedRunId:
     reason: str
 
 
+_DEFAULT_LEASE_DURATION_S = 3600.0  # 1 hour default lease
+
+
 class ReleaseRunCoordinator:
     project_dir: str
     _verification: VerificationController
     _journal: InteractionJournal
+    _active_lease: WriteLease | None
 
     def __init__(self, project_dir: str):
         self.project_dir = str(Path(project_dir).resolve())
         self._verification = VerificationController(self.project_dir)
         self._journal = InteractionJournal(self.project_dir)
+        self._active_lease = None
 
     def begin(self, cli_run_id: str | None = None, release_evidence: dict[str, object] | None = None) -> dict[str, object]:
         resolved = self.resolve_run_id(cli_run_id=cli_run_id, release_evidence=release_evidence)
@@ -79,6 +84,15 @@ class ReleaseRunCoordinator:
             merge_writer_token = token.lock_path
         except Exception:
             pass
+        # Create a run-scoped write lease bound to this release run
+        evidence_path = str(
+            Path(".omg") / "evidence" / f"merge-writer-{run_id}.json"
+        )
+        self._active_lease = create_write_lease(
+            run_id=run_id,
+            duration_s=_DEFAULT_LEASE_DURATION_S,
+            evidence_path=evidence_path,
+        )
         result: dict[str, object] = {
             "status": "running",
             "run_id": run_id,
@@ -87,6 +101,8 @@ class ReleaseRunCoordinator:
         }
         if merge_writer_token:
             result["merge_writer_lock"] = merge_writer_token
+        if self._active_lease:
+            result["write_lease_evidence"] = self._active_lease.evidence_path
         return result
 
     def mutate(
@@ -308,6 +324,8 @@ class ReleaseRunCoordinator:
                 mw.release(token)
         except Exception:
             pass
+        # Invalidate the write lease — leases do not survive across runs
+        self._active_lease = None
         return {
             "status": str(verification_state.get("status", resolved_status)),
             "run_id": canonical_run_id,
@@ -317,6 +335,20 @@ class ReleaseRunCoordinator:
             "rollback_path": rollback_path,
         }
 
+    def check_write_lease(self, run_id: str) -> dict[str, object]:
+        """Check write-lease validity for *run_id*.
+
+        Returns a dict with ``valid`` (bool), ``reason`` (str), and
+        optionally ``evidence_path``.
+        """
+        if self._active_lease is None:
+            return {"valid": False, "reason": "no_active_write_lease"}
+        valid, reason = is_lease_valid(self._active_lease, run_id)
+        result: dict[str, object] = {"valid": valid, "reason": reason}
+        if valid:
+            result["evidence_path"] = self._active_lease.evidence_path
+        return result
+
     def resolve_run_id(
         self,
         *,

package/build/lib/runtime/release_surfaces.py

@@ -83,6 +83,13 @@ _BUNDLE_NAMES: tuple[str, ...] = (
 )
 
 
+REQUIRED_PACKAGE_PARITY_SURFACES: tuple[str, ...] = (
+    "hash-edit",
+    "ast-pack",
+    "terminal-lane",
+)
+
+
 # ── Authored surfaces: explicit, no dynamic discovery ──────────────────────
 
 AUTHORED_SURFACES: list[AuthoredSurface] = [
@@ -99,6 +106,26 @@ AUTHORED_SURFACES: list[AuthoredSurface] = [
         "settings.json", "json_key_path", ["_omg", "generated", "contract_version"],
         "OMG generated contract version",
     ),
+    AuthoredSurface(
+        ".gemini/settings.json", "json_key_path", ["_omg", "_version"],
+        "Gemini settings OMG version",
+        source_only=False,
+    ),
+    AuthoredSurface(
+        ".gemini/settings.json", "json_key_path", ["_omg", "generated", "contract_version"],
+        "Gemini settings contract version",
+        source_only=False,
+    ),
+    AuthoredSurface(
+        ".kimi/mcp.json", "json_key_path", ["_omg", "_version"],
+        "Kimi MCP OMG version",
+        source_only=False,
+    ),
+    AuthoredSurface(
+        ".kimi/mcp.json", "json_key_path", ["_omg", "generated", "contract_version"],
+        "Kimi MCP contract version",
+        source_only=False,
+    ),
     AuthoredSurface(
         ".claude-plugin/plugin.json", "json_key_path", ["version"],
         "Claude plugin version",
@@ -275,6 +302,10 @@ def get_runtime_behavior_surfaces() -> list[str]:
     return list(RUNTIME_BEHAVIOR_SURFACES)
 
 
+def get_package_parity_surfaces() -> list[str]:
+    return list(REQUIRED_PACKAGE_PARITY_SURFACES)
+
+
 def surface_applies_to_root(surface: AuthoredSurface, root_dir: Path) -> bool:
     """Return whether a surface should be enforced for the given root layout."""
     if not surface.source_only:

package/build/lib/runtime/test_intent_lock.py

@@ -150,6 +150,8 @@ def verify_done_when(metadata: dict[str, Any] | None, run_id: str | None) -> dic
             "status": "missing_done_when",
             "reason": "done_when_required",
             "run_id": str(run_id or "").strip() or None,
+            "done_when_declared": False,
+            "done_when_completed": False,
         }
 
     done_when_run_id = _extract_done_when_run_id(metadata_obj.get("done_when"))
@@ -159,13 +161,21 @@ def verify_done_when(metadata: dict[str, Any] | None, run_id: str | None) -> dic
             "status": "done_when_contract_mismatch",
             "reason": "done_when_run_id_mismatch",
             "run_id": normalized_run_id,
+            "done_when_declared": True,
+            "done_when_completed": False,
         }
 
+    completion_state = _extract_done_when_completion_state(metadata_obj)
+    done_when_completed = completion_state == "completed"
+
     return {
         "status": "ok",
         "reason": "done_when_present",
         "run_id": normalized_run_id or done_when_run_id or None,
         "done_when": criteria,
+        "done_when_declared": True,
+        "done_when_completed": done_when_completed,
+        "done_when_state": completion_state,
     }
 
 
@@ -347,6 +357,21 @@ def _extract_done_when_run_id(value: Any) -> str:
     return ""
 
 
+def _extract_done_when_completion_state(metadata: dict[str, Any]) -> str:
+    metadata_state = str(metadata.get("done_when_state", "")).strip().lower()
+    if metadata_state in {"declared", "completed"}:
+        return metadata_state
+
+    done_when = metadata.get("done_when")
+    if isinstance(done_when, dict):
+        done_when_state = str(done_when.get("state", "")).strip().lower()
+        if done_when_state in {"declared", "completed"}:
+            return done_when_state
+        if done_when.get("completed") is True:
+            return "completed"
+    return "declared"
+
+
 def _selector_to_path(selector: str) -> str:
     return selector.split("::", 1)[0].strip()
 

package/build/lib/runtime/tool_plan_gate.py

@@ -1,6 +1,7 @@
 from __future__ import annotations
 
 import os
+import re
 from collections.abc import Mapping
 from datetime import datetime, timezone
 from pathlib import Path
@@ -26,6 +27,13 @@ _TOOL_KEYWORDS: dict[str, tuple[str, ...]] = {
     "omg-control": ("policy", "governance", "release", "proof", "control plane"),
 }
 _MUTATION_TOOLS = frozenset({"write", "edit", "multiedit", "bash"})
+_READ_ONLY_BASH_ALLOWLIST = (
+    re.compile(r"^python\d?(?:\s+-[vV]{1,2}|\s+--version)(?:\s|$)"),
+    re.compile(r"^git\s+status(?:\s|$)"),
+    re.compile(r"^gh\s+pr\s+view(?:\s|$)"),
+    re.compile(r"^(?:.+\|\s*)?tee\s+/dev/null(?:\s|$)"),
+)
+_FULLY_QUOTED_PATTERN = re.compile(r"^\s*([\"']).*\1\s*$")
 
 def build_tool_plan(
     goal: str,
@@ -396,10 +404,26 @@ def _clarification_status(context_packet: dict[str, object]) -> dict[str, object
 def _is_mutation_capable_tool(tool: str, tool_input: dict[str, object]) -> bool:
     token = str(tool or "").strip().lower()
     if token == "bash":
-        return classify_bash_command_mode(str(tool_input.get("command", ""))) == "mutation"
+        command = str(tool_input.get("command", "")).strip()
+        lowered = command.lower()
+        if _is_allowlisted_read_only_bash(lowered):
+            return False
+        return classify_bash_command_mode(command) == "mutation"
     return token in _MUTATION_TOOLS
 
 
+def _is_allowlisted_read_only_bash(command: str) -> bool:
+    stripped = command.strip()
+    if not stripped:
+        return True
+    if _FULLY_QUOTED_PATTERN.match(stripped):
+        return True
+    for pattern in _READ_ONLY_BASH_ALLOWLIST:
+        if pattern.search(stripped):
+            return True
+    return False
+
+
 def _extract_metadata(tool_input: dict[str, object]) -> dict[str, object]:
     metadata = tool_input.get("metadata")
     if isinstance(metadata, dict):

package/commands/OMG:validate.md

@@ -36,7 +36,7 @@ python3 scripts/omg.py validate --format json
       "required": true | false
     }
   ],
-  "version": "2.2.2"
+  "version": "2.2.3"
 }
 ```
 

package/dist/enterprise/attestations/bundle/.agents/skills/omg/AGENTS.fragment.md.minisig

@@ -1,4 +1,4 @@
 untrusted comment: signature from omg local signing key
-UH9P7YF20M9YFZZKlvW2XXC5yuUA7OD8B1TifXj5XZ1mzBK/FwqcxLbzaV3hhhOS2gp5JSuJf1b4rrNAoWALBg==
-trusted comment: type=omg-slsa-v1 keyid=f26fd20ab2a5e2b6 issued_at=2026-03-14T04:21:33.069819+00:00 artifact=bundle/.agents/skills/omg/AGENTS.fragment.md sha256=19234c26a265b0256b44087986992ee8f40591a9b0af603ee7ba4e55f34d3ea5
-/3fq0t/ZmHbOHwtP8W9km6Ia0gqKry1i+mZhbCtwZ8Y9cABwoq16BFTeaapCKWQ59t7OTA5wKTruHBEUHQ+bCg==
+t3Hj+kr0JheIUNTTALI6VBMayNDqIaAauCYbCQFmfKVUxjlc9RUDd4S57aBg94UnoqYB7bbwYUfsg5rbqZ1XAQ==
+trusted comment: type=omg-slsa-v1 keyid=913c3701a7ac8076 issued_at=2026-03-14T19:07:28.521813+00:00 artifact=bundle/.agents/skills/omg/AGENTS.fragment.md sha256=19234c26a265b0256b44087986992ee8f40591a9b0af603ee7ba4e55f34d3ea5
+isGvKXxn/JeHQiAXShBZmeAjfV8sg6FCM1o5e3CAMIner8BZzyP/f+RzCPAdySgoFBRnHZ5U55s2SNxpKE8jAw==

package/dist/enterprise/attestations/bundle/.agents/skills/omg/AGENTS.fragment.md.statement.json

@@ -17,7 +17,7 @@
         "algorithm": "ed25519-minisign",
         "mode": "local-offline"
       },
-      "timestamp": "2026-03-14T04:21:33.061882+00:00"
+      "timestamp": "2026-03-14T19:07:28.473045+00:00"
     }
   },
   "signer": {
@@ -25,11 +25,11 @@
     "algorithm": "ed25519-minisign",
     "mode": "local-offline"
   },
-  "issued_at": "2026-03-14T04:21:33.061882+00:00",
+  "issued_at": "2026-03-14T19:07:28.473045+00:00",
   "signature": {
     "alg": "ed25519-minisign",
-    "keyid": "f26fd20ab2a5e2b6",
-    "value": "untrusted comment: signature from omg local signing key\nUH9P7YF20M9YFZZKlvW2XXC5yuUA7OD8B1TifXj5XZ1mzBK/FwqcxLbzaV3hhhOS2gp5JSuJf1b4rrNAoWALBg==\ntrusted comment: type=omg-slsa-v1 keyid=f26fd20ab2a5e2b6 issued_at=2026-03-14T04:21:33.069819+00:00 artifact=bundle/.agents/skills/omg/AGENTS.fragment.md sha256=19234c26a265b0256b44087986992ee8f40591a9b0af603ee7ba4e55f34d3ea5\n/3fq0t/ZmHbOHwtP8W9km6Ia0gqKry1i+mZhbCtwZ8Y9cABwoq16BFTeaapCKWQ59t7OTA5wKTruHBEUHQ+bCg==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=f26fd20ab2a5e2b6 issued_at=2026-03-14T04:21:33.069819+00:00 artifact=bundle/.agents/skills/omg/AGENTS.fragment.md sha256=19234c26a265b0256b44087986992ee8f40591a9b0af603ee7ba4e55f34d3ea5"
+    "keyid": "913c3701a7ac8076",
+    "value": "untrusted comment: signature from omg local signing key\nt3Hj+kr0JheIUNTTALI6VBMayNDqIaAauCYbCQFmfKVUxjlc9RUDd4S57aBg94UnoqYB7bbwYUfsg5rbqZ1XAQ==\ntrusted comment: type=omg-slsa-v1 keyid=913c3701a7ac8076 issued_at=2026-03-14T19:07:28.521813+00:00 artifact=bundle/.agents/skills/omg/AGENTS.fragment.md sha256=19234c26a265b0256b44087986992ee8f40591a9b0af603ee7ba4e55f34d3ea5\nisGvKXxn/JeHQiAXShBZmeAjfV8sg6FCM1o5e3CAMIner8BZzyP/f+RzCPAdySgoFBRnHZ5U55s2SNxpKE8jAw==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=913c3701a7ac8076 issued_at=2026-03-14T19:07:28.521813+00:00 artifact=bundle/.agents/skills/omg/AGENTS.fragment.md sha256=19234c26a265b0256b44087986992ee8f40591a9b0af603ee7ba4e55f34d3ea5"
   }
 }

package/dist/enterprise/attestations/bundle/.agents/skills/omg/algorithms/SKILL.md.minisig

@@ -1,4 +1,4 @@
 untrusted comment: signature from omg local signing key
-/3OgYCcak5SKFFgxShlynfnmpegcDFexPvkUFRaKrWsob0evcd+2JAzoM3D4HAYbTiISfrnlbVrlDZjpbyLcCg==
-trusted comment: type=omg-slsa-v1 keyid=192fa857b917198e issued_at=2026-03-14T04:21:33.070847+00:00 artifact=bundle/.agents/skills/omg/algorithms/SKILL.md sha256=9f007935886f168e43cd76b69857e81c579f9cce8174e14f9b6b0173739c337d
-RzYsVD80BgW6x4ij4sjCdOFsW3/LRcuSDl+lRjnynjCR7yK3RHHdRGLpJbJRlEQpd7KJlZFpSdWEjmCdapP3CA==
+ZabFxZ6J2s7toX1ARWhTFCJZCze7MmkfLRLVr3HRIPWgHGyWFz6zLQ54jE+e3qb+oy8Lc3avKyVQgY6NQVAvDA==
+trusted comment: type=omg-slsa-v1 keyid=230221b3f76c0564 issued_at=2026-03-14T19:07:28.523039+00:00 artifact=bundle/.agents/skills/omg/algorithms/SKILL.md sha256=9f007935886f168e43cd76b69857e81c579f9cce8174e14f9b6b0173739c337d
+bIRU4QFScvkksIL8rMmzJ6CrJ8DlQIyThBPvoA3MJmduYtkPGyxVmH24KlnnT18kuvFalm0nqs84DvhnJTkRCw==

package/dist/enterprise/attestations/bundle/.agents/skills/omg/algorithms/SKILL.md.statement.json

@@ -17,7 +17,7 @@
         "algorithm": "ed25519-minisign",
         "mode": "local-offline"
       },
-      "timestamp": "2026-03-14T04:21:33.070727+00:00"
+      "timestamp": "2026-03-14T19:07:28.522892+00:00"
     }
   },
   "signer": {
@@ -25,11 +25,11 @@
     "algorithm": "ed25519-minisign",
     "mode": "local-offline"
   },
-  "issued_at": "2026-03-14T04:21:33.070727+00:00",
+  "issued_at": "2026-03-14T19:07:28.522892+00:00",
   "signature": {
     "alg": "ed25519-minisign",
-    "keyid": "192fa857b917198e",
-    "value": "untrusted comment: signature from omg local signing key\n/3OgYCcak5SKFFgxShlynfnmpegcDFexPvkUFRaKrWsob0evcd+2JAzoM3D4HAYbTiISfrnlbVrlDZjpbyLcCg==\ntrusted comment: type=omg-slsa-v1 keyid=192fa857b917198e issued_at=2026-03-14T04:21:33.070847+00:00 artifact=bundle/.agents/skills/omg/algorithms/SKILL.md sha256=9f007935886f168e43cd76b69857e81c579f9cce8174e14f9b6b0173739c337d\nRzYsVD80BgW6x4ij4sjCdOFsW3/LRcuSDl+lRjnynjCR7yK3RHHdRGLpJbJRlEQpd7KJlZFpSdWEjmCdapP3CA==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=192fa857b917198e issued_at=2026-03-14T04:21:33.070847+00:00 artifact=bundle/.agents/skills/omg/algorithms/SKILL.md sha256=9f007935886f168e43cd76b69857e81c579f9cce8174e14f9b6b0173739c337d"
+    "keyid": "230221b3f76c0564",
+    "value": "untrusted comment: signature from omg local signing key\nZabFxZ6J2s7toX1ARWhTFCJZCze7MmkfLRLVr3HRIPWgHGyWFz6zLQ54jE+e3qb+oy8Lc3avKyVQgY6NQVAvDA==\ntrusted comment: type=omg-slsa-v1 keyid=230221b3f76c0564 issued_at=2026-03-14T19:07:28.523039+00:00 artifact=bundle/.agents/skills/omg/algorithms/SKILL.md sha256=9f007935886f168e43cd76b69857e81c579f9cce8174e14f9b6b0173739c337d\nbIRU4QFScvkksIL8rMmzJ6CrJ8DlQIyThBPvoA3MJmduYtkPGyxVmH24KlnnT18kuvFalm0nqs84DvhnJTkRCw==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=230221b3f76c0564 issued_at=2026-03-14T19:07:28.523039+00:00 artifact=bundle/.agents/skills/omg/algorithms/SKILL.md sha256=9f007935886f168e43cd76b69857e81c579f9cce8174e14f9b6b0173739c337d"
   }
 }

package/dist/enterprise/attestations/bundle/.agents/skills/omg/algorithms/openai.yaml.minisig

@@ -1,4 +1,4 @@
 untrusted comment: signature from omg local signing key
-nqVIrn+BiIvmepctnHhYQE/b5G7T8s9Jp7DHKLjqgjx4nWwQDWi9Qxf27pzXnFQr3CPku33VnwTuW3blxmM4DA==
-trusted comment: type=omg-slsa-v1 keyid=9fb9a58cf0414ce5 issued_at=2026-03-14T04:21:33.071427+00:00 artifact=bundle/.agents/skills/omg/algorithms/openai.yaml sha256=879d3b5bcdb3ffa17387eae31634bd5ce7e2695c0e6dd3b478017843a024300d
-vhxi4uQdpDSkG4/ioMTpVKa+wb6eSaIXe0qu06ojjjTM+gjLRYfv2+A8a1yR2MhEmUrOOmQ08jVWSOTSAKNvAA==
+IxTUMShdg9tm0os/FyVhkO7eZrzY5hbEKvLaRh+2hiyNbRwrWCtYzKu479iNselu/zJrwulMKj86IryEaBPPAw==
+trusted comment: type=omg-slsa-v1 keyid=eb1c13f1dd863645 issued_at=2026-03-14T19:07:28.523738+00:00 artifact=bundle/.agents/skills/omg/algorithms/openai.yaml sha256=879d3b5bcdb3ffa17387eae31634bd5ce7e2695c0e6dd3b478017843a024300d
+3+m4LQipxyVSnGhivVzxzv6VD1dlVCyhvLDtxLyYVu07dpt/dCLWq4l5hiicAGTh4GnS3XjsZC3NBOfUGt0GAw==

package/dist/enterprise/attestations/bundle/.agents/skills/omg/algorithms/openai.yaml.statement.json

@@ -17,7 +17,7 @@
         "algorithm": "ed25519-minisign",
         "mode": "local-offline"
       },
-      "timestamp": "2026-03-14T04:21:33.071316+00:00"
+      "timestamp": "2026-03-14T19:07:28.523617+00:00"
     }
   },
   "signer": {
@@ -25,11 +25,11 @@
     "algorithm": "ed25519-minisign",
     "mode": "local-offline"
   },
-  "issued_at": "2026-03-14T04:21:33.071316+00:00",
+  "issued_at": "2026-03-14T19:07:28.523617+00:00",
   "signature": {
     "alg": "ed25519-minisign",
-    "keyid": "9fb9a58cf0414ce5",
-    "value": "untrusted comment: signature from omg local signing key\nnqVIrn+BiIvmepctnHhYQE/b5G7T8s9Jp7DHKLjqgjx4nWwQDWi9Qxf27pzXnFQr3CPku33VnwTuW3blxmM4DA==\ntrusted comment: type=omg-slsa-v1 keyid=9fb9a58cf0414ce5 issued_at=2026-03-14T04:21:33.071427+00:00 artifact=bundle/.agents/skills/omg/algorithms/openai.yaml sha256=879d3b5bcdb3ffa17387eae31634bd5ce7e2695c0e6dd3b478017843a024300d\nvhxi4uQdpDSkG4/ioMTpVKa+wb6eSaIXe0qu06ojjjTM+gjLRYfv2+A8a1yR2MhEmUrOOmQ08jVWSOTSAKNvAA==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=9fb9a58cf0414ce5 issued_at=2026-03-14T04:21:33.071427+00:00 artifact=bundle/.agents/skills/omg/algorithms/openai.yaml sha256=879d3b5bcdb3ffa17387eae31634bd5ce7e2695c0e6dd3b478017843a024300d"
+    "keyid": "eb1c13f1dd863645",
+    "value": "untrusted comment: signature from omg local signing key\nIxTUMShdg9tm0os/FyVhkO7eZrzY5hbEKvLaRh+2hiyNbRwrWCtYzKu479iNselu/zJrwulMKj86IryEaBPPAw==\ntrusted comment: type=omg-slsa-v1 keyid=eb1c13f1dd863645 issued_at=2026-03-14T19:07:28.523738+00:00 artifact=bundle/.agents/skills/omg/algorithms/openai.yaml sha256=879d3b5bcdb3ffa17387eae31634bd5ce7e2695c0e6dd3b478017843a024300d\n3+m4LQipxyVSnGhivVzxzv6VD1dlVCyhvLDtxLyYVu07dpt/dCLWq4l5hiicAGTh4GnS3XjsZC3NBOfUGt0GAw==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=eb1c13f1dd863645 issued_at=2026-03-14T19:07:28.523738+00:00 artifact=bundle/.agents/skills/omg/algorithms/openai.yaml sha256=879d3b5bcdb3ffa17387eae31634bd5ce7e2695c0e6dd3b478017843a024300d"
   }
 }

package/dist/enterprise/attestations/bundle/.agents/skills/omg/api-twin/SKILL.md.minisig

@@ -1,4 +1,4 @@
 untrusted comment: signature from omg local signing key
-7YMg7F2/gShNLF0yAmYxGrxLcglr/xYiENL0V2BuDPVGNgdY75WO0HHZqEWXJ5Ut8k5gzqiWRLtIHJX7DBApCA==
-trusted comment: type=omg-slsa-v1 keyid=bae0bb93740dc364 issued_at=2026-03-14T04:21:33.072001+00:00 artifact=bundle/.agents/skills/omg/api-twin/SKILL.md sha256=482db7bf01f80d8695f71f3bdbae8e9a179cf05355e736f90c40c1a3c9136fef
-jTKrcJuiQxYHWtK3O6gAvFnUGlxvCPZNZW6fcXKMf+nk4ZIOqwoMgiD/vR9FSHqRNDDcS7T2t3dXNvMUuJldCg==
+m+0m0qqBjt7HS4YMM/xAEiF3ovuBvU+GbyVGJeNDGSRRxvIxVMF5ufguIu/tAwZOwoUorRuh8jEl9A1JK1MFAA==
+trusted comment: type=omg-slsa-v1 keyid=af48f28acf1b30af issued_at=2026-03-14T19:07:28.524376+00:00 artifact=bundle/.agents/skills/omg/api-twin/SKILL.md sha256=482db7bf01f80d8695f71f3bdbae8e9a179cf05355e736f90c40c1a3c9136fef
+J2gLbKz3qyPJYK5RibVGPLDJvUsekJNhhgM435tumRLWGD5NFwrZyzSE3I8Q2cuxqDjSXdyOC6xCrKCYAXvLCQ==

package/dist/enterprise/attestations/bundle/.agents/skills/omg/api-twin/SKILL.md.statement.json

@@ -17,7 +17,7 @@
         "algorithm": "ed25519-minisign",
         "mode": "local-offline"
       },
-      "timestamp": "2026-03-14T04:21:33.071892+00:00"
+      "timestamp": "2026-03-14T19:07:28.524256+00:00"
     }
   },
   "signer": {
@@ -25,11 +25,11 @@
     "algorithm": "ed25519-minisign",
     "mode": "local-offline"
   },
-  "issued_at": "2026-03-14T04:21:33.071892+00:00",
+  "issued_at": "2026-03-14T19:07:28.524256+00:00",
   "signature": {
     "alg": "ed25519-minisign",
-    "keyid": "bae0bb93740dc364",
-    "value": "untrusted comment: signature from omg local signing key\n7YMg7F2/gShNLF0yAmYxGrxLcglr/xYiENL0V2BuDPVGNgdY75WO0HHZqEWXJ5Ut8k5gzqiWRLtIHJX7DBApCA==\ntrusted comment: type=omg-slsa-v1 keyid=bae0bb93740dc364 issued_at=2026-03-14T04:21:33.072001+00:00 artifact=bundle/.agents/skills/omg/api-twin/SKILL.md sha256=482db7bf01f80d8695f71f3bdbae8e9a179cf05355e736f90c40c1a3c9136fef\njTKrcJuiQxYHWtK3O6gAvFnUGlxvCPZNZW6fcXKMf+nk4ZIOqwoMgiD/vR9FSHqRNDDcS7T2t3dXNvMUuJldCg==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=bae0bb93740dc364 issued_at=2026-03-14T04:21:33.072001+00:00 artifact=bundle/.agents/skills/omg/api-twin/SKILL.md sha256=482db7bf01f80d8695f71f3bdbae8e9a179cf05355e736f90c40c1a3c9136fef"
+    "keyid": "af48f28acf1b30af",
+    "value": "untrusted comment: signature from omg local signing key\nm+0m0qqBjt7HS4YMM/xAEiF3ovuBvU+GbyVGJeNDGSRRxvIxVMF5ufguIu/tAwZOwoUorRuh8jEl9A1JK1MFAA==\ntrusted comment: type=omg-slsa-v1 keyid=af48f28acf1b30af issued_at=2026-03-14T19:07:28.524376+00:00 artifact=bundle/.agents/skills/omg/api-twin/SKILL.md sha256=482db7bf01f80d8695f71f3bdbae8e9a179cf05355e736f90c40c1a3c9136fef\nJ2gLbKz3qyPJYK5RibVGPLDJvUsekJNhhgM435tumRLWGD5NFwrZyzSE3I8Q2cuxqDjSXdyOC6xCrKCYAXvLCQ==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=af48f28acf1b30af issued_at=2026-03-14T19:07:28.524376+00:00 artifact=bundle/.agents/skills/omg/api-twin/SKILL.md sha256=482db7bf01f80d8695f71f3bdbae8e9a179cf05355e736f90c40c1a3c9136fef"
   }
 }

package/dist/enterprise/attestations/bundle/.agents/skills/omg/api-twin/openai.yaml.minisig

@@ -1,4 +1,4 @@
 untrusted comment: signature from omg local signing key
-84w9bxtae4yM1C5r8FLs5DceBQT01D4n393eW506lWFcxF+Z5lO2hlBnyXSzqzb/iQ4ZO3ywzr7tv3UK4F91Aw==
-trusted comment: type=omg-slsa-v1 keyid=1bc3e069e775d352 issued_at=2026-03-14T04:21:33.072961+00:00 artifact=bundle/.agents/skills/omg/api-twin/openai.yaml sha256=a6caee113518bda5e2a470ca7d166d18969392bde1470ef2a47f8ead2c0e33ab
-ObGu5pZHqwLklbSjzS3hU7jVPZ3Ccn0u49/u/81egX6ATSfKOjBhNuHHp1+elniETSzebcCqq8tNy3L0lo+fAw==
+I6GTrSWVLFnlqufeIwz3mkSJy8DjdmvKzfKxzj0a7J+s/lbmKTXbKlX3e8PLrKYrz4mjTaIqxgTkIOIFFdmHDQ==
+trusted comment: type=omg-slsa-v1 keyid=557da40dae9a638a issued_at=2026-03-14T19:07:28.525032+00:00 artifact=bundle/.agents/skills/omg/api-twin/openai.yaml sha256=a6caee113518bda5e2a470ca7d166d18969392bde1470ef2a47f8ead2c0e33ab
+yUR/GhfD4xcGkSY+8OCg53vE2SXBS/0rcCCNeynVBBLvl8KYFzRvV6eFD7DGWJR29DtN31rKlfsHr4/37B0cCw==

package/dist/enterprise/attestations/bundle/.agents/skills/omg/api-twin/openai.yaml.statement.json

@@ -17,7 +17,7 @@
         "algorithm": "ed25519-minisign",
         "mode": "local-offline"
       },
-      "timestamp": "2026-03-14T04:21:33.072805+00:00"
+      "timestamp": "2026-03-14T19:07:28.524913+00:00"
     }
   },
   "signer": {
@@ -25,11 +25,11 @@
     "algorithm": "ed25519-minisign",
     "mode": "local-offline"
   },
-  "issued_at": "2026-03-14T04:21:33.072805+00:00",
+  "issued_at": "2026-03-14T19:07:28.524913+00:00",
   "signature": {
     "alg": "ed25519-minisign",
-    "keyid": "1bc3e069e775d352",
-    "value": "untrusted comment: signature from omg local signing key\n84w9bxtae4yM1C5r8FLs5DceBQT01D4n393eW506lWFcxF+Z5lO2hlBnyXSzqzb/iQ4ZO3ywzr7tv3UK4F91Aw==\ntrusted comment: type=omg-slsa-v1 keyid=1bc3e069e775d352 issued_at=2026-03-14T04:21:33.072961+00:00 artifact=bundle/.agents/skills/omg/api-twin/openai.yaml sha256=a6caee113518bda5e2a470ca7d166d18969392bde1470ef2a47f8ead2c0e33ab\nObGu5pZHqwLklbSjzS3hU7jVPZ3Ccn0u49/u/81egX6ATSfKOjBhNuHHp1+elniETSzebcCqq8tNy3L0lo+fAw==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=1bc3e069e775d352 issued_at=2026-03-14T04:21:33.072961+00:00 artifact=bundle/.agents/skills/omg/api-twin/openai.yaml sha256=a6caee113518bda5e2a470ca7d166d18969392bde1470ef2a47f8ead2c0e33ab"
+    "keyid": "557da40dae9a638a",
+    "value": "untrusted comment: signature from omg local signing key\nI6GTrSWVLFnlqufeIwz3mkSJy8DjdmvKzfKxzj0a7J+s/lbmKTXbKlX3e8PLrKYrz4mjTaIqxgTkIOIFFdmHDQ==\ntrusted comment: type=omg-slsa-v1 keyid=557da40dae9a638a issued_at=2026-03-14T19:07:28.525032+00:00 artifact=bundle/.agents/skills/omg/api-twin/openai.yaml sha256=a6caee113518bda5e2a470ca7d166d18969392bde1470ef2a47f8ead2c0e33ab\nyUR/GhfD4xcGkSY+8OCg53vE2SXBS/0rcCCNeynVBBLvl8KYFzRvV6eFD7DGWJR29DtN31rKlfsHr4/37B0cCw==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=557da40dae9a638a issued_at=2026-03-14T19:07:28.525032+00:00 artifact=bundle/.agents/skills/omg/api-twin/openai.yaml sha256=a6caee113518bda5e2a470ca7d166d18969392bde1470ef2a47f8ead2c0e33ab"
   }
 }

package/dist/enterprise/attestations/bundle/.agents/skills/omg/ast-pack/SKILL.md.minisig

@@ -1,4 +1,4 @@
 untrusted comment: signature from omg local signing key
-wnE7vtEgOgDkJ/wjMOVtMXY4vgk0E1/6VXJZynKXvHU0+wlvfgiUi8v+7oFQ3m3DrgcX58vQnRCSr6oCmyH0AA==
-trusted comment: type=omg-slsa-v1 keyid=e47cdd29886982d7 issued_at=2026-03-14T04:21:33.073652+00:00 artifact=bundle/.agents/skills/omg/ast-pack/SKILL.md sha256=ba49d5c0230ca97c9511ac3447b8638d7fb02ef6665f30b99bc86ee5dc975a00
-+JFvmQpbZsGAv6yMkBwkvvOBFcTB8SuGfPKbU350/t1FilquR+k2kTbYcONr2kHRFSVYdZSBDJ4eGQTosv+5AQ==
+Rhmi8KFs8r+1uDeMwdSeRlv4W5rnJf4LoDUCTrxr6nh5pwwLf3pIdMsfHoe4t36+CcoouPyQjbhzRpjlXqu9Dw==
+trusted comment: type=omg-slsa-v1 keyid=5c415f9c1d89f69b issued_at=2026-03-14T19:07:28.580380+00:00 artifact=bundle/.agents/skills/omg/ast-pack/SKILL.md sha256=ba49d5c0230ca97c9511ac3447b8638d7fb02ef6665f30b99bc86ee5dc975a00
+mMamo3CegGXylwkTgKOV2em8wUGDGvRseLkyeEML7GduR9il6pyc7Ki6T142YVg9z85P/0a245lmvrEvrDJzBw==

package/dist/enterprise/attestations/bundle/.agents/skills/omg/ast-pack/SKILL.md.statement.json

@@ -17,7 +17,7 @@
         "algorithm": "ed25519-minisign",
         "mode": "local-offline"
       },
-      "timestamp": "2026-03-14T04:21:33.073527+00:00"
+      "timestamp": "2026-03-14T19:07:28.550189+00:00"
     }
   },
   "signer": {
@@ -25,11 +25,11 @@
     "algorithm": "ed25519-minisign",
     "mode": "local-offline"
   },
-  "issued_at": "2026-03-14T04:21:33.073527+00:00",
+  "issued_at": "2026-03-14T19:07:28.550189+00:00",
   "signature": {
     "alg": "ed25519-minisign",
-    "keyid": "e47cdd29886982d7",
-    "value": "untrusted comment: signature from omg local signing key\nwnE7vtEgOgDkJ/wjMOVtMXY4vgk0E1/6VXJZynKXvHU0+wlvfgiUi8v+7oFQ3m3DrgcX58vQnRCSr6oCmyH0AA==\ntrusted comment: type=omg-slsa-v1 keyid=e47cdd29886982d7 issued_at=2026-03-14T04:21:33.073652+00:00 artifact=bundle/.agents/skills/omg/ast-pack/SKILL.md sha256=ba49d5c0230ca97c9511ac3447b8638d7fb02ef6665f30b99bc86ee5dc975a00\n+JFvmQpbZsGAv6yMkBwkvvOBFcTB8SuGfPKbU350/t1FilquR+k2kTbYcONr2kHRFSVYdZSBDJ4eGQTosv+5AQ==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=e47cdd29886982d7 issued_at=2026-03-14T04:21:33.073652+00:00 artifact=bundle/.agents/skills/omg/ast-pack/SKILL.md sha256=ba49d5c0230ca97c9511ac3447b8638d7fb02ef6665f30b99bc86ee5dc975a00"
+    "keyid": "5c415f9c1d89f69b",
+    "value": "untrusted comment: signature from omg local signing key\nRhmi8KFs8r+1uDeMwdSeRlv4W5rnJf4LoDUCTrxr6nh5pwwLf3pIdMsfHoe4t36+CcoouPyQjbhzRpjlXqu9Dw==\ntrusted comment: type=omg-slsa-v1 keyid=5c415f9c1d89f69b issued_at=2026-03-14T19:07:28.580380+00:00 artifact=bundle/.agents/skills/omg/ast-pack/SKILL.md sha256=ba49d5c0230ca97c9511ac3447b8638d7fb02ef6665f30b99bc86ee5dc975a00\nmMamo3CegGXylwkTgKOV2em8wUGDGvRseLkyeEML7GduR9il6pyc7Ki6T142YVg9z85P/0a245lmvrEvrDJzBw==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=5c415f9c1d89f69b issued_at=2026-03-14T19:07:28.580380+00:00 artifact=bundle/.agents/skills/omg/ast-pack/SKILL.md sha256=ba49d5c0230ca97c9511ac3447b8638d7fb02ef6665f30b99bc86ee5dc975a00"
   }
 }

package/dist/enterprise/attestations/bundle/.agents/skills/omg/ast-pack/openai.yaml.minisig

@@ -1,4 +1,4 @@
 untrusted comment: signature from omg local signing key
-YCV355HiKrESHeAduZJ5hkWg5vbnIRqtqRyKLNp31BxJpmbEuxkI03uHQIUYJ7aUVzicPqO25/BR/YByKItMCA==
-trusted comment: type=omg-slsa-v1 keyid=71fdbb40f84f8e8d issued_at=2026-03-14T04:21:33.074272+00:00 artifact=bundle/.agents/skills/omg/ast-pack/openai.yaml sha256=f5e644f1a337ef6fb2470ad4a7ccc732495c4513062362f4c605cf4f8a609541
-Yl5hPOcTJ01HExMdWhKiVmATmMLzZ5yEQSeDsw6QR+4DbVknC3PMDPzycpM1dEaczhQKdP1IZQ8hmWkpwtNiCQ==
+Z/MMPDChYvZ3SGQw3FbJMnDzGJFFpgZWe0lUo8vMxQf5IWeI86k05/Vlb6lm73BcVUpgnjgvQhhu9MxU8oISCA==
+trusted comment: type=omg-slsa-v1 keyid=e053e7a8afd7180c issued_at=2026-03-14T19:07:28.615845+00:00 artifact=bundle/.agents/skills/omg/ast-pack/openai.yaml sha256=f5e644f1a337ef6fb2470ad4a7ccc732495c4513062362f4c605cf4f8a609541
+vyRseH9goHgFf3Imkls9bi3qW9DNS8F1YPNEZbO/BQqY21+vvnEd+mLaoc1D0L63P4pd2prKKIswSrgNSRw6Bw==

package/dist/enterprise/attestations/bundle/.agents/skills/omg/ast-pack/openai.yaml.statement.json

@@ -17,7 +17,7 @@
         "algorithm": "ed25519-minisign",
         "mode": "local-offline"
       },
-      "timestamp": "2026-03-14T04:21:33.074160+00:00"
+      "timestamp": "2026-03-14T19:07:28.615649+00:00"
     }
   },
   "signer": {
@@ -25,11 +25,11 @@
     "algorithm": "ed25519-minisign",
     "mode": "local-offline"
   },
-  "issued_at": "2026-03-14T04:21:33.074160+00:00",
+  "issued_at": "2026-03-14T19:07:28.615649+00:00",
   "signature": {
     "alg": "ed25519-minisign",
-    "keyid": "71fdbb40f84f8e8d",
-    "value": "untrusted comment: signature from omg local signing key\nYCV355HiKrESHeAduZJ5hkWg5vbnIRqtqRyKLNp31BxJpmbEuxkI03uHQIUYJ7aUVzicPqO25/BR/YByKItMCA==\ntrusted comment: type=omg-slsa-v1 keyid=71fdbb40f84f8e8d issued_at=2026-03-14T04:21:33.074272+00:00 artifact=bundle/.agents/skills/omg/ast-pack/openai.yaml sha256=f5e644f1a337ef6fb2470ad4a7ccc732495c4513062362f4c605cf4f8a609541\nYl5hPOcTJ01HExMdWhKiVmATmMLzZ5yEQSeDsw6QR+4DbVknC3PMDPzycpM1dEaczhQKdP1IZQ8hmWkpwtNiCQ==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=71fdbb40f84f8e8d issued_at=2026-03-14T04:21:33.074272+00:00 artifact=bundle/.agents/skills/omg/ast-pack/openai.yaml sha256=f5e644f1a337ef6fb2470ad4a7ccc732495c4513062362f4c605cf4f8a609541"
+    "keyid": "e053e7a8afd7180c",
+    "value": "untrusted comment: signature from omg local signing key\nZ/MMPDChYvZ3SGQw3FbJMnDzGJFFpgZWe0lUo8vMxQf5IWeI86k05/Vlb6lm73BcVUpgnjgvQhhu9MxU8oISCA==\ntrusted comment: type=omg-slsa-v1 keyid=e053e7a8afd7180c issued_at=2026-03-14T19:07:28.615845+00:00 artifact=bundle/.agents/skills/omg/ast-pack/openai.yaml sha256=f5e644f1a337ef6fb2470ad4a7ccc732495c4513062362f4c605cf4f8a609541\nvyRseH9goHgFf3Imkls9bi3qW9DNS8F1YPNEZbO/BQqY21+vvnEd+mLaoc1D0L63P4pd2prKKIswSrgNSRw6Bw==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=e053e7a8afd7180c issued_at=2026-03-14T19:07:28.615845+00:00 artifact=bundle/.agents/skills/omg/ast-pack/openai.yaml sha256=f5e644f1a337ef6fb2470ad4a7ccc732495c4513062362f4c605cf4f8a609541"
   }
 }

package/dist/enterprise/attestations/bundle/.agents/skills/omg/claim-judge/SKILL.md.minisig

@@ -1,4 +1,4 @@
 untrusted comment: signature from omg local signing key
-5QZNJSl65isA2eDRmYxLXSG1XCln6sbBZlYMDHqly0TeHUnuXwLLqV22VdJ5LSxZe33SC+56DgNZhl9LQ+eOAQ==
-trusted comment: type=omg-slsa-v1 keyid=6590a13b79c44ce9 issued_at=2026-03-14T04:21:33.074837+00:00 artifact=bundle/.agents/skills/omg/claim-judge/SKILL.md sha256=12ad7141a9441a3b616b4516d58a5faf6ebb28ed0cece35f5bfda109f0aa0bb0
-H8SJO40EYcCye+G259cQQahr6IEowQ1sYtygqRYHd5As58qHLzxjIBI7kw/n4ugxQbhRxp0Z6AMz1sC5sq+cAA==
+xsY0Pci8UEPReFGaD4WhazlXFEKYas4p96LzwVsZ9ELq7lgIH3sWoGq26Yq9dK0tp5IG921EjOX0gFmrBmfwAQ==
+trusted comment: type=omg-slsa-v1 keyid=0b462d71eca678e2 issued_at=2026-03-14T19:07:28.616550+00:00 artifact=bundle/.agents/skills/omg/claim-judge/SKILL.md sha256=12ad7141a9441a3b616b4516d58a5faf6ebb28ed0cece35f5bfda109f0aa0bb0
+w5LUMhgTM8BjeaJD/8GqyO++Q/OrDL/c+YKdiIkZqwfDwf5OEnd5/+W0HvVHw3C/XTHBSKN6m38nRu4iITylAQ==

package/dist/enterprise/attestations/bundle/.agents/skills/omg/claim-judge/SKILL.md.statement.json

@@ -17,7 +17,7 @@
         "algorithm": "ed25519-minisign",
         "mode": "local-offline"
       },
-      "timestamp": "2026-03-14T04:21:33.074728+00:00"
+      "timestamp": "2026-03-14T19:07:28.616424+00:00"
     }
   },
   "signer": {
@@ -25,11 +25,11 @@
     "algorithm": "ed25519-minisign",
     "mode": "local-offline"
   },
-  "issued_at": "2026-03-14T04:21:33.074728+00:00",
+  "issued_at": "2026-03-14T19:07:28.616424+00:00",
   "signature": {
     "alg": "ed25519-minisign",
-    "keyid": "6590a13b79c44ce9",
-    "value": "untrusted comment: signature from omg local signing key\n5QZNJSl65isA2eDRmYxLXSG1XCln6sbBZlYMDHqly0TeHUnuXwLLqV22VdJ5LSxZe33SC+56DgNZhl9LQ+eOAQ==\ntrusted comment: type=omg-slsa-v1 keyid=6590a13b79c44ce9 issued_at=2026-03-14T04:21:33.074837+00:00 artifact=bundle/.agents/skills/omg/claim-judge/SKILL.md sha256=12ad7141a9441a3b616b4516d58a5faf6ebb28ed0cece35f5bfda109f0aa0bb0\nH8SJO40EYcCye+G259cQQahr6IEowQ1sYtygqRYHd5As58qHLzxjIBI7kw/n4ugxQbhRxp0Z6AMz1sC5sq+cAA==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=6590a13b79c44ce9 issued_at=2026-03-14T04:21:33.074837+00:00 artifact=bundle/.agents/skills/omg/claim-judge/SKILL.md sha256=12ad7141a9441a3b616b4516d58a5faf6ebb28ed0cece35f5bfda109f0aa0bb0"
+    "keyid": "0b462d71eca678e2",
+    "value": "untrusted comment: signature from omg local signing key\nxsY0Pci8UEPReFGaD4WhazlXFEKYas4p96LzwVsZ9ELq7lgIH3sWoGq26Yq9dK0tp5IG921EjOX0gFmrBmfwAQ==\ntrusted comment: type=omg-slsa-v1 keyid=0b462d71eca678e2 issued_at=2026-03-14T19:07:28.616550+00:00 artifact=bundle/.agents/skills/omg/claim-judge/SKILL.md sha256=12ad7141a9441a3b616b4516d58a5faf6ebb28ed0cece35f5bfda109f0aa0bb0\nw5LUMhgTM8BjeaJD/8GqyO++Q/OrDL/c+YKdiIkZqwfDwf5OEnd5/+W0HvVHw3C/XTHBSKN6m38nRu4iITylAQ==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=0b462d71eca678e2 issued_at=2026-03-14T19:07:28.616550+00:00 artifact=bundle/.agents/skills/omg/claim-judge/SKILL.md sha256=12ad7141a9441a3b616b4516d58a5faf6ebb28ed0cece35f5bfda109f0aa0bb0"
   }
 }

package/dist/enterprise/attestations/bundle/.agents/skills/omg/claim-judge/openai.yaml.minisig

@@ -1,4 +1,4 @@
 untrusted comment: signature from omg local signing key
-gxoAyyHB3h3GxEl9wX6p7OfvvETvvpD1iSMcywAPhfPC88c8vIp2+FtcydGZp1pE6BljhE1eup3zUfgGRmg6Ag==
-trusted comment: type=omg-slsa-v1 keyid=8b49410cae23b903 issued_at=2026-03-14T04:21:33.075383+00:00 artifact=bundle/.agents/skills/omg/claim-judge/openai.yaml sha256=39285cf57979ddfa917972719d2dfa32c2333f4f7a712a970a5b78c759e04295
-3aEyXbaJFbmu0rIIlrwZHSABeKGoBRyvPflV2gcjBAMft+P9IZDIE8DKBotHNAzJfae9JeElFC95AyOTT8APCw==
+Rjwm+Zq2PCUh0CLGyAw89I9lb8BJBdrccwcOF0LmLyNTnmng9ST9T5bFJFK2DimSyqXDuKuInTEWfhhIHhyWDA==
+trusted comment: type=omg-slsa-v1 keyid=10b41dc40aac130b issued_at=2026-03-14T19:07:28.620973+00:00 artifact=bundle/.agents/skills/omg/claim-judge/openai.yaml sha256=39285cf57979ddfa917972719d2dfa32c2333f4f7a712a970a5b78c759e04295
+dBv2QkHuLpZyCLzuUKT01Qo1ar2TBUkpB1u1IYtZROGCc/2q6yHj1vsV0XRNhU+IW7W8M3IEufHX85AKu3LjBw==

package/dist/enterprise/attestations/bundle/.agents/skills/omg/claim-judge/openai.yaml.statement.json

@@ -17,7 +17,7 @@
         "algorithm": "ed25519-minisign",
         "mode": "local-offline"
       },
-      "timestamp": "2026-03-14T04:21:33.075273+00:00"
+      "timestamp": "2026-03-14T19:07:28.619055+00:00"
     }
   },
   "signer": {
@@ -25,11 +25,11 @@
     "algorithm": "ed25519-minisign",
     "mode": "local-offline"
   },
-  "issued_at": "2026-03-14T04:21:33.075273+00:00",
+  "issued_at": "2026-03-14T19:07:28.619055+00:00",
   "signature": {
     "alg": "ed25519-minisign",
-    "keyid": "8b49410cae23b903",
-    "value": "untrusted comment: signature from omg local signing key\ngxoAyyHB3h3GxEl9wX6p7OfvvETvvpD1iSMcywAPhfPC88c8vIp2+FtcydGZp1pE6BljhE1eup3zUfgGRmg6Ag==\ntrusted comment: type=omg-slsa-v1 keyid=8b49410cae23b903 issued_at=2026-03-14T04:21:33.075383+00:00 artifact=bundle/.agents/skills/omg/claim-judge/openai.yaml sha256=39285cf57979ddfa917972719d2dfa32c2333f4f7a712a970a5b78c759e04295\n3aEyXbaJFbmu0rIIlrwZHSABeKGoBRyvPflV2gcjBAMft+P9IZDIE8DKBotHNAzJfae9JeElFC95AyOTT8APCw==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=8b49410cae23b903 issued_at=2026-03-14T04:21:33.075383+00:00 artifact=bundle/.agents/skills/omg/claim-judge/openai.yaml sha256=39285cf57979ddfa917972719d2dfa32c2333f4f7a712a970a5b78c759e04295"
+    "keyid": "10b41dc40aac130b",
+    "value": "untrusted comment: signature from omg local signing key\nRjwm+Zq2PCUh0CLGyAw89I9lb8BJBdrccwcOF0LmLyNTnmng9ST9T5bFJFK2DimSyqXDuKuInTEWfhhIHhyWDA==\ntrusted comment: type=omg-slsa-v1 keyid=10b41dc40aac130b issued_at=2026-03-14T19:07:28.620973+00:00 artifact=bundle/.agents/skills/omg/claim-judge/openai.yaml sha256=39285cf57979ddfa917972719d2dfa32c2333f4f7a712a970a5b78c759e04295\ndBv2QkHuLpZyCLzuUKT01Qo1ar2TBUkpB1u1IYtZROGCc/2q6yHj1vsV0XRNhU+IW7W8M3IEufHX85AKu3LjBw==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=10b41dc40aac130b issued_at=2026-03-14T19:07:28.620973+00:00 artifact=bundle/.agents/skills/omg/claim-judge/openai.yaml sha256=39285cf57979ddfa917972719d2dfa32c2333f4f7a712a970a5b78c759e04295"
   }
 }

package/dist/enterprise/attestations/bundle/.agents/skills/omg/codex-mcp.toml.minisig

@@ -1,4 +1,4 @@
 untrusted comment: signature from omg local signing key
-UDcUo9uKlRSzov27lxHxVJGM3AYY2axRZMK5YufrgjEre/u2YC1ypqKv1Nd9Pdo1J5bEibAaox7BHQUc4yROCg==
-trusted comment: type=omg-slsa-v1 keyid=23d42e65ebd2c652 issued_at=2026-03-14T04:21:33.075918+00:00 artifact=bundle/.agents/skills/omg/codex-mcp.toml sha256=a56de208a369a2b318d2e66e150eef4cba1fac1ecf32bda6db1a1e4b65db7311
-nUBP+odW71CDGGm1J227fi4byTFtwjfuXgkiw/Vofsfn47GD5l2Wv96LIhTgY3vGRHlrnXGsdjgOE60eCZk+BA==
+1U2gcuO71/l1mMMB8MDlPlAbCXP1XukIIijukNwwIpPekuWYu1IEDccSXGX7GSKkdsd6ERYCRixru5NFsXf2Aw==
+trusted comment: type=omg-slsa-v1 keyid=c20231ff1b784407 issued_at=2026-03-14T19:07:28.621927+00:00 artifact=bundle/.agents/skills/omg/codex-mcp.toml sha256=a56de208a369a2b318d2e66e150eef4cba1fac1ecf32bda6db1a1e4b65db7311
+HaUJQgsl26c3havt/U3hRRayNFpyvCDfNhg+/7fSeZymRmQKPJ2JjddnTSRb1Vi7Jyj5lbY0Dn0OTIy54I6EAw==