@moretea-labs/forge 1.7.2 → 1.8.1

package/assets/hooks/prompt-guard.sh

@@ -1,7 +1,8 @@
 #!/bin/bash
 # Prompt Guard Hook — UserPromptSubmit
-# Shell layer: filesystem authority (plan/contract/worktree state), capture
-# side effects, and host-safe rendering. All prompt-text intent classification
+# Shell layer: compatibility reads for legacy plan/contract/worktree state plus
+# host-safe rendering. Modern controller-home repositories never create or use
+# repo-local Plan/Work files as authority. All prompt-text intent classification
 # lives in the TypeScript engine behind `prompt-guard-decide`, which receives
 # {"prompt": ...} on stdin plus PROMPT_GUARD_*_STATE env vars and returns a
 # single-line verdict JSON (action + intent facts + derived strings).
@@ -392,6 +393,15 @@ pg_fact() {
   [[ "${!var:-0}" == "1" ]]
 }
 
+modern_controller_home_runtime() {
+  [[ -f "forge.config.json" ]] || return 1
+  if command -v jq >/dev/null 2>&1; then
+    [[ "$(jq -r '.runtimeState // empty' forge.config.json 2>/dev/null || true)" == "controller-home" ]]
+    return
+  fi
+  grep -Eq '"runtimeState"[[:space:]]*:[[:space:]]*"controller-home"' forge.config.json 2>/dev/null
+}
+
 # --- Side effects and hints (driven by engine facts) ---
 
 emit_pending_orchestration_discussion() {
@@ -603,38 +613,26 @@ run_codegraph_init_command() {
   return "$status"
 }
 
-ensure_codegraph_index_for_route() {
-  local output status
-
-  [[ -f ".codegraph/codegraph.db" ]] && return 0
-
-  output="$(run_codegraph_init_command 2>&1)"
-  status=$?
-
-  if [[ "$status" -eq 0 && -f ".codegraph/codegraph.db" ]]; then
-    echo "[CodegraphRoute] Initialized missing CodeGraph index before routing hint."
-  elif [[ "$status" -ne 127 ]]; then
-    echo "[CodegraphRoute] CodeGraph index init skipped or failed; run codegraph init -i . if structural tools are unavailable."
+emit_codegraph_route_hint() {
+  if pg_fact CODEGRAPH_ROUTE || pg_fact NONTRIVIAL_CODE_TASK; then
+    echo "[CodegraphRoute] Structural code-navigation intent detected. Prefer Forge rh_context/semantic navigation or an already-configured structural provider; do not initialize repo-local .codegraph state from a prompt hook."
   fi
 }
 
-emit_codegraph_route_hint() {
-  local session_key session_file=".claude/.session-id"
-
-  mkdir -p .claude
-  session_key="$(session_state_resolve_key "$session_file" "${1:-}")"
+modern_controller_home_workflow() {
+  [[ -f "forge.config.json" ]]
+}
 
-  if session_state_codegraph_used "$session_key" || session_state_codegraph_nudged "$session_key"; then
-    return 0
+emit_modern_controller_home_guidance() {
+  if pg_fact THINK_PLAN_START || pg_fact PLAN_START; then
+    echo "[ForgeRoute] Planning intent detected. Keep repo files for authored product/architecture content only; use Forge Plan/Work authority when durable execution state is needed."
+    echo "[ArchitectureCompleteness] For high-risk or architecture-changing work, Context Closure + Engineering Design receipts are correctness gates; prompt guidance is advisory only."
   fi
-
-  if pg_fact CODEGRAPH_ROUTE; then
-    ensure_codegraph_index_for_route || true
-    echo "[CodegraphRoute] Structural code-navigation intent detected. Prefer CodeGraph context/search/callers/impact before grep/read when available."
-    session_state_mark_codegraph_nudged "$session_key" || true
-  elif pg_fact NONTRIVIAL_CODE_TASK; then
-    echo "[CodegraphRoute] Structural code-navigation intent detected. Prefer CodeGraph context/search/callers/impact before grep/read when available."
-    session_state_mark_codegraph_nudged "$session_key" || true
+  if pg_fact IMPLEMENT; then
+    echo "[ArchitectureCompleteness] Implementation intent detected. Preserve the approved authority/lifecycle/authorization/resource/replay/retention contract; Forge admission and implementation review own enforcement."
+  fi
+  if pg_fact DONE; then
+    echo "[Review] Completion intent detected. Use current Forge verification/review evidence; do not materialize repo-local task/check/session closeout state."
   fi
 }
 
@@ -834,6 +832,18 @@ PROMPT_INTENT_TEXT="$(prompt_intent_text)"
 prompt_guard_refresh_state
 prompt_guard_engine_call
 
+# Kernel V2 cutover: forge.config.json selects the Controller Home workflow.
+# Prompt hooks are advisory only in this mode and MUST NOT materialize repo-local
+# Plan/Work/check/session/cache state. Legacy .ai/harness projects continue below
+# only so they can be migrated without breaking their existing workflow.
+if modern_controller_home_workflow; then
+  emit_agentic_packaging_hint
+  emit_forge_route_hint
+  emit_codegraph_route_hint
+  emit_modern_controller_home_guidance
+  exit 0
+fi
+
 if [[ "$PG_ENGINE_STATE" != "ok" ]]; then
   if [[ "$PG_ENGINE_STATE" == "legacy" ]]; then
     echo "[PromptGuard] Advisory: the installed forge CLI predates the prompt-verdict protocol; prompt intent gates are degraded to advisory for this prompt."
@@ -858,6 +868,22 @@ pg_fact DONE && done_intent=1
 plan_start_intent=0
 pg_fact PLAN_START && plan_start_intent=1
 
+if modern_controller_home_runtime; then
+  if [ "$plan_start_intent" -eq 1 ]; then
+    echo "[PlanStartGate] Planning intent detected. Durable decomposition belongs to Forge Controller Plan/Work; no repo-local Draft plan or pending marker will be created."
+  fi
+  if [ "$implement_intent" -eq 1 ] && [ "$PG_ACTION" = "spec_block" ]; then
+    echo "[SpecGuard] Advisory: docs/spec.md is missing. Create or update authored product truth before implementation when the change needs a durable specification."
+  fi
+  if [ "$done_intent" -eq 1 ]; then
+    echo "[PlanStatusGuard] Controller Home owns completion authority; legacy active-plan/task-contract files are ignored for modern repositories."
+  fi
+  if [ "$implement_intent" -eq 0 ]; then
+    emit_workflow_file_guards
+  fi
+  exit 0
+fi
+
 plan_research_ready=1
 if [ "$plan_start_intent" -eq 1 ]; then
   if ! has_research_for_new_plan; then
@@ -944,9 +970,9 @@ if [ "$done_intent" -eq 1 ]; then
   IFS=$'\t' read -r total_tasks done_tasks next_task <<< "$task_state"
   remaining_tasks=$(( ${total_tasks:-0} - ${done_tasks:-0} ))
   if [ "${remaining_tasks:-0}" -gt 0 ]; then
-    echo "[ArchiveGuard] Done intent detected but active plan still has $remaining_tasks unchecked item(s). Refusing to auto-archive."
+    echo "[WorkflowCloseoutGuard] Done intent detected but active plan still has $remaining_tasks unchecked item(s). Refusing workflow closeout."
     hook_structured_error \
-      "ArchiveGuard" \
+      "WorkflowCloseoutGuard" \
       "Done intent with $remaining_tasks unchecked active-plan task(s)." \
       "Finish the remaining Task Breakdown item: ${next_task:-see $active_plan}." \
       "state_violation"
@@ -968,22 +994,22 @@ if [ "$done_intent" -eq 1 ]; then
   fi
 
   if [ ! -x scripts/archive-workflow.sh ]; then
-    echo "[AutoArchive] scripts/archive-workflow.sh is missing or not executable. Skipping auto-archive."
+    echo "[WorkflowCloseout] scripts/archive-workflow.sh compatibility helper is missing or not executable. Skipping closeout."
     hook_structured_error \
-      "AutoArchive" \
+      "WorkflowCloseout" \
       "scripts/archive-workflow.sh is missing or not executable." \
-      "Install the workflow helper before relying on auto-archive." \
+      "Install the workflow closeout helper before relying on automatic terminal cleanup." \
       "missing_artifact"
     exit 1
   fi
 
   outcome="${PG_DONE_OUTCOME:-Completed}"
-  echo "[AutoArchive] All quality gates passed. Archiving $active_plan as outcome=$outcome"
+  echo "[WorkflowCloseout] All quality gates passed. Closing $active_plan as outcome=$outcome"
   if ! archive_output="$(bash scripts/archive-workflow.sh --plan "$active_plan" --outcome "$outcome" 2>&1)"; then
     printf '%s\n' "$archive_output"
     hook_structured_error \
-      "AutoArchive" \
-      "Automatic archive failed for $active_plan." \
+      "WorkflowCloseout" \
+      "Automatic workflow closeout failed for $active_plan." \
       "Run bash scripts/archive-workflow.sh --plan $active_plan --outcome $outcome and resolve the error." \
       "contract_failure"
     exit 1

package/assets/hooks/security-sentinel.sh

@@ -6,7 +6,8 @@ set -euo pipefail
 # SessionStart context reminder if forge security scan finds anything.
 
 REPO_ROOT="${HOOK_REPO_ROOT:-$(git rev-parse --show-toplevel 2>/dev/null || pwd)}"
-SECURITY_DIR="$REPO_ROOT/.ai/harness/security"
+HOOK_STATE_ROOT="${FORGE_HOOK_STATE_ROOT:-$REPO_ROOT/.ai/harness}"
+SECURITY_DIR="${HOOK_STATE_ROOT%/}/security"
 STATE_FILE="$SECURITY_DIR/state.sha256"
 LATEST_FILE="$SECURITY_DIR/latest.json"
 

package/assets/hooks/session-start-context.sh

@@ -9,9 +9,10 @@ SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 # shellcheck source=/dev/null
 . "$SCRIPT_DIR/lib/workflow-state.sh"
 
-# Cold-path housekeeping: both event logs grow unbounded otherwise.
+# Cold-path housekeeping: machine event logs grow unbounded otherwise. Both
+# paths resolve below Controller Home hook-state for modern forge-hook runs.
 workflow_rotate_events_file "$(workflow_events_file)" 2>/dev/null || true
-workflow_rotate_events_file ".ai/harness/architecture/events.jsonl" 2>/dev/null || true
+workflow_rotate_events_file "$(workflow_machine_state_path '.ai/harness/architecture/events.jsonl' '.ai/harness/architecture/events.jsonl')" 2>/dev/null || true
 
 resume_file="$(workflow_resume_packet_file)"
 
@@ -209,11 +210,11 @@ render_tooling_update_context_once() {
 tooling_update_advisory_context() {
   local target state_dir report_file marker_file lock_dir tmp_report
 
-  [[ -f ".ai/harness/workflow-contract.json" ]] || return 1
+  [[ -f "forge.config.json" || -f ".ai/harness/workflow-contract.json" ]] || return 1
   [[ "${FORGE_TOOLING_ADVISORY:-1}" != "0" ]] || return 1
 
   target="$(tooling_update_target)"
-  state_dir=".ai/harness/security"
+  state_dir="$(workflow_machine_state_path '.ai/harness/security' '.ai/harness/security')"
   report_file="$state_dir/tooling-update-advisory-${target}.json"
   marker_file="$state_dir/tooling-update-advisory-${target}.rendered"
   lock_dir="$state_dir/tooling-update-advisory-${target}.lock"
@@ -269,7 +270,8 @@ continuation_section_has_signal() {
 }
 
 capability_context_pending() {
-  local queue_file=".ai/harness/capability-context/requests.jsonl"
+  local queue_file
+  queue_file="$(workflow_machine_state_path '.ai/harness/capability-context/requests.jsonl' '.ai/harness/capability-context/requests.jsonl')"
   local pending_lines=""
   local pending_count="0"
 

package/assets/hooks/stop-orchestrator.sh

@@ -12,10 +12,9 @@ SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 . "$SCRIPT_DIR/lib/workflow-state.sh"
 
 plan_completeness_state_file() {
-  workflow_repo_relative_path \
+  workflow_machine_state_path \
     "$(workflow_policy_get '.planning.completeness_state_file' '.ai/harness/planning/plan-completeness.json')" \
-    '.ai/harness/planning/plan-completeness.json' \
-    '.ai/harness/'
+    '.ai/harness/planning/plan-completeness.json'
 }
 
 plan_completeness_signature() {
@@ -155,6 +154,17 @@ should_run_plan_completeness_gate() {
 
 refresh_handoff
 
+# Modern V2 delegates semantic Plan/Work completion to Controller Home. Keep the
+# rebuildable session continuation above, but never revive repo-local pending
+# orchestration or PlanCompleteness as a second completion authority.
+if [[ -f "forge.config.json" ]]; then
+  if command -v jq >/dev/null 2>&1; then
+    [[ "$(jq -r '.runtimeState // empty' forge.config.json 2>/dev/null || true)" != "controller-home" ]] || exit 0
+  elif grep -Eq '"runtimeState"[[:space:]]*:[[:space:]]*"controller-home"' forge.config.json 2>/dev/null; then
+    exit 0
+  fi
+fi
+
 stop_hook_active="$(hook_json_get '.stop_hook_active' 'false')"
 last_assistant_message="$(hook_json_get '.last_assistant_message' '')"
 

package/assets/initializer-question-pack.v4.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "version": "initializer-question-pack.v4",
-  "goal": "Infer strong harness defaults first, then confirm only the decisions that materially change the generated repo-local workflow.",
+  "goal": "Infer strong harness defaults first, then confirm only decisions that materially change authored repository structure or Controller-owned workflow behavior.",
   "decisionPoints": [
     {
       "id": "project_identity",
@@ -185,7 +185,7 @@
     "evaluationProfile": "browser-qa",
     "handoffProfile": "artifact-aware",
     "recoveryProfile": "hybrid",
-    "stateProfile": "file-backed",
+    "stateProfile": "controller-home",
     "contextProfile": "stable-root-progressive-subdir",
     "documentationProfile": "minimal-agentic",
     "aiNativeProfile": "none",
@@ -211,7 +211,7 @@
   "orchestrationProfiles": {
     "shared-long-running-harness": {
       "label": "Shared long-running harness",
-      "description": "Default planner -> generator -> evaluator loop with repo-local artifacts and strict execution gates."
+      "description": "Default Controller-guided planning -> implementation -> verification loop with durable Runtime authority in Controller Home and authored repository evidence only."
     },
     "lightweight-collaboration": {
       "label": "Lightweight collaboration",
@@ -253,13 +253,17 @@
     }
   },
   "stateProfiles": {
-    "file-backed": {
-      "label": "File-backed",
-      "description": "Persist execution, verification, and handoff state to repo-local artifacts."
+    "controller-home": {
+      "label": "Controller Home",
+      "description": "Persist mutable execution, verification, authorization, handoff, and lifecycle state under the Forge Controller Home; keep the repository limited to authored/declarative content."
     },
     "context-light": {
       "label": "Context-light",
-      "description": "Use the same workflow surface with fewer persisted state assumptions for lightweight repos."
+      "description": "Use Controller Home only when durable continuity is required; keep bounded direct work ephemeral."
+    },
+    "file-backed": {
+      "label": "Legacy file-backed (migration only)",
+      "description": "Compatibility input for older adopted repositories. Do not select for new projects or create new repo-local Runtime state."
     }
   },
   "contextProfiles": {

package/assets/partials/05-workflow.partial.md

@@ -1,79 +1,24 @@
-### Plan Annotation Protocol
-
-Use `docs/researches/` for deep codebase understanding, `docs/spec.md` for stable intent, `plans/` for timestamped execution plans, and `tasks/todos.md` for deferred medium/long-term goals with tradeoffs and revisit triggers.
+### Forge Workflow Protocol
 
 ```yaml
-PLAN_LOOP:
-  MODE: {{RUNTIME_PROFILE}}
-  RECOVERY: {{RECOVERY_PROFILE}}
+FORGE_WORKFLOW:
   STATE: {{STATE_PROFILE}}
-  CONTEXT: {{CONTEXT_PROFILE}}
-  PHASES: research -> spec -> plan -> contract -> implement -> verify -> check -> review -> handoff
-  RESEARCH_DIR: docs/researches/
-  SPEC_FILE: docs/spec.md
-  PLAN_DIR: plans/
-  PLAN_ARCHIVE: plans/archive/
-  ACTIVE_PLAN_RULE: .ai/harness/active-plan marker is scoped to this worktree; .ai/harness/active-worktree records the owner; legacy .claude/.active-plan is fallback only
-  PLAN_SWITCH: .ai/harness/scripts/switch-plan.sh --plan <plan-file> | --list
-  DEFERRED_LEDGER: tasks/todos.md
-  TODO_ARCHIVE: tasks/archive/
-  CONTRACT_DIR: tasks/contracts/
-  REVIEW_DIR: tasks/reviews/
-  NOTES_DIR: tasks/notes/
-  POLICY_FILE: .ai/harness/policy.json
-  CHECKS_FILE: .ai/harness/checks/latest.json
-  HANDOFF_FILE: .ai/harness/session/continuation.md
-  EVENTS_FILE: .ai/harness/events.jsonl
-  RUNS_DIR: .ai/harness/runs/
-  LESSONS_FILE: tasks/lessons.md
-  CONTEXT_MAP: .ai/context/context-map.json
-  ANNOTATION_GUARD: do not implement until plan Status is "Approved"
-  CONTRACT_GUARD: do not mark done until contract exit criteria pass; then perform a fresh semantic impact review
-  EXECUTION_CONTEXT: contract-level work starts in a linked codex/<slug> worktree when policy enables it; primary worktree warning by default; enforce via .claude/.require-worktree
-  CONTRACT_WORKTREE_FINISH: run Forge /review, fill the review artifact from that verdict, then .ai/harness/scripts/contract-worktree.sh finish
-  COMMIT_POLICY: explicit commits after green checks; no automatic checkpoint hook
+  PHASES: understand -> design -> execute -> verify -> review -> terminalize
+  REPO_AUTHORED:
+    - docs/spec.md
+    - docs/researches/
+    - tasks/todos.md
+    - tasks/lessons.md
+    - forge.config.json
+  RUNTIME_AUTHORITY: Controller Home
 ```
 
-### Agentic Skill Routing
-
-- Product discovery, early demand shaping, or "is this worth building" -> gstack `office-hours`.
-- Complex engineering plans, architecture lock-in, or cross-module refactors -> gstack `plan-eng-review`.
-- UI/UX or design-system plans -> gstack `plan-design-review`.
-- Small or medium feature plans -> Forge `/plan`.
-- Bugs, regressions, crashes, errors, or failing tests -> Forge `/debug`.
-- Implemented diffs, pre-merge checks, or release follow-through -> Forge `/review`.
-- Architecture diagrams or system-flow diagrams -> Markdown Mermaid first, `mermaid` for optional human HTML.
-- Use P1/P2/P3 as the shared due-diligence protocol; report it explicitly for `plan-eng-review`, `/hunt`, risky refactors, deployments, auth/payment/data work, and shared contracts.
-- Hooks may emit advisory Forge `/review` and `/health` route hints, but must not auto-run skills or vendor skill bodies.
-
-### Task Management Protocol
-
-Core rules (canonical source: see Workflow Orchestration section below):
-- `docs/spec.md` is product truth; `plans/` is execution truth.
-- `tasks/contracts/`, `tasks/reviews/`, and `tasks/notes/` are done gates; hooks are accelerators only.
-- Treat `.ai/harness/active-plan` as authoritative only for its owning worktree; `.ai/harness/active-worktree` records that owner; `.claude/.active-plan` is a legacy fallback during transition.
-- Require plan/contract workflow inventory before implementation: active plan, owning worktree, contract, review, notes, deferred ledger, checks, runs, scope owner, switching rule, and worktree path.
-- Mark done only with verification evidence.
-- Durable progress lives in `tasks/workstreams/`; release history belongs in `docs/CHANGELOG.md`.
-
-### Harness References
-
-- `docs/reference-configs/harness-overview.md`
-- `docs/reference-configs/sprint-contracts.md`
-- `docs/reference-configs/evaluator-rubric.md`
-- `docs/reference-configs/handoff-protocol.md`
-- `docs/reference-configs/changelog-versioning.md`
-- `docs/reference-configs/git-strategy.md`
-- `docs/reference-configs/release-deploy.md`
-- `docs/reference-configs/agentic-development-flow.md`
-- `docs/reference-configs/external-tooling.md`
-
-{{#IF FACTOR_FACTORY_ENABLED}}
-### Factor Research Protocol
+Rules:
 
-- `tasks/factors/registry.json` is the authoritative factor inventory for Plan G projects.
-- Use `bash .ai/harness/scripts/factor-lab-new.sh --name <slug>` to create a candidate workspace.
-- Use `bash .ai/harness/scripts/factor-lab-promote.sh --name <slug>` only after `hypothesis.md` and `backtest-summary.md` exist.
-- Use `bash .ai/harness/scripts/factor-lab-reject.sh --name <slug> --reason "<reason>"` to reject a candidate with an auditable reason.
-- Use `bash .ai/harness/scripts/factor-lab-check.sh` to validate registry state, candidate completeness, and promoted directory drift.
-{{/IF}}
+- Prompt/agent files explain intent; they are not execution, authorization, lifecycle, or completion authority.
+- Use direct execution for bounded understood work. Create durable Requirement/Plan/Work only when decomposition, continuity, isolation, scheduling, recovery, or external effects justify it.
+- Before high-risk or architecture-changing mutation, close the cross-cutting Engineering Design contract instead of reviewing only the touched module.
+- A successor Plan must explicitly reconcile every unfinished predecessor obligation as KEEP/CHANGE/DEFER/DROP.
+- Mutable checks, sessions, leases, Work/Plan state, Plugin config, run receipts, and caches belong to Controller Home, never new repo-local `.ai/harness` or generated `tasks/*` lifecycle files.
+- Human-authored research, stable product intent, deferred goals, lessons, and intentionally maintained planning documents may remain in Git.
+- Completion requires exact verification/review evidence and terminal cleanup; no prompt text or generated status Markdown may declare semantic success.

package/assets/partials/07-footer.partial.md

@@ -18,7 +18,7 @@ CLAUDE.md is a routing card. Keep context minimal and load only what the current
 | Evaluator verdict | `tasks/reviews/<plan-stem>.review.md` |
 | Implementation notes | `tasks/notes/<plan-stem>.notes.md` |
 | Latest verification evidence | `.ai/harness/checks/latest.json` |
-| Historical implementation context | `plans/archive/` and `tasks/archive/` |
+| Historical implementation context | Git history and durable Control Plane Plan/Work/Verification evidence |
 | Agentic skill routing | `docs/reference-configs/agentic-development-flow.md` |
 | Harness runtime model | `docs/reference-configs/harness-overview.md` |
 | Sprint contract rules | `docs/reference-configs/sprint-contracts.md` |

package/assets/partials-agents/02-operating-mode.partial.md

@@ -23,8 +23,7 @@
 - Lessons contract: `tasks/lessons.md`.
 - Plan directory: `plans/` (timestamped plans).
 - Active plan rule: `.ai/harness/active-plan` for this worktree when present, `.ai/harness/active-worktree` as owner marker, and `.claude/.active-plan` legacy fallback during transition. Do not infer active execution from the latest plan.
-- Plan archive: `plans/archive/`.
-- Todo archive: `tasks/archive/`.
+- Terminal repo-local workflow artifacts are deleted only after their exact final state is represented by Git; do not maintain plan/todo archive directories.
 - Shared automation layer: `.ai/hooks/`.
 - Host adapters: user-level `~/.claude/settings.json` and `~/.codex/hooks.json` call `forge-hook`, falling back to `forge hook`, which dispatches into opted-in repos.
 - External reference cache: `_ref/` is an occasional ignored external checkout cache, read/refresh-only comparison material, and must stay out of commits; decisions based on it must cite repo+commit/tag+path in notes or research.

package/assets/partials-agents/04-task-protocol.partial.md

@@ -1,69 +1,24 @@
-## Task Management Protocol
+## Work Management Protocol
 
 ```yaml
-TASK_SOURCES:
+AUTHORED_REPO_SOURCES:
   - docs/spec.md
   - docs/researches/
   - tasks/todos.md
-  - tasks/contracts/
-  - tasks/reviews/
-  - tasks/notes/
   - tasks/lessons.md
-  - .ai/harness/checks/latest.json
-  - .ai/harness/session/continuation.md
-  - plans/
+  - forge.config.json
 
-PHASES: research -> spec -> plan -> contract -> implement -> verify -> check -> review -> handoff
+DURABLE_RUNTIME_AUTHORITY:
+  - Controller Home Requirement / Plan / Work / ControllerRound
+  - Process / Schedule / resource claims / authorization / evidence / review
 
-ARCHIVE:
-  PLAN: plans/archive/
-  TODO: tasks/archive/
-
-RULES:
-  - Treat repo-local artifact files as the primary cross-agent workflow contract
-  - For non-chat tasks, sync tasks/ whenever substantive work changes the repo
-  - Research first for unfamiliar areas and persist findings in docs/researches/
-  - Keep stable product intent in docs/spec.md
-  - Plan with trade-offs in plans/plan-{timestamp}-{slug}.md
-  - Treat .ai/harness/active-plan as authoritative only for this worktree; .ai/harness/active-worktree records the owner; .claude/.active-plan is a legacy fallback during transition
-  - Keep multiple active plans in parallel worktrees when tasks diverge; fill workflow inventory before implementation: active plan, owning worktree, contract, review, notes, deferred ledger, checks, runs, scope owner, switching rule, and worktree path
-  - Process annotation notes before implementing
-  - Project approved plans with .ai/harness/scripts/plan-to-todo.sh; the execution checklist stays in the plan ## Task Breakdown
-  - Define task contracts in tasks/contracts/{plan-stem}.contract.md
-  - Fill tasks/reviews/{plan-stem}.review.md from Forge /review after verification
-  - Record only non-obvious implementation decisions, deviations, tradeoffs, and open questions in tasks/notes/{plan-stem}.notes.md
-  - Verify contracts before claiming completion
-  - Require review pass before claiming completion
-  - Keep tasks/todos.md limited to deferred medium/long-term goals, with tradeoff and revisit trigger; do not duplicate plan Task Breakdown
-  - Record correction-derived prevention rules in tasks/lessons.md
-  - Distill repeated corrections into tasks/lessons.md instead of keeping them in tasks/todos.md
-  - Capture deep findings and hidden contracts in docs/researches/
-  - Keep sprint-level verification notes, behavior diffs, and residual risks in tasks/reviews/{plan-stem}.review.md
-  - Do not use implementation notes as durable memory or task logs; archive them on close and promote only after evidence shows the rule should outlive the sprint
-  - Promote implementation-ready follow-up work into a new plans/plan-{timestamp}-{slug}.md file; keep deferred goals in tasks/todos.md only when intentionally postponed
-  - Treat `.ai/hooks/` as the shared automation entrypoint when repo scripts reference hook-backed workflow checks
-  - Treat user-level `~/.claude/settings.json` and `~/.codex/hooks.json` as host adapters; do not add repo-local project hook adapters unless explicitly migrating legacy config
-  - For Codex sessions, treat `bash .ai/harness/scripts/check-task-sync.sh` and `bash .ai/harness/scripts/check-task-workflow.sh --strict` as required repo-local checks
-  - Before ending a session, refresh `.ai/harness/session/continuation.md` when the task state changed
-  - Update `tasks/workstreams/` only when durable capability progress changes
-  - Archive completed/abandoned plans and todos with metadata
-{{#IF FACTOR_FACTORY_ENABLED}}
-  - Treat `tasks/factors/registry.json` as the source of truth for factor lifecycle state
-  - Create factor candidates with `bash .ai/harness/scripts/factor-lab-new.sh --name <slug>`
-  - Promote factors only after hypothesis and backtest summary artifacts exist
-  - Run `bash .ai/harness/scripts/factor-lab-check.sh` before claiming factor-lab work is complete
-{{/IF}}
-
-ACTIVE_PLAN:
-  - .ai/harness/active-plan selects the current active plan only for its owning worktree; .ai/harness/active-worktree records that owner; .claude/.active-plan is a legacy fallback during transition
-
-STATUS:
-  ENUM: [Draft, Annotating, Approved, Executing, Archived]
-  LOCATION: "> **Status**: {value}" line in plan file (must be exact, no trailing whitespace)
-  TRANSITIONS:
-    - Draft -> Annotating -> Approved -> Executing -> Archived
-    - Annotating -> Draft (rollback when plan direction needs rethinking)
-  GUARD: do not implement when status is Draft or Annotating
+PHASES: understand -> design -> implement -> verify -> review -> cleanup
 ```
 
----
+Rules:
+
+- Do not recreate `tasks/contracts`, `tasks/reviews`, `tasks/current.md`, `tasks/workstreams`, or `.ai/harness` as current machine authority. They are legacy migration inputs only.
+- Plan is a late semantic commitment, not ceremony for every non-trivial edit.
+- High-risk/cross-cutting work must have current Context Closure and Engineering Design evidence before mutation.
+- Successor Plans cannot silently drop unresolved predecessor objectives, acceptance criteria, non-goals, decisions, stop conditions, or replan conditions.
+- Work completion is bound to exact implementation review and verification evidence; a chat or Markdown status claim is never enough.

package/assets/partials-agents/06-quality-safety.partial.md

@@ -1,23 +1,18 @@
 ## Quality & Safety
 
 ### Verification Gate
-- Never mark work done without verification output.
-- Run impact-based checks: typecheck, tests, lint/build.
-- Run `bash .ai/harness/scripts/check-task-workflow.sh --strict` before claiming the workflow is clean.
-- Run `bash .ai/harness/scripts/verify-contract.sh --contract <active-plan-contract> --strict` before any done/completed response when the active plan has a contract.
-- Require the matching `tasks/reviews/<plan-stem>.review.md` to recommend pass before claiming completion.
-- Require the matching `tasks/notes/<plan-stem>.notes.md` to capture material implementation decisions before review.
+- Never mark work done without current verification evidence for the exact candidate.
+- Run impact-based type/tests/lint/build checks through Forge Process Runtime.
+- High-risk or architecture-changing work requires the current Engineering Design contract and independent implementation review evidence.
+- If a Plan is involved, verify its declared acceptance criteria and predecessor-obligation continuity; do not infer semantic acceptance from passing commands alone.
 
 ### Safety Rules
-- Do not silently expand scope beyond approved plan.
-- If unexpected repo changes appear, stop and ask.
-- Prefer modifying existing files over unnecessary file creation.
+- Do not silently expand scope beyond the user/Work/Plan authority.
+- Preserve single-writer, authorization, resource fencing, replay/idempotency, and lifecycle cleanup boundaries.
+- Unexpected unrelated dirty work is placement/ownership evidence: isolate or reconcile it rather than absorbing it.
+- Prefer strengthening an existing general capability over adding incident-specific helpers or parallel lifecycle owners.
 
 ### Final Response Contract
-1. What changed — list modified files with one-line summary each
-2. Verification evidence — paste tool output: test results, build logs, or `git diff --stat`
-3. Which workflow artifacts were updated — list `tasks/*.md`, `docs/spec.md`, or `.ai/harness/*` files and what changed in each
-4. Known risks/gaps — bullet list with severity tag: `[HIGH]`, `[MEDIUM]`, `[LOW]`
-5. Optional next steps — actionable items the next session or user should address
-
----
+1. What changed
+2. Verification actually run
+3. Residual blockers/risks

package/assets/partials-agents/08-deep-docs.partial.md

@@ -15,8 +15,7 @@
 - `.ai/harness/checks/latest.json`: structured verification evidence
 - `.ai/harness/runs/`: immutable run snapshots for verification audit
 - `.ai/context/context-map.json`: progressive context index for primary functional-block `CLAUDE.md` and `AGENTS.md` files
-- `plans/archive/`: archived plans and outcomes
-- `tasks/archive/`: archived todo snapshots
+- Terminal plan/task history: Git history plus durable Control Plane evidence; do not create repository archive directories.
 - `docs/reference-configs/agentic-development-flow.md`: gstack/Waza routing, P1/P2/P3 reporting triggers, and daily flow
 - `docs/reference-configs/harness-overview.md`: orchestration playbook
 - `docs/reference-configs/external-tooling.md`: gstack/Waza/gbrain routing, Codex-first Waza sync, and required CodeGraph readiness commands