@hunter-harness/workflow-harness 0.2.34 → 0.2.36

package/harness/bundles/general/claude-code/.harness-build.json

@@ -2,5 +2,5 @@
   "schemaVersion": 1,
   "overlay": "none",
   "agent": "claude-code",
-  "coreHash": "a74978a5fd5c6938"
+  "coreHash": "53e62510d9d800ee"
 }

package/harness/bundles/general/claude-code/contracts/build-profile-v3.schema.json

@@ -0,0 +1,147 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://hunter-harness.local/contracts/build-profile-v3.schema.json",
+  "title": "Hunter Harness Build Profile v3",
+  "type": "object",
+  "required": [
+    "schemaVersion",
+    "commands",
+    "verificationInputs",
+    "verificationGraph"
+  ],
+  "properties": {
+    "schemaVersion": {
+      "const": 3
+    },
+    "commands": {
+      "type": "object",
+      "additionalProperties": {
+        "type": "object",
+        "required": [
+          "command",
+          "argvTemplate",
+          "scope",
+          "inputs",
+          "coverage",
+          "source"
+        ],
+        "properties": {
+          "command": {
+            "type": "string",
+            "minLength": 1
+          },
+          "argvTemplate": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "minItems": 1
+          },
+          "scope": {
+            "type": "string",
+            "minLength": 1
+          },
+          "inputs": {
+            "type": "array",
+            "items": {
+              "type": "string",
+              "minLength": 1
+            }
+          },
+          "coverage": {
+            "type": "string",
+            "minLength": 1
+          },
+          "source": {
+            "enum": [
+              "detected",
+              "user"
+            ]
+          }
+        }
+      }
+    },
+    "verificationInputs": {
+      "type": "object",
+      "additionalProperties": {
+        "type": "array",
+        "items": {
+          "type": "string",
+          "minLength": 1
+        }
+      }
+    },
+    "verificationGraph": {
+      "type": "object",
+      "required": [
+        "schemaVersion",
+        "source",
+        "candidateTarget",
+        "targets"
+      ],
+      "properties": {
+        "schemaVersion": {
+          "const": 1
+        },
+        "source": {
+          "enum": [
+            "detected",
+            "user"
+          ]
+        },
+        "candidateTarget": {
+          "type": [
+            "string",
+            "null"
+          ]
+        },
+        "targets": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+              "commandKey",
+              "dependsOn",
+              "requiredCoverage",
+              "candidate",
+              "requiredCapabilities"
+            ],
+            "properties": {
+              "commandKey": {
+                "type": "string",
+                "pattern": "^[A-Za-z][A-Za-z0-9_-]*$"
+              },
+              "dependsOn": {
+                "type": "array",
+                "items": {
+                  "type": "string",
+                  "pattern": "^[A-Za-z][A-Za-z0-9_-]*$"
+                },
+                "uniqueItems": true
+              },
+              "requiredCoverage": {
+                "enum": [
+                  "incremental",
+                  "module-am",
+                  "module"
+                ]
+              },
+              "candidate": {
+                "type": "boolean"
+              },
+              "requiredCapabilities": {
+                "type": "array",
+                "items": {
+                  "type": "string",
+                  "minLength": 1
+                },
+                "uniqueItems": true
+              }
+            }
+          }
+        }
+      }
+    }
+  }
+}

package/harness/bundles/general/claude-code/contracts/doctor-capability.schema.json

@@ -0,0 +1,43 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://hunter-harness.local/contracts/doctor-capability.schema.json",
+  "title": "Hunter Harness Capability Probe",
+  "type": "object",
+  "additionalProperties": true,
+  "required": [
+    "capability",
+    "status",
+    "reasonCode",
+    "observedAt",
+    "evidence"
+  ],
+  "properties": {
+    "capability": {
+      "type": "string",
+      "minLength": 1
+    },
+    "status": {
+      "enum": [
+        "AVAILABLE",
+        "UNAVAILABLE",
+        "DEGRADED",
+        "UNKNOWN"
+      ]
+    },
+    "reasonCode": {
+      "type": "string",
+      "minLength": 1
+    },
+    "observedAt": {
+      "type": "string",
+      "format": "date-time"
+    },
+    "evidence": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "details": {}
+  }
+}

package/harness/bundles/general/claude-code/contracts/external-platform-observation.schema.json

@@ -0,0 +1,62 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://hunter-harness.local/contracts/external-platform-observation.schema.json",
+  "title": "Authoritative External Platform Observation",
+  "type": "object",
+  "additionalProperties": true,
+  "required": [
+    "subjectIdentity",
+    "businessState",
+    "observationState",
+    "freshness",
+    "retryable",
+    "reasonCode",
+    "observedAt"
+  ],
+  "properties": {
+    "subjectIdentity": {
+      "type": "string",
+      "minLength": 1
+    },
+    "businessState": {
+      "enum": [
+        "PENDING",
+        "RUNNING",
+        "SUCCEEDED",
+        "FAILED",
+        "CANCELLED",
+        "UNKNOWN"
+      ]
+    },
+    "observationState": {
+      "enum": [
+        "PENDING",
+        "TERMINAL",
+        "UNKNOWN"
+      ]
+    },
+    "freshness": {
+      "enum": [
+        "FRESH",
+        "STALE",
+        "UNKNOWN"
+      ]
+    },
+    "retryable": {
+      "type": "boolean"
+    },
+    "reasonCode": {
+      "type": "string",
+      "minLength": 1
+    },
+    "observedAt": {
+      "type": "string",
+      "format": "date-time"
+    },
+    "idempotencyKey": {
+      "type": "string",
+      "minLength": 1
+    },
+    "payload": {}
+  }
+}

package/harness/bundles/general/claude-code/harness-archive/SKILL.md

@@ -20,7 +20,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=a74978a5fd5c6938; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=53e62510d9d800ee; overlay=none; agent=claude-code; do not edit -->
 # harness-archive — 变更归档
 
 ## Purpose

package/harness/bundles/general/claude-code/harness-codebase-map/SKILL.md

@@ -20,7 +20,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=a74978a5fd5c6938; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=53e62510d9d800ee; overlay=none; agent=claude-code; do not edit -->
 # harness-codebase-map — 代码库地图
 
 ## Purpose

package/harness/bundles/general/claude-code/harness-knowledge-ingest/SKILL.md

@@ -20,7 +20,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=a74978a5fd5c6938; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=53e62510d9d800ee; overlay=none; agent=claude-code; do not edit -->
 # harness-knowledge-ingest
 
 从 `.harness/archive/**/reports/final/summary-data.json` 抽取项目知识，生成并维护本地 `.harness/knowledge/` 索引。

package/harness/bundles/general/claude-code/harness-knowledge-ingest/scripts/harness_knowledge.py

@@ -1397,7 +1397,8 @@ def load_preserved_entries(knowledge: Path) -> list[dict[str, Any]]:
         entry
         for status in ["candidate", "stale", "superseded", "conflicted"]
         for entry in load_entries_from_dir(knowledge / "entries" / status)
-        if entry.get("lifecycle", {}).get("demotedAt")
+        if status == "superseded"
+        or entry.get("lifecycle", {}).get("demotedAt")
         or entry.get("lifecycle", {}).get("judgeAction")
     ]
     return active_entries + manually_decided_entries
@@ -1762,6 +1763,27 @@ def _preserve_confidence_timestamp(target: Path, entry: dict[str, Any]) -> None:
         entry["confidence"]["lastCalculatedAt"] = disk_conf.get("lastCalculatedAt")
 
 
+def remove_other_entry_status_files(
+    knowledge: Path,
+    entry: dict[str, Any],
+    target: Path,
+) -> None:
+    entry_id = str(entry.get("id") or "")
+    if not entry_id:
+        return
+    filename = entry_filename(entry)
+    for status in ["candidate", "active", "stale", "superseded", "conflicted"]:
+        existing_path = knowledge / "entries" / status / filename
+        if existing_path == target or not existing_path.exists():
+            continue
+        try:
+            existing = read_json(existing_path)
+        except (OSError, json.JSONDecodeError):
+            continue
+        if isinstance(existing, dict) and str(existing.get("id") or "") == entry_id:
+            existing_path.unlink()
+
+
 def persist_entry_updates(knowledge: Path, entries: list[dict[str, Any]]) -> int:
     written = 0
     for entry in entries:
@@ -1773,6 +1795,7 @@ def persist_entry_updates(knowledge: Path, entries: list[dict[str, Any]]) -> int
             _preserve_confidence_timestamp(path, entry)
         if write_json_if_changed(path, entry):
             written += 1
+        remove_other_entry_status_files(knowledge, entry, path)
     return written
 
 

package/harness/bundles/general/claude-code/harness-knowledge-query/SKILL.md

@@ -20,7 +20,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=a74978a5fd5c6938; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=53e62510d9d800ee; overlay=none; agent=claude-code; do not edit -->
 # harness-knowledge-query
 
 并行 change 中查询必须传 `--change <change-id>`；成功后以该 change 的 `meta/knowledge-context.json` 为稳定指针。全局 `context-packs/latest.json` 仅向后兼容，不得用于判断多个 active change 的上下文归属。

package/harness/bundles/general/claude-code/harness-plan/SKILL.md

@@ -20,7 +20,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=a74978a5fd5c6938; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=53e62510d9d800ee; overlay=none; agent=claude-code; do not edit -->
 # harness-plan — 需求规划
 
 ## Purpose

package/harness/bundles/general/claude-code/harness-review/SKILL.md

@@ -21,7 +21,7 @@ disallowed-tools:
   - Bash(curl *)
   - Bash(codegraph *)
 ---
-<!-- generated by harness_deploy.py; core=a74978a5fd5c6938; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=53e62510d9d800ee; overlay=none; agent=claude-code; do not edit -->
 # harness-review — 代码审查
 
 ## Purpose

package/harness/bundles/general/claude-code/harness-run/SKILL.md

@@ -21,7 +21,7 @@ disallowed-tools:
   - Bash(curl *)
   - Bash(codegraph *)
 ---
-<!-- generated by harness_deploy.py; core=a74978a5fd5c6938; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=53e62510d9d800ee; overlay=none; agent=claude-code; do not edit -->
 # harness-run — 需求编码
 
 ## Purpose

package/harness/bundles/general/claude-code/harness-submit/SKILL.md

@@ -20,7 +20,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=a74978a5fd5c6938; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=53e62510d9d800ee; overlay=none; agent=claude-code; do not edit -->
 # harness-submit — 最终提交（含 worktree 合并）
 
 ## Purpose

package/harness/bundles/general/claude-code/harness-sync/SKILL.md

@@ -19,7 +19,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=a74978a5fd5c6938; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=53e62510d9d800ee; overlay=none; agent=claude-code; do not edit -->
 # harness-sync
 
 ## Purpose

package/harness/bundles/general/claude-code/harness-sync/reference.md

@@ -77,7 +77,7 @@ npx hunter-harness sync --project <项目路径> --profile general --progress js
 | instruction graph | 入口、include 边、环、主题可达性 | 缺失引用或循环为 `FAIL` |
 | config origins | canonical/projection 路径与 hash | 漂移 `WARN`，不静默覆盖 |
 | changes | 五态分类及归档收据 | `INVALID`/`ORPHAN` 不自动删除 |
-| CodeGraph | 服务、索引提交、pending、watcher lag | 证据不足为 `UNKNOWN`；不自动全量 reindex |
+| CodeGraph | 索引文件、守护进程管道、watcher 日志、pending、watcher lag | 输出 `CURRENT/PENDING/STALE/INDEX_PRESENT_UNVERIFIED/MISSING/UNKNOWN`；不自动全量 reindex |
 
 全局状态优先级：`BLOCKED` → `FAIL` → `WARN` → `OK`。任一 `UNKNOWN` 至少使全局结果为 `WARN`。
 
@@ -85,7 +85,7 @@ npx hunter-harness sync --project <项目路径> --profile general --progress js
 
 增量基线来自上次成功 sync receipt 的 `headCommit`。首次运行或 receipt 不可用时，仅收集当前 HEAD 和有界文件统计；禁止固定 `HEAD~5`。
 
-CodeGraph 最多执行受限状态探测/短退避复查。不可用或 watcher 尚未追平时报告 `UNKNOWN`/`WARN` 和明确后续动作。不要在 sync 内执行全量索引，不使用依赖 shell 连接符的跨平台命令。
+CodeGraph 状态探测读取 `.codegraph/codegraph.db`、daemon receipt/log，尝试有界管道连接，并比较项目文件与最近索引观察时间。只有服务可达、watcher 已启用且 `pendingFileCount=0` 时为 `CURRENT`；此时才可将当前 HEAD 记录为推断的 `indexedCommit`。不可用、待同步或证据不足时分别报告 `STALE/PENDING/INDEX_PRESENT_UNVERIFIED/UNKNOWN` 与明确后续动作。不要在 sync 内执行全量索引，不使用依赖 shell 连接符的跨平台命令。
 
 ## 6. Instruction graph
 

package/harness/bundles/general/claude-code/harness-test/SKILL.md

@@ -22,7 +22,7 @@ disallowed-tools:
   - Bash(node *)
   - Bash(codegraph *)
 ---
-<!-- generated by harness_deploy.py; core=a74978a5fd5c6938; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=53e62510d9d800ee; overlay=none; agent=claude-code; do not edit -->
 # harness-test — 测试执行
 
 ## Purpose

package/harness/bundles/general/claude-code/harness-test/pitfalls.md

@@ -271,6 +271,6 @@ $cred = $resp.data.accessToken
 | `validateRunnerPayload(payload, {identifierPattern})` | Runner 生成前本地校验 payload schema/必填/identifier/重复 id，返回结构化错误码 | 测试脚本错误（缺字段/非法 id）直到请求服务后才暴露，返工成本高 |
 | `findCredentialValues(text)` | 扫描 profile/Markdown/docs 中的凭据明文值（password/token/secret/Authorization/jdbc password），占位符 `<*_REDACTED>` 与 env 引用 `${ENV}`/`$ENV` 不报 | profile/规则文档误含明文凭据被发布 |
 
-**Runner 生成前强制**（spec §3.4 point 3）：生成 `api-test-runner.mjs` 前用 `validateRunnerPayload` 校验全部场景；`ok=false` → 修复脚本错误，**不得带错请求服务**。场景 id 用 `sanitizeTestIdentifier` 生成（profile v2 `identifier.pattern/maxLength/prefix` 已声明）。
+**Runner 生成前强制**（spec §3.4 point 3）：生成 `api-test-runner.mjs` 前用 `validateRunnerPayload` 校验全部场景；`ok=false` → 修复脚本错误，**不得带错请求服务**。场景 id 用 `sanitizeTestIdentifier` 生成（Build Profile v3 `identifier.pattern/maxLength/prefix` 已声明）。
 
 **凭据边界**（spec §3.4 point 4）：credential 配置只含 env key（如 `${TEST_TOKEN}`）、cache path、角色，不含值。发布前用 `findCredentialValues` 扫 profile/规则/Markdown，命中即 ❌FAIL。详见 `../protocols/sensitive-info-protocol.md` §6。

package/harness/bundles/general/claude-code/protocols/ci-layering-protocol.md

@@ -0,0 +1,22 @@
+# CI 分层与构建产物复用协议
+
+所有项目将远端验证拆成四层，触发条件和产物身份必须彼此独立：
+
+| 层 | 默认触发 | 工作内容 |
+|---|---|---|
+| `fast` | push / pull request | 影响选择后的格式、合同和单元门禁；分钟级反馈 |
+| `candidate` | 冻结产品 identity 后手动触发 | 完整测试、真实栈、安全扫描、SBOM；每个 identity 最多一次 |
+| `evidence-only` | 证据路径变化或候选证据续跑 | 校验 schema、hash、identity；禁止重新构建产品镜像 |
+| `release` | 已通过候选的受控发布 | 校验既有 artifact/digest，附加发布标签并部署；禁止再次构建 |
+
+## 必需控制
+
+- 同分支同层启用 concurrency cancellation，取消过时运行；
+- `candidate` 构建的镜像和制品以提交、产品树和环境 identity 命名并记录 digest；
+- 产品路径冻结后，候选通过前不得夹带证据提交；候选通过后只允许 evidence-only 路径变化；
+- 未知路径或影响图无法证明边界时扩大验证，不能缩小；
+- Linux、Docker、shell 权限等行为先在受控 Linux 环境运行 canary；
+- 发布层只消费候选产物，不执行源码构建；
+- runner minutes、缓存命中和关键路径耗时写入周期报告，以实际基线评价优化。
+
+项目可用自身 CI 语法实现该协议，但层名、身份和收据语义保持一致。

package/harness/bundles/general/claude-code/protocols/external-platform-protocol.md

@@ -0,0 +1,27 @@
+# 外部平台最终一致性协议
+
+用于 CI、镜像仓库、部署控制面、证据回传等异步外部系统。目标是让网络传输、远端业务状态和本地观察新鲜度彼此独立，避免把“请求成功”误判为“业务成功”。
+
+## 统一观察合同
+
+每次观察至少包含：
+
+- `subjectIdentity`：不可变业务对象身份，如提交、镜像 digest、运行 ID 与环境身份的规范化组合；
+- `businessState`：`PENDING/RUNNING/SUCCEEDED/FAILED/CANCELLED/UNKNOWN`；
+- `observationState`：`PENDING/TERMINAL/UNKNOWN`；
+- `freshness`：`FRESH/STALE/UNKNOWN`；
+- `retryable`、`reasonCode`、`observedAt`；
+- 写操作还应携带稳定 `idempotencyKey`。
+
+JSON 合同见 `contracts/external-platform-observation.schema.json`。
+
+## 收敛规则
+
+1. 只有身份一致、`freshness=FRESH` 且观察到权威终态，才能宣称完成。
+2. `TERMINAL + SUCCEEDED` 才是成功；`FAILED/CANCELLED` 必须保留为业务失败，不能被 HTTP 2xx、回调成功或旧缓存覆盖。
+3. 仅重试 retryable 的传输失败、陈旧观察或非终态；鉴权、参数、身份不匹配与权威失败不得重试成成功。
+4. 重试必须同时受最大次数、总耗时和退避表约束；预算耗尽输出结构化失败收据。
+5. 每次轮询继续使用同一 `subjectIdentity`/`idempotencyKey`，身份漂移立即 fail closed。
+6. 回调只是触发再次观察的信号，最终结论仍以权威读取接口为准。
+
+通用执行内核为 `@hunter-harness/core` 的 `convergeAuthoritativeState`。

package/harness/bundles/general/claude-code/protocols/memory-closeout-protocol.md

@@ -0,0 +1,21 @@
+# 项目与全局记忆收尾协议
+
+Workflow 的 canonical state 永远是项目 Git 中的配置/文档和 `.harness` 的本地收据；聊天记录与跨项目记忆只能辅助发现，不能代替 gate、identity 或完成状态。
+
+## 分层写入
+
+- 项目事实、命令、发布清单和长期约束写入项目真源；
+- 当前运行状态、尝试和证据写入 `.harness`；
+- 只有可跨项目复用、已经验证且不含 secret 的经验才写入全局记忆。
+
+## Closeout 字段
+
+每条全局记忆至少记录来源项目、来源提交/收据、`agent_id`、写入时间、置信度、TTL 或复核条件。新结论替代旧结论时显式记录 `supersede` 关系，不直接覆盖而失去历史。
+
+## 禁止项
+
+- 不写入凭据、token、生产数据或个人隐私；
+- 不写入未经验证的临时诊断；
+- 不把“上次成功”当成当前环境事实；
+- 不因 closeout 失败改写已经产生的产品或发布结论；
+- 只检查不落库时使用 dry-run，成功写入后提交本轮实际修改的记忆文件。

package/harness/bundles/general/claude-code/protocols/registry-governance-protocol.md

@@ -0,0 +1,31 @@
+# 容器仓库容量与生命周期治理协议
+
+适用于 TCR、GHCR 及其他按标签或版本计数的容器仓库。平台适配器负责读取真实库存和执行受控删除；通用内核只做容量判断、保护集合闭包与 dry-run 计划。
+
+## 构建前容量预检
+
+每次候选构建前必须提供当前版本数、计划新增数、配额和告警比例。若计划后超过配额，返回 `REGISTRY_VERSION_QUOTA_FULL` 并在构建前阻断；达到告警水位返回 `REGISTRY_VERSION_QUOTA_WARNING`。
+
+禁止先构建镜像、再依赖推送失败发现容量不足。
+
+## 保护集合
+
+保护标签至少包含：
+
+- 当前生产与上一生产；
+- 冻结候选、回滚窗口内候选；
+- release/evidence/TAT/smoke 收据引用的标签或 digest；
+- 运维显式 pin。
+
+保护标签解析出的 digest 必须加入保护 digest。共享 digest 被任一保护标签引用时，所有指向该 digest 的标签都进入保护集合，不能仅凭另一个标签较旧就删除。
+
+## 清理计划与执行
+
+1. 先调用 `planRegistryCleanup` 生成 `dryRun=true` 的结构化计划；
+2. 候选按创建时间与标签稳定排序，仅删除达到目标水位所需的最小数量；
+3. 若保护版本数量已超过目标水位，返回 `PROTECTED_VERSIONS_EXCEED_TARGET`，不扩大删除范围；
+4. 平台适配器执行前重新读取库存并核对计划 identity；
+5. 执行后重新查询版本数、受保护 digest 和剩余容量，写入最终收据；
+6. 通用内核不直接持有平台凭据，也不执行删除 API。
+
+通用容量与计划内核由 `@hunter-harness/core` 的 `assessRegistryCapacity` 和 `planRegistryCleanup` 提供。

package/harness/bundles/general/claude-code/protocols/verification-graph-protocol.md

@@ -0,0 +1,26 @@
+# 能力感知验证图协议
+
+Build Profile v3 用 `verificationGraph` 取代账本内的固定验证目标清单。项目可以声明后端、前端、浏览器、数据库、性能或发布候选等任意目标，同时保留统一的依赖、覆盖度和证据复用语义。
+
+## 目标合同
+
+每个目标必须声明：
+
+- `commandKey`：指向 `commands` 中的真实命令；
+- `dependsOn`：需要先完成的验证目标；
+- `requiredCoverage`：`incremental/module-am/module`；
+- `candidate`：是否为发布候选门禁；
+- `requiredCapabilities`：执行环境必须具备的能力。
+
+`candidateTarget` 必须引用已声明目标。未知目标、未知依赖、循环依赖、命令缺失都 fail closed。
+
+## 选择与执行
+
+1. 从显式请求目标开始；未显式请求时使用 `candidateTarget`。
+2. 展开完整依赖闭包并按拓扑顺序执行。
+3. 缺失能力不得静默跳过：目标记录 `CAPABILITY_MISSING`，依赖它的目标记录 `DEPENDENCY_BLOCKED`。
+4. 未进入闭包的目标是 `omitted`，与“执行失败”或“因能力阻断”分开报告。
+5. 账本记录目标定义的规范化 identity；依赖、覆盖度或能力声明变化后，旧证据必须失效。
+6. 候选目标即使自身命令可运行，也必须等待所有依赖和能力满足。
+
+JSON 合同见 `contracts/build-profile-v3.schema.json`；通用选择器为 `@hunter-harness/core` 的 `selectVerificationTargets`。