@trac3er/oh-my-god 2.2.4 → 2.2.5

package/dist/enterprise/attestations/bundle/registry/bundles/tracebank.yaml.statement.json

@@ -5,7 +5,7 @@
     {
       "name": "bundle/registry/bundles/tracebank.yaml",
       "digest": {
-        "sha256": "956e6f21e68f1813250aaea9250762338e9e89c4feae1e3627b49febc0b244cc"
+        "sha256": "ed3dfa0ef468e4aa9adf40e86c3344998cb5944d087423cd02e77e04c4e3138c"
       }
     }
   ],
@@ -17,7 +17,7 @@
         "algorithm": "ed25519-minisign",
         "mode": "local-offline"
       },
-      "timestamp": "2026-03-14T19:07:28.849975+00:00"
+      "timestamp": "2026-03-16T02:24:00.331020+00:00"
     }
   },
   "signer": {
@@ -25,11 +25,11 @@
     "algorithm": "ed25519-minisign",
     "mode": "local-offline"
   },
-  "issued_at": "2026-03-14T19:07:28.849975+00:00",
+  "issued_at": "2026-03-16T02:24:00.331020+00:00",
   "signature": {
     "alg": "ed25519-minisign",
-    "keyid": "ff804e33e4b168df",
-    "value": "untrusted comment: signature from omg local signing key\njKnA9g+QiRpkJ1QDCF2oyxcA7IgqO7G+bN250YlLJleIB7cUoW3+V1Hpl4KhPqyFLMZDAaX/DEZX531SVM08Ag==\ntrusted comment: type=omg-slsa-v1 keyid=ff804e33e4b168df issued_at=2026-03-14T19:07:28.850102+00:00 artifact=bundle/registry/bundles/tracebank.yaml sha256=956e6f21e68f1813250aaea9250762338e9e89c4feae1e3627b49febc0b244cc\n9ZifBhqLW4huLnssLudXYPl+pYBmalY2V1D0Ps068XxtjiZBzFh9/LvFjn4AjQ0M2EZzgXaRV2W8ZWh+W8qXBQ==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=ff804e33e4b168df issued_at=2026-03-14T19:07:28.850102+00:00 artifact=bundle/registry/bundles/tracebank.yaml sha256=956e6f21e68f1813250aaea9250762338e9e89c4feae1e3627b49febc0b244cc"
+    "keyid": "f9a189ae5e9488cc",
+    "value": "untrusted comment: signature from omg local signing key\nIXtP1s3JttPJEfgko5HqCRnkIRmsuvVreguyMiYlWlvVMzSxenWvKlG+5TOBgQnSAMyFX/pZKGCD9ZnBdydNAg==\ntrusted comment: type=omg-slsa-v1 keyid=f9a189ae5e9488cc issued_at=2026-03-16T02:24:00.331134+00:00 artifact=bundle/registry/bundles/tracebank.yaml sha256=ed3dfa0ef468e4aa9adf40e86c3344998cb5944d087423cd02e77e04c4e3138c\nl5497NCx0K+N4TVNrQEsDS2+YsaYkb2b4ERrkfOFmjnUuLbkrKaOawF1uwu5qVUSx2yVdMxMhy2AmuW/I84xCg==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=f9a189ae5e9488cc issued_at=2026-03-16T02:24:00.331134+00:00 artifact=bundle/registry/bundles/tracebank.yaml sha256=ed3dfa0ef468e4aa9adf40e86c3344998cb5944d087423cd02e77e04c4e3138c"
   }
 }

package/dist/enterprise/attestations/bundle/registry/bundles/vision.yaml.minisig

@@ -1,4 +1,4 @@
 untrusted comment: signature from omg local signing key
-BfjdH+um9nQnJkaDSpaQIw5IPQmIRGv1vIlAJaAvNoDKo7G9FBJh80RbRXildnwYMSjceADIQGtym1zzT8ZGCg==
-trusted comment: type=omg-slsa-v1 keyid=a39b1266482af548 issued_at=2026-03-14T19:07:28.852256+00:00 artifact=bundle/registry/bundles/vision.yaml sha256=a2ae08d310a2872057a7dec0202c1eca65180ebe4a82ec1655d86f186386aefb
-E1qovXO9ZEibi2K+r4cKxJE1xzEBMkkQCXOT9Jkexkg1VCeeQFnHtVnyzzMXZj6xzYq3JlK/RlDcvW3lKSvHBw==
+tIoYVYON5wJs2vAZ/QyNStXwapKQbCvSJ31VvDkfPlMExSbNzYxXeNvfpSvXVD7hYDaCiv9EpXsuif8lImO+AQ==
+trusted comment: type=omg-slsa-v1 keyid=0bfcca40b0e70252 issued_at=2026-03-16T02:24:00.331698+00:00 artifact=bundle/registry/bundles/vision.yaml sha256=3ad537fe1397f61075d60b375d15c6b530c5cd8045171816448ee70cfdfa64b0
+ED2VyCQArXWYzSa9+eXekAljBoF3tYEH3YqIh94eetbq1NsEfLuyq6q6DXDaAoPOxD6xWPHg1WwtKBPtPFG5AQ==

package/dist/enterprise/attestations/bundle/registry/bundles/vision.yaml.statement.json

@@ -5,7 +5,7 @@
     {
       "name": "bundle/registry/bundles/vision.yaml",
       "digest": {
-        "sha256": "a2ae08d310a2872057a7dec0202c1eca65180ebe4a82ec1655d86f186386aefb"
+        "sha256": "3ad537fe1397f61075d60b375d15c6b530c5cd8045171816448ee70cfdfa64b0"
       }
     }
   ],
@@ -17,7 +17,7 @@
         "algorithm": "ed25519-minisign",
         "mode": "local-offline"
       },
-      "timestamp": "2026-03-14T19:07:28.852103+00:00"
+      "timestamp": "2026-03-16T02:24:00.331586+00:00"
     }
   },
   "signer": {
@@ -25,11 +25,11 @@
     "algorithm": "ed25519-minisign",
     "mode": "local-offline"
   },
-  "issued_at": "2026-03-14T19:07:28.852103+00:00",
+  "issued_at": "2026-03-16T02:24:00.331586+00:00",
   "signature": {
     "alg": "ed25519-minisign",
-    "keyid": "a39b1266482af548",
-    "value": "untrusted comment: signature from omg local signing key\nBfjdH+um9nQnJkaDSpaQIw5IPQmIRGv1vIlAJaAvNoDKo7G9FBJh80RbRXildnwYMSjceADIQGtym1zzT8ZGCg==\ntrusted comment: type=omg-slsa-v1 keyid=a39b1266482af548 issued_at=2026-03-14T19:07:28.852256+00:00 artifact=bundle/registry/bundles/vision.yaml sha256=a2ae08d310a2872057a7dec0202c1eca65180ebe4a82ec1655d86f186386aefb\nE1qovXO9ZEibi2K+r4cKxJE1xzEBMkkQCXOT9Jkexkg1VCeeQFnHtVnyzzMXZj6xzYq3JlK/RlDcvW3lKSvHBw==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=a39b1266482af548 issued_at=2026-03-14T19:07:28.852256+00:00 artifact=bundle/registry/bundles/vision.yaml sha256=a2ae08d310a2872057a7dec0202c1eca65180ebe4a82ec1655d86f186386aefb"
+    "keyid": "0bfcca40b0e70252",
+    "value": "untrusted comment: signature from omg local signing key\ntIoYVYON5wJs2vAZ/QyNStXwapKQbCvSJ31VvDkfPlMExSbNzYxXeNvfpSvXVD7hYDaCiv9EpXsuif8lImO+AQ==\ntrusted comment: type=omg-slsa-v1 keyid=0bfcca40b0e70252 issued_at=2026-03-16T02:24:00.331698+00:00 artifact=bundle/registry/bundles/vision.yaml sha256=3ad537fe1397f61075d60b375d15c6b530c5cd8045171816448ee70cfdfa64b0\nED2VyCQArXWYzSa9+eXekAljBoF3tYEH3YqIh94eetbq1NsEfLuyq6q6DXDaAoPOxD6xWPHg1WwtKBPtPFG5AQ==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=0bfcca40b0e70252 issued_at=2026-03-16T02:24:00.331698+00:00 artifact=bundle/registry/bundles/vision.yaml sha256=3ad537fe1397f61075d60b375d15c6b530c5cd8045171816448ee70cfdfa64b0"
   }
 }

package/dist/enterprise/attestations/bundle/registry/omg-capability.schema.json.minisig

@@ -1,4 +1,4 @@
 untrusted comment: signature from omg local signing key
-7WFptKwx3dEMJxksmKb71MX0EuDwxlAaeiHA2bCcymwwyowOouKOlXLCVzjbGk0118agoOBuY5RzawJbUgj6Dw==
-trusted comment: type=omg-slsa-v1 keyid=e0740938a90c4a27 issued_at=2026-03-14T19:07:28.853157+00:00 artifact=bundle/registry/omg-capability.schema.json sha256=d1938a2741e122db172f16360c02fe298c75cc72212a0c10a9ff663bbace2bac
-p9a97+Fl6YA8gd/B0NzsoW4N1ZBit2maB6J+Z0zKYl757m6xdVf5A+sMssu6tiwQ3rmGHa7bYek/04KNZ9HqBg==
+UEYpWct5otoIz0FQkcNjYhTXYefx7qixrZenHarUrdcTeVcJMEas0pZNxhMAUSr60dh5hAr2U9wzL/ZTrqKAAg==
+trusted comment: type=omg-slsa-v1 keyid=06da28528642ff28 issued_at=2026-03-16T02:24:00.332332+00:00 artifact=bundle/registry/omg-capability.schema.json sha256=9a897d9cf22122aa96bd48b592ef0cce41dc05e22495ee2408a3185f13272e6b
+iXm+n4RnENW7I/HpHkBrW5cB+NIbjmeBuOLbohr2gidXKoQLbvQuPotn4LGjbn3gG6Juf4+cvw8hb+aap9XkAA==

package/dist/enterprise/attestations/bundle/registry/omg-capability.schema.json.statement.json

@@ -5,7 +5,7 @@
     {
       "name": "bundle/registry/omg-capability.schema.json",
       "digest": {
-        "sha256": "d1938a2741e122db172f16360c02fe298c75cc72212a0c10a9ff663bbace2bac"
+        "sha256": "9a897d9cf22122aa96bd48b592ef0cce41dc05e22495ee2408a3185f13272e6b"
       }
     }
   ],
@@ -17,7 +17,7 @@
         "algorithm": "ed25519-minisign",
         "mode": "local-offline"
       },
-      "timestamp": "2026-03-14T19:07:28.852906+00:00"
+      "timestamp": "2026-03-16T02:24:00.332221+00:00"
     }
   },
   "signer": {
@@ -25,11 +25,11 @@
     "algorithm": "ed25519-minisign",
     "mode": "local-offline"
   },
-  "issued_at": "2026-03-14T19:07:28.852906+00:00",
+  "issued_at": "2026-03-16T02:24:00.332221+00:00",
   "signature": {
     "alg": "ed25519-minisign",
-    "keyid": "e0740938a90c4a27",
-    "value": "untrusted comment: signature from omg local signing key\n7WFptKwx3dEMJxksmKb71MX0EuDwxlAaeiHA2bCcymwwyowOouKOlXLCVzjbGk0118agoOBuY5RzawJbUgj6Dw==\ntrusted comment: type=omg-slsa-v1 keyid=e0740938a90c4a27 issued_at=2026-03-14T19:07:28.853157+00:00 artifact=bundle/registry/omg-capability.schema.json sha256=d1938a2741e122db172f16360c02fe298c75cc72212a0c10a9ff663bbace2bac\np9a97+Fl6YA8gd/B0NzsoW4N1ZBit2maB6J+Z0zKYl757m6xdVf5A+sMssu6tiwQ3rmGHa7bYek/04KNZ9HqBg==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=e0740938a90c4a27 issued_at=2026-03-14T19:07:28.853157+00:00 artifact=bundle/registry/omg-capability.schema.json sha256=d1938a2741e122db172f16360c02fe298c75cc72212a0c10a9ff663bbace2bac"
+    "keyid": "06da28528642ff28",
+    "value": "untrusted comment: signature from omg local signing key\nUEYpWct5otoIz0FQkcNjYhTXYefx7qixrZenHarUrdcTeVcJMEas0pZNxhMAUSr60dh5hAr2U9wzL/ZTrqKAAg==\ntrusted comment: type=omg-slsa-v1 keyid=06da28528642ff28 issued_at=2026-03-16T02:24:00.332332+00:00 artifact=bundle/registry/omg-capability.schema.json sha256=9a897d9cf22122aa96bd48b592ef0cce41dc05e22495ee2408a3185f13272e6b\niXm+n4RnENW7I/HpHkBrW5cB+NIbjmeBuOLbohr2gidXKoQLbvQuPotn4LGjbn3gG6Juf4+cvw8hb+aap9XkAA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=06da28528642ff28 issued_at=2026-03-16T02:24:00.332332+00:00 artifact=bundle/registry/omg-capability.schema.json sha256=9a897d9cf22122aa96bd48b592ef0cce41dc05e22495ee2408a3185f13272e6b"
   }
 }

package/dist/enterprise/attestations/bundle/settings.json.minisig

@@ -1,4 +1,4 @@
 untrusted comment: signature from omg local signing key
-JACRQayhKAVFpPrz+AJcx55NC9EOcAFqlZv5pw7pt5vroDKkdmEyIkCJyYaDfIROexahwu5VuUBqT2nMQuuODw==
-trusted comment: type=omg-slsa-v1 keyid=fd3a395c866bf5d2 issued_at=2026-03-14T19:07:28.853922+00:00 artifact=bundle/settings.json sha256=2991ed52c9f569658b3230925a8a52de303bd1744bc5c3be7a173b7b0d8257a0
-cpLdmzrdDqAATkVFf0w4KCYdEytRu4K23RcEvVFvVSbHpdjL2bFoLmE94nj/XvaYHDtp7VqdIM1EGKHlIaX8Dg==
+lJNwz1D12MzW8W7HOopM7bkWa2AQ0lUeV7sVBvlHBOlZay3bIClcuMjrie+p6lbJTurmcX75NLbwZvPPsFLWBA==
+trusted comment: type=omg-slsa-v1 keyid=ecc95893c84688c1 issued_at=2026-03-16T02:24:00.332908+00:00 artifact=bundle/settings.json sha256=ee3b541850c1bf2d811ac0d366a1895eea937df8b3db83566aec11e15243c61f
+x43NFbutax0+oj1yG8ZWqeYQ4J8MvzyDkJmj93LkAAs5P6z1UHxxfXvovJcTGO23dUD3jKG+Yg1RFpl2UNxMCQ==

package/dist/enterprise/attestations/bundle/settings.json.statement.json

@@ -5,7 +5,7 @@
     {
       "name": "bundle/settings.json",
       "digest": {
-        "sha256": "2991ed52c9f569658b3230925a8a52de303bd1744bc5c3be7a173b7b0d8257a0"
+        "sha256": "ee3b541850c1bf2d811ac0d366a1895eea937df8b3db83566aec11e15243c61f"
       }
     }
   ],
@@ -17,7 +17,7 @@
         "algorithm": "ed25519-minisign",
         "mode": "local-offline"
       },
-      "timestamp": "2026-03-14T19:07:28.853793+00:00"
+      "timestamp": "2026-03-16T02:24:00.332796+00:00"
     }
   },
   "signer": {
@@ -25,11 +25,11 @@
     "algorithm": "ed25519-minisign",
     "mode": "local-offline"
   },
-  "issued_at": "2026-03-14T19:07:28.853793+00:00",
+  "issued_at": "2026-03-16T02:24:00.332796+00:00",
   "signature": {
     "alg": "ed25519-minisign",
-    "keyid": "fd3a395c866bf5d2",
-    "value": "untrusted comment: signature from omg local signing key\nJACRQayhKAVFpPrz+AJcx55NC9EOcAFqlZv5pw7pt5vroDKkdmEyIkCJyYaDfIROexahwu5VuUBqT2nMQuuODw==\ntrusted comment: type=omg-slsa-v1 keyid=fd3a395c866bf5d2 issued_at=2026-03-14T19:07:28.853922+00:00 artifact=bundle/settings.json sha256=2991ed52c9f569658b3230925a8a52de303bd1744bc5c3be7a173b7b0d8257a0\ncpLdmzrdDqAATkVFf0w4KCYdEytRu4K23RcEvVFvVSbHpdjL2bFoLmE94nj/XvaYHDtp7VqdIM1EGKHlIaX8Dg==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=fd3a395c866bf5d2 issued_at=2026-03-14T19:07:28.853922+00:00 artifact=bundle/settings.json sha256=2991ed52c9f569658b3230925a8a52de303bd1744bc5c3be7a173b7b0d8257a0"
+    "keyid": "ecc95893c84688c1",
+    "value": "untrusted comment: signature from omg local signing key\nlJNwz1D12MzW8W7HOopM7bkWa2AQ0lUeV7sVBvlHBOlZay3bIClcuMjrie+p6lbJTurmcX75NLbwZvPPsFLWBA==\ntrusted comment: type=omg-slsa-v1 keyid=ecc95893c84688c1 issued_at=2026-03-16T02:24:00.332908+00:00 artifact=bundle/settings.json sha256=ee3b541850c1bf2d811ac0d366a1895eea937df8b3db83566aec11e15243c61f\nx43NFbutax0+oj1yG8ZWqeYQ4J8MvzyDkJmj93LkAAs5P6z1UHxxfXvovJcTGO23dUD3jKG+Yg1RFpl2UNxMCQ==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=ecc95893c84688c1 issued_at=2026-03-16T02:24:00.332908+00:00 artifact=bundle/settings.json sha256=ee3b541850c1bf2d811ac0d366a1895eea937df8b3db83566aec11e15243c61f"
   }
 }

package/dist/enterprise/bundle/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
   },
   "metadata": {
     "description": "OMG - Oh-My-God for Claude Code and supported agent hosts",
-    "version": "2.2.3",
+    "version": "2.2.5",
     "homepage": "https://github.com/trac3er00/OMG",
     "repository": "https://github.com/trac3er00/OMG"
   },
@@ -14,7 +14,7 @@
     {
       "name": "omg",
       "description": "OMG plugin layer for Claude Code and supported agent hosts with native setup, orchestration, and interop.",
-      "version": "2.2.3",
+      "version": "2.2.5",
       "source": "./",
       "author": {
         "name": "trac3er00"
@@ -32,5 +32,5 @@
       ]
     }
   ],
-  "version": "2.2.3"
+  "version": "2.2.5"
 }

package/dist/enterprise/bundle/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "omg",
-  "version": "2.2.3",
+  "version": "2.2.5",
   "description": "OMG plugin layer for Claude Code with native setup, orchestration, and interop.",
   "author": {
     "name": "trac3er00"

package/dist/enterprise/bundle/.gemini/settings.json

@@ -9,9 +9,9 @@
     }
   },
   "_omg": {
-    "_version": "2.2.3",
+    "_version": "2.2.5",
     "generated": {
-      "contract_version": "2.2.3",
+      "contract_version": "2.2.5",
       "channel": "enterprise",
       "required_bundles": [
         "control-plane",

package/dist/enterprise/bundle/.kimi/mcp.json

@@ -9,9 +9,9 @@
     }
   },
   "_omg": {
-    "_version": "2.2.3",
+    "_version": "2.2.5",
     "generated": {
-      "contract_version": "2.2.3",
+      "contract_version": "2.2.5",
       "channel": "enterprise",
       "required_bundles": [
         "control-plane",

package/dist/enterprise/bundle/OMG_COMPAT_CONTRACT.md

@@ -1,6 +1,6 @@
 ---
 title: OMG Production Control Plane
-version: 2.2.3
+version: 2.2.5
 canonical_hosts:
   - claude
   - codex
@@ -28,6 +28,24 @@ Gemini and Kimi are canonical behavior-parity hosts for contract validation and
 
 OpenCode remains compatibility-only in v2.2.3. It is supported through compatibility MCP wiring and interop diagnostics, but it is not part of the canonical behavior-parity contract set.
 
+## release_channels
+
+OMG defines two normative release channels for capability delivery and governance enforcement. `runtime/canonical_taxonomy.py` is the single source of truth for channel, preset, tier, and policy pack namespaces.
+
+- `public`: Standard production channel. Guarantees behavior parity across canonical hosts and standard evidence-backed verification.
+- `enterprise`: Hardened production channel. Guarantees enhanced evidence (lineage, provenance), tier-gated policy enforcement, and compatibility with specialized policy packs (`fintech`, `airgapped`).
+
+## governance_precedence
+
+Governance and policy enforcement follow a strict precedence rule to resolve conflicts:
+
+**subscription tier → channel → policy pack → preset**
+
+1. **subscription tier**: Highest precedence. Defines the baseline capabilities and limits.
+2. **channel**: Delivery channel guarantees.
+3. **policy pack**: Domain-specific hardening (e.g., `fintech`).
+4. **preset**: User-selected adoption level (e.g., `safe`, `balanced`).
+
 ## metadata
 
 Every bundle must declare `id`, `kind`, `version`, `title`, `description`, `hosts`, and `assets`.

package/dist/enterprise/bundle/plugins/advanced/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "omg-advanced",
-  "version": "2.2.3",
+  "version": "2.2.5",
   "description": "Advanced OMG commands - deep planning, learning, code review, and specialized workflows",
   "type": "omg-plugin",
   "commands": {

package/dist/enterprise/bundle/registry/bundles/algorithms.yaml

@@ -1,6 +1,6 @@
 id: algorithms
 kind: domain-pack
-version: 2.2.3
+version: 2.2.5
 title: OMG Algorithms Pack
 description: Determinism and benchmark attachments for algorithm-heavy work.
 hosts:

package/dist/enterprise/bundle/registry/bundles/api-twin.yaml

@@ -1,6 +1,6 @@
 id: api-twin
 kind: simulation
-version: 2.2.3
+version: 2.2.5
 title: OMG API Twin
 description: Versioned endpoint cassette replay with latency, drift, and cost reporting.
 hosts:

package/dist/enterprise/bundle/registry/bundles/ast-pack.yaml

@@ -1,6 +1,6 @@
 id: ast-pack
 kind: governance
-version: 2.2.3
+version: 2.2.5
 title: OMG AST Pack Lane
 description: Governed AST search and replace lane with canonical approvals and proofs.
 hosts:

package/dist/enterprise/bundle/registry/bundles/claim-judge.yaml

@@ -1,6 +1,6 @@
 id: claim-judge
 kind: proof
-version: 2.2.3
+version: 2.2.5
 title: OMG Claim Judge
 description: Evidence-backed claim validator for structured release and completion claims.
 hosts:

package/dist/enterprise/bundle/registry/bundles/control-plane.yaml

@@ -1,6 +1,6 @@
 id: control-plane
 kind: skill
-version: 2.2.3
+version: 2.2.5
 title: OMG Control Plane
 description: Canonical production control plane bundle for Claude, Codex, Gemini, and Kimi.
 hosts:

package/dist/enterprise/bundle/registry/bundles/data-lineage.yaml

@@ -1,6 +1,6 @@
 id: data-lineage
 kind: provenance
-version: 2.2.3
+version: 2.2.5
 title: OMG Data Lineage
 description: Provenance and privacy tracking for traces, fixtures, examples, and synthetic artifacts.
 hosts:

package/dist/enterprise/bundle/registry/bundles/delta-classifier.yaml

@@ -1,6 +1,6 @@
 id: delta-classifier
 kind: routing
-version: 2.2.3
+version: 2.2.5
 title: OMG Delta Classifier
 description: Change classifier that attaches risk-aware checks, approvals, and packs.
 hosts:

package/dist/enterprise/bundle/registry/bundles/eval-gate.yaml

@@ -1,6 +1,6 @@
 id: eval-gate
 kind: evaluation
-version: 2.2.3
+version: 2.2.5
 title: OMG Eval Gate
 description: Reproducible evaluation gate that blocks regressions before release.
 hosts:

package/dist/enterprise/bundle/registry/bundles/hash-edit.yaml

@@ -1,6 +1,6 @@
 id: hash-edit
 kind: governance
-version: 2.2.3
+version: 2.2.5
 title: OMG Hash Edit Lane
 description: Governed hash-bound edit lane with signed approvals and evidence routing.
 hosts:

package/dist/enterprise/bundle/registry/bundles/health.yaml

@@ -1,6 +1,6 @@
 id: health
 kind: domain-pack
-version: 2.2.3
+version: 2.2.5
 title: OMG Health Pack
 description: Health-sensitive approvals, provenance, and replay attachments.
 hosts:

package/dist/enterprise/bundle/registry/bundles/hook-governor.yaml

@@ -1,6 +1,6 @@
 id: hook-governor
 kind: governance
-version: 2.2.3
+version: 2.2.5
 title: OMG Hook Governor
 description: Canonical hook ordering, policy reinjection, and protected-path governance.
 hosts:

package/dist/enterprise/bundle/registry/bundles/incident-replay.yaml

@@ -1,6 +1,6 @@
 id: incident-replay
 kind: debugging
-version: 2.2.3
+version: 2.2.5
 title: OMG Incident Replay
 description: Replayable bug packs built from logs, failing tests, traces, and diffs.
 hosts:

package/dist/enterprise/bundle/registry/bundles/lsp-pack.yaml

@@ -1,6 +1,6 @@
 id: lsp-pack
 kind: diagnostics
-version: 2.2.3
+version: 2.2.5
 title: OMG LSP Pack
 description: Optional LSP-backed diagnostics and navigation bundle for production verification.
 hosts:

package/dist/enterprise/bundle/registry/bundles/mcp-fabric.yaml

@@ -1,6 +1,6 @@
 id: mcp-fabric
 kind: mcp
-version: 2.2.3
+version: 2.2.5
 title: OMG MCP Fabric
 description: Tools, prompts, resources, and server instructions for the OMG control plane.
 hosts:

package/dist/enterprise/bundle/registry/bundles/plan-council.yaml

@@ -1,6 +1,6 @@
 id: plan-council
 kind: planning
-version: 2.2.3
+version: 2.2.5
 title: OMG Plan Council
 description: Canonical council-style planning bundle for explicit, evidence-backed deep plans.
 hosts:

package/dist/enterprise/bundle/registry/bundles/preflight.yaml

@@ -1,6 +1,6 @@
 id: preflight
 kind: routing
-version: 2.2.3
+version: 2.2.5
 title: OMG Preflight
 description: Repo-aware route selection based on diff, manifests, and classified risk.
 hosts:

package/dist/enterprise/bundle/registry/bundles/proof-gate.yaml

@@ -1,6 +1,6 @@
 id: proof-gate
 kind: proof
-version: 2.2.3
+version: 2.2.5
 title: OMG Proof Gate
 description: Structured release proof gate that binds claims to required evidence artifacts and trace links.
 hosts:

package/dist/enterprise/bundle/registry/bundles/remote-supervisor.yaml

@@ -1,6 +1,6 @@
 id: remote-supervisor
 kind: orchestration
-version: 2.2.3
+version: 2.2.5
 title: OMG Remote Supervisor
 description: Local-only authenticated supervisor sessions for worker orchestration.
 hosts:

package/dist/enterprise/bundle/registry/bundles/robotics.yaml

@@ -1,6 +1,6 @@
 id: robotics
 kind: domain-pack
-version: 2.2.3
+version: 2.2.5
 title: OMG Robotics Pack
 description: Robotics safety policy, replay, and evaluation attachments.
 hosts:

package/dist/enterprise/bundle/registry/bundles/secure-worktree-pipeline.yaml

@@ -1,6 +1,6 @@
 id: secure-worktree-pipeline
 kind: runtime
-version: 2.2.3
+version: 2.2.5
 title: OMG Secure Worktree Pipeline
 description: Ephemeral worktree execution and supervisor-safe worker dispatch for production jobs.
 hosts:

package/dist/enterprise/bundle/registry/bundles/security-check.yaml

@@ -1,6 +1,6 @@
 id: security-check
 kind: security
-version: 2.2.3
+version: 2.2.5
 title: OMG Security Check
 description: Canonical security audit bundle with provenance, trust scoring, and deterministic evidence.
 hosts:

package/dist/enterprise/bundle/registry/bundles/terminal-lane.yaml

@@ -1,6 +1,6 @@
 id: terminal-lane
 kind: governance
-version: 2.2.3
+version: 2.2.5
 title: OMG Terminal Lane
 description: Highest-risk governed terminal execution lane with strict approval and attestation.
 hosts:

package/dist/enterprise/bundle/registry/bundles/test-intent-lock.yaml

@@ -1,6 +1,6 @@
 id: test-intent-lock
 kind: proof
-version: 2.2.3
+version: 2.2.5
 title: OMG Test Intent Lock
 description: Structured test-delta guard that blocks weakened tests unless explicit override evidence is present.
 hosts:

package/dist/enterprise/bundle/registry/bundles/tracebank.yaml

@@ -1,6 +1,6 @@
 id: tracebank
 kind: evidence
-version: 2.2.3
+version: 2.2.5
 title: OMG Tracebank
 description: Structured plan-to-patch-to-verify trace capture for OMG routes.
 hosts:

package/dist/enterprise/bundle/registry/bundles/vision.yaml

@@ -1,6 +1,6 @@
 id: vision
 kind: domain-pack
-version: 2.2.3
+version: 2.2.5
 title: OMG Vision Pack
 description: Vision-specific OCR, comparison, lineage, drift, and replay attachments.
 hosts:

package/dist/enterprise/bundle/registry/omg-capability.schema.json

@@ -2,7 +2,7 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://github.com/trac3er00/OMG/registry/omg-capability.schema.json",
   "title": "OMG Capability Bundle",
-  "version": "2.2.3",
+  "version": "2.2.5",
   "type": "object",
   "required": [
     "id",

package/dist/enterprise/bundle/settings.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json.schemastore.org/claude-code-settings.json",
-  "_comment": "OMG 2.2.3 - project-level config with hook registrations, presets, and feature flags.",
+  "_comment": "OMG 2.2.5 - project-level config with hook registrations, presets, and feature flags.",
   "permissions": {
     "allow": [
       "Agent",
@@ -306,7 +306,7 @@
     ]
   },
   "_omg": {
-    "_version": "2.2.3",
+    "_version": "2.2.5",
     "preset": "safe",
     "omgMode": "focused",
     "default_mode": "ulw+ralph",
@@ -366,7 +366,7 @@
       "NOTEBOOKLM": false
     },
     "generated": {
-      "contract_version": "2.2.3",
+      "contract_version": "2.2.5",
       "channel": "enterprise",
       "required_bundles": [
         "control-plane",
@@ -605,8 +605,22 @@
       },
       "subagents": [
         {
-          "name": "security-reviewer",
-          "description": "Read-only security review subagent with scoped tool access.",
+          "name": "architect-planner",
+          "description": "Read-only planning subagent. Analyses structure, proposes plans, produces evidence. No mutations.",
+          "tools": [
+            "Read",
+            "Grep",
+            "Glob",
+            "Bash(git log *)",
+            "Bash(git diff *)",
+            "Bash(python3 scripts/omg.py *)",
+            "WebSearch"
+          ],
+          "bypassPermissions": false
+        },
+        {
+          "name": "explorer-indexer",
+          "description": "Read-only codebase exploration subagent. Searches, indexes, and answers structural questions.",
           "tools": [
             "Read",
             "Grep",
@@ -619,16 +633,18 @@
           "bypassPermissions": false
         },
         {
-          "name": "release-manager",
-          "description": "Release management subagent with write access governed by protected-path policy.",
+          "name": "implementer",
+          "description": "Write-capable implementation subagent governed by protected-path policy and mutation gate.",
           "tools": [
             "Read",
             "Write",
             "Edit",
+            "MultiEdit",
             "Grep",
             "Glob",
             "Bash(git *)",
-            "Bash(python3 scripts/omg.py *)"
+            "Bash(python3 *)",
+            "Bash(pytest *)"
           ],
           "bypassPermissions": false,
           "protectedPaths": [
@@ -637,6 +653,47 @@
             ".codex/**",
             ".claude/**"
           ]
+        },
+        {
+          "name": "security-reviewer",
+          "description": "Read-only security review subagent with scoped tool access.",
+          "tools": [
+            "Read",
+            "Grep",
+            "Glob",
+            "Bash(grep *)",
+            "Bash(find *)",
+            "Bash(git log *)",
+            "Bash(git diff *)"
+          ],
+          "bypassPermissions": false
+        },
+        {
+          "name": "verifier",
+          "description": "Read-only verification subagent. Runs tests, lints, and produces evidence without mutations.",
+          "tools": [
+            "Read",
+            "Grep",
+            "Glob",
+            "Bash(python3 -m pytest *)",
+            "Bash(python3 scripts/omg.py *)",
+            "Bash(git diff *)"
+          ],
+          "bypassPermissions": false
+        },
+        {
+          "name": "causal-tracer",
+          "description": "Read-only causal analysis subagent. Traces errors, diffs, and logs to root causes.",
+          "tools": [
+            "Read",
+            "Grep",
+            "Glob",
+            "Bash(git log *)",
+            "Bash(git diff *)",
+            "Bash(git blame *)",
+            "Bash(grep *)"
+          ],
+          "bypassPermissions": false
         }
       ],
       "skills": [