@hunter-harness/workflow-harness 0.2.32 → 0.2.33

package/harness/bundles/general/claude-code/harness-plan/SKILL.md

@@ -106,7 +106,7 @@ change-name 范围变更 → 提示重命名或记 🟡WARN（→ `reference.md`
 |------|------|
 | 产物路径 | 只写 `.harness/changes/<cn>/`；禁止 superpowers 输入 |
 | 设计审批包 | 一次 blocking user confirmation 含 worktree（读 `harness.json` `defaultWorktree`） |
-| 阶段 8 | spec/plan/detail/scenarios/worktree.json 先进入 staging；仅 finalizer 校验成功后发布并写唯一 `phase.end`/log；随后 `verify` 必须确认 start/end、收据哈希、全部任务表和非空场景清单一致，失败不得手工补终态 |
+| 阶段 8 | spec/plan/detail/scenarios/gate-policy/worktree 六项标准产物先进入 staging；仅 finalizer 校验成功后发布并写唯一 `phase.end`/log；随后 `verify` 必须确认 start/end、收据完整覆盖六项标准产物、哈希、全部任务表和非空场景清单一致，失败不得手工补终态 |
 | Plan 结束 | **禁止**询问执行模式；只提示 `/harness-run` |
 | 知识查询 | 0.5 失败不得假装已读历史 |
 | 歧义优先检查 | 否定、对比、动作对象或范围存在多种合理解释时，最小取证后先给推荐理解并一次一问；确认前不深挖错误方向 |

package/harness/bundles/general/claude-code/harness-plan/checklist.md

@@ -214,6 +214,7 @@ source: harness-plan
 - [ ] finalizer 返回 `ok=true` 与 `artifactsHash`；重复执行返回 `idempotent=true`
 - [ ] 紧接着执行 `harness_plan_finalize.py verify --change-dir ... --json`
 - [ ] verify 返回 `phaseStartCount=1`、`phaseEndCount=1`、`phaseEndStatus=OK`、`receiptConsistent=true`
+- [ ] 收据 `files` 完整包含 design / plan / implementation-detail / test-scenarios / gate-policy / worktree 六项标准产物；不得省略、重复或经 symlink/junction/reparse point 引用
 - [ ] verify 的 `taskCount` 等于全部任务表行数，`scenarioCount` 等于 Markdown 中全部唯一场景 ID 数；任一为 0 或不一致即 ❌FAIL
 - [ ] finalizer 失败时正式目录无半发布产物、无成功 `phase.end`、无伪造 execution log
 - [ ] 禁止在 finalizer 之前手工追加成功 `phase.end`
@@ -224,6 +225,7 @@ source: harness-plan
 | `.harness/changes/<change>/plans/<change>-plan.md` | ✅ | □ |
 | `.harness/changes/<change>/plans/<change>-implementation-detail.md` | ✅ | □ |
 | `.harness/changes/<change>/plans/<change>-test-scenarios.md` | ✅ | □ |
+| `.harness/changes/<change>/meta/gate-policy.json` | ✅ | □ |
 | `.harness/changes/<change>/meta/worktree.json` | ✅ | □ |
 | `.harness/changes/<change>/meta/implementation-checkpoints.json` | ✅ | □ |
 | `.harness/changes/<change>/meta/scenario-manifest.json`（非空且计数一致） | ✅ | □ |

package/harness/bundles/general/claude-code/harness-plan/reference.md

@@ -335,10 +335,16 @@ status: approved
 | `.harness/changes/<change>/plans/<change>-plan.md` | ✅ |
 | `.harness/changes/<change>/plans/<change>-implementation-detail.md` | ✅ |
 | `.harness/changes/<change>/plans/<change>-test-scenarios.md` | ✅ |
+| `.harness/changes/<change>/meta/gate-policy.json` | ✅ |
 | `.harness/changes/<change>/meta/worktree.json` | ✅ |
+| `.harness/changes/<change>/meta/implementation-checkpoints.json` | ✅ |
+| `.harness/changes/<change>/meta/scenario-manifest.json` | ✅ |
+| `.harness/changes/<change>/meta/plan-finalization.json` | ✅ |
 | `.harness/changes/<change>/logs/execution-log.md` | ✅ |
 | `.harness/changes/<change>/events.ndjson` | ✅ |
 
+`plan-finalization.json.files` 必须完整列出 design、plan、implementation-detail、test-scenarios、gate-policy、worktree 六项标准输入。`verify` 对缺项、重复项、越界路径以及 symlink/junction/reparse point 一律 fail-closed；不得通过删减收据文件集后重算哈希来绕过完整性检查。
+
 ### Plan 结束行为规则
 
 - **禁止询问执行模式**：Subagent-Driven / Inline Execution 属于 /harness-run 阶段

package/harness/bundles/general/claude-code/scripts/harness_plan_finalize.py

@@ -11,6 +11,7 @@ import json
 import os
 import re
 import shutil
+import stat
 import sys
 import tempfile
 from pathlib import Path, PurePosixPath
@@ -45,6 +46,7 @@ PRIORITY_EVIDENCE_KIND = {
     "P1": "ledger",
     "P2": "advisory",
 }
+_FILE_ATTRIBUTE_REPARSE_POINT = getattr(stat, "FILE_ATTRIBUTE_REPARSE_POINT", 0x400)
 
 
 def _result_error(code: str, message: str) -> dict[str, Any]:
@@ -302,6 +304,28 @@ def _frontmatter(text: str) -> dict[str, str] | None:
     return None
 
 
+def _required_artifact_names(change_name: str) -> set[str]:
+    return {
+        f"spec/{change_name}-design.md",
+        f"plans/{change_name}-plan.md",
+        f"plans/{change_name}-implementation-detail.md",
+        f"plans/{change_name}-test-scenarios.md",
+        "meta/gate-policy.json",
+        "meta/worktree.json",
+    }
+
+
+def _is_link_or_reparse(path: Path) -> bool:
+    """Detect symlinks and Windows reparse points on every supported Python."""
+    try:
+        if path.is_symlink():
+            return True
+        attributes = getattr(os.lstat(path), "st_file_attributes", 0)
+    except OSError:
+        return False
+    return bool(attributes & _FILE_ATTRIBUTE_REPARSE_POINT)
+
+
 def lint_slice_plan(plan_path: Path) -> dict[str, Any]:
     """Validate the identity, reuse, and storage contract for a slice plan."""
     text = Path(plan_path).read_text(encoding="utf-8-sig")
@@ -369,7 +393,7 @@ def lint_slice_plan(plan_path: Path) -> dict[str, Any]:
 def _artifact_files(staging: Path) -> list[Path]:
     files: list[Path] = []
     for path in staging.rglob("*"):
-        if path.is_symlink():
+        if _is_link_or_reparse(path):
             raise ValueError(f"PLAN_ARTIFACT_SYMLINK: {path}")
         if path.is_file():
             files.append(path)
@@ -378,14 +402,7 @@ def _artifact_files(staging: Path) -> list[Path]:
 
 def validate_staging(staging: Path, change_name: str) -> dict[str, Any]:
     staging = staging.resolve()
-    required = {
-        Path("spec") / f"{change_name}-design.md",
-        Path("plans") / f"{change_name}-plan.md",
-        Path("plans") / f"{change_name}-implementation-detail.md",
-        Path("plans") / f"{change_name}-test-scenarios.md",
-        Path("meta") / "gate-policy.json",
-        Path("meta") / "worktree.json",
-    }
+    required = {Path(name) for name in _required_artifact_names(change_name)}
     try:
         files = _artifact_files(staging)
     except ValueError as exc:
@@ -621,12 +638,18 @@ def _receipt_artifact_targets(
         cursor = change_dir
         for part in rel.parts:
             cursor = cursor / part
-            is_junction = getattr(cursor, "is_junction", lambda: False)
-            if cursor.is_symlink() or is_junction():
+            if _is_link_or_reparse(cursor):
                 return None, _result_error(
                     "RECEIPT_FILE_PATH_INVALID",
                     f"receipt artifact path traverses a link: {normalized}",
                 )
+        try:
+            target.resolve(strict=False).relative_to(change_dir)
+        except (OSError, RuntimeError, ValueError):
+            return None, _result_error(
+                "RECEIPT_FILE_PATH_INVALID",
+                f"receipt artifact path resolves outside the change directory: {normalized}",
+            )
         targets.append((normalized, target))
     return targets, None
 
@@ -671,6 +694,15 @@ def verify_plan(change_dir: Path) -> dict[str, Any]:
     if path_error is not None:
         return path_error
     assert artifact_targets is not None
+    artifact_name_set = {rel for rel, _ in artifact_targets}
+    missing_required = sorted(
+        _required_artifact_names(change_name) - artifact_name_set
+    )
+    if missing_required:
+        return _result_error(
+            "RECEIPT_FILES_INCOMPLETE",
+            "receipt omits required artifacts: " + ", ".join(missing_required),
+        )
     if receipt.get("status") != "finalized":
         return _result_error(
             "RECEIPT_NOT_FINALIZED",

package/harness/bundles/general/codebuddy/harness-plan/SKILL.md

@@ -88,7 +88,7 @@ change-name 范围变更 → 提示重命名或记 🟡WARN（→ `reference.md`
 |------|------|
 | 产物路径 | 只写 `.harness/changes/<cn>/`；禁止 superpowers 输入 |
 | 设计审批包 | 一次 blocking user confirmation 含 worktree（读 `harness.json` `defaultWorktree`） |
-| 阶段 8 | spec/plan/detail/scenarios/worktree.json 先进入 staging；仅 finalizer 校验成功后发布并写唯一 `phase.end`/log；随后 `verify` 必须确认 start/end、收据哈希、全部任务表和非空场景清单一致，失败不得手工补终态 |
+| 阶段 8 | spec/plan/detail/scenarios/gate-policy/worktree 六项标准产物先进入 staging；仅 finalizer 校验成功后发布并写唯一 `phase.end`/log；随后 `verify` 必须确认 start/end、收据完整覆盖六项标准产物、哈希、全部任务表和非空场景清单一致，失败不得手工补终态 |
 | Plan 结束 | **禁止**询问执行模式；只提示 `/harness-run` |
 | 知识查询 | 0.5 失败不得假装已读历史 |
 | 歧义优先检查 | 否定、对比、动作对象或范围存在多种合理解释时，最小取证后先给推荐理解并一次一问；确认前不深挖错误方向 |

package/harness/bundles/general/codebuddy/harness-plan/checklist.md

@@ -214,6 +214,7 @@ source: harness-plan
 - [ ] finalizer 返回 `ok=true` 与 `artifactsHash`；重复执行返回 `idempotent=true`
 - [ ] 紧接着执行 `harness_plan_finalize.py verify --change-dir ... --json`
 - [ ] verify 返回 `phaseStartCount=1`、`phaseEndCount=1`、`phaseEndStatus=OK`、`receiptConsistent=true`
+- [ ] 收据 `files` 完整包含 design / plan / implementation-detail / test-scenarios / gate-policy / worktree 六项标准产物；不得省略、重复或经 symlink/junction/reparse point 引用
 - [ ] verify 的 `taskCount` 等于全部任务表行数，`scenarioCount` 等于 Markdown 中全部唯一场景 ID 数；任一为 0 或不一致即 ❌FAIL
 - [ ] finalizer 失败时正式目录无半发布产物、无成功 `phase.end`、无伪造 execution log
 - [ ] 禁止在 finalizer 之前手工追加成功 `phase.end`
@@ -224,6 +225,7 @@ source: harness-plan
 | `.harness/changes/<change>/plans/<change>-plan.md` | ✅ | □ |
 | `.harness/changes/<change>/plans/<change>-implementation-detail.md` | ✅ | □ |
 | `.harness/changes/<change>/plans/<change>-test-scenarios.md` | ✅ | □ |
+| `.harness/changes/<change>/meta/gate-policy.json` | ✅ | □ |
 | `.harness/changes/<change>/meta/worktree.json` | ✅ | □ |
 | `.harness/changes/<change>/meta/implementation-checkpoints.json` | ✅ | □ |
 | `.harness/changes/<change>/meta/scenario-manifest.json`（非空且计数一致） | ✅ | □ |

package/harness/bundles/general/codebuddy/harness-plan/reference.md

@@ -335,10 +335,16 @@ status: approved
 | `.harness/changes/<change>/plans/<change>-plan.md` | ✅ |
 | `.harness/changes/<change>/plans/<change>-implementation-detail.md` | ✅ |
 | `.harness/changes/<change>/plans/<change>-test-scenarios.md` | ✅ |
+| `.harness/changes/<change>/meta/gate-policy.json` | ✅ |
 | `.harness/changes/<change>/meta/worktree.json` | ✅ |
+| `.harness/changes/<change>/meta/implementation-checkpoints.json` | ✅ |
+| `.harness/changes/<change>/meta/scenario-manifest.json` | ✅ |
+| `.harness/changes/<change>/meta/plan-finalization.json` | ✅ |
 | `.harness/changes/<change>/logs/execution-log.md` | ✅ |
 | `.harness/changes/<change>/events.ndjson` | ✅ |
 
+`plan-finalization.json.files` 必须完整列出 design、plan、implementation-detail、test-scenarios、gate-policy、worktree 六项标准输入。`verify` 对缺项、重复项、越界路径以及 symlink/junction/reparse point 一律 fail-closed；不得通过删减收据文件集后重算哈希来绕过完整性检查。
+
 ### Plan 结束行为规则
 
 - **禁止询问执行模式**：Subagent-Driven / Inline Execution 属于 /harness-run 阶段

package/harness/bundles/general/codebuddy/scripts/harness_plan_finalize.py

@@ -11,6 +11,7 @@ import json
 import os
 import re
 import shutil
+import stat
 import sys
 import tempfile
 from pathlib import Path, PurePosixPath
@@ -45,6 +46,7 @@ PRIORITY_EVIDENCE_KIND = {
     "P1": "ledger",
     "P2": "advisory",
 }
+_FILE_ATTRIBUTE_REPARSE_POINT = getattr(stat, "FILE_ATTRIBUTE_REPARSE_POINT", 0x400)
 
 
 def _result_error(code: str, message: str) -> dict[str, Any]:
@@ -302,6 +304,28 @@ def _frontmatter(text: str) -> dict[str, str] | None:
     return None
 
 
+def _required_artifact_names(change_name: str) -> set[str]:
+    return {
+        f"spec/{change_name}-design.md",
+        f"plans/{change_name}-plan.md",
+        f"plans/{change_name}-implementation-detail.md",
+        f"plans/{change_name}-test-scenarios.md",
+        "meta/gate-policy.json",
+        "meta/worktree.json",
+    }
+
+
+def _is_link_or_reparse(path: Path) -> bool:
+    """Detect symlinks and Windows reparse points on every supported Python."""
+    try:
+        if path.is_symlink():
+            return True
+        attributes = getattr(os.lstat(path), "st_file_attributes", 0)
+    except OSError:
+        return False
+    return bool(attributes & _FILE_ATTRIBUTE_REPARSE_POINT)
+
+
 def lint_slice_plan(plan_path: Path) -> dict[str, Any]:
     """Validate the identity, reuse, and storage contract for a slice plan."""
     text = Path(plan_path).read_text(encoding="utf-8-sig")
@@ -369,7 +393,7 @@ def lint_slice_plan(plan_path: Path) -> dict[str, Any]:
 def _artifact_files(staging: Path) -> list[Path]:
     files: list[Path] = []
     for path in staging.rglob("*"):
-        if path.is_symlink():
+        if _is_link_or_reparse(path):
             raise ValueError(f"PLAN_ARTIFACT_SYMLINK: {path}")
         if path.is_file():
             files.append(path)
@@ -378,14 +402,7 @@ def _artifact_files(staging: Path) -> list[Path]:
 
 def validate_staging(staging: Path, change_name: str) -> dict[str, Any]:
     staging = staging.resolve()
-    required = {
-        Path("spec") / f"{change_name}-design.md",
-        Path("plans") / f"{change_name}-plan.md",
-        Path("plans") / f"{change_name}-implementation-detail.md",
-        Path("plans") / f"{change_name}-test-scenarios.md",
-        Path("meta") / "gate-policy.json",
-        Path("meta") / "worktree.json",
-    }
+    required = {Path(name) for name in _required_artifact_names(change_name)}
     try:
         files = _artifact_files(staging)
     except ValueError as exc:
@@ -621,12 +638,18 @@ def _receipt_artifact_targets(
         cursor = change_dir
         for part in rel.parts:
             cursor = cursor / part
-            is_junction = getattr(cursor, "is_junction", lambda: False)
-            if cursor.is_symlink() or is_junction():
+            if _is_link_or_reparse(cursor):
                 return None, _result_error(
                     "RECEIPT_FILE_PATH_INVALID",
                     f"receipt artifact path traverses a link: {normalized}",
                 )
+        try:
+            target.resolve(strict=False).relative_to(change_dir)
+        except (OSError, RuntimeError, ValueError):
+            return None, _result_error(
+                "RECEIPT_FILE_PATH_INVALID",
+                f"receipt artifact path resolves outside the change directory: {normalized}",
+            )
         targets.append((normalized, target))
     return targets, None
 
@@ -671,6 +694,15 @@ def verify_plan(change_dir: Path) -> dict[str, Any]:
     if path_error is not None:
         return path_error
     assert artifact_targets is not None
+    artifact_name_set = {rel for rel, _ in artifact_targets}
+    missing_required = sorted(
+        _required_artifact_names(change_name) - artifact_name_set
+    )
+    if missing_required:
+        return _result_error(
+            "RECEIPT_FILES_INCOMPLETE",
+            "receipt omits required artifacts: " + ", ".join(missing_required),
+        )
     if receipt.get("status") != "finalized":
         return _result_error(
             "RECEIPT_NOT_FINALIZED",

package/harness/bundles/general/codex/harness-plan/SKILL.md

@@ -87,7 +87,7 @@ change-name 范围变更 → 提示重命名或记 🟡WARN（→ `reference.md`
 |------|------|
 | 产物路径 | 只写 `.harness/changes/<cn>/`；禁止 superpowers 输入 |
 | 设计审批包 | 一次 blocking user confirmation 含 worktree（读 `harness.json` `defaultWorktree`） |
-| 阶段 8 | spec/plan/detail/scenarios/worktree.json 先进入 staging；仅 finalizer 校验成功后发布并写唯一 `phase.end`/log；随后 `verify` 必须确认 start/end、收据哈希、全部任务表和非空场景清单一致，失败不得手工补终态 |
+| 阶段 8 | spec/plan/detail/scenarios/gate-policy/worktree 六项标准产物先进入 staging；仅 finalizer 校验成功后发布并写唯一 `phase.end`/log；随后 `verify` 必须确认 start/end、收据完整覆盖六项标准产物、哈希、全部任务表和非空场景清单一致，失败不得手工补终态 |
 | Plan 结束 | **禁止**询问执行模式；只提示 `/harness-run` |
 | 知识查询 | 0.5 失败不得假装已读历史 |
 | 歧义优先检查 | 否定、对比、动作对象或范围存在多种合理解释时，最小取证后先给推荐理解并一次一问；确认前不深挖错误方向 |

package/harness/bundles/general/codex/harness-plan/checklist.md

@@ -214,6 +214,7 @@ source: harness-plan
 - [ ] finalizer 返回 `ok=true` 与 `artifactsHash`；重复执行返回 `idempotent=true`
 - [ ] 紧接着执行 `harness_plan_finalize.py verify --change-dir ... --json`
 - [ ] verify 返回 `phaseStartCount=1`、`phaseEndCount=1`、`phaseEndStatus=OK`、`receiptConsistent=true`
+- [ ] 收据 `files` 完整包含 design / plan / implementation-detail / test-scenarios / gate-policy / worktree 六项标准产物；不得省略、重复或经 symlink/junction/reparse point 引用
 - [ ] verify 的 `taskCount` 等于全部任务表行数，`scenarioCount` 等于 Markdown 中全部唯一场景 ID 数；任一为 0 或不一致即 ❌FAIL
 - [ ] finalizer 失败时正式目录无半发布产物、无成功 `phase.end`、无伪造 execution log
 - [ ] 禁止在 finalizer 之前手工追加成功 `phase.end`
@@ -224,6 +225,7 @@ source: harness-plan
 | `.harness/changes/<change>/plans/<change>-plan.md` | ✅ | □ |
 | `.harness/changes/<change>/plans/<change>-implementation-detail.md` | ✅ | □ |
 | `.harness/changes/<change>/plans/<change>-test-scenarios.md` | ✅ | □ |
+| `.harness/changes/<change>/meta/gate-policy.json` | ✅ | □ |
 | `.harness/changes/<change>/meta/worktree.json` | ✅ | □ |
 | `.harness/changes/<change>/meta/implementation-checkpoints.json` | ✅ | □ |
 | `.harness/changes/<change>/meta/scenario-manifest.json`（非空且计数一致） | ✅ | □ |

package/harness/bundles/general/codex/harness-plan/reference.md

@@ -335,10 +335,16 @@ status: approved
 | `.harness/changes/<change>/plans/<change>-plan.md` | ✅ |
 | `.harness/changes/<change>/plans/<change>-implementation-detail.md` | ✅ |
 | `.harness/changes/<change>/plans/<change>-test-scenarios.md` | ✅ |
+| `.harness/changes/<change>/meta/gate-policy.json` | ✅ |
 | `.harness/changes/<change>/meta/worktree.json` | ✅ |
+| `.harness/changes/<change>/meta/implementation-checkpoints.json` | ✅ |
+| `.harness/changes/<change>/meta/scenario-manifest.json` | ✅ |
+| `.harness/changes/<change>/meta/plan-finalization.json` | ✅ |
 | `.harness/changes/<change>/logs/execution-log.md` | ✅ |
 | `.harness/changes/<change>/events.ndjson` | ✅ |
 
+`plan-finalization.json.files` 必须完整列出 design、plan、implementation-detail、test-scenarios、gate-policy、worktree 六项标准输入。`verify` 对缺项、重复项、越界路径以及 symlink/junction/reparse point 一律 fail-closed；不得通过删减收据文件集后重算哈希来绕过完整性检查。
+
 ### Plan 结束行为规则
 
 - **禁止询问执行模式**：Subagent-Driven / Inline Execution 属于 /harness-run 阶段

package/harness/bundles/general/codex/scripts/harness_plan_finalize.py

@@ -11,6 +11,7 @@ import json
 import os
 import re
 import shutil
+import stat
 import sys
 import tempfile
 from pathlib import Path, PurePosixPath
@@ -45,6 +46,7 @@ PRIORITY_EVIDENCE_KIND = {
     "P1": "ledger",
     "P2": "advisory",
 }
+_FILE_ATTRIBUTE_REPARSE_POINT = getattr(stat, "FILE_ATTRIBUTE_REPARSE_POINT", 0x400)
 
 
 def _result_error(code: str, message: str) -> dict[str, Any]:
@@ -302,6 +304,28 @@ def _frontmatter(text: str) -> dict[str, str] | None:
     return None
 
 
+def _required_artifact_names(change_name: str) -> set[str]:
+    return {
+        f"spec/{change_name}-design.md",
+        f"plans/{change_name}-plan.md",
+        f"plans/{change_name}-implementation-detail.md",
+        f"plans/{change_name}-test-scenarios.md",
+        "meta/gate-policy.json",
+        "meta/worktree.json",
+    }
+
+
+def _is_link_or_reparse(path: Path) -> bool:
+    """Detect symlinks and Windows reparse points on every supported Python."""
+    try:
+        if path.is_symlink():
+            return True
+        attributes = getattr(os.lstat(path), "st_file_attributes", 0)
+    except OSError:
+        return False
+    return bool(attributes & _FILE_ATTRIBUTE_REPARSE_POINT)
+
+
 def lint_slice_plan(plan_path: Path) -> dict[str, Any]:
     """Validate the identity, reuse, and storage contract for a slice plan."""
     text = Path(plan_path).read_text(encoding="utf-8-sig")
@@ -369,7 +393,7 @@ def lint_slice_plan(plan_path: Path) -> dict[str, Any]:
 def _artifact_files(staging: Path) -> list[Path]:
     files: list[Path] = []
     for path in staging.rglob("*"):
-        if path.is_symlink():
+        if _is_link_or_reparse(path):
             raise ValueError(f"PLAN_ARTIFACT_SYMLINK: {path}")
         if path.is_file():
             files.append(path)
@@ -378,14 +402,7 @@ def _artifact_files(staging: Path) -> list[Path]:
 
 def validate_staging(staging: Path, change_name: str) -> dict[str, Any]:
     staging = staging.resolve()
-    required = {
-        Path("spec") / f"{change_name}-design.md",
-        Path("plans") / f"{change_name}-plan.md",
-        Path("plans") / f"{change_name}-implementation-detail.md",
-        Path("plans") / f"{change_name}-test-scenarios.md",
-        Path("meta") / "gate-policy.json",
-        Path("meta") / "worktree.json",
-    }
+    required = {Path(name) for name in _required_artifact_names(change_name)}
     try:
         files = _artifact_files(staging)
     except ValueError as exc:
@@ -621,12 +638,18 @@ def _receipt_artifact_targets(
         cursor = change_dir
         for part in rel.parts:
             cursor = cursor / part
-            is_junction = getattr(cursor, "is_junction", lambda: False)
-            if cursor.is_symlink() or is_junction():
+            if _is_link_or_reparse(cursor):
                 return None, _result_error(
                     "RECEIPT_FILE_PATH_INVALID",
                     f"receipt artifact path traverses a link: {normalized}",
                 )
+        try:
+            target.resolve(strict=False).relative_to(change_dir)
+        except (OSError, RuntimeError, ValueError):
+            return None, _result_error(
+                "RECEIPT_FILE_PATH_INVALID",
+                f"receipt artifact path resolves outside the change directory: {normalized}",
+            )
         targets.append((normalized, target))
     return targets, None
 
@@ -671,6 +694,15 @@ def verify_plan(change_dir: Path) -> dict[str, Any]:
     if path_error is not None:
         return path_error
     assert artifact_targets is not None
+    artifact_name_set = {rel for rel, _ in artifact_targets}
+    missing_required = sorted(
+        _required_artifact_names(change_name) - artifact_name_set
+    )
+    if missing_required:
+        return _result_error(
+            "RECEIPT_FILES_INCOMPLETE",
+            "receipt omits required artifacts: " + ", ".join(missing_required),
+        )
     if receipt.get("status") != "finalized":
         return _result_error(
             "RECEIPT_NOT_FINALIZED",

package/harness/bundles/general/cursor/harness-plan/SKILL.md

@@ -87,7 +87,7 @@ change-name 范围变更 → 提示重命名或记 🟡WARN（→ `reference.md`
 |------|------|
 | 产物路径 | 只写 `.harness/changes/<cn>/`；禁止 superpowers 输入 |
 | 设计审批包 | 一次 blocking user confirmation 含 worktree（读 `harness.json` `defaultWorktree`） |
-| 阶段 8 | spec/plan/detail/scenarios/worktree.json 先进入 staging；仅 finalizer 校验成功后发布并写唯一 `phase.end`/log；随后 `verify` 必须确认 start/end、收据哈希、全部任务表和非空场景清单一致，失败不得手工补终态 |
+| 阶段 8 | spec/plan/detail/scenarios/gate-policy/worktree 六项标准产物先进入 staging；仅 finalizer 校验成功后发布并写唯一 `phase.end`/log；随后 `verify` 必须确认 start/end、收据完整覆盖六项标准产物、哈希、全部任务表和非空场景清单一致，失败不得手工补终态 |
 | Plan 结束 | **禁止**询问执行模式；只提示 `/harness-run` |
 | 知识查询 | 0.5 失败不得假装已读历史 |
 | 歧义优先检查 | 否定、对比、动作对象或范围存在多种合理解释时，最小取证后先给推荐理解并一次一问；确认前不深挖错误方向 |

package/harness/bundles/general/cursor/harness-plan/checklist.md

@@ -214,6 +214,7 @@ source: harness-plan
 - [ ] finalizer 返回 `ok=true` 与 `artifactsHash`；重复执行返回 `idempotent=true`
 - [ ] 紧接着执行 `harness_plan_finalize.py verify --change-dir ... --json`
 - [ ] verify 返回 `phaseStartCount=1`、`phaseEndCount=1`、`phaseEndStatus=OK`、`receiptConsistent=true`
+- [ ] 收据 `files` 完整包含 design / plan / implementation-detail / test-scenarios / gate-policy / worktree 六项标准产物；不得省略、重复或经 symlink/junction/reparse point 引用
 - [ ] verify 的 `taskCount` 等于全部任务表行数，`scenarioCount` 等于 Markdown 中全部唯一场景 ID 数；任一为 0 或不一致即 ❌FAIL
 - [ ] finalizer 失败时正式目录无半发布产物、无成功 `phase.end`、无伪造 execution log
 - [ ] 禁止在 finalizer 之前手工追加成功 `phase.end`
@@ -224,6 +225,7 @@ source: harness-plan
 | `.harness/changes/<change>/plans/<change>-plan.md` | ✅ | □ |
 | `.harness/changes/<change>/plans/<change>-implementation-detail.md` | ✅ | □ |
 | `.harness/changes/<change>/plans/<change>-test-scenarios.md` | ✅ | □ |
+| `.harness/changes/<change>/meta/gate-policy.json` | ✅ | □ |
 | `.harness/changes/<change>/meta/worktree.json` | ✅ | □ |
 | `.harness/changes/<change>/meta/implementation-checkpoints.json` | ✅ | □ |
 | `.harness/changes/<change>/meta/scenario-manifest.json`（非空且计数一致） | ✅ | □ |

package/harness/bundles/general/cursor/harness-plan/reference.md

@@ -335,10 +335,16 @@ status: approved
 | `.harness/changes/<change>/plans/<change>-plan.md` | ✅ |
 | `.harness/changes/<change>/plans/<change>-implementation-detail.md` | ✅ |
 | `.harness/changes/<change>/plans/<change>-test-scenarios.md` | ✅ |
+| `.harness/changes/<change>/meta/gate-policy.json` | ✅ |
 | `.harness/changes/<change>/meta/worktree.json` | ✅ |
+| `.harness/changes/<change>/meta/implementation-checkpoints.json` | ✅ |
+| `.harness/changes/<change>/meta/scenario-manifest.json` | ✅ |
+| `.harness/changes/<change>/meta/plan-finalization.json` | ✅ |
 | `.harness/changes/<change>/logs/execution-log.md` | ✅ |
 | `.harness/changes/<change>/events.ndjson` | ✅ |
 
+`plan-finalization.json.files` 必须完整列出 design、plan、implementation-detail、test-scenarios、gate-policy、worktree 六项标准输入。`verify` 对缺项、重复项、越界路径以及 symlink/junction/reparse point 一律 fail-closed；不得通过删减收据文件集后重算哈希来绕过完整性检查。
+
 ### Plan 结束行为规则
 
 - **禁止询问执行模式**：Subagent-Driven / Inline Execution 属于 /harness-run 阶段

package/harness/bundles/general/cursor/scripts/harness_plan_finalize.py

@@ -11,6 +11,7 @@ import json
 import os
 import re
 import shutil
+import stat
 import sys
 import tempfile
 from pathlib import Path, PurePosixPath
@@ -45,6 +46,7 @@ PRIORITY_EVIDENCE_KIND = {
     "P1": "ledger",
     "P2": "advisory",
 }
+_FILE_ATTRIBUTE_REPARSE_POINT = getattr(stat, "FILE_ATTRIBUTE_REPARSE_POINT", 0x400)
 
 
 def _result_error(code: str, message: str) -> dict[str, Any]:
@@ -302,6 +304,28 @@ def _frontmatter(text: str) -> dict[str, str] | None:
     return None
 
 
+def _required_artifact_names(change_name: str) -> set[str]:
+    return {
+        f"spec/{change_name}-design.md",
+        f"plans/{change_name}-plan.md",
+        f"plans/{change_name}-implementation-detail.md",
+        f"plans/{change_name}-test-scenarios.md",
+        "meta/gate-policy.json",
+        "meta/worktree.json",
+    }
+
+
+def _is_link_or_reparse(path: Path) -> bool:
+    """Detect symlinks and Windows reparse points on every supported Python."""
+    try:
+        if path.is_symlink():
+            return True
+        attributes = getattr(os.lstat(path), "st_file_attributes", 0)
+    except OSError:
+        return False
+    return bool(attributes & _FILE_ATTRIBUTE_REPARSE_POINT)
+
+
 def lint_slice_plan(plan_path: Path) -> dict[str, Any]:
     """Validate the identity, reuse, and storage contract for a slice plan."""
     text = Path(plan_path).read_text(encoding="utf-8-sig")
@@ -369,7 +393,7 @@ def lint_slice_plan(plan_path: Path) -> dict[str, Any]:
 def _artifact_files(staging: Path) -> list[Path]:
     files: list[Path] = []
     for path in staging.rglob("*"):
-        if path.is_symlink():
+        if _is_link_or_reparse(path):
             raise ValueError(f"PLAN_ARTIFACT_SYMLINK: {path}")
         if path.is_file():
             files.append(path)
@@ -378,14 +402,7 @@ def _artifact_files(staging: Path) -> list[Path]:
 
 def validate_staging(staging: Path, change_name: str) -> dict[str, Any]:
     staging = staging.resolve()
-    required = {
-        Path("spec") / f"{change_name}-design.md",
-        Path("plans") / f"{change_name}-plan.md",
-        Path("plans") / f"{change_name}-implementation-detail.md",
-        Path("plans") / f"{change_name}-test-scenarios.md",
-        Path("meta") / "gate-policy.json",
-        Path("meta") / "worktree.json",
-    }
+    required = {Path(name) for name in _required_artifact_names(change_name)}
     try:
         files = _artifact_files(staging)
     except ValueError as exc:
@@ -621,12 +638,18 @@ def _receipt_artifact_targets(
         cursor = change_dir
         for part in rel.parts:
             cursor = cursor / part
-            is_junction = getattr(cursor, "is_junction", lambda: False)
-            if cursor.is_symlink() or is_junction():
+            if _is_link_or_reparse(cursor):
                 return None, _result_error(
                     "RECEIPT_FILE_PATH_INVALID",
                     f"receipt artifact path traverses a link: {normalized}",
                 )
+        try:
+            target.resolve(strict=False).relative_to(change_dir)
+        except (OSError, RuntimeError, ValueError):
+            return None, _result_error(
+                "RECEIPT_FILE_PATH_INVALID",
+                f"receipt artifact path resolves outside the change directory: {normalized}",
+            )
         targets.append((normalized, target))
     return targets, None
 
@@ -671,6 +694,15 @@ def verify_plan(change_dir: Path) -> dict[str, Any]:
     if path_error is not None:
         return path_error
     assert artifact_targets is not None
+    artifact_name_set = {rel for rel, _ in artifact_targets}
+    missing_required = sorted(
+        _required_artifact_names(change_name) - artifact_name_set
+    )
+    if missing_required:
+        return _result_error(
+            "RECEIPT_FILES_INCOMPLETE",
+            "receipt omits required artifacts: " + ", ".join(missing_required),
+        )
     if receipt.get("status") != "finalized":
         return _result_error(
             "RECEIPT_NOT_FINALIZED",

package/harness/bundles/java/claude-code/harness-plan/SKILL.md

@@ -106,7 +106,7 @@ change-name 范围变更 → 提示重命名或记 🟡WARN（→ `reference.md`
 |------|------|
 | 产物路径 | 只写 `.harness/changes/<cn>/`；禁止 superpowers 输入 |
 | 设计审批包 | 一次 blocking user confirmation 含 worktree（读 `harness.json` `defaultWorktree`） |
-| 阶段 8 | spec/plan/detail/scenarios/worktree.json 先进入 staging；仅 finalizer 校验成功后发布并写唯一 `phase.end`/log；随后 `verify` 必须确认 start/end、收据哈希、全部任务表和非空场景清单一致，失败不得手工补终态 |
+| 阶段 8 | spec/plan/detail/scenarios/gate-policy/worktree 六项标准产物先进入 staging；仅 finalizer 校验成功后发布并写唯一 `phase.end`/log；随后 `verify` 必须确认 start/end、收据完整覆盖六项标准产物、哈希、全部任务表和非空场景清单一致，失败不得手工补终态 |
 | Plan 结束 | **禁止**询问执行模式；只提示 `/harness-run` |
 | 知识查询 | 0.5 失败不得假装已读历史 |
 | 歧义优先检查 | 否定、对比、动作对象或范围存在多种合理解释时，最小取证后先给推荐理解并一次一问；确认前不深挖错误方向 |

package/harness/bundles/java/claude-code/harness-plan/checklist.md

@@ -214,6 +214,7 @@ source: harness-plan
 - [ ] finalizer 返回 `ok=true` 与 `artifactsHash`；重复执行返回 `idempotent=true`
 - [ ] 紧接着执行 `harness_plan_finalize.py verify --change-dir ... --json`
 - [ ] verify 返回 `phaseStartCount=1`、`phaseEndCount=1`、`phaseEndStatus=OK`、`receiptConsistent=true`
+- [ ] 收据 `files` 完整包含 design / plan / implementation-detail / test-scenarios / gate-policy / worktree 六项标准产物；不得省略、重复或经 symlink/junction/reparse point 引用
 - [ ] verify 的 `taskCount` 等于全部任务表行数，`scenarioCount` 等于 Markdown 中全部唯一场景 ID 数；任一为 0 或不一致即 ❌FAIL
 - [ ] finalizer 失败时正式目录无半发布产物、无成功 `phase.end`、无伪造 execution log
 - [ ] 禁止在 finalizer 之前手工追加成功 `phase.end`
@@ -224,6 +225,7 @@ source: harness-plan
 | `.harness/changes/<change>/plans/<change>-plan.md` | ✅ | □ |
 | `.harness/changes/<change>/plans/<change>-implementation-detail.md` | ✅ | □ |
 | `.harness/changes/<change>/plans/<change>-test-scenarios.md` | ✅ | □ |
+| `.harness/changes/<change>/meta/gate-policy.json` | ✅ | □ |
 | `.harness/changes/<change>/meta/worktree.json` | ✅ | □ |
 | `.harness/changes/<change>/meta/implementation-checkpoints.json` | ✅ | □ |
 | `.harness/changes/<change>/meta/scenario-manifest.json`（非空且计数一致） | ✅ | □ |