@sentropic/h2a 0.83.0 → 0.85.0

package/dist/vendor/harness/profile/stub.js

@@ -0,0 +1,13 @@
+// A deliberately-different 2nd profile that PROVES the engine is profile-generic.
+// It differs from `sentropic` on dimensions C2 actually consumes — a different
+// exception-id grammar, a different forbidden-default set, and conditional-without-
+// exception allowed — so the Lot 4 genericity test can assert DIVERGENT outcomes on the
+// same BRANCH.md + staged-file input (not "both pass", which would prove nothing).
+export const stubProfile = {
+    id: 'stub',
+    forbiddenPathDefaults: ['secret/**'],
+    exceptionIdPattern: /^EXC-\d+$/,
+    conditionalRequiresException: false,
+    branchMatch: 'prefix',
+};
+//# sourceMappingURL=stub.js.map

package/dist/vendor/harness/profile/stub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stub.js","sourceRoot":"","sources":["../../../../src/vendor/harness/profile/stub.js"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,+EAA+E;AAC/E,oFAAoF;AACpF,wFAAwF;AACxF,mFAAmF;AACnF,MAAM,CAAC,MAAM,WAAW,GAAG;IACvB,EAAE,EAAE,MAAM;IACV,qBAAqB,EAAE,CAAC,WAAW,CAAC;IACpC,kBAAkB,EAAE,WAAW;IAC/B,4BAA4B,EAAE,KAAK;IACnC,WAAW,EAAE,QAAQ;CACxB,CAAC"}

package/dist/vendor/harness/run/emit.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Assemble a NEUTRAL `VerificationRun` from check results. harness EMITS this artifact and
+ * never writes into `@sentropic/track` — a track-side adapter ingests it (no track import here).
+ */
+export function toVerificationRun(checks: any, ctx: any): {
+    schemaVersion: number;
+    runId: any;
+    commit: any;
+    branch: any;
+    env: any;
+    runner: any;
+    category: any;
+    command: any;
+    result: string;
+    startedAt: any;
+    finishedAt: any;
+    checks: any;
+    violations: any;
+    artifactLocator: any;
+    artifacts: any;
+};
+//# sourceMappingURL=emit.d.ts.map

package/dist/vendor/harness/run/emit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"emit.d.ts","sourceRoot":"","sources":["../../../../src/vendor/harness/run/emit.js"],"names":[],"mappings":"AAAA;;;GAGG;AACH;;;;;;;;;;;;;;;;EA0BC"}

package/dist/vendor/harness/run/emit.js

@@ -0,0 +1,32 @@
+/**
+ * Assemble a NEUTRAL `VerificationRun` from check results. harness EMITS this artifact and
+ * never writes into `@sentropic/track` — a track-side adapter ingests it (no track import here).
+ */
+export function toVerificationRun(checks, ctx) {
+    const verificationChecks = checks.map((c) => ({
+        code: c.code,
+        category: c.category,
+        pass: c.result.pass,
+        violations: c.result.violations,
+    }));
+    const violations = checks.flatMap((c) => c.result.violations);
+    const pass = verificationChecks.every((c) => c.pass);
+    return {
+        schemaVersion: 1,
+        runId: ctx.runId,
+        commit: ctx.commit,
+        branch: ctx.branch,
+        env: ctx.env,
+        runner: ctx.runner,
+        category: ctx.category,
+        command: ctx.command,
+        result: pass ? 'pass' : 'fail',
+        startedAt: ctx.startedAt,
+        finishedAt: ctx.finishedAt,
+        checks: verificationChecks,
+        violations,
+        artifactLocator: ctx.artifactLocator ?? `verification-run:${ctx.runId}`,
+        artifacts: ctx.artifacts ?? [],
+    };
+}
+//# sourceMappingURL=emit.js.map

package/dist/vendor/harness/run/emit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"emit.js","sourceRoot":"","sources":["../../../../src/vendor/harness/run/emit.js"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAM,EAAE,GAAG;IACzC,MAAM,kBAAkB,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1C,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI;QACnB,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,UAAU;KAClC,CAAC,CAAC,CAAC;IACJ,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACrD,OAAO;QACH,aAAa,EAAE,CAAC;QAChB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QAC9B,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,MAAM,EAAE,kBAAkB;QAC1B,UAAU;QACV,eAAe,EAAE,GAAG,CAAC,eAAe,IAAI,oBAAoB,GAAG,CAAC,KAAK,EAAE;QACvE,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,EAAE;KACjC,CAAC;AACN,CAAC"}

package/dist/vendor/harness/run/work-event.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Assemble a NEUTRAL `WorkEvent` from a method/branch act. harness EMITS this artifact and never
+ * writes into `@sentropic/track` — a track-side adapter ingests it (no track import here). Pure and
+ * deterministic: `subject`/`skill` are dropped when absent so the JSON stays minimal and stable.
+ */
+export function toWorkEvent(input: any, ctx: any): {
+    schemaVersion: number;
+    kind: string;
+    verb: any;
+    status: any;
+    refs: any;
+    detail: any;
+    runId: any;
+    commit: any;
+    branch: any;
+    env: any;
+    runner: any;
+    at: any;
+};
+//# sourceMappingURL=work-event.d.ts.map

package/dist/vendor/harness/run/work-event.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"work-event.d.ts","sourceRoot":"","sources":["../../../../src/vendor/harness/run/work-event.js"],"names":[],"mappings":"AAAA;;;;GAIG;AACH;;;;;;;;;;;;;EAoBC"}

package/dist/vendor/harness/run/work-event.js

@@ -0,0 +1,27 @@
+/**
+ * Assemble a NEUTRAL `WorkEvent` from a method/branch act. harness EMITS this artifact and never
+ * writes into `@sentropic/track` — a track-side adapter ingests it (no track import here). Pure and
+ * deterministic: `subject`/`skill` are dropped when absent so the JSON stays minimal and stable.
+ */
+export function toWorkEvent(input, ctx) {
+    const event = {
+        schemaVersion: 1,
+        kind: 'work-event',
+        verb: input.verb,
+        status: input.status,
+        refs: input.refs ?? {},
+        detail: input.detail ?? {},
+        runId: ctx.runId,
+        commit: ctx.commit,
+        branch: ctx.branch,
+        env: ctx.env,
+        runner: ctx.runner,
+        at: ctx.at,
+    };
+    if (input.subject !== undefined)
+        event.subject = input.subject;
+    if (input.skill !== undefined)
+        event.skill = input.skill;
+    return event;
+}
+//# sourceMappingURL=work-event.js.map

package/dist/vendor/harness/run/work-event.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"work-event.js","sourceRoot":"","sources":["../../../../src/vendor/harness/run/work-event.js"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,KAAK,EAAE,GAAG;IAClC,MAAM,KAAK,GAAG;QACV,aAAa,EAAE,CAAC;QAChB,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE;QACtB,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,EAAE;QAC1B,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,EAAE,EAAE,GAAG,CAAC,EAAE;KACb,CAAC;IACF,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;QAC3B,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAClC,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;QACzB,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC9B,OAAO,KAAK,CAAC;AACjB,CAAC"}

package/dist/vendor/harness/scope/scope-boundary.d.ts

@@ -0,0 +1,17 @@
+/** Translate a path glob into an anchored RegExp. `**` spans `/`; `*` stays within a segment. */
+export function globToRegExp(glob: any): RegExp;
+export function matchGlob(glob: any, path: any): boolean;
+/**
+ * Classify a repo-relative path against a branch ScopeBoundary + the profile's default
+ * forbidden globs (C2 scope-check core).
+ *
+ * Precedence (first match wins):
+ *   explicit allowed > explicit forbidden > explicit conditional > profile default-forbidden > unknown
+ *
+ * `allowed` wins over `forbidden` so an explicitly-granted subtree (e.g. `packages/harness/**`)
+ * is `allowed` even when a broader `packages/**` is forbidden — the Allowed list is the granted
+ * implementation scope. `conditional` is checked before profile defaults so a Conditional listing
+ * (e.g. `Makefile` with an exception) overrides the profile's default-forbidden classification.
+ */
+export function classifyPath(path: any, boundary: any, profile: any): "unknown" | "forbidden" | "conditional" | "allowed";
+//# sourceMappingURL=scope-boundary.d.ts.map

package/dist/vendor/harness/scope/scope-boundary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-boundary.d.ts","sourceRoot":"","sources":["../../../../src/vendor/harness/scope/scope-boundary.js"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,gDAqBC;AACD,yDAEC;AACD;;;;;;;;;;;GAWG;AACH,0HAUC"}

package/dist/vendor/harness/scope/scope-boundary.js

@@ -0,0 +1,50 @@
+/** Translate a path glob into an anchored RegExp. `**` spans `/`; `*` stays within a segment. */
+export function globToRegExp(glob) {
+    let re = '';
+    for (let i = 0; i < glob.length; i++) {
+        const c = glob[i];
+        if (c === '*') {
+            if (glob[i + 1] === '*') {
+                re += '.*';
+                i++;
+            }
+            else {
+                re += '[^/]*';
+            }
+        }
+        else if ('\\^$+?.()|[]{}/'.includes(c)) {
+            re += '\\' + c;
+        }
+        else {
+            re += c;
+        }
+    }
+    return new RegExp('^' + re + '$');
+}
+export function matchGlob(glob, path) {
+    return globToRegExp(glob).test(path);
+}
+/**
+ * Classify a repo-relative path against a branch ScopeBoundary + the profile's default
+ * forbidden globs (C2 scope-check core).
+ *
+ * Precedence (first match wins):
+ *   explicit allowed > explicit forbidden > explicit conditional > profile default-forbidden > unknown
+ *
+ * `allowed` wins over `forbidden` so an explicitly-granted subtree (e.g. `packages/harness/**`)
+ * is `allowed` even when a broader `packages/**` is forbidden — the Allowed list is the granted
+ * implementation scope. `conditional` is checked before profile defaults so a Conditional listing
+ * (e.g. `Makefile` with an exception) overrides the profile's default-forbidden classification.
+ */
+export function classifyPath(path, boundary, profile) {
+    if (boundary.allowed.some((g) => matchGlob(g, path)))
+        return 'allowed';
+    if (boundary.forbidden.some((g) => matchGlob(g, path)))
+        return 'forbidden';
+    if (boundary.conditional.some((g) => matchGlob(g, path)))
+        return 'conditional';
+    if (profile.forbiddenPathDefaults.some((g) => matchGlob(g, path)))
+        return 'forbidden';
+    return 'unknown';
+}
+//# sourceMappingURL=scope-boundary.js.map

package/dist/vendor/harness/scope/scope-boundary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-boundary.js","sourceRoot":"","sources":["../../../../src/vendor/harness/scope/scope-boundary.js"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,MAAM,UAAU,YAAY,CAAC,IAAI;IAC7B,IAAI,EAAE,GAAG,EAAE,CAAC;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACZ,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBACtB,EAAE,IAAI,IAAI,CAAC;gBACX,CAAC,EAAE,CAAC;YACR,CAAC;iBACI,CAAC;gBACF,EAAE,IAAI,OAAO,CAAC;YAClB,CAAC;QACL,CAAC;aACI,IAAI,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACrC,EAAE,IAAI,IAAI,GAAG,CAAC,CAAC;QACnB,CAAC;aACI,CAAC;YACF,EAAE,IAAI,CAAC,CAAC;QACZ,CAAC;IACL,CAAC;IACD,OAAO,IAAI,MAAM,CAAC,GAAG,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC;AACtC,CAAC;AACD,MAAM,UAAU,SAAS,CAAC,IAAI,EAAE,IAAI;IAChC,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzC,CAAC;AACD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO;IAChD,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAChD,OAAO,SAAS,CAAC;IACrB,IAAI,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAClD,OAAO,WAAW,CAAC;IACvB,IAAI,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACpD,OAAO,aAAa,CAAC;IACzB,IAAI,OAAO,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAC7D,OAAO,WAAW,CAAC;IACvB,OAAO,SAAS,CAAC;AACrB,CAAC"}

package/dist/vendor/harness/skills/manifest.d.ts

@@ -0,0 +1,16 @@
+export function isHostId(s: any): boolean;
+export const HARNESS_SKILLS: ({
+    name: string;
+    summary: string;
+    supersedes: string;
+} | {
+    name: string;
+    summary: string;
+    supersedes?: undefined;
+})[];
+export namespace HOST_SKILL_DIR {
+    let claude: string;
+    let codex: string;
+    let gemini: string;
+}
+//# sourceMappingURL=manifest.d.ts.map

package/dist/vendor/harness/skills/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../../../src/vendor/harness/skills/manifest.js"],"names":[],"mappings":"AAqBA,0CAEC;AAjBD;;;;;;;;KAQE"}

package/dist/vendor/harness/skills/manifest.js

@@ -0,0 +1,25 @@
+// Canonical inventory of the harness skill pack — the NATIVE superpowers-surface replacement.
+//
+// `harness skills install --host <h>` reports this plan; the pack ships in the npm tarball under
+// `skills/<name>/SKILL.md` (see `package.json` `files`). The host loads each as `harness/<name>`.
+// `using-harness` MUST be loaded first — it carries the supersede directive that makes `harness/*`
+// take precedence over the superpowers skills it replaces.
+export const HARNESS_SKILLS = [
+    { name: 'using-harness', summary: 'index + supersede directive (load FIRST)', supersedes: 'using-superpowers' },
+    { name: 'brainstorm', summary: 'spec-ladder STUDY→VOL→EVOL + ≥2-peer review + batched decisions', supersedes: 'brainstorming' },
+    { name: 'test', summary: 'test-pyramid + scoped-test loop (not "tdd")', supersedes: 'test-driven-development' },
+    { name: 'debug', summary: 'generic root-cause loop', supersedes: 'systematic-debugging' },
+    { name: 'review', summary: '≥2-peer consensus review', supersedes: 'requesting-code-review' },
+    { name: 'plan', summary: 'spec-ladder + BRANCH.md lots; completes with track', supersedes: 'writing-plans' },
+    { name: 'adopt', summary: 'adapt the harness method to ANY repo (profile)' },
+];
+/** Host → the skills directory `skills install` copies the pack into. */
+export const HOST_SKILL_DIR = {
+    claude: '.claude/skills',
+    codex: '.codex/skills',
+    gemini: '.gemini/skills',
+};
+export function isHostId(s) {
+    return s === 'claude' || s === 'codex' || s === 'gemini';
+}
+//# sourceMappingURL=manifest.js.map

package/dist/vendor/harness/skills/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../../../src/vendor/harness/skills/manifest.js"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,EAAE;AACF,iGAAiG;AACjG,kGAAkG;AAClG,mGAAmG;AACnG,2DAA2D;AAC3D,MAAM,CAAC,MAAM,cAAc,GAAG;IAC1B,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,0CAA0C,EAAE,UAAU,EAAE,mBAAmB,EAAE;IAC/G,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,iEAAiE,EAAE,UAAU,EAAE,eAAe,EAAE;IAC/H,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,6CAA6C,EAAE,UAAU,EAAE,yBAAyB,EAAE;IAC/G,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,yBAAyB,EAAE,UAAU,EAAE,sBAAsB,EAAE;IACzF,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,0BAA0B,EAAE,UAAU,EAAE,wBAAwB,EAAE;IAC7F,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,oDAAoD,EAAE,UAAU,EAAE,eAAe,EAAE;IAC5G,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,gDAAgD,EAAE;CAC/E,CAAC;AACF,yEAAyE;AACzE,MAAM,CAAC,MAAM,cAAc,GAAG;IAC1B,MAAM,EAAE,gBAAgB;IACxB,KAAK,EAAE,eAAe;IACtB,MAAM,EAAE,gBAAgB;CAC3B,CAAC;AACF,MAAM,UAAU,QAAQ,CAAC,CAAC;IACtB,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,QAAQ,CAAC;AAC7D,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sentropic/h2a",
-  "version": "0.83.0",
+  "version": "0.85.0",
   "description": "h2a — the unified CLI + core for human-to-agent coordination.",
   "license": "MIT",
   "type": "module",
@@ -31,7 +31,8 @@
   "files": [
     "dist",
     "fixtures",
-    "skills"
+    "skills",
+    "schema"
   ],
   "publishConfig": {
     "access": "public"
@@ -46,7 +47,7 @@
     "@hono/mcp": "^0.3.0",
     "@hono/node-server": "^2.0.4",
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "@sentropic/track": "^0.83.0",
+    "@sentropic/track": "^0.85.0",
     "hono": "^4.12.23"
   },
   "peerDependencies": {

package/schema/harness/verification-run.schema.json

@@ -0,0 +1,154 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://github.com/rhanka/sentropic/packages/harness/schema/verification-run.schema.json",
+  "title": "VerificationRun (harness↔track seam v0)",
+  "description": "Neutral verification artifact emitted by @sentropic/harness checks and ingested by a track-side adapter. Frozen v0 per spec/SPEC_DECISION_SEAM_HARNESS_TRACK_V0.md. harness EMITS this artifact and never imports @sentropic/track; the adapter is 100% track-side. Versioning: unknown major/schemaVersion ⇒ fail-closed reject; minor ⇒ additive OPTIONAL fields only; consumers ignore unknown optional fields but MUST NOT route an unknown target-kind / enum value silently.",
+  "type": "object",
+  "$comment": "VERDICT-DERIVATION INVARIANT (DEC-S3, frozen cross-contract): the track-side adapter DERIVES the scope verdict from violations+severity, NEVER from `result`. Predicate: any violation with severity='blocking' ⇒ verdict='violation'; else any violation with severity='advisory' ⇒ verdict='conditional'; else verdict='clean'. The harness does NOT derive the verdict; this predicate is frozen here so it holds cross-contract, not on trust. `acceptance.run.result` uses VerificationRun.result / the check pass flag directly (binary pass|fail).",
+  "additionalProperties": false,
+  "required": [
+    "schemaVersion",
+    "runId",
+    "commit",
+    "branch",
+    "env",
+    "runner",
+    "category",
+    "command",
+    "result",
+    "startedAt",
+    "finishedAt",
+    "checks",
+    "violations",
+    "artifactLocator",
+    "artifacts"
+  ],
+  "properties": {
+    "schemaVersion": {
+      "const": 1,
+      "description": "v0 freeze. Unknown schemaVersion ⇒ fail-closed reject."
+    },
+    "runId": {
+      "type": "string",
+      "description": "Stable id per invocation. The track adapter MINTS a globally-unique runId PER EMITTED VERDICT (a per-check/per-target projection id ≠ this physical run id — DEC §7 M1). This physical id lives in the artifact behind artifactLocator."
+    },
+    "commit": { "type": "string" },
+    "branch": { "type": "string" },
+    "env": { "type": "string" },
+    "runner": { "type": "string" },
+    "category": { "$ref": "#/definitions/VerificationCategory" },
+    "command": { "type": "string" },
+    "result": {
+      "enum": ["pass", "fail"],
+      "description": "Run-level binary outcome. NEVER the source of the scope verdict (see the verdict-derivation invariant)."
+    },
+    "startedAt": { "type": "string", "format": "date-time" },
+    "finishedAt": { "type": "string", "format": "date-time" },
+    "checks": {
+      "type": "array",
+      "items": { "$ref": "#/definitions/VerificationCheck" }
+    },
+    "violations": {
+      "type": "array",
+      "description": "Flattened union of all check violations (convenience for ingesters).",
+      "items": { "$ref": "#/definitions/Violation" }
+    },
+    "artifactLocator": {
+      "type": "string",
+      "description": "Immutable locator for the full VerificationRun JSON — the CANONICAL evidence (DEC-S2). Immutability is a PRODUCER guarantee the adapter RECORDS, never verifies (OQ-3). REQUIRED."
+    },
+    "artifacts": {
+      "type": "array",
+      "description": "Opaque references to OTHER produced artifacts (paths/urls).",
+      "items": { "type": "string" }
+    }
+  },
+  "definitions": {
+    "VerificationCategory": {
+      "enum": [
+        "none",
+        "static",
+        "unit",
+        "integration",
+        "e2e",
+        "ci",
+        "uat",
+        "security"
+      ],
+      "description": "BR25 D3 verification taxonomy. `security` is a frozen v0 slot reserved NOW (adding an enum value post-freeze would be a major bump); it stays schema-artifact-only / OFF-WIRE in v0 (OQ-7). An unknown category MUST NOT route silently."
+    },
+    "ViolationSeverity": {
+      "enum": ["advisory", "blocking"],
+      "description": "FROZEN v0 enum (DEC §7 SHOULD-FIX). Feeds the verdict-derivation invariant; the freeze pins the predicate cross-contract."
+    },
+    "Violation": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["code", "message", "severity"],
+      "properties": {
+        "code": { "type": "string" },
+        "path": {
+          "type": "string",
+          "description": "Offending path, when the violation is path-scoped (e.g. C2)."
+        },
+        "message": { "type": "string" },
+        "severity": { "$ref": "#/definitions/ViolationSeverity" }
+      }
+    },
+    "VerificationTarget": {
+      "type": "object",
+      "additionalProperties": false,
+      "description": "Structured evidence target (DEC-S1, freeze keystone). Carried per-check. The adapter routes from the target, never from category/branch/commit/path globs (DEC-S4). At least one of `scope`|`acceptance` should be present for a track-ingested check; a check with no target FAILS CLOSED at the adapter.",
+      "minProperties": 1,
+      "properties": {
+        "scope": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["wpRef"],
+          "description": "present ⇒ adapter emits scope.verification (verdict derived from violations+severity).",
+          "properties": {
+            "wpRef": {
+              "type": "string",
+              "description": "Exact scope.declare itemId / stable scope key (no inference)."
+            }
+          }
+        },
+        "acceptance": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["evidenceId", "kind"],
+          "description": "present ⇒ adapter emits acceptance.run (+ one acceptance.link per criterionId).",
+          "properties": {
+            "evidenceId": {
+              "type": "string",
+              "description": "Caller-supplied DETERMINISTIC evidence key (DEC §7 M2=B) — NOT a server-minted id."
+            },
+            "kind": { "enum": ["unit", "integration", "e2e", "manual"] },
+            "criterionIds": {
+              "type": "array",
+              "items": { "type": "string" }
+            }
+          }
+        }
+      }
+    },
+    "VerificationCheck": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["code", "category", "pass", "violations"],
+      "properties": {
+        "code": { "type": "string" },
+        "category": { "$ref": "#/definitions/VerificationCategory" },
+        "pass": { "type": "boolean" },
+        "violations": {
+          "type": "array",
+          "items": { "$ref": "#/definitions/Violation" }
+        },
+        "target": {
+          "$ref": "#/definitions/VerificationTarget",
+          "description": "≥1 of scope|acceptance required for a track-ingested check; absent ⇒ adapter fail-closed (never auto-itemized, never glob-routed). Optional so producer-local checks stay representable."
+        }
+      }
+    }
+  }
+}

package/skills/harness/adopt/SKILL.md

@@ -0,0 +1,32 @@
+---
+name: adopt
+description: Use when bringing the harness method to a NEW or non-sentropic repo — maps the repo's conventions into a harness profile so the same scope/branch/verify kernel applies anywhere.
+---
+
+# harness/adopt
+
+Native repo-onboarding. The harness engine (parser, C1/C2 checks, verify) is generic; all repo-specific
+policy is DATA in a profile. `adopt` maps a foreign repo onto that SPI so the method runs unchanged.
+
+## Steps
+
+1. **Scaffold** — `harness init [--profile sentropic|stub] [--json]` prints a profile descriptor. Save it
+   as `harness.profile.json` at the repo root and edit it to fit:
+   - `forbiddenPathDefaults` — globs forbidden unless a BRANCH.md explicitly Allows them.
+   - `exceptionIdPattern` — the grammar of a valid scope-exception id (e.g. `^BR\d+-EX\d+$`).
+   - `conditionalRequiresException` — whether a Conditional path needs a matching declared exception.
+   - `branchMatch` — `exact` or `prefix` for the C1 branch check.
+2. **Map the repo's reality** — translate the repo's conventions, not sentropic's: which paths are
+   off-limits, what its BRANCH.md grammar is (or whether one must be introduced), the command runner
+   (`make` vs `npm`/`nx`), and the environment data-lifecycle (which envs are disposable vs protected).
+3. **Audit** — `harness audit --staged-files "<changed files>" --branch-md <path> --json` diffs the repo
+   against the active profile and emits a `VerificationRun (static)` listing drift: forbidden touches,
+   undeclared (unknown) paths, missing scope declaration.
+4. **Wire** — add a `scope-check`/`verify` step to the repo's pre-commit or CI using the profile, so the
+   method is enforced, not just documented.
+
+## Principle
+
+A second `stub` profile diverging from `sentropic` on a checked dimension is the proof-of-genericity:
+the same kernel yields different, correct verdicts per profile. Adoption succeeds when a third repo can
+declare its OWN profile and the unchanged engine governs it.

package/skills/harness/brainstorm/SKILL.md

@@ -0,0 +1,39 @@
+---
+name: brainstorm
+description: Use before any creative/design work (a feature, a package, an evolution) — explores intent and design via the spec-ladder with multi-peer adversarial review BEFORE implementation.
+---
+
+# harness/brainstorm
+
+Native sentropic ideation. Stronger than a single-pass brainstorm: it climbs the **spec-ladder** and
+gates each design step with **≥2 independent adversarial peers** and **batched** owner decisions.
+
+Open the act: `harness brainstorm "<topic>" [--peers <n>] [--ladder study|vol|evol]` (records a WorkEvent).
+
+## The spec-ladder
+
+Pick the rung that matches the uncertainty, write the artifact under `spec/`:
+
+- **STUDY** (`SPEC_STUDY_<TOPIC>.md`) — open question, options, trade-offs. No commitment yet.
+- **VOL** (volition) — the chosen direction + rationale, still reversible.
+- **EVOL** (`SPEC_EVOL_<TOPIC>.md`) — the committed design with numbered decisions (D1…Dn) ready to plan.
+
+Don't skip rungs for a genuinely open problem; don't over-ceremony a reversible one.
+
+## Multi-peer adversarial review (the differentiator)
+
+Before presenting decisions, get **≥2 independent reviews from distinct angles** (e.g. Opus 4.8 + Codex
+5.5-xhigh, or distinct lenses: correctness / risk / user-value). Reconcile divergences explicitly — a
+lone reviewer rationalises; a panel surfaces failure modes. Reversible calls: decide solo. Blocking /
+irreversible calls: escalate.
+
+## Batched decisions
+
+Present owner decisions as a **clean full dossier (never a delta)**, THEN ask in **lots of ≤4** questions.
+Each question carries its own context inline (source + stakes + consequence) — an id like "D5" alone
+carries no meaning. Once answered, treat all answers final; do re-examination in prose, don't re-poll.
+
+## Done
+
+A ladder artifact exists, peers reconciled, decisions captured. Hand off to `harness/plan` to turn the
+EVOL decisions into BRANCH.md lots.

package/skills/harness/debug/SKILL.md

@@ -0,0 +1,33 @@
+---
+name: debug
+description: Use on any bug, test failure, or unexpected behaviour BEFORE proposing a fix — runs the generic evidence-first root-cause loop.
+---
+
+# harness/debug
+
+Native sentropic debugging. Open it with `harness debug "<symptom>"` (records a WorkEvent), then run the
+loop. No fix is proposed before the root cause is proven by evidence.
+
+## The loop
+
+1. **Reproduce** — a deterministic, minimal repro. If you can't reproduce it, you can't fix it.
+2. **Evidence** — gather facts with the tools, never assume: `make logs-<service>`, `make db-query
+   QUERY="…"`, container state (`make ps`), `grep`/`diff`. Read the actual error, the actual state.
+3. **One hypothesis** — the single most-likely cause that the evidence supports. Write it down.
+4. **One fix** — the smallest change that addresses THAT cause. No shotgun edits, no "while I'm here".
+5. **Re-observe** — rerun the repro. Confirm the symptom is gone AND the evidence changed as predicted.
+6. **Regression test** — promote the repro into a test (`harness/test`) so it can't silently return.
+
+## Rules
+
+- No "probably" / "maybe" / "should be" — verify with a tool before asserting. A claim without evidence
+  is a guess.
+- Change ONE thing at a time; if the symptom persists, revert it before trying the next.
+- A failing assertion is data, not noise — read the diff, don't loosen the assertion.
+- Live surfaces (UI/stream/API/extension) have a dev-lane bootstrap (Playwright/probe targets); use it to
+  observe the real behaviour rather than reasoning in the abstract.
+
+## Done
+
+Root cause named + evidenced, minimal fix in place, repro green as a regression test, no collateral
+change. Hand verification to `harness verify`.

package/skills/harness/plan/SKILL.md

@@ -0,0 +1,35 @@
+---
+name: plan
+description: Use when you have a spec/decisions and need an executable plan — writes a lot-based BRANCH.md from the template and completes with track for realization state.
+---
+
+# harness/plan
+
+Native sentropic planning. Turns an EVOL spec's decisions into an executable, scoped `BRANCH.md`. Open it
+with `harness plan "<spec>" [--lots <n>]` (records a WorkEvent; harness writes BRANCH.md, then
+`track branch import` indexes it).
+
+## Write BRANCH.md from the template
+
+Use `plan/BRANCH_TEMPLATE.md` strictly — checkboxes only, no prose, no `###`. First iteration must be
+detailed:
+
+- **Objective** + **Scope / Guardrails**.
+- **Branch Scope Boundaries**: `Allowed` / `Forbidden` / `Conditional` paths (default forbidden: `Makefile`,
+  `docker-compose*.yml`, `.cursor/rules/**`). Exceptions via `BRxx-EXn` (reason + impact + rollback).
+- **Lot-based plan**: each lot is one logical change with a file-level test list and a lot gate.
+- **Feedback Loop** for blockers/decisions.
+
+## Lots & commit discipline
+
+- One logical change per lot/commit; max ~10–15 files and **under 150 lines** per commit.
+- Selective staging (`git add <files>` — never `git add .`); commit via `make commit MSG="type: …"`.
+- Update `BRANCH.md` checkboxes WITHIN each commit.
+- Multi-need work → multi-branch with a root `PLAN.md` (waves ≤4 orthogonal branches).
+
+## Completes with track
+
+harness OWNS the BRANCH.md (the master plan artifact) and EMITS `WorkEvent`s; **track** ingests them and
+owns the realization state — Items, links, Decisions, acceptance, and the AWAITED / DROPPED / DONE / TO-DO
+projections. Don't duplicate status in BRANCH.md prose — let track project it. Execute lots in order
+autonomously; only interrupt for a real fork or blocker.

package/skills/harness/review/SKILL.md

@@ -0,0 +1,33 @@
+---
+name: review
+description: Use when completing a feature, a design step, or before merging — runs a ≥2-peer consensus review and reconciles the findings, instead of a single rubber-stamp pass.
+---
+
+# harness/review
+
+Native sentropic code/design review. Stronger than a single review: **≥2 independent peers**, distinct
+lenses, reconciled. Open it with `harness review "<target>" --consensus [--peers <n>]` (records a
+WorkEvent).
+
+## Consensus protocol
+
+1. **Dispatch ≥2 independent peers** on the SAME diff/design — ideally different models or angles
+   (e.g. Opus 4.8 + Codex 5.5-xhigh), each blind to the others.
+2. **Distinct lenses** when a finding can fail in more than one way: correctness · security · performance ·
+   does-it-actually-reproduce. Diversity catches what redundancy can't.
+3. **Refute by default** — each peer tries to REFUTE the change / a claimed finding. A finding survives
+   only if it withstands the skeptics; a kill needs a majority.
+4. **Reconcile** — merge findings, surface disagreements explicitly, classify accept / reject / defer with
+   a one-line rationale each. Don't average; adjudicate.
+
+## Receiving review (technical rigor, not performative agreement)
+
+Before implementing a suggestion, verify it. If feedback is unclear or technically questionable, push back
+with evidence rather than complying blindly. Apply what's correct; refute what's wrong; ask when genuinely
+ambiguous.
+
+## Severity & gate
+
+Findings that gate a lot escalate to a `VerificationRun` (`harness verify --category static`). Narrative
+findings stay a `WorkEvent`. Blocking findings must be resolved before merge; non-blocking are logged in
+`BRANCH.md` `## Feedback Loop` with owner + status.