@trac3er/oh-my-god 2.2.3 → 2.2.5

package/artifacts/release/dist/enterprise/attestations/bundle/registry/bundles/preflight.yaml.statement.json

@@ -1,35 +0,0 @@
-{
-  "_type": "https://in-toto.io/Statement/v1",
-  "predicateType": "https://slsa.dev/provenance/v1",
-  "subject": [
-    {
-      "name": "bundle/registry/bundles/preflight.yaml",
-      "digest": {
-        "sha256": "1d609ab764a3a82b034ec7e12143b5e1bf9f4251e7e92332aaa92d3a4ed324fd"
-      }
-    }
-  ],
-  "predicate": {
-    "buildType": "https://omg.security/offline-attestation/v1",
-    "metadata": {
-      "signer": {
-        "keyid": "1f5fe64ec2f8c901",
-        "algorithm": "ed25519-minisign",
-        "mode": "local-offline"
-      },
-      "timestamp": "2026-03-14T19:07:32.897540+00:00"
-    }
-  },
-  "signer": {
-    "keyid": "1f5fe64ec2f8c901",
-    "algorithm": "ed25519-minisign",
-    "mode": "local-offline"
-  },
-  "issued_at": "2026-03-14T19:07:32.897540+00:00",
-  "signature": {
-    "alg": "ed25519-minisign",
-    "keyid": "7e4c097897259edd",
-    "value": "untrusted comment: signature from omg local signing key\nojfvPTOirns/86nIEdtSoe9G0vEkSqe6P5iRruuAtwFbWy0iOJCEP4jAILC+3DS9dF+AgLGkpQgZqlCEVc6LAQ==\ntrusted comment: type=omg-slsa-v1 keyid=7e4c097897259edd issued_at=2026-03-14T19:07:32.897659+00:00 artifact=bundle/registry/bundles/preflight.yaml sha256=1d609ab764a3a82b034ec7e12143b5e1bf9f4251e7e92332aaa92d3a4ed324fd\nDUCdZe2I36DlBGVOalOn1Mvfpkxe+XGTQ7uiUDMrb3Iyo5+r82Wg+iVWiAMwVNXuKbdkXrcSfAVJeBD0HThECw==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=7e4c097897259edd issued_at=2026-03-14T19:07:32.897659+00:00 artifact=bundle/registry/bundles/preflight.yaml sha256=1d609ab764a3a82b034ec7e12143b5e1bf9f4251e7e92332aaa92d3a4ed324fd"
-  }
-}

package/artifacts/release/dist/enterprise/attestations/bundle/registry/bundles/proof-gate.yaml.minisig

@@ -1,4 +0,0 @@
-untrusted comment: signature from omg local signing key
-f758nvtdyRP4woWs6+KtrM01tdmCdyLCyhgMla5vDeGP9S3MsY/R41eH50n6eSICO/jhJxJd6KceFGHndE0QCA==
-trusted comment: type=omg-slsa-v1 keyid=8e2969b87ba657f4 issued_at=2026-03-14T19:07:32.898326+00:00 artifact=bundle/registry/bundles/proof-gate.yaml sha256=bfc9efb3317078c9b697b5c52e767c7fdea6b5c21cbfc138c66cce0c1378a33f
-ZJBfCp6SAj17BaYkwFkrO3XICSuo//oUrnXV5qc/828hgberKVAcad5B19C3kgkyb0SSPb3bW3QIQakujLshBQ==

package/artifacts/release/dist/enterprise/attestations/bundle/registry/bundles/proof-gate.yaml.statement.json

@@ -1,35 +0,0 @@
-{
-  "_type": "https://in-toto.io/Statement/v1",
-  "predicateType": "https://slsa.dev/provenance/v1",
-  "subject": [
-    {
-      "name": "bundle/registry/bundles/proof-gate.yaml",
-      "digest": {
-        "sha256": "bfc9efb3317078c9b697b5c52e767c7fdea6b5c21cbfc138c66cce0c1378a33f"
-      }
-    }
-  ],
-  "predicate": {
-    "buildType": "https://omg.security/offline-attestation/v1",
-    "metadata": {
-      "signer": {
-        "keyid": "1f5fe64ec2f8c901",
-        "algorithm": "ed25519-minisign",
-        "mode": "local-offline"
-      },
-      "timestamp": "2026-03-14T19:07:32.898206+00:00"
-    }
-  },
-  "signer": {
-    "keyid": "1f5fe64ec2f8c901",
-    "algorithm": "ed25519-minisign",
-    "mode": "local-offline"
-  },
-  "issued_at": "2026-03-14T19:07:32.898206+00:00",
-  "signature": {
-    "alg": "ed25519-minisign",
-    "keyid": "8e2969b87ba657f4",
-    "value": "untrusted comment: signature from omg local signing key\nf758nvtdyRP4woWs6+KtrM01tdmCdyLCyhgMla5vDeGP9S3MsY/R41eH50n6eSICO/jhJxJd6KceFGHndE0QCA==\ntrusted comment: type=omg-slsa-v1 keyid=8e2969b87ba657f4 issued_at=2026-03-14T19:07:32.898326+00:00 artifact=bundle/registry/bundles/proof-gate.yaml sha256=bfc9efb3317078c9b697b5c52e767c7fdea6b5c21cbfc138c66cce0c1378a33f\nZJBfCp6SAj17BaYkwFkrO3XICSuo//oUrnXV5qc/828hgberKVAcad5B19C3kgkyb0SSPb3bW3QIQakujLshBQ==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=8e2969b87ba657f4 issued_at=2026-03-14T19:07:32.898326+00:00 artifact=bundle/registry/bundles/proof-gate.yaml sha256=bfc9efb3317078c9b697b5c52e767c7fdea6b5c21cbfc138c66cce0c1378a33f"
-  }
-}

package/artifacts/release/dist/enterprise/attestations/bundle/registry/bundles/remote-supervisor.yaml.minisig

@@ -1,4 +0,0 @@
-untrusted comment: signature from omg local signing key
-UNm6rItOnxkglLEO5xevDd3TK8v/yR19fzctDRDIyz60jsMaoJbVtCkG6eXyh8zHIF94Qk1Gj/lsrjbSf1XPBw==
-trusted comment: type=omg-slsa-v1 keyid=ed4e9ec33330a6e9 issued_at=2026-03-14T19:07:32.898946+00:00 artifact=bundle/registry/bundles/remote-supervisor.yaml sha256=c51dd1f06a68139a18747b8b24678d5e3f99c6e78759c18ded01bc5babb09e2a
-AqNj4a5u0cMQAZEapoFLpRBMIVJnLCjK70ZKa5oE4EVZ4BJTCICUBkK6aV9+yxCyJZGua8bKjXDv08Gy8/AECQ==

package/artifacts/release/dist/enterprise/attestations/bundle/registry/bundles/remote-supervisor.yaml.statement.json

@@ -1,35 +0,0 @@
-{
-  "_type": "https://in-toto.io/Statement/v1",
-  "predicateType": "https://slsa.dev/provenance/v1",
-  "subject": [
-    {
-      "name": "bundle/registry/bundles/remote-supervisor.yaml",
-      "digest": {
-        "sha256": "c51dd1f06a68139a18747b8b24678d5e3f99c6e78759c18ded01bc5babb09e2a"
-      }
-    }
-  ],
-  "predicate": {
-    "buildType": "https://omg.security/offline-attestation/v1",
-    "metadata": {
-      "signer": {
-        "keyid": "1f5fe64ec2f8c901",
-        "algorithm": "ed25519-minisign",
-        "mode": "local-offline"
-      },
-      "timestamp": "2026-03-14T19:07:32.898827+00:00"
-    }
-  },
-  "signer": {
-    "keyid": "1f5fe64ec2f8c901",
-    "algorithm": "ed25519-minisign",
-    "mode": "local-offline"
-  },
-  "issued_at": "2026-03-14T19:07:32.898827+00:00",
-  "signature": {
-    "alg": "ed25519-minisign",
-    "keyid": "ed4e9ec33330a6e9",
-    "value": "untrusted comment: signature from omg local signing key\nUNm6rItOnxkglLEO5xevDd3TK8v/yR19fzctDRDIyz60jsMaoJbVtCkG6eXyh8zHIF94Qk1Gj/lsrjbSf1XPBw==\ntrusted comment: type=omg-slsa-v1 keyid=ed4e9ec33330a6e9 issued_at=2026-03-14T19:07:32.898946+00:00 artifact=bundle/registry/bundles/remote-supervisor.yaml sha256=c51dd1f06a68139a18747b8b24678d5e3f99c6e78759c18ded01bc5babb09e2a\nAqNj4a5u0cMQAZEapoFLpRBMIVJnLCjK70ZKa5oE4EVZ4BJTCICUBkK6aV9+yxCyJZGua8bKjXDv08Gy8/AECQ==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=ed4e9ec33330a6e9 issued_at=2026-03-14T19:07:32.898946+00:00 artifact=bundle/registry/bundles/remote-supervisor.yaml sha256=c51dd1f06a68139a18747b8b24678d5e3f99c6e78759c18ded01bc5babb09e2a"
-  }
-}

package/artifacts/release/dist/enterprise/attestations/bundle/registry/bundles/robotics.yaml.minisig

@@ -1,4 +0,0 @@
-untrusted comment: signature from omg local signing key
-ZKKDPTTjaIcpdmcOkOeQKCO3fdN9zRsrA+HE3fIB+1r+sE/FBvLndsyJMmLrtyDyGejcWx+mR6hklmo9HmE7AQ==
-trusted comment: type=omg-slsa-v1 keyid=ffd54f948cce523d issued_at=2026-03-14T19:07:32.899603+00:00 artifact=bundle/registry/bundles/robotics.yaml sha256=416dd2678e9e04e62886599b6636aa3587e6b7c38f28106755f658afe3976a8d
-swVxXsB7F9tNU3XJHaCjnp+c+O2Jai8sA52G8d6mkRMB0MBtgyZYYuL/qlm9mvSyZkhKa1NsAz8Z1caCLqc6Aw==

package/artifacts/release/dist/enterprise/attestations/bundle/registry/bundles/robotics.yaml.statement.json

@@ -1,35 +0,0 @@
-{
-  "_type": "https://in-toto.io/Statement/v1",
-  "predicateType": "https://slsa.dev/provenance/v1",
-  "subject": [
-    {
-      "name": "bundle/registry/bundles/robotics.yaml",
-      "digest": {
-        "sha256": "416dd2678e9e04e62886599b6636aa3587e6b7c38f28106755f658afe3976a8d"
-      }
-    }
-  ],
-  "predicate": {
-    "buildType": "https://omg.security/offline-attestation/v1",
-    "metadata": {
-      "signer": {
-        "keyid": "1f5fe64ec2f8c901",
-        "algorithm": "ed25519-minisign",
-        "mode": "local-offline"
-      },
-      "timestamp": "2026-03-14T19:07:32.899485+00:00"
-    }
-  },
-  "signer": {
-    "keyid": "1f5fe64ec2f8c901",
-    "algorithm": "ed25519-minisign",
-    "mode": "local-offline"
-  },
-  "issued_at": "2026-03-14T19:07:32.899485+00:00",
-  "signature": {
-    "alg": "ed25519-minisign",
-    "keyid": "ffd54f948cce523d",
-    "value": "untrusted comment: signature from omg local signing key\nZKKDPTTjaIcpdmcOkOeQKCO3fdN9zRsrA+HE3fIB+1r+sE/FBvLndsyJMmLrtyDyGejcWx+mR6hklmo9HmE7AQ==\ntrusted comment: type=omg-slsa-v1 keyid=ffd54f948cce523d issued_at=2026-03-14T19:07:32.899603+00:00 artifact=bundle/registry/bundles/robotics.yaml sha256=416dd2678e9e04e62886599b6636aa3587e6b7c38f28106755f658afe3976a8d\nswVxXsB7F9tNU3XJHaCjnp+c+O2Jai8sA52G8d6mkRMB0MBtgyZYYuL/qlm9mvSyZkhKa1NsAz8Z1caCLqc6Aw==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=ffd54f948cce523d issued_at=2026-03-14T19:07:32.899603+00:00 artifact=bundle/registry/bundles/robotics.yaml sha256=416dd2678e9e04e62886599b6636aa3587e6b7c38f28106755f658afe3976a8d"
-  }
-}

package/artifacts/release/dist/enterprise/attestations/bundle/registry/bundles/secure-worktree-pipeline.yaml.minisig

@@ -1,4 +0,0 @@
-untrusted comment: signature from omg local signing key
-Jo8bIzA9/qjpkWDMVJp6xS9gAr6UGMt0Q6gGHYho8hYbAvvlngoElNyBzP/InZQdqgchh4ErjB+a4G6vbkJEAQ==
-trusted comment: type=omg-slsa-v1 keyid=a024351458398edc issued_at=2026-03-14T19:07:32.900243+00:00 artifact=bundle/registry/bundles/secure-worktree-pipeline.yaml sha256=f9706a65c2e03ef9e0efe7349c615bcdf38b5de685406bc863715bdea36e08e8
-ljNEY2qinhMjnm8RuuQY3NVXXxCFZME55GFLL6fvt2JuHj9xtlm0m0iNWCcuP5l25V9j79Dup6vbONKuwfQ4Cw==

package/artifacts/release/dist/enterprise/attestations/bundle/registry/bundles/secure-worktree-pipeline.yaml.statement.json

@@ -1,35 +0,0 @@
-{
-  "_type": "https://in-toto.io/Statement/v1",
-  "predicateType": "https://slsa.dev/provenance/v1",
-  "subject": [
-    {
-      "name": "bundle/registry/bundles/secure-worktree-pipeline.yaml",
-      "digest": {
-        "sha256": "f9706a65c2e03ef9e0efe7349c615bcdf38b5de685406bc863715bdea36e08e8"
-      }
-    }
-  ],
-  "predicate": {
-    "buildType": "https://omg.security/offline-attestation/v1",
-    "metadata": {
-      "signer": {
-        "keyid": "1f5fe64ec2f8c901",
-        "algorithm": "ed25519-minisign",
-        "mode": "local-offline"
-      },
-      "timestamp": "2026-03-14T19:07:32.900129+00:00"
-    }
-  },
-  "signer": {
-    "keyid": "1f5fe64ec2f8c901",
-    "algorithm": "ed25519-minisign",
-    "mode": "local-offline"
-  },
-  "issued_at": "2026-03-14T19:07:32.900129+00:00",
-  "signature": {
-    "alg": "ed25519-minisign",
-    "keyid": "a024351458398edc",
-    "value": "untrusted comment: signature from omg local signing key\nJo8bIzA9/qjpkWDMVJp6xS9gAr6UGMt0Q6gGHYho8hYbAvvlngoElNyBzP/InZQdqgchh4ErjB+a4G6vbkJEAQ==\ntrusted comment: type=omg-slsa-v1 keyid=a024351458398edc issued_at=2026-03-14T19:07:32.900243+00:00 artifact=bundle/registry/bundles/secure-worktree-pipeline.yaml sha256=f9706a65c2e03ef9e0efe7349c615bcdf38b5de685406bc863715bdea36e08e8\nljNEY2qinhMjnm8RuuQY3NVXXxCFZME55GFLL6fvt2JuHj9xtlm0m0iNWCcuP5l25V9j79Dup6vbONKuwfQ4Cw==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=a024351458398edc issued_at=2026-03-14T19:07:32.900243+00:00 artifact=bundle/registry/bundles/secure-worktree-pipeline.yaml sha256=f9706a65c2e03ef9e0efe7349c615bcdf38b5de685406bc863715bdea36e08e8"
-  }
-}

package/artifacts/release/dist/enterprise/attestations/bundle/registry/bundles/security-check.yaml.minisig

@@ -1,4 +0,0 @@
-untrusted comment: signature from omg local signing key
-ePMTGr0N3Sj0fviVH3dw5AmsdU6Am6zXq9Y5vIpZsKTAt2Ya1TE87lRFznftaF7oP6T6LTxFWsmhsTSn88afBw==
-trusted comment: type=omg-slsa-v1 keyid=e8c6889e82c87e5f issued_at=2026-03-14T19:07:32.900832+00:00 artifact=bundle/registry/bundles/security-check.yaml sha256=149e0ff7030b066839e64d1c3fda5556722a7253b427b749e58fd625d5bd0cbf
-cxQNLCsWEtBeAdiHEudr9c3h/wFDr3H3PzBMMx0XO6P7FOpcZ6MFZLcW+mnxCdsNT6QWLibJJUnPhsbftHjJCQ==

package/artifacts/release/dist/enterprise/attestations/bundle/registry/bundles/security-check.yaml.statement.json

@@ -1,35 +0,0 @@
-{
-  "_type": "https://in-toto.io/Statement/v1",
-  "predicateType": "https://slsa.dev/provenance/v1",
-  "subject": [
-    {
-      "name": "bundle/registry/bundles/security-check.yaml",
-      "digest": {
-        "sha256": "149e0ff7030b066839e64d1c3fda5556722a7253b427b749e58fd625d5bd0cbf"
-      }
-    }
-  ],
-  "predicate": {
-    "buildType": "https://omg.security/offline-attestation/v1",
-    "metadata": {
-      "signer": {
-        "keyid": "1f5fe64ec2f8c901",
-        "algorithm": "ed25519-minisign",
-        "mode": "local-offline"
-      },
-      "timestamp": "2026-03-14T19:07:32.900718+00:00"
-    }
-  },
-  "signer": {
-    "keyid": "1f5fe64ec2f8c901",
-    "algorithm": "ed25519-minisign",
-    "mode": "local-offline"
-  },
-  "issued_at": "2026-03-14T19:07:32.900718+00:00",
-  "signature": {
-    "alg": "ed25519-minisign",
-    "keyid": "e8c6889e82c87e5f",
-    "value": "untrusted comment: signature from omg local signing key\nePMTGr0N3Sj0fviVH3dw5AmsdU6Am6zXq9Y5vIpZsKTAt2Ya1TE87lRFznftaF7oP6T6LTxFWsmhsTSn88afBw==\ntrusted comment: type=omg-slsa-v1 keyid=e8c6889e82c87e5f issued_at=2026-03-14T19:07:32.900832+00:00 artifact=bundle/registry/bundles/security-check.yaml sha256=149e0ff7030b066839e64d1c3fda5556722a7253b427b749e58fd625d5bd0cbf\ncxQNLCsWEtBeAdiHEudr9c3h/wFDr3H3PzBMMx0XO6P7FOpcZ6MFZLcW+mnxCdsNT6QWLibJJUnPhsbftHjJCQ==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=e8c6889e82c87e5f issued_at=2026-03-14T19:07:32.900832+00:00 artifact=bundle/registry/bundles/security-check.yaml sha256=149e0ff7030b066839e64d1c3fda5556722a7253b427b749e58fd625d5bd0cbf"
-  }
-}

package/artifacts/release/dist/enterprise/attestations/bundle/registry/bundles/terminal-lane.yaml.minisig

@@ -1,4 +0,0 @@
-untrusted comment: signature from omg local signing key
-8b/7s32RhkQqf1GkVliZJBc5CJWnAx9Y9CUhB3gWPU1SZctjrwJwcAJ8OI0EYnk35pXHYDGTIObBTY3W/H2OCg==
-trusted comment: type=omg-slsa-v1 keyid=5c254a89c9c677b0 issued_at=2026-03-14T19:07:32.901498+00:00 artifact=bundle/registry/bundles/terminal-lane.yaml sha256=abda79f3e90955aa3764b89ea94c0b2be0cb60f0425d4144d7e442acdca7f57b
-67Pvb91IXv58MqY66o7WJAiHCHjdlVrt9LQOD3HfAOQ/Rms+wB+shKbuSeLYC+6XqJuUt70tn4HwMWYpBLIvDQ==

package/artifacts/release/dist/enterprise/attestations/bundle/registry/bundles/terminal-lane.yaml.statement.json

@@ -1,35 +0,0 @@
-{
-  "_type": "https://in-toto.io/Statement/v1",
-  "predicateType": "https://slsa.dev/provenance/v1",
-  "subject": [
-    {
-      "name": "bundle/registry/bundles/terminal-lane.yaml",
-      "digest": {
-        "sha256": "abda79f3e90955aa3764b89ea94c0b2be0cb60f0425d4144d7e442acdca7f57b"
-      }
-    }
-  ],
-  "predicate": {
-    "buildType": "https://omg.security/offline-attestation/v1",
-    "metadata": {
-      "signer": {
-        "keyid": "1f5fe64ec2f8c901",
-        "algorithm": "ed25519-minisign",
-        "mode": "local-offline"
-      },
-      "timestamp": "2026-03-14T19:07:32.901384+00:00"
-    }
-  },
-  "signer": {
-    "keyid": "1f5fe64ec2f8c901",
-    "algorithm": "ed25519-minisign",
-    "mode": "local-offline"
-  },
-  "issued_at": "2026-03-14T19:07:32.901384+00:00",
-  "signature": {
-    "alg": "ed25519-minisign",
-    "keyid": "5c254a89c9c677b0",
-    "value": "untrusted comment: signature from omg local signing key\n8b/7s32RhkQqf1GkVliZJBc5CJWnAx9Y9CUhB3gWPU1SZctjrwJwcAJ8OI0EYnk35pXHYDGTIObBTY3W/H2OCg==\ntrusted comment: type=omg-slsa-v1 keyid=5c254a89c9c677b0 issued_at=2026-03-14T19:07:32.901498+00:00 artifact=bundle/registry/bundles/terminal-lane.yaml sha256=abda79f3e90955aa3764b89ea94c0b2be0cb60f0425d4144d7e442acdca7f57b\n67Pvb91IXv58MqY66o7WJAiHCHjdlVrt9LQOD3HfAOQ/Rms+wB+shKbuSeLYC+6XqJuUt70tn4HwMWYpBLIvDQ==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=5c254a89c9c677b0 issued_at=2026-03-14T19:07:32.901498+00:00 artifact=bundle/registry/bundles/terminal-lane.yaml sha256=abda79f3e90955aa3764b89ea94c0b2be0cb60f0425d4144d7e442acdca7f57b"
-  }
-}

package/artifacts/release/dist/enterprise/attestations/bundle/registry/bundles/test-intent-lock.yaml.minisig

@@ -1,4 +0,0 @@
-untrusted comment: signature from omg local signing key
-PxkcLPLTN3a/qs5HGpLoP2m90Ivo3Tsrhf2ybBRCjhbeYqQptzA8VXlmHU+QmszWJVdrG/ZnC8IOimRibkt1CQ==
-trusted comment: type=omg-slsa-v1 keyid=d964c113834b746f issued_at=2026-03-14T19:07:32.902159+00:00 artifact=bundle/registry/bundles/test-intent-lock.yaml sha256=c44556d4225dbda69c4f334e3c124a9261c4f9d870d975e957e43433f2e697fd
-pg2d/iFmlNCbtA7hgJ+fCMPXT3BDlYh5UYVZurAQf4rTcmwUQczTU3IJYsP+OlcseD+assj3QDNfJE8GFwsNBw==

package/artifacts/release/dist/enterprise/attestations/bundle/registry/bundles/test-intent-lock.yaml.statement.json

@@ -1,35 +0,0 @@
-{
-  "_type": "https://in-toto.io/Statement/v1",
-  "predicateType": "https://slsa.dev/provenance/v1",
-  "subject": [
-    {
-      "name": "bundle/registry/bundles/test-intent-lock.yaml",
-      "digest": {
-        "sha256": "c44556d4225dbda69c4f334e3c124a9261c4f9d870d975e957e43433f2e697fd"
-      }
-    }
-  ],
-  "predicate": {
-    "buildType": "https://omg.security/offline-attestation/v1",
-    "metadata": {
-      "signer": {
-        "keyid": "1f5fe64ec2f8c901",
-        "algorithm": "ed25519-minisign",
-        "mode": "local-offline"
-      },
-      "timestamp": "2026-03-14T19:07:32.902040+00:00"
-    }
-  },
-  "signer": {
-    "keyid": "1f5fe64ec2f8c901",
-    "algorithm": "ed25519-minisign",
-    "mode": "local-offline"
-  },
-  "issued_at": "2026-03-14T19:07:32.902040+00:00",
-  "signature": {
-    "alg": "ed25519-minisign",
-    "keyid": "d964c113834b746f",
-    "value": "untrusted comment: signature from omg local signing key\nPxkcLPLTN3a/qs5HGpLoP2m90Ivo3Tsrhf2ybBRCjhbeYqQptzA8VXlmHU+QmszWJVdrG/ZnC8IOimRibkt1CQ==\ntrusted comment: type=omg-slsa-v1 keyid=d964c113834b746f issued_at=2026-03-14T19:07:32.902159+00:00 artifact=bundle/registry/bundles/test-intent-lock.yaml sha256=c44556d4225dbda69c4f334e3c124a9261c4f9d870d975e957e43433f2e697fd\npg2d/iFmlNCbtA7hgJ+fCMPXT3BDlYh5UYVZurAQf4rTcmwUQczTU3IJYsP+OlcseD+assj3QDNfJE8GFwsNBw==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=d964c113834b746f issued_at=2026-03-14T19:07:32.902159+00:00 artifact=bundle/registry/bundles/test-intent-lock.yaml sha256=c44556d4225dbda69c4f334e3c124a9261c4f9d870d975e957e43433f2e697fd"
-  }
-}

package/artifacts/release/dist/enterprise/attestations/bundle/registry/bundles/tracebank.yaml.minisig

@@ -1,4 +0,0 @@
-untrusted comment: signature from omg local signing key
-e5YK8vWi+nWvEXkRgKEWEBDLhaU2xnHFpD1tARvOR6Vv2jUEXsXjfTV5j3x/xi1ABYEUiWnFw90HNZi2r94qCA==
-trusted comment: type=omg-slsa-v1 keyid=440e25f56363ff34 issued_at=2026-03-14T19:07:32.902755+00:00 artifact=bundle/registry/bundles/tracebank.yaml sha256=956e6f21e68f1813250aaea9250762338e9e89c4feae1e3627b49febc0b244cc
-FzAXy+VNVrzfjhrFfL+ztIPZhd/NXfWJ060aBdYM61zHOcbMCcNN/vimMx/6CEYZE8s8Hze+CMHVyF4E0HcSAA==

package/artifacts/release/dist/enterprise/attestations/bundle/registry/bundles/tracebank.yaml.statement.json

@@ -1,35 +0,0 @@
-{
-  "_type": "https://in-toto.io/Statement/v1",
-  "predicateType": "https://slsa.dev/provenance/v1",
-  "subject": [
-    {
-      "name": "bundle/registry/bundles/tracebank.yaml",
-      "digest": {
-        "sha256": "956e6f21e68f1813250aaea9250762338e9e89c4feae1e3627b49febc0b244cc"
-      }
-    }
-  ],
-  "predicate": {
-    "buildType": "https://omg.security/offline-attestation/v1",
-    "metadata": {
-      "signer": {
-        "keyid": "1f5fe64ec2f8c901",
-        "algorithm": "ed25519-minisign",
-        "mode": "local-offline"
-      },
-      "timestamp": "2026-03-14T19:07:32.902634+00:00"
-    }
-  },
-  "signer": {
-    "keyid": "1f5fe64ec2f8c901",
-    "algorithm": "ed25519-minisign",
-    "mode": "local-offline"
-  },
-  "issued_at": "2026-03-14T19:07:32.902634+00:00",
-  "signature": {
-    "alg": "ed25519-minisign",
-    "keyid": "440e25f56363ff34",
-    "value": "untrusted comment: signature from omg local signing key\ne5YK8vWi+nWvEXkRgKEWEBDLhaU2xnHFpD1tARvOR6Vv2jUEXsXjfTV5j3x/xi1ABYEUiWnFw90HNZi2r94qCA==\ntrusted comment: type=omg-slsa-v1 keyid=440e25f56363ff34 issued_at=2026-03-14T19:07:32.902755+00:00 artifact=bundle/registry/bundles/tracebank.yaml sha256=956e6f21e68f1813250aaea9250762338e9e89c4feae1e3627b49febc0b244cc\nFzAXy+VNVrzfjhrFfL+ztIPZhd/NXfWJ060aBdYM61zHOcbMCcNN/vimMx/6CEYZE8s8Hze+CMHVyF4E0HcSAA==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=440e25f56363ff34 issued_at=2026-03-14T19:07:32.902755+00:00 artifact=bundle/registry/bundles/tracebank.yaml sha256=956e6f21e68f1813250aaea9250762338e9e89c4feae1e3627b49febc0b244cc"
-  }
-}

package/artifacts/release/dist/enterprise/attestations/bundle/registry/bundles/vision.yaml.minisig

@@ -1,4 +0,0 @@
-untrusted comment: signature from omg local signing key
-cz0PlC5VFWxD1+Jeu/DkW5T79dCfHSJHKq1UKe4Tk/nFPxyUJCXn0Rn9GNzQUCL6uzPOoptApXUKaYAL+rtFBQ==
-trusted comment: type=omg-slsa-v1 keyid=bb7ba8e576b6db58 issued_at=2026-03-14T19:07:32.903347+00:00 artifact=bundle/registry/bundles/vision.yaml sha256=a2ae08d310a2872057a7dec0202c1eca65180ebe4a82ec1655d86f186386aefb
-hPwMtiT9IxY9xAaat7j79QZSvq0S8TCMGX1hdsQimV8x5vLO8UwIP/OkUNz/QHYaMPO7nGPOnr1PL4fkYAQaAA==

package/artifacts/release/dist/enterprise/attestations/bundle/registry/bundles/vision.yaml.statement.json

@@ -1,35 +0,0 @@
-{
-  "_type": "https://in-toto.io/Statement/v1",
-  "predicateType": "https://slsa.dev/provenance/v1",
-  "subject": [
-    {
-      "name": "bundle/registry/bundles/vision.yaml",
-      "digest": {
-        "sha256": "a2ae08d310a2872057a7dec0202c1eca65180ebe4a82ec1655d86f186386aefb"
-      }
-    }
-  ],
-  "predicate": {
-    "buildType": "https://omg.security/offline-attestation/v1",
-    "metadata": {
-      "signer": {
-        "keyid": "1f5fe64ec2f8c901",
-        "algorithm": "ed25519-minisign",
-        "mode": "local-offline"
-      },
-      "timestamp": "2026-03-14T19:07:32.903233+00:00"
-    }
-  },
-  "signer": {
-    "keyid": "1f5fe64ec2f8c901",
-    "algorithm": "ed25519-minisign",
-    "mode": "local-offline"
-  },
-  "issued_at": "2026-03-14T19:07:32.903233+00:00",
-  "signature": {
-    "alg": "ed25519-minisign",
-    "keyid": "bb7ba8e576b6db58",
-    "value": "untrusted comment: signature from omg local signing key\ncz0PlC5VFWxD1+Jeu/DkW5T79dCfHSJHKq1UKe4Tk/nFPxyUJCXn0Rn9GNzQUCL6uzPOoptApXUKaYAL+rtFBQ==\ntrusted comment: type=omg-slsa-v1 keyid=bb7ba8e576b6db58 issued_at=2026-03-14T19:07:32.903347+00:00 artifact=bundle/registry/bundles/vision.yaml sha256=a2ae08d310a2872057a7dec0202c1eca65180ebe4a82ec1655d86f186386aefb\nhPwMtiT9IxY9xAaat7j79QZSvq0S8TCMGX1hdsQimV8x5vLO8UwIP/OkUNz/QHYaMPO7nGPOnr1PL4fkYAQaAA==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=bb7ba8e576b6db58 issued_at=2026-03-14T19:07:32.903347+00:00 artifact=bundle/registry/bundles/vision.yaml sha256=a2ae08d310a2872057a7dec0202c1eca65180ebe4a82ec1655d86f186386aefb"
-  }
-}

package/artifacts/release/dist/enterprise/attestations/bundle/registry/omg-capability.schema.json.minisig

@@ -1,4 +0,0 @@
-untrusted comment: signature from omg local signing key
-iq1IEdylN1qpce8V9d0DZl8DQECsBeCRV6AVVAmXTG0rJHmzw61ZAX2J+NtKkacUPGnaGbyGTj34KvtaESU+Cw==
-trusted comment: type=omg-slsa-v1 keyid=1c08c2ef3d089693 issued_at=2026-03-14T19:07:32.903972+00:00 artifact=bundle/registry/omg-capability.schema.json sha256=d1938a2741e122db172f16360c02fe298c75cc72212a0c10a9ff663bbace2bac
-euYg4RyNiHOuYLajhDR/bZDCtVuEz6qkGmmzHZiMHr2M1JN19zkT/pRjQVsb1mZzqj9eKD1o9E8mXjtuzOjmCA==

package/artifacts/release/dist/enterprise/attestations/bundle/registry/omg-capability.schema.json.statement.json

@@ -1,35 +0,0 @@
-{
-  "_type": "https://in-toto.io/Statement/v1",
-  "predicateType": "https://slsa.dev/provenance/v1",
-  "subject": [
-    {
-      "name": "bundle/registry/omg-capability.schema.json",
-      "digest": {
-        "sha256": "d1938a2741e122db172f16360c02fe298c75cc72212a0c10a9ff663bbace2bac"
-      }
-    }
-  ],
-  "predicate": {
-    "buildType": "https://omg.security/offline-attestation/v1",
-    "metadata": {
-      "signer": {
-        "keyid": "1f5fe64ec2f8c901",
-        "algorithm": "ed25519-minisign",
-        "mode": "local-offline"
-      },
-      "timestamp": "2026-03-14T19:07:32.903853+00:00"
-    }
-  },
-  "signer": {
-    "keyid": "1f5fe64ec2f8c901",
-    "algorithm": "ed25519-minisign",
-    "mode": "local-offline"
-  },
-  "issued_at": "2026-03-14T19:07:32.903853+00:00",
-  "signature": {
-    "alg": "ed25519-minisign",
-    "keyid": "1c08c2ef3d089693",
-    "value": "untrusted comment: signature from omg local signing key\niq1IEdylN1qpce8V9d0DZl8DQECsBeCRV6AVVAmXTG0rJHmzw61ZAX2J+NtKkacUPGnaGbyGTj34KvtaESU+Cw==\ntrusted comment: type=omg-slsa-v1 keyid=1c08c2ef3d089693 issued_at=2026-03-14T19:07:32.903972+00:00 artifact=bundle/registry/omg-capability.schema.json sha256=d1938a2741e122db172f16360c02fe298c75cc72212a0c10a9ff663bbace2bac\neuYg4RyNiHOuYLajhDR/bZDCtVuEz6qkGmmzHZiMHr2M1JN19zkT/pRjQVsb1mZzqj9eKD1o9E8mXjtuzOjmCA==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=1c08c2ef3d089693 issued_at=2026-03-14T19:07:32.903972+00:00 artifact=bundle/registry/omg-capability.schema.json sha256=d1938a2741e122db172f16360c02fe298c75cc72212a0c10a9ff663bbace2bac"
-  }
-}

package/artifacts/release/dist/enterprise/attestations/bundle/settings.json.minisig

@@ -1,4 +0,0 @@
-untrusted comment: signature from omg local signing key
-mzpwYxhSSFiBAtQ3Y0o2MwqlN7pbdSDBnczOrckHu1n8zQkuMNXckYHsfLAjs3d9Y87Rk0pdDmpUysHhVyioDw==
-trusted comment: type=omg-slsa-v1 keyid=2be3a42988a3e4a5 issued_at=2026-03-14T19:07:32.904605+00:00 artifact=bundle/settings.json sha256=2991ed52c9f569658b3230925a8a52de303bd1744bc5c3be7a173b7b0d8257a0
-H1WLLscmYR8kfY/VKO6+LNuyjJKRRNLH9CMu0nYKpB++zx3xAqnHoZggzUPic4tazYGvU+EqcjR2lyIXXHPWCw==

package/artifacts/release/dist/enterprise/attestations/bundle/settings.json.statement.json

@@ -1,35 +0,0 @@
-{
-  "_type": "https://in-toto.io/Statement/v1",
-  "predicateType": "https://slsa.dev/provenance/v1",
-  "subject": [
-    {
-      "name": "bundle/settings.json",
-      "digest": {
-        "sha256": "2991ed52c9f569658b3230925a8a52de303bd1744bc5c3be7a173b7b0d8257a0"
-      }
-    }
-  ],
-  "predicate": {
-    "buildType": "https://omg.security/offline-attestation/v1",
-    "metadata": {
-      "signer": {
-        "keyid": "1f5fe64ec2f8c901",
-        "algorithm": "ed25519-minisign",
-        "mode": "local-offline"
-      },
-      "timestamp": "2026-03-14T19:07:32.904486+00:00"
-    }
-  },
-  "signer": {
-    "keyid": "1f5fe64ec2f8c901",
-    "algorithm": "ed25519-minisign",
-    "mode": "local-offline"
-  },
-  "issued_at": "2026-03-14T19:07:32.904486+00:00",
-  "signature": {
-    "alg": "ed25519-minisign",
-    "keyid": "2be3a42988a3e4a5",
-    "value": "untrusted comment: signature from omg local signing key\nmzpwYxhSSFiBAtQ3Y0o2MwqlN7pbdSDBnczOrckHu1n8zQkuMNXckYHsfLAjs3d9Y87Rk0pdDmpUysHhVyioDw==\ntrusted comment: type=omg-slsa-v1 keyid=2be3a42988a3e4a5 issued_at=2026-03-14T19:07:32.904605+00:00 artifact=bundle/settings.json sha256=2991ed52c9f569658b3230925a8a52de303bd1744bc5c3be7a173b7b0d8257a0\nH1WLLscmYR8kfY/VKO6+LNuyjJKRRNLH9CMu0nYKpB++zx3xAqnHoZggzUPic4tazYGvU+EqcjR2lyIXXHPWCw==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=2be3a42988a3e4a5 issued_at=2026-03-14T19:07:32.904605+00:00 artifact=bundle/settings.json sha256=2991ed52c9f569658b3230925a8a52de303bd1744bc5c3be7a173b7b0d8257a0"
-  }
-}

package/artifacts/release/dist/enterprise/bundle/.agents/skills/omg/AGENTS.fragment.md

@@ -1,75 +0,0 @@
-# OMG Codex Governance (channel: enterprise)
-
-## Build & Test
-
-```bash
-python3 -m pytest tests -q
-python3 scripts/omg.py contract validate
-python3 scripts/omg.py contract compile --host codex --channel enterprise
-```
-
-## Protected Paths
-
-The following paths require tier-gated review before mutation:
-
-- `.omg/**`
-- `.agents/**`
-- `.codex/**`
-- `.claude/**`
-
-## Release Audit
-
-Release readiness requires claim and compliance outcomes:
-
-- `claim_judge`
-- `compliance_governor`
-- `execution_primitives`
-Attestation requirements:
-- `registry.verify_artifact.sign_artifact_statement`
-- `registry.verify_artifact.verify_artifact_statement`
-
-## Evidence Contract
-
-Every production action must emit evidence containing these fields:
-
-- `attestation_statement`
-- `attestation_verifier`
-- `claim_judge_verdict`
-- `compliance_verdict`
-- `executor`
-- `lineage`
-- `timestamp`
-- `trace_id`
-
-## Required Skills
-
-- `omg/control-plane`
-- `omg/mcp-fabric`
-
-## Protected Planning Surface
-
-Council planning skills are protected and explicit-invocation only:
-
-- `omg/plan-council`
-
-## Web Search Policy
-
-- Prefer cached results over live network requests.
-- Do NOT initiate live web searches unless explicitly instructed.
-- Use `context7` or local documentation before external lookups.
-- Set `cached_web_search: prefer_cached` as the default.
-
-## Approval Constraints
-
-- Destructive file operations require explicit user approval.
-- `git push --force` and branch deletions require explicit approval.
-- Production deployments require explicit approval.
-- Mutations to protected paths require tier-gated approval.
-
-## Rules & Automations
-
-- Rules: `protected_paths, explicit_invocation`
-- Automations: `contract-compile, release-readiness`
-- Defer to the repo's `AGENTS.md` / `AGENTS.override.md` instruction hierarchy before OMG-specific guidance.
-- Do not mirror or override Codex built-in slash commands; OMG guidance applies through MCP, skills, and generated rules.
-- Require explicit invocation for protected production planning skills.

package/artifacts/release/dist/enterprise/bundle/.agents/skills/omg/algorithms/SKILL.md

@@ -1,11 +0,0 @@
----
-name: omg-algorithms
-description: "Determinism and benchmark attachments for algorithm-heavy work."
----
-
-# OMG Algorithms Pack
-
-- Channel: `enterprise`
-- Execution modes: `embedded, local_supervisor`
-- MCP servers: `omg-control`
-- Evidence outputs: `.omg/evals/latest.json`

package/artifacts/release/dist/enterprise/bundle/.agents/skills/omg/algorithms/openai.yaml

@@ -1,11 +0,0 @@
-name: omg-algorithms
-description: "Determinism and benchmark attachments for algorithm-heavy work."
-allow_implicit_invocation: false
-metadata:
-  channel: enterprise
-  bundle_id: algorithms
-  title: "OMG Algorithms Pack"
-mcp_servers:
-  - omg-control
-allowed_tools:
-  - "Read"

package/artifacts/release/dist/enterprise/bundle/.agents/skills/omg/api-twin/SKILL.md

@@ -1,11 +0,0 @@
----
-name: omg-api-twin
-description: "Versioned endpoint cassette replay with latency, drift, and cost reporting."
----
-
-# OMG API Twin
-
-- Channel: `enterprise`
-- Execution modes: `embedded, local_supervisor`
-- MCP servers: `omg-control`
-- Evidence outputs: `.omg/state/api_twin.json`

package/artifacts/release/dist/enterprise/bundle/.agents/skills/omg/api-twin/openai.yaml

@@ -1,12 +0,0 @@
-name: omg-api-twin
-description: "Versioned endpoint cassette replay with latency, drift, and cost reporting."
-allow_implicit_invocation: false
-metadata:
-  channel: enterprise
-  bundle_id: api-twin
-  title: "OMG API Twin"
-mcp_servers:
-  - omg-control
-allowed_tools:
-  - "Read"
-  - "Bash(python3:*)"