@trac3er/oh-my-god 2.2.3 → 2.2.4

package/artifacts/release/dist/public/attestations/bundle/plugins/advanced/plugin.json.statement.json

@@ -1,35 +0,0 @@
-{
-  "_type": "https://in-toto.io/Statement/v1",
-  "predicateType": "https://slsa.dev/provenance/v1",
-  "subject": [
-    {
-      "name": "bundle/plugins/advanced/plugin.json",
-      "digest": {
-        "sha256": "dd9a3f3976a212813550b36519aab554055d413ea671449899fcc1ebb96aaa50"
-      }
-    }
-  ],
-  "predicate": {
-    "buildType": "https://omg.security/offline-attestation/v1",
-    "metadata": {
-      "signer": {
-        "keyid": "1f5fe64ec2f8c901",
-        "algorithm": "ed25519-minisign",
-        "mode": "local-offline"
-      },
-      "timestamp": "2026-03-14T19:07:30.658368+00:00"
-    }
-  },
-  "signer": {
-    "keyid": "1f5fe64ec2f8c901",
-    "algorithm": "ed25519-minisign",
-    "mode": "local-offline"
-  },
-  "issued_at": "2026-03-14T19:07:30.658368+00:00",
-  "signature": {
-    "alg": "ed25519-minisign",
-    "keyid": "4794635c3234b312",
-    "value": "untrusted comment: signature from omg local signing key\nRWRoSHnNuRdsI5bzgfqEMPHhbHlWcXe1RXyQ9g9YDHxwz+FFkJGGVvU7RztRjwJdpeKehHQNk0KflcXBixd7Cw==\ntrusted comment: type=omg-slsa-v1 keyid=4794635c3234b312 issued_at=2026-03-14T19:07:30.658480+00:00 artifact=bundle/plugins/advanced/plugin.json sha256=dd9a3f3976a212813550b36519aab554055d413ea671449899fcc1ebb96aaa50\n6Y8oBh+f0BoxgynAWWDhPOCfIX7KYgq8kXulMRKxsGYRGZhxLp2ESq8hXpnEeSAe8VrYmRKf2EOjreGJcBWmDw==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=4794635c3234b312 issued_at=2026-03-14T19:07:30.658480+00:00 artifact=bundle/plugins/advanced/plugin.json sha256=dd9a3f3976a212813550b36519aab554055d413ea671449899fcc1ebb96aaa50"
-  }
-}

package/artifacts/release/dist/public/attestations/bundle/registry/bundles/algorithms.yaml.minisig

@@ -1,4 +0,0 @@
-untrusted comment: signature from omg local signing key
-PsqQakT6Vu8HJ6BttajRYmFG3+PFkB5qRp+RCoAn6YZo/DGA8m2Vpfw1YVJZR0Jk7d3O+vuQpZwyTouPko6QDA==
-trusted comment: type=omg-slsa-v1 keyid=b582ca38ffe59367 issued_at=2026-03-14T19:07:30.659100+00:00 artifact=bundle/registry/bundles/algorithms.yaml sha256=af4d340c827f32944b5d159db51324387e4d6f850e0f49bf70481772caebe445
-ydoctu5KnxHX37Qw4Hph8xgYc2nk0mO5GOi1IgE4SR41NG5BEOjzCoUtjydEzt1YPCHZ9opvYlnUEtLsHcN0CA==

package/artifacts/release/dist/public/attestations/bundle/registry/bundles/algorithms.yaml.statement.json

@@ -1,35 +0,0 @@
-{
-  "_type": "https://in-toto.io/Statement/v1",
-  "predicateType": "https://slsa.dev/provenance/v1",
-  "subject": [
-    {
-      "name": "bundle/registry/bundles/algorithms.yaml",
-      "digest": {
-        "sha256": "af4d340c827f32944b5d159db51324387e4d6f850e0f49bf70481772caebe445"
-      }
-    }
-  ],
-  "predicate": {
-    "buildType": "https://omg.security/offline-attestation/v1",
-    "metadata": {
-      "signer": {
-        "keyid": "1f5fe64ec2f8c901",
-        "algorithm": "ed25519-minisign",
-        "mode": "local-offline"
-      },
-      "timestamp": "2026-03-14T19:07:30.658989+00:00"
-    }
-  },
-  "signer": {
-    "keyid": "1f5fe64ec2f8c901",
-    "algorithm": "ed25519-minisign",
-    "mode": "local-offline"
-  },
-  "issued_at": "2026-03-14T19:07:30.658989+00:00",
-  "signature": {
-    "alg": "ed25519-minisign",
-    "keyid": "b582ca38ffe59367",
-    "value": "untrusted comment: signature from omg local signing key\nPsqQakT6Vu8HJ6BttajRYmFG3+PFkB5qRp+RCoAn6YZo/DGA8m2Vpfw1YVJZR0Jk7d3O+vuQpZwyTouPko6QDA==\ntrusted comment: type=omg-slsa-v1 keyid=b582ca38ffe59367 issued_at=2026-03-14T19:07:30.659100+00:00 artifact=bundle/registry/bundles/algorithms.yaml sha256=af4d340c827f32944b5d159db51324387e4d6f850e0f49bf70481772caebe445\nydoctu5KnxHX37Qw4Hph8xgYc2nk0mO5GOi1IgE4SR41NG5BEOjzCoUtjydEzt1YPCHZ9opvYlnUEtLsHcN0CA==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=b582ca38ffe59367 issued_at=2026-03-14T19:07:30.659100+00:00 artifact=bundle/registry/bundles/algorithms.yaml sha256=af4d340c827f32944b5d159db51324387e4d6f850e0f49bf70481772caebe445"
-  }
-}

package/artifacts/release/dist/public/attestations/bundle/registry/bundles/api-twin.yaml.minisig

@@ -1,4 +0,0 @@
-untrusted comment: signature from omg local signing key
-vk65vb5i7D3qzye/ALQMpSC1f66hI8RGckgmGuWNx4wdIH6t+1YRq7bwj+qFcZWvlOyeosOGfa4/yL7oneOeAQ==
-trusted comment: type=omg-slsa-v1 keyid=6992afa143dc0ad4 issued_at=2026-03-14T19:07:30.663025+00:00 artifact=bundle/registry/bundles/api-twin.yaml sha256=114160686f8f94f9e31a902636ee875d9ffe027e27e8d52a8c886dd27656b59e
-PYQ9p2msKi+FWUxeq/v4lu0vzl7hVCiA1ga8SrATMrFzN71iO6crgqVO1cglJL6n2MOxymaLGQ97xZa7sMF0Aw==

package/artifacts/release/dist/public/attestations/bundle/registry/bundles/api-twin.yaml.statement.json

@@ -1,35 +0,0 @@
-{
-  "_type": "https://in-toto.io/Statement/v1",
-  "predicateType": "https://slsa.dev/provenance/v1",
-  "subject": [
-    {
-      "name": "bundle/registry/bundles/api-twin.yaml",
-      "digest": {
-        "sha256": "114160686f8f94f9e31a902636ee875d9ffe027e27e8d52a8c886dd27656b59e"
-      }
-    }
-  ],
-  "predicate": {
-    "buildType": "https://omg.security/offline-attestation/v1",
-    "metadata": {
-      "signer": {
-        "keyid": "1f5fe64ec2f8c901",
-        "algorithm": "ed25519-minisign",
-        "mode": "local-offline"
-      },
-      "timestamp": "2026-03-14T19:07:30.659587+00:00"
-    }
-  },
-  "signer": {
-    "keyid": "1f5fe64ec2f8c901",
-    "algorithm": "ed25519-minisign",
-    "mode": "local-offline"
-  },
-  "issued_at": "2026-03-14T19:07:30.659587+00:00",
-  "signature": {
-    "alg": "ed25519-minisign",
-    "keyid": "6992afa143dc0ad4",
-    "value": "untrusted comment: signature from omg local signing key\nvk65vb5i7D3qzye/ALQMpSC1f66hI8RGckgmGuWNx4wdIH6t+1YRq7bwj+qFcZWvlOyeosOGfa4/yL7oneOeAQ==\ntrusted comment: type=omg-slsa-v1 keyid=6992afa143dc0ad4 issued_at=2026-03-14T19:07:30.663025+00:00 artifact=bundle/registry/bundles/api-twin.yaml sha256=114160686f8f94f9e31a902636ee875d9ffe027e27e8d52a8c886dd27656b59e\nPYQ9p2msKi+FWUxeq/v4lu0vzl7hVCiA1ga8SrATMrFzN71iO6crgqVO1cglJL6n2MOxymaLGQ97xZa7sMF0Aw==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=6992afa143dc0ad4 issued_at=2026-03-14T19:07:30.663025+00:00 artifact=bundle/registry/bundles/api-twin.yaml sha256=114160686f8f94f9e31a902636ee875d9ffe027e27e8d52a8c886dd27656b59e"
-  }
-}

package/artifacts/release/dist/public/attestations/bundle/registry/bundles/ast-pack.yaml.minisig

@@ -1,4 +0,0 @@
-untrusted comment: signature from omg local signing key
-MSInhlxgxv1WEXFZITqcDxUtFpq87ZLQaMZaCl//IqEGlzQrRzUFIxBmu6ncRJSikO7jZ1hZIYc/t94KV7ewAg==
-trusted comment: type=omg-slsa-v1 keyid=f0444e8975c9ca86 issued_at=2026-03-14T19:07:30.665713+00:00 artifact=bundle/registry/bundles/ast-pack.yaml sha256=dbd738082cdf6d2c31101bdc336463c841389352eacfabcd49f6f2fce40053b3
-+s4SNm81tP7/4xtEJv1QIqnDsqzhK3oujaJgZBI6fawcYW1Lsy2dDSbZd7+Tv3POY/71nPYTPvRcQ9Q8Z9GoCA==

package/artifacts/release/dist/public/attestations/bundle/registry/bundles/ast-pack.yaml.statement.json

@@ -1,35 +0,0 @@
-{
-  "_type": "https://in-toto.io/Statement/v1",
-  "predicateType": "https://slsa.dev/provenance/v1",
-  "subject": [
-    {
-      "name": "bundle/registry/bundles/ast-pack.yaml",
-      "digest": {
-        "sha256": "dbd738082cdf6d2c31101bdc336463c841389352eacfabcd49f6f2fce40053b3"
-      }
-    }
-  ],
-  "predicate": {
-    "buildType": "https://omg.security/offline-attestation/v1",
-    "metadata": {
-      "signer": {
-        "keyid": "1f5fe64ec2f8c901",
-        "algorithm": "ed25519-minisign",
-        "mode": "local-offline"
-      },
-      "timestamp": "2026-03-14T19:07:30.665326+00:00"
-    }
-  },
-  "signer": {
-    "keyid": "1f5fe64ec2f8c901",
-    "algorithm": "ed25519-minisign",
-    "mode": "local-offline"
-  },
-  "issued_at": "2026-03-14T19:07:30.665326+00:00",
-  "signature": {
-    "alg": "ed25519-minisign",
-    "keyid": "f0444e8975c9ca86",
-    "value": "untrusted comment: signature from omg local signing key\nMSInhlxgxv1WEXFZITqcDxUtFpq87ZLQaMZaCl//IqEGlzQrRzUFIxBmu6ncRJSikO7jZ1hZIYc/t94KV7ewAg==\ntrusted comment: type=omg-slsa-v1 keyid=f0444e8975c9ca86 issued_at=2026-03-14T19:07:30.665713+00:00 artifact=bundle/registry/bundles/ast-pack.yaml sha256=dbd738082cdf6d2c31101bdc336463c841389352eacfabcd49f6f2fce40053b3\n+s4SNm81tP7/4xtEJv1QIqnDsqzhK3oujaJgZBI6fawcYW1Lsy2dDSbZd7+Tv3POY/71nPYTPvRcQ9Q8Z9GoCA==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=f0444e8975c9ca86 issued_at=2026-03-14T19:07:30.665713+00:00 artifact=bundle/registry/bundles/ast-pack.yaml sha256=dbd738082cdf6d2c31101bdc336463c841389352eacfabcd49f6f2fce40053b3"
-  }
-}

package/artifacts/release/dist/public/attestations/bundle/registry/bundles/claim-judge.yaml.minisig

@@ -1,4 +0,0 @@
-untrusted comment: signature from omg local signing key
-4CgFvyZ4/tO1CT4Da8LZYUsNauo5NtT5o4nnEJq8HB8dboqt8k1vPVvbmABWLRFiHVe4gTa7Xgr+6nv/lqXmAA==
-trusted comment: type=omg-slsa-v1 keyid=32d86aacaca9de34 issued_at=2026-03-14T19:07:30.667640+00:00 artifact=bundle/registry/bundles/claim-judge.yaml sha256=3f1c193440661ccdc052d76a50c19b34ee8a4a7433f8833b93755b9ac8c67747
-k2wtQ7VndHhzxsfDgeAVzzqsRrN+S25UXOfgRvogUbxCbEYD2wycS8t//Zqr+0Z31aN9YukMhIwtDP1sgfE2AA==

package/artifacts/release/dist/public/attestations/bundle/registry/bundles/claim-judge.yaml.statement.json

@@ -1,35 +0,0 @@
-{
-  "_type": "https://in-toto.io/Statement/v1",
-  "predicateType": "https://slsa.dev/provenance/v1",
-  "subject": [
-    {
-      "name": "bundle/registry/bundles/claim-judge.yaml",
-      "digest": {
-        "sha256": "3f1c193440661ccdc052d76a50c19b34ee8a4a7433f8833b93755b9ac8c67747"
-      }
-    }
-  ],
-  "predicate": {
-    "buildType": "https://omg.security/offline-attestation/v1",
-    "metadata": {
-      "signer": {
-        "keyid": "1f5fe64ec2f8c901",
-        "algorithm": "ed25519-minisign",
-        "mode": "local-offline"
-      },
-      "timestamp": "2026-03-14T19:07:30.667077+00:00"
-    }
-  },
-  "signer": {
-    "keyid": "1f5fe64ec2f8c901",
-    "algorithm": "ed25519-minisign",
-    "mode": "local-offline"
-  },
-  "issued_at": "2026-03-14T19:07:30.667077+00:00",
-  "signature": {
-    "alg": "ed25519-minisign",
-    "keyid": "32d86aacaca9de34",
-    "value": "untrusted comment: signature from omg local signing key\n4CgFvyZ4/tO1CT4Da8LZYUsNauo5NtT5o4nnEJq8HB8dboqt8k1vPVvbmABWLRFiHVe4gTa7Xgr+6nv/lqXmAA==\ntrusted comment: type=omg-slsa-v1 keyid=32d86aacaca9de34 issued_at=2026-03-14T19:07:30.667640+00:00 artifact=bundle/registry/bundles/claim-judge.yaml sha256=3f1c193440661ccdc052d76a50c19b34ee8a4a7433f8833b93755b9ac8c67747\nk2wtQ7VndHhzxsfDgeAVzzqsRrN+S25UXOfgRvogUbxCbEYD2wycS8t//Zqr+0Z31aN9YukMhIwtDP1sgfE2AA==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=32d86aacaca9de34 issued_at=2026-03-14T19:07:30.667640+00:00 artifact=bundle/registry/bundles/claim-judge.yaml sha256=3f1c193440661ccdc052d76a50c19b34ee8a4a7433f8833b93755b9ac8c67747"
-  }
-}

package/artifacts/release/dist/public/attestations/bundle/registry/bundles/control-plane.yaml.minisig

@@ -1,4 +0,0 @@
-untrusted comment: signature from omg local signing key
-bxoRwTEJkBB4jSXnxzn2tq/hEsa44UxtPbAGWRREsqhL8e6Gr3KnWRQ68v4I5gYQRXa2CYW56jT4nC0t0xwQDg==
-trusted comment: type=omg-slsa-v1 keyid=922a7d2960126efb issued_at=2026-03-14T19:07:30.668459+00:00 artifact=bundle/registry/bundles/control-plane.yaml sha256=e9dd9b69b8d016f0b4c5a1582983ed786c64493baf101319e714691c1b4acd9c
-alVtSit8IVpHVUJOyu8rXmaXjxjJbsP5nRD0PN1Cc6r3AF5dYWtg6kpJJh+Eh17ybbk/fXKxUjtvqMH0UbWJDA==

package/artifacts/release/dist/public/attestations/bundle/registry/bundles/control-plane.yaml.statement.json

@@ -1,35 +0,0 @@
-{
-  "_type": "https://in-toto.io/Statement/v1",
-  "predicateType": "https://slsa.dev/provenance/v1",
-  "subject": [
-    {
-      "name": "bundle/registry/bundles/control-plane.yaml",
-      "digest": {
-        "sha256": "e9dd9b69b8d016f0b4c5a1582983ed786c64493baf101319e714691c1b4acd9c"
-      }
-    }
-  ],
-  "predicate": {
-    "buildType": "https://omg.security/offline-attestation/v1",
-    "metadata": {
-      "signer": {
-        "keyid": "1f5fe64ec2f8c901",
-        "algorithm": "ed25519-minisign",
-        "mode": "local-offline"
-      },
-      "timestamp": "2026-03-14T19:07:30.668327+00:00"
-    }
-  },
-  "signer": {
-    "keyid": "1f5fe64ec2f8c901",
-    "algorithm": "ed25519-minisign",
-    "mode": "local-offline"
-  },
-  "issued_at": "2026-03-14T19:07:30.668327+00:00",
-  "signature": {
-    "alg": "ed25519-minisign",
-    "keyid": "922a7d2960126efb",
-    "value": "untrusted comment: signature from omg local signing key\nbxoRwTEJkBB4jSXnxzn2tq/hEsa44UxtPbAGWRREsqhL8e6Gr3KnWRQ68v4I5gYQRXa2CYW56jT4nC0t0xwQDg==\ntrusted comment: type=omg-slsa-v1 keyid=922a7d2960126efb issued_at=2026-03-14T19:07:30.668459+00:00 artifact=bundle/registry/bundles/control-plane.yaml sha256=e9dd9b69b8d016f0b4c5a1582983ed786c64493baf101319e714691c1b4acd9c\nalVtSit8IVpHVUJOyu8rXmaXjxjJbsP5nRD0PN1Cc6r3AF5dYWtg6kpJJh+Eh17ybbk/fXKxUjtvqMH0UbWJDA==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=922a7d2960126efb issued_at=2026-03-14T19:07:30.668459+00:00 artifact=bundle/registry/bundles/control-plane.yaml sha256=e9dd9b69b8d016f0b4c5a1582983ed786c64493baf101319e714691c1b4acd9c"
-  }
-}

package/artifacts/release/dist/public/attestations/bundle/registry/bundles/data-lineage.yaml.minisig

@@ -1,4 +0,0 @@
-untrusted comment: signature from omg local signing key
-HZ0WW2qUfLBbtzNyf4wxnQJdCWvfQTlNStjX5cUkaa8CthVlggJUNAmbnYUlObRgh6RIKV/0Ww0/n+enQ32CAw==
-trusted comment: type=omg-slsa-v1 keyid=e5fa30921c463f4c issued_at=2026-03-14T19:07:30.669104+00:00 artifact=bundle/registry/bundles/data-lineage.yaml sha256=69c8916e8a06434fe943d66e839dd24b04fb4e197ec7f525425217b2d75860be
-ksqJgyb1xY6Vqa0e2ToV9BgGoca4GhSROu8gBlwP0M+x5XioKIxe0NB3l1TVFTcD0cG5kw41qf2Nx6ZKz8PjDg==

package/artifacts/release/dist/public/attestations/bundle/registry/bundles/data-lineage.yaml.statement.json

@@ -1,35 +0,0 @@
-{
-  "_type": "https://in-toto.io/Statement/v1",
-  "predicateType": "https://slsa.dev/provenance/v1",
-  "subject": [
-    {
-      "name": "bundle/registry/bundles/data-lineage.yaml",
-      "digest": {
-        "sha256": "69c8916e8a06434fe943d66e839dd24b04fb4e197ec7f525425217b2d75860be"
-      }
-    }
-  ],
-  "predicate": {
-    "buildType": "https://omg.security/offline-attestation/v1",
-    "metadata": {
-      "signer": {
-        "keyid": "1f5fe64ec2f8c901",
-        "algorithm": "ed25519-minisign",
-        "mode": "local-offline"
-      },
-      "timestamp": "2026-03-14T19:07:30.668984+00:00"
-    }
-  },
-  "signer": {
-    "keyid": "1f5fe64ec2f8c901",
-    "algorithm": "ed25519-minisign",
-    "mode": "local-offline"
-  },
-  "issued_at": "2026-03-14T19:07:30.668984+00:00",
-  "signature": {
-    "alg": "ed25519-minisign",
-    "keyid": "e5fa30921c463f4c",
-    "value": "untrusted comment: signature from omg local signing key\nHZ0WW2qUfLBbtzNyf4wxnQJdCWvfQTlNStjX5cUkaa8CthVlggJUNAmbnYUlObRgh6RIKV/0Ww0/n+enQ32CAw==\ntrusted comment: type=omg-slsa-v1 keyid=e5fa30921c463f4c issued_at=2026-03-14T19:07:30.669104+00:00 artifact=bundle/registry/bundles/data-lineage.yaml sha256=69c8916e8a06434fe943d66e839dd24b04fb4e197ec7f525425217b2d75860be\nksqJgyb1xY6Vqa0e2ToV9BgGoca4GhSROu8gBlwP0M+x5XioKIxe0NB3l1TVFTcD0cG5kw41qf2Nx6ZKz8PjDg==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=e5fa30921c463f4c issued_at=2026-03-14T19:07:30.669104+00:00 artifact=bundle/registry/bundles/data-lineage.yaml sha256=69c8916e8a06434fe943d66e839dd24b04fb4e197ec7f525425217b2d75860be"
-  }
-}

package/artifacts/release/dist/public/attestations/bundle/registry/bundles/delta-classifier.yaml.minisig

@@ -1,4 +0,0 @@
-untrusted comment: signature from omg local signing key
-bMOGSyA8kG/rbAt6NOpaormn854hG4Enl4gia1Zh99OvJaA773fllvza55hN1Kq9IIs2hob0cgo3LK4GUg56CQ==
-trusted comment: type=omg-slsa-v1 keyid=e04e2d4c1c8042fe issued_at=2026-03-14T19:07:30.669715+00:00 artifact=bundle/registry/bundles/delta-classifier.yaml sha256=fd32123aba842abbcb58cbb009b9a2129eb30a31c561870b44366c984cd4a05a
-/0AQ7Gnej8gwwMkBshSZQ2Ge09VFESygcDgF7PNcNQ3tt9NyH/+OuXD4jQnLVl4CbOMggmYxGyBCrO7HDycxAA==

package/artifacts/release/dist/public/attestations/bundle/registry/bundles/delta-classifier.yaml.statement.json

@@ -1,35 +0,0 @@
-{
-  "_type": "https://in-toto.io/Statement/v1",
-  "predicateType": "https://slsa.dev/provenance/v1",
-  "subject": [
-    {
-      "name": "bundle/registry/bundles/delta-classifier.yaml",
-      "digest": {
-        "sha256": "fd32123aba842abbcb58cbb009b9a2129eb30a31c561870b44366c984cd4a05a"
-      }
-    }
-  ],
-  "predicate": {
-    "buildType": "https://omg.security/offline-attestation/v1",
-    "metadata": {
-      "signer": {
-        "keyid": "1f5fe64ec2f8c901",
-        "algorithm": "ed25519-minisign",
-        "mode": "local-offline"
-      },
-      "timestamp": "2026-03-14T19:07:30.669592+00:00"
-    }
-  },
-  "signer": {
-    "keyid": "1f5fe64ec2f8c901",
-    "algorithm": "ed25519-minisign",
-    "mode": "local-offline"
-  },
-  "issued_at": "2026-03-14T19:07:30.669592+00:00",
-  "signature": {
-    "alg": "ed25519-minisign",
-    "keyid": "e04e2d4c1c8042fe",
-    "value": "untrusted comment: signature from omg local signing key\nbMOGSyA8kG/rbAt6NOpaormn854hG4Enl4gia1Zh99OvJaA773fllvza55hN1Kq9IIs2hob0cgo3LK4GUg56CQ==\ntrusted comment: type=omg-slsa-v1 keyid=e04e2d4c1c8042fe issued_at=2026-03-14T19:07:30.669715+00:00 artifact=bundle/registry/bundles/delta-classifier.yaml sha256=fd32123aba842abbcb58cbb009b9a2129eb30a31c561870b44366c984cd4a05a\n/0AQ7Gnej8gwwMkBshSZQ2Ge09VFESygcDgF7PNcNQ3tt9NyH/+OuXD4jQnLVl4CbOMggmYxGyBCrO7HDycxAA==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=e04e2d4c1c8042fe issued_at=2026-03-14T19:07:30.669715+00:00 artifact=bundle/registry/bundles/delta-classifier.yaml sha256=fd32123aba842abbcb58cbb009b9a2129eb30a31c561870b44366c984cd4a05a"
-  }
-}

package/artifacts/release/dist/public/attestations/bundle/registry/bundles/eval-gate.yaml.minisig

@@ -1,4 +0,0 @@
-untrusted comment: signature from omg local signing key
-6/YWwC6ao38jnYbsjI9phEOcbTdH/Z1PK7UP9s2FSV65XtlzuWJQuaJW3ctuzMze3O/6VwzkIhlkO41L/tedCQ==
-trusted comment: type=omg-slsa-v1 keyid=04cfb3544b150973 issued_at=2026-03-14T19:07:30.671632+00:00 artifact=bundle/registry/bundles/eval-gate.yaml sha256=975ed22fcf5d0ccc7ef289dc0221751c944c2e8b4b11870efecfcdd94fa0b52e
-CDibJuAW7DFgfW/of1kXyFOtUjIjVT9IEde1cCgzUn/jil0U8Bnid1759FfZDmSOKoCAmNiQs6dj/sVdYrKrAQ==

package/artifacts/release/dist/public/attestations/bundle/registry/bundles/eval-gate.yaml.statement.json

@@ -1,35 +0,0 @@
-{
-  "_type": "https://in-toto.io/Statement/v1",
-  "predicateType": "https://slsa.dev/provenance/v1",
-  "subject": [
-    {
-      "name": "bundle/registry/bundles/eval-gate.yaml",
-      "digest": {
-        "sha256": "975ed22fcf5d0ccc7ef289dc0221751c944c2e8b4b11870efecfcdd94fa0b52e"
-      }
-    }
-  ],
-  "predicate": {
-    "buildType": "https://omg.security/offline-attestation/v1",
-    "metadata": {
-      "signer": {
-        "keyid": "1f5fe64ec2f8c901",
-        "algorithm": "ed25519-minisign",
-        "mode": "local-offline"
-      },
-      "timestamp": "2026-03-14T19:07:30.671459+00:00"
-    }
-  },
-  "signer": {
-    "keyid": "1f5fe64ec2f8c901",
-    "algorithm": "ed25519-minisign",
-    "mode": "local-offline"
-  },
-  "issued_at": "2026-03-14T19:07:30.671459+00:00",
-  "signature": {
-    "alg": "ed25519-minisign",
-    "keyid": "04cfb3544b150973",
-    "value": "untrusted comment: signature from omg local signing key\n6/YWwC6ao38jnYbsjI9phEOcbTdH/Z1PK7UP9s2FSV65XtlzuWJQuaJW3ctuzMze3O/6VwzkIhlkO41L/tedCQ==\ntrusted comment: type=omg-slsa-v1 keyid=04cfb3544b150973 issued_at=2026-03-14T19:07:30.671632+00:00 artifact=bundle/registry/bundles/eval-gate.yaml sha256=975ed22fcf5d0ccc7ef289dc0221751c944c2e8b4b11870efecfcdd94fa0b52e\nCDibJuAW7DFgfW/of1kXyFOtUjIjVT9IEde1cCgzUn/jil0U8Bnid1759FfZDmSOKoCAmNiQs6dj/sVdYrKrAQ==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=04cfb3544b150973 issued_at=2026-03-14T19:07:30.671632+00:00 artifact=bundle/registry/bundles/eval-gate.yaml sha256=975ed22fcf5d0ccc7ef289dc0221751c944c2e8b4b11870efecfcdd94fa0b52e"
-  }
-}

package/artifacts/release/dist/public/attestations/bundle/registry/bundles/hash-edit.yaml.minisig

@@ -1,4 +0,0 @@
-untrusted comment: signature from omg local signing key
-TgSz+Ga4jznI2mvOcm+n0k6988vfLiS5wJrw8Dr8czgCY9fP61XSkKVarK9r2UbvWxvtPa0n+0nF4C/YMLViDw==
-trusted comment: type=omg-slsa-v1 keyid=41927c4ba2b9b2df issued_at=2026-03-14T19:07:30.672468+00:00 artifact=bundle/registry/bundles/hash-edit.yaml sha256=cb7808facddce5fd248dbe705bda56888a98be0c2098d8a438b65a40d809e0b2
-qOR8sqX9UmOuP+VFNlH+br67ndIkcLbQtQv+iQ48BkXgx9tLvycjNLUajRIC5v9x3NUVjRTf/vo46UzCbko/Cg==

package/artifacts/release/dist/public/attestations/bundle/registry/bundles/hash-edit.yaml.statement.json

@@ -1,35 +0,0 @@
-{
-  "_type": "https://in-toto.io/Statement/v1",
-  "predicateType": "https://slsa.dev/provenance/v1",
-  "subject": [
-    {
-      "name": "bundle/registry/bundles/hash-edit.yaml",
-      "digest": {
-        "sha256": "cb7808facddce5fd248dbe705bda56888a98be0c2098d8a438b65a40d809e0b2"
-      }
-    }
-  ],
-  "predicate": {
-    "buildType": "https://omg.security/offline-attestation/v1",
-    "metadata": {
-      "signer": {
-        "keyid": "1f5fe64ec2f8c901",
-        "algorithm": "ed25519-minisign",
-        "mode": "local-offline"
-      },
-      "timestamp": "2026-03-14T19:07:30.672342+00:00"
-    }
-  },
-  "signer": {
-    "keyid": "1f5fe64ec2f8c901",
-    "algorithm": "ed25519-minisign",
-    "mode": "local-offline"
-  },
-  "issued_at": "2026-03-14T19:07:30.672342+00:00",
-  "signature": {
-    "alg": "ed25519-minisign",
-    "keyid": "41927c4ba2b9b2df",
-    "value": "untrusted comment: signature from omg local signing key\nTgSz+Ga4jznI2mvOcm+n0k6988vfLiS5wJrw8Dr8czgCY9fP61XSkKVarK9r2UbvWxvtPa0n+0nF4C/YMLViDw==\ntrusted comment: type=omg-slsa-v1 keyid=41927c4ba2b9b2df issued_at=2026-03-14T19:07:30.672468+00:00 artifact=bundle/registry/bundles/hash-edit.yaml sha256=cb7808facddce5fd248dbe705bda56888a98be0c2098d8a438b65a40d809e0b2\nqOR8sqX9UmOuP+VFNlH+br67ndIkcLbQtQv+iQ48BkXgx9tLvycjNLUajRIC5v9x3NUVjRTf/vo46UzCbko/Cg==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=41927c4ba2b9b2df issued_at=2026-03-14T19:07:30.672468+00:00 artifact=bundle/registry/bundles/hash-edit.yaml sha256=cb7808facddce5fd248dbe705bda56888a98be0c2098d8a438b65a40d809e0b2"
-  }
-}

package/artifacts/release/dist/public/attestations/bundle/registry/bundles/health.yaml.minisig

@@ -1,4 +0,0 @@
-untrusted comment: signature from omg local signing key
-IATTXEYmqOYoTLerOxNTJ+KWL5gt/00f3EFotYubNL9ZlPLPk0UgZiiTUkMDF1pZxmVp6vwER/+fDgSOVKm+Ag==
-trusted comment: type=omg-slsa-v1 keyid=ff0b8a83781d0c7d issued_at=2026-03-14T19:07:30.673111+00:00 artifact=bundle/registry/bundles/health.yaml sha256=25dbb73b98b31ada75c2055fbb0c4186ecd3b365532832cfaca506ae7590a17e
-JbdKD6DX/xnfH5Ze1l5ZB0UQapNJCA8zY3+7VhtF3pQtLwvf+IZl1ZCj9EaBjxaRUbni6NZHYyoOjYkU7fB2Dg==

package/artifacts/release/dist/public/attestations/bundle/registry/bundles/health.yaml.statement.json

@@ -1,35 +0,0 @@
-{
-  "_type": "https://in-toto.io/Statement/v1",
-  "predicateType": "https://slsa.dev/provenance/v1",
-  "subject": [
-    {
-      "name": "bundle/registry/bundles/health.yaml",
-      "digest": {
-        "sha256": "25dbb73b98b31ada75c2055fbb0c4186ecd3b365532832cfaca506ae7590a17e"
-      }
-    }
-  ],
-  "predicate": {
-    "buildType": "https://omg.security/offline-attestation/v1",
-    "metadata": {
-      "signer": {
-        "keyid": "1f5fe64ec2f8c901",
-        "algorithm": "ed25519-minisign",
-        "mode": "local-offline"
-      },
-      "timestamp": "2026-03-14T19:07:30.672991+00:00"
-    }
-  },
-  "signer": {
-    "keyid": "1f5fe64ec2f8c901",
-    "algorithm": "ed25519-minisign",
-    "mode": "local-offline"
-  },
-  "issued_at": "2026-03-14T19:07:30.672991+00:00",
-  "signature": {
-    "alg": "ed25519-minisign",
-    "keyid": "ff0b8a83781d0c7d",
-    "value": "untrusted comment: signature from omg local signing key\nIATTXEYmqOYoTLerOxNTJ+KWL5gt/00f3EFotYubNL9ZlPLPk0UgZiiTUkMDF1pZxmVp6vwER/+fDgSOVKm+Ag==\ntrusted comment: type=omg-slsa-v1 keyid=ff0b8a83781d0c7d issued_at=2026-03-14T19:07:30.673111+00:00 artifact=bundle/registry/bundles/health.yaml sha256=25dbb73b98b31ada75c2055fbb0c4186ecd3b365532832cfaca506ae7590a17e\nJbdKD6DX/xnfH5Ze1l5ZB0UQapNJCA8zY3+7VhtF3pQtLwvf+IZl1ZCj9EaBjxaRUbni6NZHYyoOjYkU7fB2Dg==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=ff0b8a83781d0c7d issued_at=2026-03-14T19:07:30.673111+00:00 artifact=bundle/registry/bundles/health.yaml sha256=25dbb73b98b31ada75c2055fbb0c4186ecd3b365532832cfaca506ae7590a17e"
-  }
-}

package/artifacts/release/dist/public/attestations/bundle/registry/bundles/hook-governor.yaml.minisig

@@ -1,4 +0,0 @@
-untrusted comment: signature from omg local signing key
-gvE6XOo4jmmbnAwJXuJFlDqm7lbVJ+ZfLvDAbQHmOnNGQ1eukG5xwkvvs8dRg2LThpvsE1MFNK2UYeF/AlneDw==
-trusted comment: type=omg-slsa-v1 keyid=64b1db5cf2332ca9 issued_at=2026-03-14T19:07:30.673721+00:00 artifact=bundle/registry/bundles/hook-governor.yaml sha256=2fda6536f9f07ce190306057fa1bad0dc7eff5cf335f53d832ca8a0d2a3f1ccb
-45PYi/TrJaQXOb9mB8d5lV/WIHxsTkJziFsO4Xcc4g3SDhdAJZkTHrC2p4ws742l2kSVWR9ZXrHMI+CC6uZcBg==

package/artifacts/release/dist/public/attestations/bundle/registry/bundles/hook-governor.yaml.statement.json

@@ -1,35 +0,0 @@
-{
-  "_type": "https://in-toto.io/Statement/v1",
-  "predicateType": "https://slsa.dev/provenance/v1",
-  "subject": [
-    {
-      "name": "bundle/registry/bundles/hook-governor.yaml",
-      "digest": {
-        "sha256": "2fda6536f9f07ce190306057fa1bad0dc7eff5cf335f53d832ca8a0d2a3f1ccb"
-      }
-    }
-  ],
-  "predicate": {
-    "buildType": "https://omg.security/offline-attestation/v1",
-    "metadata": {
-      "signer": {
-        "keyid": "1f5fe64ec2f8c901",
-        "algorithm": "ed25519-minisign",
-        "mode": "local-offline"
-      },
-      "timestamp": "2026-03-14T19:07:30.673604+00:00"
-    }
-  },
-  "signer": {
-    "keyid": "1f5fe64ec2f8c901",
-    "algorithm": "ed25519-minisign",
-    "mode": "local-offline"
-  },
-  "issued_at": "2026-03-14T19:07:30.673604+00:00",
-  "signature": {
-    "alg": "ed25519-minisign",
-    "keyid": "64b1db5cf2332ca9",
-    "value": "untrusted comment: signature from omg local signing key\ngvE6XOo4jmmbnAwJXuJFlDqm7lbVJ+ZfLvDAbQHmOnNGQ1eukG5xwkvvs8dRg2LThpvsE1MFNK2UYeF/AlneDw==\ntrusted comment: type=omg-slsa-v1 keyid=64b1db5cf2332ca9 issued_at=2026-03-14T19:07:30.673721+00:00 artifact=bundle/registry/bundles/hook-governor.yaml sha256=2fda6536f9f07ce190306057fa1bad0dc7eff5cf335f53d832ca8a0d2a3f1ccb\n45PYi/TrJaQXOb9mB8d5lV/WIHxsTkJziFsO4Xcc4g3SDhdAJZkTHrC2p4ws742l2kSVWR9ZXrHMI+CC6uZcBg==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=64b1db5cf2332ca9 issued_at=2026-03-14T19:07:30.673721+00:00 artifact=bundle/registry/bundles/hook-governor.yaml sha256=2fda6536f9f07ce190306057fa1bad0dc7eff5cf335f53d832ca8a0d2a3f1ccb"
-  }
-}

package/artifacts/release/dist/public/attestations/bundle/registry/bundles/incident-replay.yaml.minisig

@@ -1,4 +0,0 @@
-untrusted comment: signature from omg local signing key
-Ba4pgpTzO/ehmQcSasTdZlAuG5j6V+Wbcft7zfhssRnS3HoGaPM3apkN727hsqxGZcX13GyQ7kdDygspdl10Bg==
-trusted comment: type=omg-slsa-v1 keyid=78e2a1eba541b3a4 issued_at=2026-03-14T19:07:30.674357+00:00 artifact=bundle/registry/bundles/incident-replay.yaml sha256=5c2fb0fe1f0681902c6fed8034bd73c70195591d3838b009af53a620c013956f
-1iH/q+xF5G+1zYUxJF0pLbSTuNB9EQY6u+Wi4TqSHkjqzF5VATgk4hAVZxN0XtV/VelgbHaS4qobfMrNa3fDCg==

package/artifacts/release/dist/public/attestations/bundle/registry/bundles/incident-replay.yaml.statement.json

@@ -1,35 +0,0 @@
-{
-  "_type": "https://in-toto.io/Statement/v1",
-  "predicateType": "https://slsa.dev/provenance/v1",
-  "subject": [
-    {
-      "name": "bundle/registry/bundles/incident-replay.yaml",
-      "digest": {
-        "sha256": "5c2fb0fe1f0681902c6fed8034bd73c70195591d3838b009af53a620c013956f"
-      }
-    }
-  ],
-  "predicate": {
-    "buildType": "https://omg.security/offline-attestation/v1",
-    "metadata": {
-      "signer": {
-        "keyid": "1f5fe64ec2f8c901",
-        "algorithm": "ed25519-minisign",
-        "mode": "local-offline"
-      },
-      "timestamp": "2026-03-14T19:07:30.674240+00:00"
-    }
-  },
-  "signer": {
-    "keyid": "1f5fe64ec2f8c901",
-    "algorithm": "ed25519-minisign",
-    "mode": "local-offline"
-  },
-  "issued_at": "2026-03-14T19:07:30.674240+00:00",
-  "signature": {
-    "alg": "ed25519-minisign",
-    "keyid": "78e2a1eba541b3a4",
-    "value": "untrusted comment: signature from omg local signing key\nBa4pgpTzO/ehmQcSasTdZlAuG5j6V+Wbcft7zfhssRnS3HoGaPM3apkN727hsqxGZcX13GyQ7kdDygspdl10Bg==\ntrusted comment: type=omg-slsa-v1 keyid=78e2a1eba541b3a4 issued_at=2026-03-14T19:07:30.674357+00:00 artifact=bundle/registry/bundles/incident-replay.yaml sha256=5c2fb0fe1f0681902c6fed8034bd73c70195591d3838b009af53a620c013956f\n1iH/q+xF5G+1zYUxJF0pLbSTuNB9EQY6u+Wi4TqSHkjqzF5VATgk4hAVZxN0XtV/VelgbHaS4qobfMrNa3fDCg==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=78e2a1eba541b3a4 issued_at=2026-03-14T19:07:30.674357+00:00 artifact=bundle/registry/bundles/incident-replay.yaml sha256=5c2fb0fe1f0681902c6fed8034bd73c70195591d3838b009af53a620c013956f"
-  }
-}

package/artifacts/release/dist/public/attestations/bundle/registry/bundles/lsp-pack.yaml.minisig

@@ -1,4 +0,0 @@
-untrusted comment: signature from omg local signing key
-2JKPPujaEoUif+z13JWJKw6edSBwlgU0J8+F9zsQjw+a6ykWXzgA7LPojPKDoNq2E5/qLGOhNWjUKx92v3VdDA==
-trusted comment: type=omg-slsa-v1 keyid=2517bafb07c02558 issued_at=2026-03-14T19:07:30.674978+00:00 artifact=bundle/registry/bundles/lsp-pack.yaml sha256=bad0d755eafcefb1f44a385aac5a767046650b51a4a97895259653a730065c71
-43Y8ri8Go2GXiYbC8WfH/fT2SgPgc8EfNvJoF9EIBCl1ZiLDwZmkwLml4ugYTJ+UYwRDQ5EHk9sMItMCXV+0Bw==

package/artifacts/release/dist/public/attestations/bundle/registry/bundles/lsp-pack.yaml.statement.json

@@ -1,35 +0,0 @@
-{
-  "_type": "https://in-toto.io/Statement/v1",
-  "predicateType": "https://slsa.dev/provenance/v1",
-  "subject": [
-    {
-      "name": "bundle/registry/bundles/lsp-pack.yaml",
-      "digest": {
-        "sha256": "bad0d755eafcefb1f44a385aac5a767046650b51a4a97895259653a730065c71"
-      }
-    }
-  ],
-  "predicate": {
-    "buildType": "https://omg.security/offline-attestation/v1",
-    "metadata": {
-      "signer": {
-        "keyid": "1f5fe64ec2f8c901",
-        "algorithm": "ed25519-minisign",
-        "mode": "local-offline"
-      },
-      "timestamp": "2026-03-14T19:07:30.674862+00:00"
-    }
-  },
-  "signer": {
-    "keyid": "1f5fe64ec2f8c901",
-    "algorithm": "ed25519-minisign",
-    "mode": "local-offline"
-  },
-  "issued_at": "2026-03-14T19:07:30.674862+00:00",
-  "signature": {
-    "alg": "ed25519-minisign",
-    "keyid": "2517bafb07c02558",
-    "value": "untrusted comment: signature from omg local signing key\n2JKPPujaEoUif+z13JWJKw6edSBwlgU0J8+F9zsQjw+a6ykWXzgA7LPojPKDoNq2E5/qLGOhNWjUKx92v3VdDA==\ntrusted comment: type=omg-slsa-v1 keyid=2517bafb07c02558 issued_at=2026-03-14T19:07:30.674978+00:00 artifact=bundle/registry/bundles/lsp-pack.yaml sha256=bad0d755eafcefb1f44a385aac5a767046650b51a4a97895259653a730065c71\n43Y8ri8Go2GXiYbC8WfH/fT2SgPgc8EfNvJoF9EIBCl1ZiLDwZmkwLml4ugYTJ+UYwRDQ5EHk9sMItMCXV+0Bw==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=2517bafb07c02558 issued_at=2026-03-14T19:07:30.674978+00:00 artifact=bundle/registry/bundles/lsp-pack.yaml sha256=bad0d755eafcefb1f44a385aac5a767046650b51a4a97895259653a730065c71"
-  }
-}

package/artifacts/release/dist/public/attestations/bundle/registry/bundles/mcp-fabric.yaml.minisig

@@ -1,4 +0,0 @@
-untrusted comment: signature from omg local signing key
-S1nQDhf8FXEDRnCCUSFsxPpU4af10semWVhVCigdE/wJMlQ6WOgfJ8uilX98xS+3qv2x+NfIklax6uqcuTGqAg==
-trusted comment: type=omg-slsa-v1 keyid=daa5666853d009ed issued_at=2026-03-14T19:07:30.675572+00:00 artifact=bundle/registry/bundles/mcp-fabric.yaml sha256=69e1dc9fb8ff94d834a8ae502eeb6f8d51b311bea70101b96c1f0bc5de2e56d3
-qc0HyLlpTCTHDpFGHw1WjEjI2H+f2fHoMpcVxz6mywx/smNzE5iqQSbAll5iqp9qAKzp4WfPVDWJtF4F3e2lAg==