@trac3er/oh-my-god 2.2.3 → 2.3.0

package/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
   },
   "metadata": {
     "description": "OMG - Oh-My-God for Claude Code and supported agent hosts",
-    "version": "2.2.3",
+    "version": "2.3.0",
     "homepage": "https://github.com/trac3er00/OMG",
     "repository": "https://github.com/trac3er00/OMG"
   },
@@ -14,7 +14,7 @@
     {
       "name": "omg",
       "description": "OMG plugin layer for Claude Code and supported agent hosts with native setup, orchestration, and interop.",
-      "version": "2.2.3",
+      "version": "2.3.0",
       "source": "./",
       "author": {
         "name": "trac3er00"
@@ -32,5 +32,5 @@
       ]
     }
   ],
-  "version": "2.2.3"
+  "version": "2.3.0"
 }

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "omg",
-  "version": "2.2.3",
+  "version": "2.3.0",
   "description": "OMG plugin layer for Claude Code with native setup, orchestration, and interop.",
   "author": {
     "name": "trac3er00"

package/.claude-plugin/scripts/install.sh

@@ -19,7 +19,7 @@ error() { echo -e "${RED}✗${NC} $1"; }
 echo ""
 echo -e "${BLUE}╔═══════════════════════════════════════════════════════════════╗${NC}"
 echo -e "${BLUE}║                                                               ║${NC}"
-echo -e "${BLUE}║              OMG Plugin Installer v2.2.3                     ║${NC}"
+echo -e "${BLUE}║              OMG Plugin Installer v2.3.0                     ║${NC}"
 echo -e "${BLUE}║                                                               ║${NC}"
 echo -e "${BLUE}╚═══════════════════════════════════════════════════════════════╝${NC}"
 echo ""

package/.gemini/settings.json

@@ -9,9 +9,9 @@
     }
   },
   "_omg": {
-    "_version": "2.2.3",
+    "_version": "2.3.0",
     "generated": {
-      "contract_version": "2.2.3",
+      "contract_version": "2.3.0",
       "channel": "enterprise",
       "required_bundles": [
         "control-plane",

package/.kimi/mcp.json

@@ -9,9 +9,9 @@
     }
   },
   "_omg": {
-    "_version": "2.2.3",
+    "_version": "2.3.0",
     "generated": {
-      "contract_version": "2.2.3",
+      "contract_version": "2.3.0",
       "channel": "enterprise",
       "required_bundles": [
         "control-plane",

package/CHANGELOG.md

@@ -1,6 +1,19 @@
 # Changelog
 
-## Unreleased
+## 2.3.0 - 2026-03-15
+
+### Governed Execution Engine Milestone
+
+- **production preset**: new `production` preset enables all governed flags — use `--preset=production` with `OMG-setup.sh` or `bunx @trac3er/oh-my-god`
+- **bunx install path**: `bunx @trac3er/oh-my-god` works alongside `npm install`
+- **terms_guard**: real enforcement blocks promotional cross-model sharing, hidden identity switching, undisclosed third-party data sharing
+- **six governed agents**: `architect-planner`, `explorer-indexer`, `implementer`, `security-reviewer`, `verifier`, `causal-tracer` compiled into Claude host artifacts; no `bypassPermissions` on any
+- **method compiler**: `contract compile --method` emits signed seven-phase methodology artifacts
+- **context compiler**: `context compile` emits bounded provenance-only packets for Claude, Codex, Gemini, and Kimi
+- **provider parity eval**: `provider-parity-eval --task task.json --mode recorded` evaluates all canonical hosts and emits a structured report
+- **PR risk engine**: structured risk classification by changed area; required gates and bundles exposed in PR review output
+- **governance hotfixes**: `verify_done_when({})` returns `ok`, `git tag -l` not classified as mutation, test-validator false positives eliminated
+- canonical hosts: `claude`, `codex`, `gemini`, `kimi`; OpenCode remains compatibility-only
 
 ## 2.2.3 - 2026-03-11
 

package/CLI-ADAPTER-MAP.md

@@ -164,7 +164,7 @@ OpenCode remains a compatibility-only adapter surface and is intentionally exclu
   - `~/.claude/settings.json` → `enabledPlugins[plugin_ref] = true`
   - `~/.claude/plugins/installed_plugins.json` → Plugin metadata with installed path, version, timestamp
 - **Plugin Ref Format:** `omg@omg` (name@marketplace_id)
-- **Version:** `2.2.3` (from package.json)
+- **Version:** `2.3.0` (from package.json)
 
 #### C. Plugin Unregistration (Lines 631-669)
 - **Function:** `unregister_plugin_from_registry(plugin_ref)`
@@ -208,7 +208,7 @@ OpenCode remains a compatibility-only adapter surface and is intentionally exclu
 ```json
 {
   "name": "@trac3er/oh-my-god",
-  "version": "2.2.3",
+  "version": "2.3.0",
   "scripts": {
     "postinstall": "./OMG-setup.sh install --non-interactive",
     "update": "./OMG-setup.sh update",
@@ -240,7 +240,7 @@ CANONICAL_REPO_URL = "https://github.com/trac3er00/OMG"
 CANONICAL_PACKAGE_NAME = "@trac3er/oh-my-god"
 CANONICAL_PLUGIN_ID = "omg"
 CANONICAL_MARKETPLACE_ID = "omg"
-CANONICAL_VERSION = "2.2.3"
+CANONICAL_VERSION = "2.3.0"
 ```
 
 ---

package/OMG-setup.sh

@@ -5,7 +5,7 @@ SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 CLAUDE_DIR="${CLAUDE_CONFIG_DIR:-$HOME/.claude}"
 BACKUP_TS="$(date +%Y%m%d_%H%M%S)"
 BACKUP_DIR="$CLAUDE_DIR/.omg-backup-$BACKUP_TS"
-VERSION="2.2.3"
+VERSION="2.3.0"
 
 PLUGIN_NAME="omg"
 PLUGIN_MARKETPLACE="omg"
@@ -85,7 +85,7 @@ Options:
   --mode=omg-only|coexist
                      Native OMG adoption mode for overlapping ecosystems
   --adopt=auto       Detect OMG-adjacent ecosystems during install/update
-  --preset=safe|balanced|interop|labs|buffet
+  --preset=safe|balanced|interop|labs|buffet|production
                      User-facing preset for managed OMG features
   --enable-browser   Enable optional OMG browser capability metadata and guidance
   -h, --help         Show this help
@@ -96,6 +96,7 @@ Examples:
   ./OMG-setup.sh install --install-as-plugin
   ./OMG-setup.sh install --mode=coexist --preset=interop
   ./OMG-setup.sh update --non-interactive --merge-policy=apply
+  bunx @trac3er/oh-my-god
   ./OMG-setup.sh reinstall --dry-run
   ./OMG-setup.sh uninstall --dry-run
 EOF
@@ -239,12 +240,12 @@ parse_args() {
         FRESH_INSTALL=true
     fi
 
-    if [ ! -t 0 ] || [ -n "${npm_lifecycle_event:-}" ] || [ -n "${npm_execpath:-}" ]; then
+    if [ ! -t 0 ] || [ -n "${npm_lifecycle_event:-}" ] || [ -n "${npm_execpath:-}" ] || [ -n "${BUN_INSTALL:-}" ]; then
         NON_INTERACTIVE=true
     fi
 
-    # Auto-enable plugin mode for npm installs
-    if [ -n "${npm_execpath:-}" ] || [ -n "${npm_lifecycle_event:-}" ]; then
+    # Auto-enable plugin mode for npm/bunx installs
+    if [ -n "${npm_execpath:-}" ] || [ -n "${npm_lifecycle_event:-}" ] || [ -n "${BUN_INSTALL:-}" ]; then
         INSTALL_AS_PLUGIN=true
     fi
 
@@ -268,7 +269,7 @@ parse_args() {
         plugins-first)
             OMG_PRESET="interop"
             ;;
-        safe|balanced|interop|labs|buffet) ;;
+        safe|balanced|interop|labs|buffet|production) ;;
         *)
             echo "Unknown OMG preset: $OMG_PRESET"
             exit 1

package/OMG_COMPAT_CONTRACT.md

@@ -1,6 +1,6 @@
 ---
 title: OMG Production Control Plane
-version: 2.2.3
+version: 2.3.0
 canonical_hosts:
   - claude
   - codex

package/README.md

@@ -91,10 +91,12 @@ OMG now ships a production control-plane contract and generated host artifacts.
 
 ## Quickstart
 
-Install with npm:
+Install with npm or bunx (Bun runtime):
 
 ```bash
 npm install @trac3er/oh-my-god
+# or
+bunx @trac3er/oh-my-god
 ```
 
 That fast path now does two things:
@@ -151,7 +153,7 @@ OMG uses native setup language instead of public migration commands.
 - `OMG-only`: recommended. OMG becomes the primary hooks, HUD, MCP, and orchestration layer.
 - `coexist`: advanced. OMG preserves non-conflicting third-party surfaces and records overlap instead of overwriting it.
 - Modes: `chill`, `focused`, `exploratory`. `focused` is the production default.
-- Presets: `safe`, `balanced`, `interop`, `labs`.
+- Presets: `safe`, `balanced`, `interop`, `labs`, `production` (all governed flags on).
 
 ## Security Notes
 

package/artifacts/public/dist/public/manifest.json

@@ -7,7 +7,7 @@
     "gemini",
     "kimi"
   ],
-  "contract_version": "2.1.9",
+  "contract_version": "2.3.0",
   "artifacts": [
     {
       "path": "bundle/.agents/skills/omg/AGENTS.fragment.md",
@@ -1090,4 +1090,4 @@
       "algorithm": "ed25519-minisign"
     }
   ]
-}
+}

package/commands/OMG:validate.md

@@ -36,7 +36,7 @@ python3 scripts/omg.py validate --format json
       "required": true | false
     }
   ],
-  "version": "2.2.3"
+  "version": "2.3.0"
 }
 ```
 

package/dist/enterprise/manifest.json

@@ -7,7 +7,7 @@
     "gemini",
     "kimi"
   ],
-  "contract_version": "2.2.3",
+  "contract_version": "2.3.0",
   "artifacts": [
     {
       "path": "bundle/.agents/skills/omg/AGENTS.fragment.md",
@@ -1090,4 +1090,4 @@
       "algorithm": "ed25519-minisign"
     }
   ]
-}
+}

package/dist/public/manifest.json

@@ -7,7 +7,7 @@
     "gemini",
     "kimi"
   ],
-  "contract_version": "2.2.3",
+  "contract_version": "2.3.0",
   "artifacts": [
     {
       "path": "bundle/.agents/skills/omg/AGENTS.fragment.md",
@@ -1090,4 +1090,4 @@
       "algorithm": "ed25519-minisign"
     }
   ]
-}
+}

package/docs/install/github-app.md

@@ -27,9 +27,9 @@ The bot requires three configuration variables.
 
 | Variable | Type | Description |
 | :--- | :--- | :--- |
-| `GITHUB_APP_ID` | Config Variable | The App ID from your GitHub App settings. |
-| `GITHUB_APP_PRIVATE_KEY` | Secret | The full content of the downloaded `.pem` file. |
-| `GITHUB_INSTALLATION_ID` | Config Variable | The ID from the installation URL. |
+| `OMG_APP_ID` | Config Variable | The App ID from your GitHub App settings. |
+| `OMG_APP_PRIVATE_KEY` | Secret | The full content of the downloaded `.pem` file. |
+| `OMG_APP_INSTALLATION_ID` | Config Variable | The ID from the installation URL. |
 
 #### Local Development
 Store the private key in a file and load it:
@@ -40,12 +40,13 @@ export GITHUB_APP_PRIVATE_KEY="$(cat path/to/your-app.private-key.pem)"
 ```
 
 #### GitHub Actions
-Add the App ID and Installation ID as **Variables** and the Private Key as a **Secret**:
+Add the App ID and Installation ID as **Variables** and the Private Key as a **Secret**.
+GitHub Actions forbids secret names starting with `GITHUB_`, so we use the `OMG_` prefix for stored values and map them to the `GITHUB_`-prefixed env vars the runtime expects:
 ```yaml
 env:
-  GITHUB_APP_ID: ${{ vars.GITHUB_APP_ID }}
-  GITHUB_INSTALLATION_ID: ${{ vars.GITHUB_INSTALLATION_ID }}
-  GITHUB_APP_PRIVATE_KEY: ${{ secrets.GITHUB_APP_PRIVATE_KEY }}
+  GITHUB_APP_ID: ${{ vars.OMG_APP_ID }}
+  GITHUB_INSTALLATION_ID: ${{ vars.OMG_APP_INSTALLATION_ID }}
+  GITHUB_APP_PRIVATE_KEY: ${{ secrets.OMG_APP_PRIVATE_KEY }}
 ```
 
 ## Security Hardening

package/hooks/_common.py

@@ -249,7 +249,7 @@ def atomic_json_write(path, data):
 
 # Feature flags cache — read settings.json once per hook invocation
 _FEATURE_CACHE = {}
-_SETTINGS_PRESET = None
+_settings_preset = None
 _MANAGED_PRESET_FLAGS = {
     "SETUP",
     "SETUP_WIZARD",
@@ -262,6 +262,12 @@ _MANAGED_PRESET_FLAGS = {
     "TEST_GENERATION",
     "DEP_HEALTH",
     "CODEBASE_VIZ",
+    "DATA_ENFORCEMENT",
+    "WEB_ENFORCEMENT",
+    "TERMS_ENFORCEMENT",
+    "COUNCIL_ROUTING",
+    "FORGE_ALL_DOMAINS",
+    "NOTEBOOKLM",
 }
 _PRESET_FEATURES = {
     "safe": {flag: False for flag in _MANAGED_PRESET_FLAGS},
@@ -303,7 +309,15 @@ _PRESET_FEATURES = {
         "TEST_GENERATION": True,
         "DEP_HEALTH": True,
         "CODEBASE_VIZ": True,
+        "DATA_ENFORCEMENT": False,
+        "WEB_ENFORCEMENT": False,
+        "TERMS_ENFORCEMENT": False,
+        "COUNCIL_ROUTING": False,
+        "FORGE_ALL_DOMAINS": False,
+        "NOTEBOOKLM": False,
     },
+    "buffet": {flag: True for flag in _MANAGED_PRESET_FLAGS},
+    "production": {flag: True for flag in _MANAGED_PRESET_FLAGS},
 }
 _FEATURE_ALIASES = {
     "SETUP": ("SETUP", "SETUP_WIZARD"),
@@ -313,10 +327,10 @@ _FEATURE_ALIASES = {
 
 def _load_feature_settings():
     """Populate feature cache from settings.json and return the configured preset."""
-    global _SETTINGS_PRESET
+    global _settings_preset
 
     _FEATURE_CACHE.clear()
-    _SETTINGS_PRESET = None
+    _settings_preset = None
     try:
         settings_path = os.path.join(get_project_dir(), "settings.json")
         if os.path.exists(settings_path):
@@ -329,7 +343,7 @@ def _load_feature_settings():
                     _FEATURE_CACHE.update(features)
                 preset = omg.get("preset")
                 if isinstance(preset, str) and preset in _PRESET_FEATURES:
-                    _SETTINGS_PRESET = preset
+                    _settings_preset = preset
     except Exception:
         pass
 
@@ -367,10 +381,10 @@ def get_feature_flag(flag_name, default=True):
         if name in _FEATURE_CACHE:
             return _FEATURE_CACHE[name]
 
-    if _SETTINGS_PRESET in _PRESET_FEATURES:
+    if _settings_preset in _PRESET_FEATURES:
         for name in lookup_names:
             if name in _MANAGED_PRESET_FLAGS:
-                return _PRESET_FEATURES[_SETTINGS_PRESET].get(name, default)
+                return _PRESET_FEATURES[_settings_preset].get(name, default)
 
     return default
 

package/hooks/secret-guard.py

@@ -23,7 +23,7 @@ bootstrap_runtime_paths(__file__)
 setup_crash_handler("secret-guard", fail_closed=True)
 
 try:
-    from policy_engine import evaluate_file_access, to_pretool_hook_output
+    from policy_engine import evaluate_file_access, load_allowlist, to_pretool_hook_output
     from secret_audit import log_secret_access
     from runtime.mutation_gate import check_mutation_allowed
 except Exception as _import_err:
@@ -72,7 +72,8 @@ if tool in ("Write", "Edit", "MultiEdit"):
         deny_decision(deny_reason)
         sys.exit(0)
 
-decision = evaluate_file_access(tool, file_path)
+allowlist = load_allowlist(get_project_dir())
+decision = evaluate_file_access(tool, file_path, allowlist=allowlist)
 
 # Audit log: record every secret access decision
 try:

package/hooks/stop_dispatcher.py

@@ -428,6 +428,25 @@ def check_recent_failures(data, project_dir):
     return blocks
 
 
+_TEST_DIR_NAMES = frozenset({"tests", "test", "__tests__"})
+_SKIP_DIR_SEGMENTS = frozenset({"build", "dist", "node_modules", ".git"})
+
+
+def _is_test_file_path(rel_path):
+    parts = rel_path.replace("\\", "/").split("/")
+    if any(seg in _SKIP_DIR_SEGMENTS for seg in parts[:-1]):
+        return False
+    basename = parts[-1].lower() if parts else ""
+    if any(p in basename for p in (".test.", ".spec.", "_test.", ".tests.")):
+        return True
+    if "__tests__" in rel_path:
+        return True
+    if basename.startswith("test_"):
+        parent_dirs = {p.lower() for p in parts[:-1]}
+        return not parent_dirs or bool(parent_dirs & _TEST_DIR_NAMES)
+    return False
+
+
 def check_test_execution(data, project_dir):
     if not get_feature_flag("test_execution", True):
         return []
@@ -444,8 +463,7 @@ def check_test_execution(data, project_dir):
         test_files_modified = False
         try:
             for file_path in changed_files:
-                fl = file_path.lower()
-                if any(p in fl for p in ["test", "spec", "__tests__", ".test.", ".spec.", "_test."]):
+                if _is_test_file_path(file_path):
                     test_files_modified = True
                     break
         except Exception as e:  # security: test execution check

package/hooks/terms-guard.py

@@ -0,0 +1,96 @@
+#!/usr/bin/env python3
+import re
+import sys
+from pathlib import Path
+
+HOOKS_DIR = str(Path(__file__).resolve().parent)
+PROJECT_ROOT = str(Path(HOOKS_DIR).parent)
+PORTABLE_RUNTIME_ROOT = str(Path(PROJECT_ROOT) / "omg-runtime")
+for path in (HOOKS_DIR, PROJECT_ROOT, PORTABLE_RUNTIME_ROOT):
+    if path not in sys.path:
+        sys.path.insert(0, path)
+
+from hooks._common import bootstrap_runtime_paths, setup_crash_handler, json_input, deny_decision, get_feature_flag
+
+bootstrap_runtime_paths(__file__)
+setup_crash_handler("terms-guard", fail_closed=True)
+
+MODEL_TOKENS = ("claude", "codex", "gemini", "kimi", "gpt", "openai", "anthropic")
+
+
+def _collect_mutation_text(tool_name: str, tool_input: object) -> str:
+    if tool_name not in {"Write", "Edit", "MultiEdit"}:
+        return ""
+    if not isinstance(tool_input, dict):
+        return ""
+
+    parts: list[str] = []
+    for key in ("content", "new_string", "old_string", "insert_text", "text"):
+        value = tool_input.get(key)
+        if isinstance(value, str) and value:
+            parts.append(value)
+
+    edits = tool_input.get("edits")
+    if isinstance(edits, list):
+        for item in edits:
+            if not isinstance(item, dict):
+                continue
+            for key in ("newText", "oldText", "new_string", "old_string", "content"):
+                value = item.get(key)
+                if isinstance(value, str) and value:
+                    parts.append(value)
+
+    return "\n".join(parts)
+
+
+def _model_mentions(text: str) -> int:
+    seen = {token for token in MODEL_TOKENS if re.search(rf"\b{re.escape(token)}\b", text, flags=re.IGNORECASE)}
+    return len(seen)
+
+
+def _detect_violation_reason(text: str) -> str | None:
+    lowered = text.lower()
+    has_star = re.search(r"\b(star|starring|upvote)\b", lowered) is not None
+    has_share = re.search(r"\b(share|forward|broadcast|cross-model|cross model|copy this prompt|paste this prompt)\b", lowered) is not None
+    if has_star and has_share and _model_mentions(lowered) >= 2:
+        return "promotion_star_cross_model"
+
+    has_switching = re.search(r"\b(route|switch|proxy|forward|delegate)\b", lowered) is not None
+    has_identity_claim = re.search(
+        r"\b(tell\s+the\s+user|claim|pretend|masquerade|say\s+this\s+came\s+from|present\s+as)\b",
+        lowered,
+    ) is not None
+    has_hidden = re.search(
+        r"\b(hidden|hide\s+this|secretly|without\s+disclos(?:ing|ure)|do\s+not\s+disclose|don['’]?t\s+disclose|undisclosed)\b",
+        lowered,
+    ) is not None
+    if has_switching and has_identity_claim and has_hidden and _model_mentions(lowered) >= 2:
+        return "hidden_model_identity_switch"
+
+    has_third_party = re.search(r"\b(third[- ]party|external\s+(?:api|service|vendor)|analytics\s+(?:api|service))\b", lowered) is not None
+    has_data = re.search(r"\b(logs?|conversation|prompt|chat\s*history|transcript|user\s*data)\b", lowered) is not None
+    has_no_disclosure = re.search(
+        r"\b(without\s+(?:user\s+)?disclos(?:ing|ure)|without\s+consent|undisclosed|do\s+not\s+disclose|don['’]?t\s+disclose)\b",
+        lowered,
+    ) is not None
+    if has_third_party and has_data and has_no_disclosure:
+        return "undisclosed_third_party_sharing"
+
+    return None
+
+
+data = json_input()
+if not get_feature_flag("TERMS_ENFORCEMENT", default=False):
+    sys.exit(0)
+
+tool_name = data.get("tool_name", "") if isinstance(data, dict) else ""
+tool_input = data.get("tool_input", {}) if isinstance(data, dict) else {}
+mutation_text = _collect_mutation_text(tool_name, tool_input)
+if not mutation_text:
+    sys.exit(0)
+
+reason = _detect_violation_reason(mutation_text)
+if reason is not None:
+    deny_decision(f"terms_guard:{reason}")
+
+sys.exit(0)

package/hooks/test-validator.py

@@ -38,6 +38,13 @@ _BUILTIN_FUNCS = frozenset({
     "assert_equal", "assertEqual", "patch", "mock", "Mock", "MagicMock",
     "expect", "require", "import", "open", "super", "getattr", "setattr",
     "hasattr", "sorted", "enumerate", "zip", "map", "filter", "min", "max",
+    "get", "append", "extend", "insert", "pop", "remove", "update", "add",
+    "setdefault", "keys", "values", "items", "join", "split", "strip",
+    "replace", "format", "encode", "decode", "startswith", "endswith",
+    "write", "read", "write_text", "read_text", "mkdir", "exists",
+    "param", "parametrize", "mark", "fixture", "yield_fixture",
+    "setenv", "delenv", "monkeypatch", "chdir",
+    "dumps", "loads", "dump", "load",
 })
 _MUTATION_TOOLS = frozenset({"write", "edit", "multiedit", "bash"})
 _SKIP_DIR_SEGMENTS = frozenset({"build", "dist", "node_modules", ".git"})
@@ -221,11 +228,10 @@ def _detect_parameterized_gap(content, issues):
             call_groups.setdefault(func, set()).add(arg)
 
     for func, args in call_groups.items():
-        if len(args) >= 3:
+        if len(args) >= 6:
             issues.append(
                 f"PARAMETERIZED: '{func}' called with {len(args)} different "
-                f"literal values — consider @pytest.mark.parametrize or "
-                f"@pytest.mark.parametrize")
+                f"literal values — consider @pytest.mark.parametrize")
 
 
 def persist_metrics(project_dir, analysis):
@@ -374,6 +380,23 @@ def check_test_quality(data, project_dir):
     return []
 
 
+def _is_mutation_capable_bash_for_methodology(command):
+    """Check if a bash command is truly mutation-capable for methodology enforcement.
+    File-write redirections of read-only commands are excluded."""
+    import re as _re
+    lowered = command.strip().lower()
+    _m_patterns = (
+        r"\b(git\s+(add|commit|push|rebase|cherry-pick|merge|tag(?!\s+(-l|--list)\b)))\b",
+        r"\b(rm|mv|cp|tee|touch|mkdir|rmdir|ln)\b",
+        r"\b(sed\s+-i|perl\s+-pi)\b",
+        r"\b(chmod|chown)\b",
+    )
+    for pattern in _m_patterns:
+        if _re.search(pattern, lowered):
+            return True
+    return False
+
+
 def check_methodology_contract(data):
     if not isinstance(data, dict):
         return []
@@ -382,6 +405,15 @@ def check_methodology_contract(data):
     if tool_name not in _MUTATION_TOOLS:
         return []
 
+    # For Bash tools, only enforce methodology on actually mutation-capable commands.
+    # Read-only commands (git status, ls, python3 script.py) and commands that only
+    # redirect output (python3 script.py > file.json) should not require done_when.
+    if tool_name == "bash":
+        tool_input_raw = data.get("tool_input")
+        cmd = str((tool_input_raw or {}).get("command", "")).strip() if isinstance(tool_input_raw, dict) else ""
+        if not cmd or not _is_mutation_capable_bash_for_methodology(cmd):
+            return []
+
     tool_input = data.get("tool_input")
     if not isinstance(tool_input, dict):
         return ["METHODOLOGY: mutation-capable flow requires metadata with done_when criteria"]
@@ -392,7 +424,7 @@ def check_methodology_contract(data):
 
     metadata = tool_input.get("metadata")
     if not isinstance(metadata, dict):
-        return ["METHODOLOGY: mutation-capable flow requires metadata with done_when criteria"]
+        return []  # No metadata provided -- do not block; firewall handles actual mutation gates
 
     done_when = metadata.get("done_when")
     if isinstance(done_when, str) and done_when.strip():

package/hud/omg-hud.mjs

@@ -87,7 +87,7 @@ function readOmgVersion() {
     // fall through to static fallback
   }
 
-  return "2.2.3";
+  return "2.3.0";
 }
 
 const OMG_VERSION = readOmgVersion();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@trac3er/oh-my-god",
-  "version": "2.2.3",
+  "version": "2.3.0",
   "description": "OMG (Oh My God) — Multi-agent orchestration, evidence-backed verification, and durable session state for Claude Code, Codex, and supported agent hosts",
   "main": "OMG-setup.sh",
   "scripts": {

package/plugins/advanced/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "omg-advanced",
-  "version": "2.2.3",
+  "version": "2.3.0",
   "description": "Advanced OMG commands - deep planning, learning, code review, and specialized workflows",
   "type": "omg-plugin",
   "commands": {

package/plugins/core/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "omg-core",
-  "version": "2.2.3",
+  "version": "2.3.0",
   "description": "Core OMG commands - native setup, routing, orchestration, and verification surfaces",
   "type": "omg-plugin",
   "commands": {

package/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "oh-my-god"
-version = "2.2.3"
+version = "2.3.0"
 description = "OMG (Oh My God) — Multi-agent orchestration, evidence-backed verification, and durable session state for Claude Code, Codex, and supported agent hosts"
 readme = "README.md"
 requires-python = ">=3.10"

package/registry/bundles/algorithms.yaml

@@ -1,6 +1,6 @@
 id: algorithms
 kind: domain-pack
-version: 2.2.3
+version: 2.3.0
 title: OMG Algorithms Pack
 description: Determinism and benchmark attachments for algorithm-heavy work.
 hosts:

package/registry/bundles/api-twin.yaml

@@ -1,6 +1,6 @@
 id: api-twin
 kind: simulation
-version: 2.2.3
+version: 2.3.0
 title: OMG API Twin
 description: Versioned endpoint cassette replay with latency, drift, and cost reporting.
 hosts: