@hunter-harness/workflow-harness 0.2.8 → 0.2.10

package/harness/bundles/java/cursor/scripts/harness_test_guard.py

@@ -21,6 +21,12 @@ import time
 from pathlib import Path
 from typing import Any
 
+SCRIPTS_DIR = Path(__file__).resolve().parent
+if str(SCRIPTS_DIR) not in sys.path:
+    sys.path.insert(0, str(SCRIPTS_DIR))
+
+import harness_paths  # noqa: E402
+
 SCHEMA_VERSION = 1
 MODE = "force-track-touched"
 MANIFEST_REL = Path("evidence") / "test-tracking.json"
@@ -166,13 +172,18 @@ def _change_dir(project: Path, change_dir: Path | str) -> Path | None:
     return resolved if any(_inside(resolved, root) for root in allowed_roots) else None
 
 
+def _state_root(change_root: Path) -> Path:
+    return Path(harness_paths.resolve_state_dir_for_contract(change_root))
+
+
 def _manifest_path(change_root: Path) -> Path | None:
-    evidence = change_root / MANIFEST_REL.parent
-    manifest = change_root / MANIFEST_REL
+    state_root = _state_root(change_root)
+    evidence = state_root / MANIFEST_REL.parent
+    manifest = state_root / MANIFEST_REL
     expected_evidence = evidence.absolute()
     resolved_evidence = evidence.resolve()
     if (
-        not _inside(resolved_evidence, change_root.resolve())
+        not _inside(resolved_evidence, state_root.resolve())
         or os.path.normcase(str(resolved_evidence))
         != os.path.normcase(str(expected_evidence))
     ):
@@ -181,9 +192,10 @@ def _manifest_path(change_root: Path) -> Path | None:
 
 
 def _manifest_target_inside(change_root: Path, manifest: Path) -> bool:
+    state_root = _state_root(change_root)
     resolved = manifest.resolve()
     return (
-        _inside(resolved, change_root.resolve())
+        _inside(resolved, state_root.resolve())
         and _inside(resolved, manifest.parent.absolute())
     )
 
@@ -267,6 +279,52 @@ def _validate_file(project: Path, raw: str) -> tuple[Path | None, str | None, st
     return resolved, rel, None
 
 
+def _contract_is_v2(change_root: Path) -> bool:
+    try:
+        contract = harness_paths.load_change_contract(change_root)
+    except (OSError, ValueError):
+        return False
+    if harness_paths.contract_layout_kind(contract) == "split-v1":
+        return True
+    version = contract.get("schemaVersion")
+    return isinstance(version, int) and version >= 2
+
+
+def _byte_hash(path: Path) -> str:
+    return "sha256:" + hashlib.sha256(path.read_bytes()).hexdigest()
+
+
+def logical_file_hash(repo_root: Path, rel: str) -> str:
+    """Logical identity for a tracked file (RET-10).
+
+    Text files hash with git blob semantics (path filters/attributes applied,
+    so LF/CRLF spellings of one logical text agree). Binary files keep byte
+    hash. Indeterminate content falls back to byte hash.
+    """
+    path = repo_root / rel
+    content = path.read_bytes()
+    attr = _git(repo_root, "check-attr", "text", "--", rel)
+    attr_out = attr.stdout.strip() if attr.returncode == 0 else ""
+    if attr_out.endswith(": unset"):
+        return _byte_hash(path)
+    if b"\x00" in content:
+        return _byte_hash(path)
+    try:
+        content.decode("utf-8")
+    except UnicodeDecodeError:
+        return _byte_hash(path)
+    proc = subprocess.run(
+        ["git", "hash-object", "--path", rel, "--stdin"],
+        input=content,
+        capture_output=True,
+        cwd=str(repo_root),
+        check=False,
+    )
+    if proc.returncode != 0:
+        return _byte_hash(path)
+    return "gitblob:" + proc.stdout.decode("ascii").strip()
+
+
 def _entry_shape_valid(item: Any) -> bool:
     return (
         isinstance(item, dict)
@@ -280,6 +338,78 @@ def _entry_shape_valid(item: Any) -> bool:
     )
 
 
+def _entry_shape_valid_v2(item: Any) -> bool:
+    if not isinstance(item, dict):
+        return False
+    if not isinstance(item.get("path"), str) or not item["path"]:
+        return False
+    logical = item.get("logicalHash")
+    binary = item.get("binaryHash")
+    logical_ok = isinstance(logical, str) and (
+        logical.startswith("gitblob:") or logical.startswith("sha256:")
+    )
+    binary_ok = binary is None or (
+        isinstance(binary, str) and binary.startswith("sha256:")
+    )
+    if not (logical_ok or binary_ok):
+        return False
+    if item.get("reason") not in REASONS:
+        return False
+    if type(item.get("ignored")) is not bool:
+        return False
+    if not isinstance(item.get("introducedBy"), str) or not item["introducedBy"]:
+        return False
+    touched = item.get("touchedBy")
+    if not isinstance(touched, list) or not all(isinstance(t, str) for t in touched):
+        return False
+    return item.get("commitScope") in ("current-change", "foreign-change")
+
+
+def _validate_existing_manifest_v2(
+    project: Path,
+    manifest: Any,
+    *,
+    allow_hash_drift: set[str] | None = None,
+    require_files: bool,
+) -> tuple[str | None, dict[str, dict[str, Any]]]:
+    if (
+        not isinstance(manifest, dict)
+        or manifest.get("schemaVersion") != 2
+        or manifest.get("mode") != MODE
+    ):
+        return "MANIFEST_INVALID", {}
+    repository_id = manifest.get("repositoryId")
+    if not isinstance(repository_id, str) or not repository_id.startswith("sha256:"):
+        return "MANIFEST_INVALID", {}
+    if repository_id != harness_paths.repository_identity(project):
+        return "MANIFEST_PROJECT_MISMATCH", {}
+    entries = manifest.get("files")
+    if not isinstance(entries, list):
+        return "MANIFEST_INVALID", {}
+    if require_files and not entries:
+        return "EMPTY_MANIFEST", {}
+
+    allowed_drift = allow_hash_drift or set()
+    validated: dict[str, dict[str, Any]] = {}
+    for item in entries:
+        if not _entry_shape_valid_v2(item):
+            return "MANIFEST_INVALID", {}
+        rel = item["path"]
+        if rel in validated:
+            return "MANIFEST_INVALID", {}
+        path, normalized, error = _validate_file(project, rel)
+        if error or normalized != rel or path is None:
+            return error or "MANIFEST_INVALID", {}
+        expected = item.get("logicalHash") or item.get("binaryHash")
+        if expected != logical_file_hash(project, rel) and rel not in allowed_drift:
+            return "HASH_DRIFT" if require_files else "MANIFEST_INVALID", {}
+        ignored_now = _is_ignored(project, rel)
+        if item["ignored"] != ignored_now:
+            return "MANIFEST_INVALID", {}
+        validated[rel] = dict(item)
+    return None, validated
+
+
 def _validate_existing_manifest(
     project: Path,
     manifest: Any,
@@ -366,7 +496,12 @@ def record(
                     return _result(
                         False, action, "MANIFEST_INVALID", [], error=str(exc)
                     )
-                error, existing_files = _validate_existing_manifest(
+                validator = (
+                    _validate_existing_manifest_v2
+                    if isinstance(existing, dict) and existing.get("schemaVersion") == 2
+                    else _validate_existing_manifest
+                )
+                error, existing_files = validator(
                     project_root,
                     existing,
                     allow_hash_drift={rel for _, rel in validated},
@@ -375,25 +510,54 @@ def record(
                 if error:
                     return _result(False, action, error, [])
 
-            for path, rel in validated:
-                ignored = _is_ignored(project_root, rel)
-                tracked = _git(
-                    project_root, "ls-files", "--error-unmatch", "--", rel
-                ).returncode == 0
-                existing_files[rel] = {
-                    "path": rel,
-                    "sha256": _sha256(path),
-                    "reason": reason,
-                    "ignored": ignored,
-                    "trackedBefore": tracked,
+            if _contract_is_v2(change_root):
+                change_id = change_root.name
+                for path, rel in validated:
+                    ignored = _is_ignored(project_root, rel)
+                    previous = existing_files.get(rel, {})
+                    touched = [
+                        item for item in previous.get("touchedBy", [])
+                        if isinstance(item, str)
+                    ]
+                    if change_id not in touched:
+                        touched.append(change_id)
+                    digest = logical_file_hash(project_root, rel)
+                    existing_files[rel] = {
+                        "path": rel,
+                        "logicalHash": digest,
+                        "binaryHash": None if digest.startswith("gitblob:") else digest,
+                        "reason": reason,
+                        "ignored": ignored,
+                        "introducedBy": previous.get("introducedBy", change_id),
+                        "touchedBy": touched,
+                        "commitScope": "current-change",
+                    }
+                manifest = {
+                    "schemaVersion": 2,
+                    "repositoryId": harness_paths.repository_identity(project_root),
+                    "mode": MODE,
+                    "files": [existing_files[key] for key in sorted(existing_files)],
+                }
+            else:
+                for path, rel in validated:
+                    ignored = _is_ignored(project_root, rel)
+                    tracked = _git(
+                        project_root, "ls-files", "--error-unmatch", "--", rel
+                    ).returncode == 0
+                    existing_files[rel] = {
+                        "path": rel,
+                        "sha256": _sha256(path),
+                        "reason": reason,
+                        "ignored": ignored,
+                        "trackedBefore": tracked,
+                    }
+
+                manifest = {
+                    "schemaVersion": SCHEMA_VERSION,
+                    "mode": MODE,
+                    "projectRoot": str(project_root),
+                    "files": [existing_files[key] for key in sorted(existing_files)],
                 }
-
-            manifest = {
-                "schemaVersion": SCHEMA_VERSION,
-                "mode": MODE,
-                "projectRoot": str(project_root),
-                "files": [existing_files[key] for key in sorted(existing_files)],
-            }
             _write_json(manifest_path, manifest)
     except LockUnavailable:
         return _result(False, action, "MANIFEST_LOCKED", [])
@@ -412,12 +576,18 @@ def _stage_locked(
         return _result(False, action, "MANIFEST_MISSING", [])
     except (OSError, json.JSONDecodeError) as exc:
         return _result(False, action, "MANIFEST_INVALID", [], error=str(exc))
-    error, entries = _validate_existing_manifest(
-        project_root, manifest, require_files=True
-    )
+    is_v2 = isinstance(manifest, dict) and manifest.get("schemaVersion") == 2
+    validator = _validate_existing_manifest_v2 if is_v2 else _validate_existing_manifest
+    error, entries = validator(project_root, manifest, require_files=True)
     if error:
         return _result(False, action, error, [])
-    rels = list(entries)
+    rels = [
+        rel
+        for rel, entry in entries.items()
+        if not is_v2 or entry.get("commitScope") == "current-change"
+    ]
+    if not rels:
+        return _result(True, action, "STAGED", [])
 
     before_cached_result = _git(project_root, "diff", "--cached", "--name-only")
     if before_cached_result.returncode != 0:
@@ -467,15 +637,38 @@ def _stage_locked(
         temp_index.unlink(missing_ok=True)
 
 
-def _glob_files_for_pattern(base: Path, pattern: str) -> list[Path]:
-    normalized = pattern.replace("\\", "/")
-    if normalized.endswith("/**"):
-        prefix = normalized[:-3].rstrip("/")
-        root = base / prefix
-        if not root.is_dir():
-            return []
-        return [path for path in root.rglob("*") if path.is_file()]
-    return [path for path in base.glob(normalized) if path.is_file()]
+def _path_is_excluded(rel: str, excluded_roots: list[str]) -> bool:
+    rel_parts = tuple(os.path.normcase(part) for part in rel.split("/") if part)
+    for excluded in excluded_roots:
+        excluded_parts = tuple(
+            os.path.normcase(part) for part in excluded.split("/") if part
+        )
+        if excluded_parts and rel_parts[: len(excluded_parts)] == excluded_parts:
+            return True
+    return False
+
+
+def _walk_matching_files(
+    base: Path, patterns: list[str], excluded_roots: list[str]
+) -> list[Path]:
+    """Walk once and prune excluded roots before matching recursive globs."""
+    matches: list[Path] = []
+    for root_raw, dir_names, file_names in os.walk(base, followlinks=False):
+        root = Path(root_raw)
+        root_rel = root.relative_to(base).as_posix()
+        prefix = "" if root_rel == "." else root_rel + "/"
+        dir_names[:] = [
+            name
+            for name in dir_names
+            if not _path_is_excluded(prefix + name, excluded_roots)
+        ]
+        for name in file_names:
+            rel = prefix + name
+            if _path_is_excluded(rel, excluded_roots):
+                continue
+            if any(_matches_pattern(rel, pattern) for pattern in patterns):
+                matches.append(root / name)
+    return matches
 
 
 def _enumerate_allowed_test_files(project_root: Path) -> dict[str, str]:
@@ -484,20 +677,22 @@ def _enumerate_allowed_test_files(project_root: Path) -> dict[str, str]:
     config = _profile_config(project_root)
     if config is None:
         patterns = ["test/**", "tests/**", "src/test/**"]
+        excluded_roots = [
+            ".git", ".harness", "node_modules", "dist", "build", "__pycache__"
+        ]
     else:
-        patterns, _excluded = config
+        patterns, excluded_roots = config
     base = project_root.resolve()
     seen: set[str] = set()
-    for pattern in patterns:
-        for match in _glob_files_for_pattern(base, pattern):
-            resolved = match.resolve()
-            if not _inside(resolved, base):
-                continue
-            rel = resolved.relative_to(base).as_posix()
-            if rel in seen or not _allowed_test_path(project_root, rel):
-                continue
-            seen.add(rel)
-            found[rel] = _sha256(resolved)
+    for match in _walk_matching_files(base, patterns, excluded_roots):
+        resolved = match.resolve()
+        if not _inside(resolved, base):
+            continue
+        rel = resolved.relative_to(base).as_posix()
+        if rel in seen or not _allowed_test_path(project_root, rel):
+            continue
+        seen.add(rel)
+        found[rel] = _sha256(resolved)
     return found
 
 
@@ -510,7 +705,7 @@ def begin(project: Path | str, change_dir: Path | str) -> dict[str, Any]:
     manifest_path = _manifest_path(change_root)
     if manifest_path is None:
         return _result(False, action, "MANIFEST_PATH_OUTSIDE_PROJECT", [])
-    snapshot_path = change_root / SNAPSHOT_REL
+    snapshot_path = _state_root(change_root) / SNAPSHOT_REL
     if not _manifest_target_inside(change_root, snapshot_path):
         return _result(False, action, "SNAPSHOT_PATH_OUTSIDE_PROJECT", [])
 
@@ -542,7 +737,7 @@ def close(project: Path | str, change_dir: Path | str) -> dict[str, Any]:
     change_root = _change_dir(project_root, change_dir)
     if change_root is None:
         return _result(False, action, "CHANGE_DIR_OUTSIDE_PROJECT", [])
-    snapshot_path = change_root / SNAPSHOT_REL
+    snapshot_path = _state_root(change_root) / SNAPSHOT_REL
     if not snapshot_path.is_file():
         return _result(False, action, "SNAPSHOT_MISSING", [])
     try:

package/harness/manifests/general/claude-code.json

@@ -2,12 +2,12 @@
   "schema_version": 2,
   "profile": "general",
   "adapter": "claude-code",
-  "bundle_version": "0.2.8",
+  "bundle_version": "0.2.10",
   "generator": "harness_deploy.py",
   "files": [
     {
       "path": ".harness-build.json",
-      "sha256": "74266cba575a97e1ce2ceb96cec6a1b14f721f20c66071cef262dac1371f96b8"
+      "sha256": "89453fb13416f4c7f7002b4d04365762670e94fc7dffa37a345ef303d088e685"
     },
     {
       "path": "agents/harness-evaluator.md",
@@ -27,7 +27,7 @@
     },
     {
       "path": "contracts/workflow-policy.json",
-      "sha256": "36614a228338a7e8f2b518351c129607245e3910a67062a5047acdcd42e86853"
+      "sha256": "e642d840fa90aa5943cb80bee6538e0aa11577fcaab0c4e534641ebfae8d8f00"
     },
     {
       "path": "harness-archive/checklist.md",
@@ -35,7 +35,7 @@
     },
     {
       "path": "harness-archive/reference.md",
-      "sha256": "144437331e65a94c2898bf05832edbf85735a1762cf804dd2ec2e5ade157fe49"
+      "sha256": "a956c4474df338c35934933c131a3fefb84e6b296a961c4f731526a4aff4f32f"
     },
     {
       "path": "harness-archive/scripts/gen-manifest.ps1",
@@ -43,15 +43,15 @@
     },
     {
       "path": "harness-archive/SKILL.md",
-      "sha256": "9af5a1017a20459e8f1c71a8a3ab8fe8e32050b79264d40296ed38993c466eca"
+      "sha256": "6859cdd961b3b476049ef784b5e5d7afa00579408127b6561da31a435612530d"
     },
     {
       "path": "harness-archive/templates/render-summary.mjs",
-      "sha256": "fbfde9bdf16dba8aff1ef638e582a517064e81ea4681ed4831ff2e7c55f5ab9c"
+      "sha256": "f15d2b541649fe677d56de46bc7ac8deccaeab12e57c530f5cd64fb340f17df4"
     },
     {
       "path": "harness-archive/templates/summary-data-template.json",
-      "sha256": "fd225a99a42ac8f9e67457b791c803d978c8f1b6b43b4adb138e520a12946630"
+      "sha256": "3ad30d331d53c1866ef707b9f770e11a3c1237e01d9516a50fac3aeb287c8cf8"
     },
     {
       "path": "harness-codebase-map/checklist.md",
@@ -63,7 +63,7 @@
     },
     {
       "path": "harness-codebase-map/SKILL.md",
-      "sha256": "ec65efff813467277ea6cd40e3cc4b0524bfb16095c2cf2028f7e0da480e45f2"
+      "sha256": "8286097f7c01e3ea3c0e9d7fbe525089f3711e2acc1e5b447a0cb4cb151d4fc0"
     },
     {
       "path": "harness-codebase-map/templates/ARCHITECTURE.md",
@@ -115,7 +115,7 @@
     },
     {
       "path": "harness-knowledge-ingest/reference.md",
-      "sha256": "28665f8be71787e0eb67cf3f2d6ec8511ca484a228cd914e36c4082e05bd5d38"
+      "sha256": "6d587ea318d73869d273366c37dccea0d7ee5578ac2e6534b91c7d790188c7a9"
     },
     {
       "path": "harness-knowledge-ingest/scripts/harness_knowledge_mcp.py",
@@ -123,19 +123,19 @@
     },
     {
       "path": "harness-knowledge-ingest/scripts/harness_knowledge.py",
-      "sha256": "2764b7985cf2675749bef3e7742f8ed93b4293c3603eef4a78040a97e5b05144"
+      "sha256": "d6e180a28345f6ff21e0ae1f7dc5687bc85c4bd1f57309c8701ace64b65fc02f"
     },
     {
       "path": "harness-knowledge-ingest/SKILL.md",
-      "sha256": "b777462d34fcef33f305a640a546446de7d660f9d066bd465903d2587025c1e4"
+      "sha256": "22f3760cd3c6b3087e7a38dd9662e029a3b1dae32f8a70b740dce7b71fc36f6c"
     },
     {
       "path": "harness-knowledge-query/SKILL.md",
-      "sha256": "66fcad2800cbcb6d9cfdfe5bd08a2afe937214297ec722c30452bb039b9da14b"
+      "sha256": "30b3e76d5b3b29031cf3a7c295875f1d53b24f6d1becbb6b36af23472f0126a5"
     },
     {
       "path": "harness-plan/checklist.md",
-      "sha256": "e45d38c204c9e51abe042f369ee6d39a883425b24d331106126f4500bc7d899d"
+      "sha256": "efd49a7430aae916d2cd6da82f812c0fdc9777eaabe8212a92904d5dcfa38534"
     },
     {
       "path": "harness-plan/protocols.md",
@@ -147,7 +147,7 @@
     },
     {
       "path": "harness-plan/SKILL.md",
-      "sha256": "9d0610ad09c0fc29a5c8252334419a276e88c2b9a0f7c3ac88bf2e62bd977504"
+      "sha256": "306446d1779235f71bedd862d7baf17499c5df7058da5b3d3c11b230304a1301"
     },
     {
       "path": "harness-review/checklist.md",
@@ -163,11 +163,11 @@
     },
     {
       "path": "harness-review/SKILL.md",
-      "sha256": "f531935841d7e971c0f050cd6746249b376a2d01bd6b50a58c7061209a2ef8a9"
+      "sha256": "027a7239c7ae3707542a8fe3088e901d82490f3df0bb7efb7e0257859fb7a7d2"
     },
     {
       "path": "harness-run/checklist.md",
-      "sha256": "1bbfdf3d2a5ac7daa7155bfe0ac39c92e3527edf1b66bdf1ece232d63bd31dc3"
+      "sha256": "4a829a9a1521402d508f2b76ba16246f8d5b860cc5eeaa40faa96cbc874992c2"
     },
     {
       "path": "harness-run/protocols.md",
@@ -175,15 +175,15 @@
     },
     {
       "path": "harness-run/reference.md",
-      "sha256": "011a7f75e49392df9c7cde0d7126ac9b6772f779b22807e3b09b49f32622e447"
+      "sha256": "9c0b34303310de06ab56ab0c38b35134dcd4b0d3bde10c9275313ff2962010f3"
     },
     {
       "path": "harness-run/SKILL.md",
-      "sha256": "85a5023c5b7bfaf767a1d8d77da8ef1095d5c805acda5b2b33966d40190bb12c"
+      "sha256": "79aa66cd8c1b7e56f62078679f02815a689920a6b3704197ec2da0ae0e3b58f8"
     },
     {
       "path": "harness-submit/checklist.md",
-      "sha256": "6b2343c6e8fdfc32b92b7dcd404487b9d25c404790a6e232a2292e5b996f90a2"
+      "sha256": "f57beb2da7e75a59320ba442de0625105a30e38e071a7308ea06fb024fda9aae"
     },
     {
       "path": "harness-submit/reference.md",
@@ -191,19 +191,23 @@
     },
     {
       "path": "harness-submit/SKILL.md",
-      "sha256": "b141059d4b16a8e0e2f6b552bcb6214ba4a19a4e91f9bc8965c22fef6083a5d6"
+      "sha256": "4870e75fef288213a071615253eadde8c6f021ce7167c5930b9a2f329b0c2750"
     },
     {
       "path": "harness-sync/reference.md",
-      "sha256": "1a1b817c8782b378d86d6282c19aea391a068f6384c2f0b2db3c6f8135922f0f"
+      "sha256": "6e8093c7d8d874e159d027b10dbb65f299bd51c48803c54b92db1a66c6d9c54d"
     },
     {
       "path": "harness-sync/SKILL.md",
-      "sha256": "b61f384bbba952c51112e2931e6b1c561fc7753c4f51d19f8d3f21dcfe4d1730"
+      "sha256": "6007e8d08e95910fe672851a30f7c30e6d499a47bdb315298afff03d4b6404ec"
     },
     {
       "path": "harness-test/checklist.md",
-      "sha256": "a8bd0424bfc64fc60f2a54927a381ce25c088bb267f01c88dce9c409d6b2f010"
+      "sha256": "66f96a4e5cc39ab7ec736994a23dac88e349c63845659d595737100b9584b84e"
+    },
+    {
+      "path": "harness-test/pitfalls-java.md",
+      "sha256": "85c5ab2a2706960093954382265b5fbdfa63f794d857868322d4cebc36936908"
     },
     {
       "path": "harness-test/pitfalls.md",
@@ -211,7 +215,7 @@
     },
     {
       "path": "harness-test/reference.md",
-      "sha256": "b85b30256558a40113f0c2442d32aa9f28606cc975c32c72b7eedb0e655ea275"
+      "sha256": "37d781daf890ff86663e0fe8c0449c97e40ec512c3515a73923f7fb162e9c180"
     },
     {
       "path": "harness-test/scripts/runtime-helpers.mjs",
@@ -219,11 +223,11 @@
     },
     {
       "path": "harness-test/SKILL.md",
-      "sha256": "c9a765926545dd9461c812ab4c57729493cb3c6d7c9e3c4cf4e2574668c73877"
+      "sha256": "f0ab0361522181a37075c6ebcf19ba7600c112b6e506d4ccd036a0f08928cf0b"
     },
     {
       "path": "protocols/archive-report-protocol.md",
-      "sha256": "587047dfb6f308079d2bd9074f6b396570dfb11aecc401b0c63ae8edb5e806e4"
+      "sha256": "c6677d730908580dfc58f954df6c950327a4928e283290e24d9ad715a5e54ae5"
     },
     {
       "path": "protocols/evidence-based-reporting-protocol.md",
@@ -231,15 +235,15 @@
     },
     {
       "path": "protocols/ledger-protocol.md",
-      "sha256": "6d47d884bc3858bf50c831ecb4c2db263680b41f6dcf2bc3f9b2100330ce9cac"
+      "sha256": "50f9deffcf71de009c56bd2cdd44fb05c7b18faf19ec56b00ff76e8ce897ecf7"
     },
     {
       "path": "protocols/powershell-protocol.md",
-      "sha256": "04364d1f32290f454a23df1151bb9d71042c1dd3dc3312f746bb83090754813b"
+      "sha256": "f723f18eee08125e75f387e655f7e604eb603f636cd6809dd6b5948748f32d04"
     },
     {
       "path": "protocols/report-pipeline-protocol.md",
-      "sha256": "2abfa402c006e2466514893e05d57ba7f71588f5af6b36b30a17abd3dfa8d710"
+      "sha256": "1a54a6a1540e9da41cf3466eee8a3810eb2b3ae732ab87f295d1832d135da6fb"
     },
     {
       "path": "protocols/sensitive-info-protocol.md",
@@ -247,7 +251,7 @@
     },
     {
       "path": "protocols/state-layout-protocol.md",
-      "sha256": "73fcaa67efb89714fd62896a7ce6b4e2932ea24cfcbf5c4e1faea5a451c97076"
+      "sha256": "b92c062d145b6927bcf8b50cc962a04eb04604b845bae09309416574ba40f05f"
     },
     {
       "path": "protocols/submit-protocol.md",
@@ -263,11 +267,11 @@
     },
     {
       "path": "scripts/harness_archive.py",
-      "sha256": "b48bea12431e4122bae5b3f776b518fe4b48b873ba85b1c4e09a29f15a046ad2"
+      "sha256": "52f3a7aef19cc84d4820f90d0fa320e7e963e7b7710f607954cd67608c67be55"
     },
     {
       "path": "scripts/harness_change.py",
-      "sha256": "e15697ef34685c9cd55d21dac4e2de21815ff3d984605a47b4e9cac5b4829693"
+      "sha256": "87c4d8fac9d3768671dd46aaa55d068eb648ddf0af37ddb5426de8c745534fa3"
     },
     {
       "path": "scripts/harness_check_gate.py",
@@ -275,19 +279,27 @@
     },
     {
       "path": "scripts/harness_deploy.py",
-      "sha256": "54f1bcdae1326588db65eec20cc650c41365b14ceb55655430ddde8343b60798"
+      "sha256": "6b43b03bf414834df348e89db4e4e32960ce8a730c4c4c8a0202a87842da1758"
     },
     {
       "path": "scripts/harness_events.py",
-      "sha256": "5ebe48d649ed3040245c676ea38ecb2a443582228340c4631481da2e853cd9a0"
+      "sha256": "700ce2741ec80144c8880cdb85c8026dc9c7aec9bcbdee1c1d3ccb77aed58648"
     },
     {
       "path": "scripts/harness_gate.py",
-      "sha256": "fdc596d51116e6fce58baad24673c94fc04b78b4af8781ee8afd7b2cdb3121eb"
+      "sha256": "5fdb48040a396403dc9584561316d6181b9b70c5234407d662093bad739cc3bc"
+    },
+    {
+      "path": "scripts/harness_integration.py",
+      "sha256": "a5e616ed1ba04b390d431132f6eeedef8789b87bee1e1512667e696f6a970471"
     },
     {
       "path": "scripts/harness_ledger.py",
-      "sha256": "36a9921ff70e17b3c8946db1846bf447607822ad90e17351b88efab189d15b41"
+      "sha256": "79815b4a1fb6f5c43d63dcb64a4a9cde26ccd7f6206c86ba3d0c795854668ee5"
+    },
+    {
+      "path": "scripts/harness_paths.py",
+      "sha256": "75560c0141172b335811014320001a299846e4fba45dd0589cba86da058ab01a"
     },
     {
       "path": "scripts/harness_preflight.py",
@@ -295,7 +307,11 @@
     },
     {
       "path": "scripts/harness_profile.py",
-      "sha256": "da31a79b128e4c186f17424ec2ad6feb7fb0aaec46fb79fba0c31098596751b4"
+      "sha256": "52c9fb0d7c22823f06a8fd49bc1b648b0bda974f0851e8a12b0959be7c1c4183"
+    },
+    {
+      "path": "scripts/harness_review.py",
+      "sha256": "78009e09b79867a13c66a8c71114b6cd04fe75c72054f5ec35d63c7be990bb04"
     },
     {
       "path": "scripts/harness_service.py",
@@ -305,9 +321,13 @@
       "path": "scripts/harness_state.py",
       "sha256": "27073a1d7b1ea6d54a75bf6e679eb250a3507c95311101b60a1c4d32e00f909e"
     },
+    {
+      "path": "scripts/harness_sync.py",
+      "sha256": "3ab54718ab8448f7bdac76119806a885e0f19cece05b0d8108128dc7d895d6e1"
+    },
     {
       "path": "scripts/harness_test_guard.py",
-      "sha256": "ee3306a56a9ee7adf37ad4bcd26505c6d2c21fcdcb35b88cf5951c05a8f3b615"
+      "sha256": "76713c4af83486b513979f40ba8055fefd0ff10b487d31de9d7f9d9a4ee2dce0"
     },
     {
       "path": "scripts/harness_workflow_policy.py",