@hunter-harness/workflow-harness 0.2.5 → 0.2.7

package/harness/bundles/java/cursor/scripts/harness_workflow_policy.py

@@ -0,0 +1,160 @@
+#!/usr/bin/env python3
+"""Strict loader for harness/contracts/workflow-policy.json.
+
+Unknown fields at any depth fail validation. Python 3.10+, stdlib only.
+"""
+
+from __future__ import annotations
+
+import json
+from pathlib import Path
+from typing import Any
+
+POLICY_REL = Path("harness") / "contracts" / "workflow-policy.json"
+
+TOP_LEVEL_KEYS = frozenset(
+    {
+        "schemaVersion",
+        "riskTiers",
+        "skills",
+        "requiredArtifacts",
+        "requiredValidations",
+        "conditionalStages",
+        "interactionWhitelist",
+        "checkpointRules",
+    }
+)
+
+RISK_TIER_KEYS = frozenset(
+    {
+        "description",
+        "defaultPhases",
+        "requiredValidations",
+        "conditionalStages",
+        "upgradeTriggers",
+    }
+)
+
+SKILL_KEYS = frozenset(
+    {
+        "phase",
+        "inputs",
+        "artifacts",
+        "events",
+        "allowedInteractions",
+        "capabilities",
+        "profiles",
+    }
+)
+
+CONDITIONAL_STAGE_KEYS = frozenset({"tiers", "signals"})
+CHECKPOINT_RULE_KEYS = frozenset(
+    {
+        "afterTasks",
+        "beforeTasks",
+        "blocking",
+        "requiredReport",
+        "reviewerTool",
+    }
+)
+
+
+class PolicyValidationError(ValueError):
+    """Raised when workflow-policy.json contains unknown or invalid fields."""
+
+
+def _reject_unknown(data: dict[str, Any], allowed: frozenset[str], path: str) -> None:
+    unknown = sorted(set(data) - allowed)
+    if unknown:
+        raise PolicyValidationError(
+            f"unknown field(s) at {path}: {', '.join(unknown)}"
+        )
+
+
+def _require_type(value: Any, expected: type | tuple[type, ...], path: str) -> None:
+    if not isinstance(value, expected):
+        names = (
+            expected.__name__
+            if isinstance(expected, type)
+            else "|".join(t.__name__ for t in expected)
+        )
+        raise PolicyValidationError(f"{path} must be {names}, got {type(value).__name__}")
+
+
+def validate_policy(data: Any) -> dict[str, Any]:
+    if not isinstance(data, dict):
+        raise PolicyValidationError("workflow policy root must be an object")
+    _reject_unknown(data, TOP_LEVEL_KEYS, "root")
+    _require_type(data.get("schemaVersion"), int, "schemaVersion")
+    if data["schemaVersion"] != 1:
+        raise PolicyValidationError("unsupported schemaVersion")
+
+    risk_tiers = data["riskTiers"]
+    _require_type(risk_tiers, dict, "riskTiers")
+    for tier_name, tier in risk_tiers.items():
+        path = f"riskTiers.{tier_name}"
+        _require_type(tier, dict, path)
+        _reject_unknown(tier, RISK_TIER_KEYS, path)
+        _require_type(tier["description"], str, f"{path}.description")
+        _require_type(tier["defaultPhases"], list, f"{path}.defaultPhases")
+        _require_type(tier["requiredValidations"], list, f"{path}.requiredValidations")
+        _require_type(tier["conditionalStages"], list, f"{path}.conditionalStages")
+        _require_type(tier["upgradeTriggers"], list, f"{path}.upgradeTriggers")
+
+    skills = data["skills"]
+    _require_type(skills, dict, "skills")
+    for skill_name, skill in skills.items():
+        path = f"skills.{skill_name}"
+        _require_type(skill, dict, path)
+        _reject_unknown(skill, SKILL_KEYS, path)
+        _require_type(skill["phase"], str, f"{path}.phase")
+        for key in ("inputs", "artifacts", "events", "allowedInteractions", "capabilities"):
+            _require_type(skill[key], list, f"{path}.{key}")
+        profiles = skill.get("profiles", ["general", "java"])
+        _require_type(profiles, list, f"{path}.profiles")
+        if not profiles or any(item not in {"general", "java"} for item in profiles):
+            raise PolicyValidationError(f"{path}.profiles must contain general and/or java")
+
+    for section in ("requiredArtifacts", "requiredValidations"):
+        section_data = data[section]
+        _require_type(section_data, dict, section)
+        for phase, items in section_data.items():
+            _require_type(items, list, f"{section}.{phase}")
+
+    conditional = data["conditionalStages"]
+    _require_type(conditional, dict, "conditionalStages")
+    for stage_name, stage in conditional.items():
+        path = f"conditionalStages.{stage_name}"
+        _require_type(stage, dict, path)
+        _reject_unknown(stage, CONDITIONAL_STAGE_KEYS, path)
+        _require_type(stage["tiers"], list, f"{path}.tiers")
+        _require_type(stage["signals"], list, f"{path}.signals")
+
+    interaction = data["interactionWhitelist"]
+    _require_type(interaction, dict, "interactionWhitelist")
+    for key, items in interaction.items():
+        _require_type(items, list, f"interactionWhitelist.{key}")
+
+    checkpoints = data["checkpointRules"]
+    _require_type(checkpoints, dict, "checkpointRules")
+    for checkpoint_id, rule in checkpoints.items():
+        path = f"checkpointRules.{checkpoint_id}"
+        _require_type(rule, dict, path)
+        _reject_unknown(rule, CHECKPOINT_RULE_KEYS, path)
+        _require_type(rule["afterTasks"], list, f"{path}.afterTasks")
+        _require_type(rule["beforeTasks"], list, f"{path}.beforeTasks")
+        _require_type(rule["blocking"], bool, f"{path}.blocking")
+
+    return data
+
+
+def policy_path_for_repo(repo_root: Path) -> Path:
+    return repo_root / POLICY_REL
+
+
+def load_policy(repo_root: Path) -> dict[str, Any]:
+    path = policy_path_for_repo(repo_root)
+    if not path.is_file():
+        raise FileNotFoundError(f"workflow policy missing: {path}")
+    data = json.loads(path.read_text(encoding="utf-8-sig"))
+    return validate_policy(data)

package/harness/manifests/general/claude-code.json

@@ -2,12 +2,12 @@
   "schema_version": 2,
   "profile": "general",
   "adapter": "claude-code",
-  "bundle_version": "0.2.5",
+  "bundle_version": "0.2.7",
   "generator": "harness_deploy.py",
   "files": [
     {
       "path": ".harness-build.json",
-      "sha256": "71e04fb13b0cb8d4db07617e87c7209f4c3effcd1782fd7a4fdd7e457069d1ca"
+      "sha256": "62f9de42abd5f5bfb76387cb20376045bd4be7e9fec84fb46126a56fd54a283b"
     },
     {
       "path": "agents/harness-evaluator.md",
@@ -25,13 +25,17 @@
       "path": "CONTEXT.md",
       "sha256": "19c75b493f6f760d0e607a88bd355acdd232fcb66660887ef94d10425f39507b"
     },
+    {
+      "path": "contracts/workflow-policy.json",
+      "sha256": "36614a228338a7e8f2b518351c129607245e3910a67062a5047acdcd42e86853"
+    },
     {
       "path": "harness-archive/checklist.md",
       "sha256": "0329561202acf39646f08c861a2859ffe68164df05b95526af86c5b1842d2009"
     },
     {
       "path": "harness-archive/reference.md",
-      "sha256": "bae9ffb1e502fe842e57dcd6030ceb426fc95f3457054037de9133711f104da2"
+      "sha256": "144437331e65a94c2898bf05832edbf85735a1762cf804dd2ec2e5ade157fe49"
     },
     {
       "path": "harness-archive/scripts/gen-manifest.ps1",
@@ -39,11 +43,11 @@
     },
     {
       "path": "harness-archive/SKILL.md",
-      "sha256": "827e9c212e0ae518302816a1987757330cd1b4878f8cff1cfbd2275da803c10d"
+      "sha256": "aafc3b5b11020aa722f6a069b63fc53c6566fb98ffa3c50681712ee832ed3c6c"
     },
     {
       "path": "harness-archive/templates/render-summary.mjs",
-      "sha256": "6fab9fab77dae08f6e111342a5245e8efbf1faa683db1d379e480076618d22af"
+      "sha256": "fbfde9bdf16dba8aff1ef638e582a517064e81ea4681ed4831ff2e7c55f5ab9c"
     },
     {
       "path": "harness-archive/templates/summary-data-template.json",
@@ -59,7 +63,7 @@
     },
     {
       "path": "harness-codebase-map/SKILL.md",
-      "sha256": "0cc5ab78b7d73ddc9e71423788c5148c90dcf3cc1ea36e790e058bb4285d09a1"
+      "sha256": "c1ed96332c181b5a2290b9be46d06b9cdef9d56ad166c6398392a57e447939af"
     },
     {
       "path": "harness-codebase-map/templates/ARCHITECTURE.md",
@@ -115,19 +119,19 @@
     },
     {
       "path": "harness-knowledge-ingest/scripts/harness_knowledge_mcp.py",
-      "sha256": "5a6efd08a4a8f46f92d715051904bf118b4159d76199c318d8accb0122a2e20f"
+      "sha256": "a421ca43e8d1ef1718d51a398e20abae411ea0007b3d45aa333791c511a2aa33"
     },
     {
       "path": "harness-knowledge-ingest/scripts/harness_knowledge.py",
-      "sha256": "6ec4851ed5fd99975b9dc192e826d0b20c24df638da4f428773476d29f7db7de"
+      "sha256": "2764b7985cf2675749bef3e7742f8ed93b4293c3603eef4a78040a97e5b05144"
     },
     {
       "path": "harness-knowledge-ingest/SKILL.md",
-      "sha256": "cfe85e03c9376d90c7dac244f3bb1b90a0fd0691d94f24151b3e2250e0062f26"
+      "sha256": "5bc4b25a863c3d40af2b4213d087f93a309c877c844ab475fb288a351a3673b3"
     },
     {
       "path": "harness-knowledge-query/SKILL.md",
-      "sha256": "dcce1d851ad2a6c9a261f53b078193080ee373f41757f4b45bdaf60c21f6759e"
+      "sha256": "8237f93b7e961e21823e562f4a116a63b0d95f9e7c311d3176fe1a77248e6239"
     },
     {
       "path": "harness-plan/checklist.md",
@@ -143,7 +147,7 @@
     },
     {
       "path": "harness-plan/SKILL.md",
-      "sha256": "43fcc5be953de9835a66a54d759a5756579388bd4bc3ac402861e103ed058a6b"
+      "sha256": "0d8fbc2c59b0d0f1343f978848c0d4f1e93e10147d704f891d298b155ccef697"
     },
     {
       "path": "harness-review/checklist.md",
@@ -159,11 +163,11 @@
     },
     {
       "path": "harness-review/SKILL.md",
-      "sha256": "e1994473cebf329c0179728e7bf9a3ebe3d1905a47e0df63f90d407f1e115abd"
+      "sha256": "85d5c71739c9b46423db5f0e8222ac72c6831afaec7ffa4db6819a30e8efc4bf"
     },
     {
       "path": "harness-run/checklist.md",
-      "sha256": "350b352f2a85053449cf63a249780d30efd3be28718e912201388cbd0b4480a5"
+      "sha256": "1bbfdf3d2a5ac7daa7155bfe0ac39c92e3527edf1b66bdf1ece232d63bd31dc3"
     },
     {
       "path": "harness-run/protocols.md",
@@ -171,11 +175,11 @@
     },
     {
       "path": "harness-run/reference.md",
-      "sha256": "dccaafad9a761284a13e2d909e2a79994698a506caa76148798647ed554d85da"
+      "sha256": "011a7f75e49392df9c7cde0d7126ac9b6772f779b22807e3b09b49f32622e447"
     },
     {
       "path": "harness-run/SKILL.md",
-      "sha256": "6760cab591f9a2bd9b096c2a2ce6fcde3fcfb2d88e7f58d946de333a7b954b84"
+      "sha256": "c0db9a68f55106b8696d0b00e142a8119e077cafce18dd4e0e19303567068c34"
     },
     {
       "path": "harness-submit/checklist.md",
@@ -187,7 +191,7 @@
     },
     {
       "path": "harness-submit/SKILL.md",
-      "sha256": "c53afc1bb8ddb9c0e2ebb50e7f69907bc352fd3a363aaf843fe9d33d20c95be3"
+      "sha256": "48ef9c28d527dc3b9b06e3fe228368076b8394e6489bd0280f09b1d8805df56e"
     },
     {
       "path": "harness-sync/reference.md",
@@ -195,7 +199,7 @@
     },
     {
       "path": "harness-sync/SKILL.md",
-      "sha256": "5e6b0aa3964fa25abc3e41b4a37c26dfa2151a507189cbd572ee18bf9641fe0b"
+      "sha256": "0764a8f16714fcd95bf8326b432521b0b46ba7dc2316543ebde46971fe011768"
     },
     {
       "path": "harness-test/checklist.md",
@@ -207,7 +211,7 @@
     },
     {
       "path": "harness-test/reference.md",
-      "sha256": "5a9ed764ea1f600c67456f42ecaea88147297796270137ea67afd09177801bc4"
+      "sha256": "b85b30256558a40113f0c2442d32aa9f28606cc975c32c72b7eedb0e655ea275"
     },
     {
       "path": "harness-test/scripts/runtime-helpers.mjs",
@@ -215,7 +219,7 @@
     },
     {
       "path": "harness-test/SKILL.md",
-      "sha256": "be0aa762acafea69303adc55b5b1ed154821c951a1ad6c4eaea090b05ebcb17b"
+      "sha256": "50cb626636fb40b1fe0038dbfb6deb988109970963257e0804b4a1dc68d20e69"
     },
     {
       "path": "protocols/archive-report-protocol.md",
@@ -227,7 +231,7 @@
     },
     {
       "path": "protocols/ledger-protocol.md",
-      "sha256": "2621749f0a1193015b185e3ebd5bd66e738db25fa091e4e27b3eaae06c950736"
+      "sha256": "6d47d884bc3858bf50c831ecb4c2db263680b41f6dcf2bc3f9b2100330ce9cac"
     },
     {
       "path": "protocols/powershell-protocol.md",
@@ -235,7 +239,7 @@
     },
     {
       "path": "protocols/report-pipeline-protocol.md",
-      "sha256": "988a311db58b8ce88544d28919cf7858fe1fa225af70fb604ae715805ac76d9e"
+      "sha256": "2abfa402c006e2466514893e05d57ba7f71588f5af6b36b30a17abd3dfa8d710"
     },
     {
       "path": "protocols/sensitive-info-protocol.md",
@@ -253,9 +257,17 @@
       "path": "README.md",
       "sha256": "57ae38357a7bf4118f91c4404b8133a81aced923c836c498b04ff18461eae665"
     },
+    {
+      "path": "scripts/harness_apidoc.py",
+      "sha256": "3fa77ffabf99075a90374d9a4b2ddca3408cc5b90610725d779d9d0dfb70fbbb"
+    },
     {
       "path": "scripts/harness_archive.py",
-      "sha256": "ada5f736cd692eab1531288fecdf57ce36ff760b55dd470c4e0553a2c73608c4"
+      "sha256": "b48bea12431e4122bae5b3f776b518fe4b48b873ba85b1c4e09a29f15a046ad2"
+    },
+    {
+      "path": "scripts/harness_change.py",
+      "sha256": "50672476e1a66e046e0b16c86cf55b03e117fc2adf8e0df2ced14aa04f7b2548"
     },
     {
       "path": "scripts/harness_check_gate.py",
@@ -267,7 +279,11 @@
     },
     {
       "path": "scripts/harness_events.py",
-      "sha256": "62d4119dcc51f571d41ac78e9fdb1708df007cc361c65eefd71f35ad1e9de15f"
+      "sha256": "dbfb0ba77ebf4a11410449bbf437be93f0f80184d1aa8b1b128f3054635d107e"
+    },
+    {
+      "path": "scripts/harness_gate.py",
+      "sha256": "fdc596d51116e6fce58baad24673c94fc04b78b4af8781ee8afd7b2cdb3121eb"
     },
     {
       "path": "scripts/harness_ledger.py",
@@ -275,23 +291,27 @@
     },
     {
       "path": "scripts/harness_preflight.py",
-      "sha256": "7ef079a96f0e76b7fd54eb06cdab915b0dd7f0e59d368494a72faf508d40ba2f"
+      "sha256": "245f70d6c1f9979f2921e14e5d7a6078bd5126ae6c5d8c0bcd6cfd9c4fd8e135"
     },
     {
       "path": "scripts/harness_profile.py",
-      "sha256": "718e2f3a9e754850935e37c803bc16addb855061371b3351ec22fdc4b376c339"
+      "sha256": "da31a79b128e4c186f17424ec2ad6feb7fb0aaec46fb79fba0c31098596751b4"
     },
     {
       "path": "scripts/harness_service.py",
-      "sha256": "fc471f90efcf03e26fcb6cd7757af37a0a1eea1184e2b57046665547a77f240f"
+      "sha256": "17c26b40ed3e7d110b74ef61e627fa0ad1bc84718a1721a066e6d72ee0e37649"
     },
     {
       "path": "scripts/harness_state.py",
-      "sha256": "b33efacf9aba471f9f542f738c653acf274ed3ce57c4326520036e6df0f18966"
+      "sha256": "27073a1d7b1ea6d54a75bf6e679eb250a3507c95311101b60a1c4d32e00f909e"
     },
     {
       "path": "scripts/harness_test_guard.py",
-      "sha256": "a6ad6f3619babb9ffc2bab16b3184ec916cc34f52b977dc4a5446e3e76fc894e"
+      "sha256": "ee3306a56a9ee7adf37ad4bcd26505c6d2c21fcdcb35b88cf5951c05a8f3b615"
+    },
+    {
+      "path": "scripts/harness_workflow_policy.py",
+      "sha256": "3e754da7041ebec852c3f0be8736cec423d7a0ee98424164bfe4a06fc4d8ca4f"
     }
   ]
 }

package/harness/manifests/general/codebuddy.json

@@ -2,12 +2,12 @@
   "schema_version": 2,
   "profile": "general",
   "adapter": "codebuddy",
-  "bundle_version": "0.2.5",
+  "bundle_version": "0.2.7",
   "generator": "harness_deploy.py",
   "files": [
     {
       "path": ".harness-build.json",
-      "sha256": "bb798db90319798e513f4dfe6a8ec84b2d9091cf670112a70c647330942da818"
+      "sha256": "82e7ca91e1de4f7a268812a4d44ea58a5a9f58204f64258fca9f705e377a94b3"
     },
     {
       "path": "agents/harness-evaluator.md",
@@ -25,13 +25,17 @@
       "path": "CONTEXT.md",
       "sha256": "19c75b493f6f760d0e607a88bd355acdd232fcb66660887ef94d10425f39507b"
     },
+    {
+      "path": "contracts/workflow-policy.json",
+      "sha256": "36614a228338a7e8f2b518351c129607245e3910a67062a5047acdcd42e86853"
+    },
     {
       "path": "harness-archive/checklist.md",
       "sha256": "0329561202acf39646f08c861a2859ffe68164df05b95526af86c5b1842d2009"
     },
     {
       "path": "harness-archive/reference.md",
-      "sha256": "bae9ffb1e502fe842e57dcd6030ceb426fc95f3457054037de9133711f104da2"
+      "sha256": "144437331e65a94c2898bf05832edbf85735a1762cf804dd2ec2e5ade157fe49"
     },
     {
       "path": "harness-archive/scripts/gen-manifest.ps1",
@@ -39,11 +43,11 @@
     },
     {
       "path": "harness-archive/SKILL.md",
-      "sha256": "432664531252b8ad6d39ff567d42bc66e6e77c83d7a463854594bd3f07ca7149"
+      "sha256": "1101ff1566fe775869988347890adc85392eb060c0e87bc3b98e4608ad8883f7"
     },
     {
       "path": "harness-archive/templates/render-summary.mjs",
-      "sha256": "6fab9fab77dae08f6e111342a5245e8efbf1faa683db1d379e480076618d22af"
+      "sha256": "fbfde9bdf16dba8aff1ef638e582a517064e81ea4681ed4831ff2e7c55f5ab9c"
     },
     {
       "path": "harness-archive/templates/summary-data-template.json",
@@ -59,7 +63,7 @@
     },
     {
       "path": "harness-codebase-map/SKILL.md",
-      "sha256": "bd3c95132d95e3ee63efa8c63a8545d0a5beb920cb3def6f08dabdf2d72dd2cc"
+      "sha256": "38080ef3e37c15d09325566087d378f52f37b80ea16a3294a6a263832f2e7cbd"
     },
     {
       "path": "harness-codebase-map/templates/ARCHITECTURE.md",
@@ -115,19 +119,19 @@
     },
     {
       "path": "harness-knowledge-ingest/scripts/harness_knowledge_mcp.py",
-      "sha256": "5a6efd08a4a8f46f92d715051904bf118b4159d76199c318d8accb0122a2e20f"
+      "sha256": "a421ca43e8d1ef1718d51a398e20abae411ea0007b3d45aa333791c511a2aa33"
     },
     {
       "path": "harness-knowledge-ingest/scripts/harness_knowledge.py",
-      "sha256": "6ec4851ed5fd99975b9dc192e826d0b20c24df638da4f428773476d29f7db7de"
+      "sha256": "2764b7985cf2675749bef3e7742f8ed93b4293c3603eef4a78040a97e5b05144"
     },
     {
       "path": "harness-knowledge-ingest/SKILL.md",
-      "sha256": "c049c460c0ad9d88f6de9d5276d6eda91b9790d9f81eaf06ef1ade799189abd1"
+      "sha256": "ea7043e61023abda02ad904d5707b972051cea917329ec04093884471d6f5d00"
     },
     {
       "path": "harness-knowledge-query/SKILL.md",
-      "sha256": "32b0f72cb02861a9ecbac03180cfe307b60ba8daf5c8bffd14b846397a6ee486"
+      "sha256": "4546742d11d478fb18712d032c87793da2a74f4306a74034b1e52be0fa60ffac"
     },
     {
       "path": "harness-plan/checklist.md",
@@ -143,7 +147,7 @@
     },
     {
       "path": "harness-plan/SKILL.md",
-      "sha256": "4eff8554625ba976bacdc023a18ff0984ef9876bd1fdf7669e1fab2a578adc01"
+      "sha256": "d8f43c6e24acce0b71ea58031029cd530351b28b1b1637d4278941ac0b5585a4"
     },
     {
       "path": "harness-review/checklist.md",
@@ -159,11 +163,11 @@
     },
     {
       "path": "harness-review/SKILL.md",
-      "sha256": "bab6d055e01a7775e1c522b5f89b50d080a153432505a3f9280d0fc1a84599b3"
+      "sha256": "9acdec41556bc5872da1982b5044a5de05fb21c59b2a6dd9f96260691b075a26"
     },
     {
       "path": "harness-run/checklist.md",
-      "sha256": "350b352f2a85053449cf63a249780d30efd3be28718e912201388cbd0b4480a5"
+      "sha256": "1bbfdf3d2a5ac7daa7155bfe0ac39c92e3527edf1b66bdf1ece232d63bd31dc3"
     },
     {
       "path": "harness-run/protocols.md",
@@ -171,11 +175,11 @@
     },
     {
       "path": "harness-run/reference.md",
-      "sha256": "dccaafad9a761284a13e2d909e2a79994698a506caa76148798647ed554d85da"
+      "sha256": "011a7f75e49392df9c7cde0d7126ac9b6772f779b22807e3b09b49f32622e447"
     },
     {
       "path": "harness-run/SKILL.md",
-      "sha256": "976ffe51083b613501e6664801326ad3b932d7d5a6db8fe4c1beeae859065de5"
+      "sha256": "5c3aeb6ad0d4e6c7559b5981287f254f8c78049933f1f70b6037e5feeb65cadc"
     },
     {
       "path": "harness-submit/checklist.md",
@@ -187,7 +191,7 @@
     },
     {
       "path": "harness-submit/SKILL.md",
-      "sha256": "e477d065f442360320c37f80164c229a0cbd216c16218e67f0efeb200632536f"
+      "sha256": "424039642d3657c1bf47e4c99a9c0c2a6ee1676e388b7b1a91c73b33fbcfcd8e"
     },
     {
       "path": "harness-sync/reference.md",
@@ -195,7 +199,7 @@
     },
     {
       "path": "harness-sync/SKILL.md",
-      "sha256": "a1160216070d6efff9e39cb62fd729477bb507e8be75ebd7fda932c9c71f157e"
+      "sha256": "10b5fd45695cc931d217280ced77a3e57d0ceeb95031dad41b58658c980b669d"
     },
     {
       "path": "harness-test/checklist.md",
@@ -207,7 +211,7 @@
     },
     {
       "path": "harness-test/reference.md",
-      "sha256": "5a9ed764ea1f600c67456f42ecaea88147297796270137ea67afd09177801bc4"
+      "sha256": "b85b30256558a40113f0c2442d32aa9f28606cc975c32c72b7eedb0e655ea275"
     },
     {
       "path": "harness-test/scripts/runtime-helpers.mjs",
@@ -215,7 +219,7 @@
     },
     {
       "path": "harness-test/SKILL.md",
-      "sha256": "245012500d436294cdc3d3e2e4aec9ac23c3f13078f58c6d6464ac615b242d7f"
+      "sha256": "dd7b93192c99f678b1eb8af15a7ca3c8e5d196545dc99c3759307a1bcb87111b"
     },
     {
       "path": "protocols/archive-report-protocol.md",
@@ -227,7 +231,7 @@
     },
     {
       "path": "protocols/ledger-protocol.md",
-      "sha256": "2621749f0a1193015b185e3ebd5bd66e738db25fa091e4e27b3eaae06c950736"
+      "sha256": "6d47d884bc3858bf50c831ecb4c2db263680b41f6dcf2bc3f9b2100330ce9cac"
     },
     {
       "path": "protocols/powershell-protocol.md",
@@ -235,7 +239,7 @@
     },
     {
       "path": "protocols/report-pipeline-protocol.md",
-      "sha256": "988a311db58b8ce88544d28919cf7858fe1fa225af70fb604ae715805ac76d9e"
+      "sha256": "2abfa402c006e2466514893e05d57ba7f71588f5af6b36b30a17abd3dfa8d710"
     },
     {
       "path": "protocols/sensitive-info-protocol.md",
@@ -253,9 +257,17 @@
       "path": "README.md",
       "sha256": "57ae38357a7bf4118f91c4404b8133a81aced923c836c498b04ff18461eae665"
     },
+    {
+      "path": "scripts/harness_apidoc.py",
+      "sha256": "3fa77ffabf99075a90374d9a4b2ddca3408cc5b90610725d779d9d0dfb70fbbb"
+    },
     {
       "path": "scripts/harness_archive.py",
-      "sha256": "ada5f736cd692eab1531288fecdf57ce36ff760b55dd470c4e0553a2c73608c4"
+      "sha256": "b48bea12431e4122bae5b3f776b518fe4b48b873ba85b1c4e09a29f15a046ad2"
+    },
+    {
+      "path": "scripts/harness_change.py",
+      "sha256": "50672476e1a66e046e0b16c86cf55b03e117fc2adf8e0df2ced14aa04f7b2548"
     },
     {
       "path": "scripts/harness_check_gate.py",
@@ -267,7 +279,11 @@
     },
     {
       "path": "scripts/harness_events.py",
-      "sha256": "62d4119dcc51f571d41ac78e9fdb1708df007cc361c65eefd71f35ad1e9de15f"
+      "sha256": "dbfb0ba77ebf4a11410449bbf437be93f0f80184d1aa8b1b128f3054635d107e"
+    },
+    {
+      "path": "scripts/harness_gate.py",
+      "sha256": "fdc596d51116e6fce58baad24673c94fc04b78b4af8781ee8afd7b2cdb3121eb"
     },
     {
       "path": "scripts/harness_ledger.py",
@@ -275,23 +291,27 @@
     },
     {
       "path": "scripts/harness_preflight.py",
-      "sha256": "7ef079a96f0e76b7fd54eb06cdab915b0dd7f0e59d368494a72faf508d40ba2f"
+      "sha256": "245f70d6c1f9979f2921e14e5d7a6078bd5126ae6c5d8c0bcd6cfd9c4fd8e135"
     },
     {
       "path": "scripts/harness_profile.py",
-      "sha256": "718e2f3a9e754850935e37c803bc16addb855061371b3351ec22fdc4b376c339"
+      "sha256": "da31a79b128e4c186f17424ec2ad6feb7fb0aaec46fb79fba0c31098596751b4"
     },
     {
       "path": "scripts/harness_service.py",
-      "sha256": "fc471f90efcf03e26fcb6cd7757af37a0a1eea1184e2b57046665547a77f240f"
+      "sha256": "17c26b40ed3e7d110b74ef61e627fa0ad1bc84718a1721a066e6d72ee0e37649"
     },
     {
       "path": "scripts/harness_state.py",
-      "sha256": "b33efacf9aba471f9f542f738c653acf274ed3ce57c4326520036e6df0f18966"
+      "sha256": "27073a1d7b1ea6d54a75bf6e679eb250a3507c95311101b60a1c4d32e00f909e"
     },
     {
       "path": "scripts/harness_test_guard.py",
-      "sha256": "a6ad6f3619babb9ffc2bab16b3184ec916cc34f52b977dc4a5446e3e76fc894e"
+      "sha256": "ee3306a56a9ee7adf37ad4bcd26505c6d2c21fcdcb35b88cf5951c05a8f3b615"
+    },
+    {
+      "path": "scripts/harness_workflow_policy.py",
+      "sha256": "3e754da7041ebec852c3f0be8736cec423d7a0ee98424164bfe4a06fc4d8ca4f"
     }
   ]
 }