@tea-agent/loop-agent 0.13.0-alpha.0 → 0.13.0-beta.0

package/docs/templates/agent-dag.supervised-implementation.json

@@ -1,501 +1,501 @@
-{
-  "$schema": "./agent-dag.schema.json",
-  "version": 3,
-  "title": "Agent DAG supervised implementation template",
-  "runtimeContract": {
-    "schemaVersion": 1,
-    "agentRuntime": "pi-only",
-    "repairWriterProtocol": "explicit-node-v1"
-  },
-  "objective": "Demonstrate a reusable supervised implementation DAG: contract → parallel scouts → plan → write-set audit → write-set gate → implement → soft verify → process supervisor → repair → hard verify → review verdict → review gate → decision gate → closeout. Write-set, process, and review verdict nodes emit first-line VERDICT for deterministic gates, reducing main-session intervention.",
-  "successCriteria": [
-    "contract-pi returns a read-only implementation contract with narrow write boundaries",
-    "scout-src and scout-tests run in parallel without write conflicts",
-    "plan-pi produces a writeSet coverage matrix with explicit exclusive owners",
-    "write-set-audit-pi validates coverage and returns VERDICT pass or request-revision",
-    "write-set-gate-shell blocks implement-pi unless write-set-audit-pi first-line VERDICT is pass",
-    "implement-pi and repair-pi write only inside declared writeSet",
-    "soft-verify-shell archives focused test exit codes before process supervision",
-    "process-supervisor-pi returns first-line VERDICT pass or request-revision",
-    "process-gate-shell deterministically accepts valid supervisor verdicts",
-    "hard-verify-shell archives lint/typecheck/focused tests with active-DAG governance when check-repo runs",
-    "review-pi returns first-line VERDICT using review verdict prompt invariants",
-    "review-gate-shell blocks downstream nodes unless review VERDICT is pass",
-    "decision-pi returns DECISION_ENVELOPE_JSON without pausing runtime by default",
-    "closeout-pi summarizes evidence without writing files"
-  ],
-  "globalConstraints": [
-    "Replace every REPLACE/WITH/... placeholder with concrete repo paths before execution; do not leave template placeholders in production DAG JSON.",
-    "Do not commit from DAG nodes; main session inspects and commits after Decision Gate approval.",
-    "Use only existing executors: pi, shell, static. Cursor is available only through the explicit cursor-prompt sidecar, never as a DAG executor. Pi writer nodes must set toolProfile=write.",
-    "Read-only nodes must not write repository files, including root artifacts/**.",
-    "Exclusive writer nodes must stay within declared writeSet.",
-    "Do not implement automatic retry/resume or mutate historical completed facts.",
-    "Do not create executor: supervisor; supervisor is a role on executor=pi.",
-    "Do not create executor: human, executor: decision, or browser executor.",
-    "Shell governance inside active DAG must use HARNESS_ALLOW_ACTIVE_DAG_RUNS=1 bash scripts/check-repo.sh.",
-    "On Windows, Bash script commands must run through Git Bash or a configured compatible Bash; do not require WSL or POSIX filesystem paths.",
-    "Actual file operation paths must be macOS/Windows compatible; use / only for stable repo refs, JSON/Markdown evidence refs, and glob conventions.",
-    "Prompt templates must not ask main session to write artifacts; node output is the artifact and runner archives it under .harness/dag-runs/.",
-    "Every task must explicitly declare executor; defaults.executor is schema-only and not a runtime fallback.",
-    "Prefer same-rank parallel read-only scouts over serial chains when outputs are independent.",
-    "Same-rank exclusive writeSet entries must be disjoint.",
-    "Use executorModels for model routing; do not add defaults.model or legacy top-level models."
-  ],
-  "defaults": {
-    "executor": "pi",
-    "contextProfile": "slim",
-    "skills": [
-      "ai-engineering-context"
-    ],
-    "writePolicy": "read-only"
-  },
-  "skillsByRole": {
-    "planner": [
-      "loop-agent"
-    ],
-    "scout": [
-      "ai-engineering-context"
-    ],
-    "implementer": [
-      "verification-before-completion"
-    ],
-    "reviewer": [
-      "requesting-code-review",
-      "verification-before-completion"
-    ],
-    "supervisor": [
-      "verification-before-completion",
-      "loop-agent"
-    ],
-    "verifier": [
-      "verification-before-completion",
-      "systematic-debugging"
-    ],
-    "closeout": [
-      "loop-agent",
-      "verification-before-completion"
-    ]
-  },
-  "executorModels": {
-    "pi": {
-      "LOW": "gpt-5.3-codex-spark",
-      "MED": "glm-5.2",
-      "HIGH": "gpt-5.5"
-    }
-  },
-  "verifyStrategy": {
-    "intermediateQuota": "1",
-    "finalQuota": "full",
-    "focusedCommandSource": "adapter"
-  },
-  "tasks": [
-    {
-      "id": "contract-pi",
-      "depends_on": [],
-      "complexity": "MED",
-      "executor": "pi",
-      "role": "planner",
-      "writePolicy": "read-only",
-      "allowedPaths": [
-        "**"
-      ],
-      "forbiddenPaths": [
-        ".harness/**",
-        "artifacts/**"
-      ],
-      "outputContract": "Plain Markdown implementation contract: scope, risks, parallel scout opportunities, verification expectations. No file writes.",
-      "subtask_prompt": "Read the DAG objective and success criteria. Return a concise implementation contract covering scope, narrow write boundaries, risks, and verification expectations. Do not edit files or write root artifacts/**."
-    },
-    {
-      "id": "scout-src",
-      "depends_on": [
-        "contract-pi"
-      ],
-      "complexity": "LOW",
-      "executor": "pi",
-      "role": "scout",
-      "writePolicy": "read-only",
-      "allowedPaths": [
-        "REPLACE/WITH/SOURCE/PATH/**"
-      ],
-      "forbiddenPaths": [
-        ".harness/**",
-        "artifacts/**"
-      ],
-      "outputContract": "Plain Markdown source reconnaissance summary; no file writes.",
-      "subtask_prompt": "Perform read-only source reconnaissance under allowedPaths. List relevant files, patterns, and risks. Do not edit files."
-    },
-    {
-      "id": "scout-tests",
-      "depends_on": [
-        "contract-pi"
-      ],
-      "complexity": "LOW",
-      "executor": "pi",
-      "role": "scout",
-      "writePolicy": "read-only",
-      "allowedPaths": [
-        "REPLACE/WITH/TEST/PATH/**"
-      ],
-      "forbiddenPaths": [
-        ".harness/**",
-        "artifacts/**"
-      ],
-      "outputContract": "Plain Markdown test coverage reconnaissance summary; no file writes.",
-      "subtask_prompt": "Perform read-only test reconnaissance under allowedPaths. List relevant tests, coverage gaps, and focused verification commands. Do not edit files."
-    },
-    {
-      "id": "plan-pi",
-      "depends_on": [
-        "scout-src",
-        "scout-tests"
-      ],
-      "complexity": "MED",
-      "executor": "pi",
-      "role": "planner",
-      "writePolicy": "read-only",
-      "allowedPaths": [
-        "**"
-      ],
-      "forbiddenPaths": [
-        ".harness/**",
-        "artifacts/**"
-      ],
-      "outputContract": "Plain Markdown plan with WriteSet Coverage Matrix (file → owning exclusive node id). No file writes.",
-      "subtask_prompt": "Synthesize upstream scouts into an implementation plan. Include a WriteSet Coverage Matrix table mapping each file that must change to exactly one future exclusive implementer/repair node id. Flag parallel work and verification commands. Do not edit files."
-    },
-    {
-      "id": "write-set-audit-pi",
-      "depends_on": [
-        "plan-pi"
-      ],
-      "complexity": "MED",
-      "executor": "pi",
-      "role": "reviewer",
-      "writePolicy": "read-only",
-      "allowedPaths": [
-        "**"
-      ],
-      "forbiddenPaths": [
-        ".harness/**",
-        "artifacts/**"
-      ],
-      "outputContract": "Plain Markdown whose first non-empty line is VERDICT: pass or VERDICT: request-revision; includes writeSet coverage findings. No file writes.",
-      "subtask_prompt": "Audit plan-pi WriteSet Coverage Matrix against the contract. First non-empty line must be exactly VERDICT: pass or VERDICT: request-revision. List Critical/Important gaps when any required file lacks a single exclusive owner or overlaps forbidden paths. Do not edit files or write root artifacts/**."
-    },
-    {
-      "id": "write-set-gate-shell",
-      "depends_on": [
-        "write-set-audit-pi"
-      ],
-      "complexity": "LOW",
-      "executor": "shell",
-      "role": "verifier",
-      "writePolicy": "read-only",
-      "allowedPaths": [
-        "**"
-      ],
-      "forbiddenPaths": [
-        ".harness/**",
-        "artifacts/**"
-      ],
-      "outputContract": "Deterministic write-set audit verdict gate: exit 0 only when write-set-audit-pi first non-empty assistant output line is pass.",
-      "subtask_prompt": "Deterministic gate: block implement-pi unless write-set-audit-pi emitted VERDICT: pass.",
-      "shell": {
-        "verdictGate": {
-          "fromNodeId": "write-set-audit-pi",
-          "accept": [
-            "VERDICT: pass"
-          ],
-          "label": "write-set audit",
-          "lineMode": "first-verdict-line"
-        },
-        "cwd": ".",
-        "timeoutMs": 60000
-      }
-    },
-    {
-      "id": "implement-pi",
-      "depends_on": [
-        "write-set-gate-shell"
-      ],
-      "complexity": "HIGH",
-      "executor": "pi",
-      "role": "implementer",
-      "writePolicy": "exclusive",
-      "writeSet": [
-        "REPLACE/WITH/IMPLEMENT/WRITESET/**"
-      ],
-      "allowedPaths": [
-        "REPLACE/WITH/IMPLEMENT/**"
-      ],
-      "forbiddenPaths": [
-        ".harness/**",
-        "artifacts/**"
-      ],
-      "outputContract": "Implementation summary with changed files, focused tests run, and risks. Must not ask main session to write artifacts.",
-      "subtask_prompt": "Implement the approved change within writeSet only after write-set-gate-shell passed (upstream VERDICT: pass). If write-set gate blocked, output blocked reason without editing files. Keep changes minimal and run focused tests inside allowedPaths when implementing.",
-      "toolProfile": "write"
-    },
-    {
-      "id": "soft-verify-shell",
-      "depends_on": [
-        "implement-pi"
-      ],
-      "complexity": "LOW",
-      "executor": "shell",
-      "role": "verifier",
-      "writePolicy": "read-only",
-      "allowedPaths": [
-        "REPLACE/WITH/IMPLEMENT/**",
-        "./**"
-      ],
-      "forbiddenPaths": [
-        ".harness/**",
-        "artifacts/**"
-      ],
-      "outputContract": "Archived shell stdout/stderr with exit codes for focused verification; no worktree writes.",
-      "subtask_prompt": "Run focused soft verification before process supervision.",
-      "shell": {
-        "commands": [
-          "npx vitest run REPLACE/WITH/FOCUSED/TEST/GLOB.test.ts --reporter=dot"
-        ],
-        "verifyEvidence": {
-          "phase": "intermediate",
-          "quota": "1",
-          "commandSource": "inline",
-          "commandCount": 1,
-          "commandLabels": [
-            "focused template verification"
-          ]
-        },
-        "cwd": ".",
-        "timeoutMs": 300000
-      }
-    },
-    {
-      "id": "process-supervisor-pi",
-      "depends_on": [
-        "soft-verify-shell",
-        "implement-pi"
-      ],
-      "complexity": "HIGH",
-      "executor": "pi",
-      "role": "supervisor",
-      "writePolicy": "read-only",
-      "allowedPaths": [
-        "**"
-      ],
-      "forbiddenPaths": [
-        ".harness/**",
-        "artifacts/**"
-      ],
-      "outputContract": "Plain Markdown whose first non-empty line is VERDICT: pass or VERDICT: request-revision, followed by a REPAIR_ARTIFACT_JSON fenced block. Audit writeSet coverage, boundary drift, verification gaps, repair scope. No file writes.",
-      "subtask_prompt_markdown": "./agent-dag-process-supervisor.prompt.md"
-    },
-    {
-      "id": "process-gate-shell",
-      "depends_on": [
-        "process-supervisor-pi"
-      ],
-      "complexity": "LOW",
-      "executor": "shell",
-      "role": "verifier",
-      "writePolicy": "read-only",
-      "allowedPaths": [
-        "**"
-      ],
-      "forbiddenPaths": [
-        ".harness/**",
-        "artifacts/**"
-      ],
-      "outputContract": "Deterministic process supervisor verdict gate: exit 0 when first non-empty assistant output line is pass or request-revision; exit non-zero otherwise.",
-      "subtask_prompt": "Deterministic gate: validate process-supervisor-pi first-line VERDICT before repair/hard-verify.",
-      "shell": {
-        "verdictGate": {
-          "fromNodeId": "process-supervisor-pi",
-          "accept": [
-            "VERDICT: pass",
-            "VERDICT: request-revision"
-          ],
-          "label": "process",
-          "lineMode": "first-verdict-line"
-        },
-        "repairArtifactGate": {
-          "fromNodeId": "process-supervisor-pi",
-          "repairNodeId": "repair-pi"
-        },
-        "cwd": ".",
-        "timeoutMs": 60000
-      }
-    },
-    {
-      "id": "repair-pi",
-      "depends_on": [
-        "process-gate-shell",
-        "process-supervisor-pi"
-      ],
-      "complexity": "HIGH",
-      "executor": "pi",
-      "role": "implementer",
-      "writePolicy": "exclusive",
-      "writeSet": [
-        "REPLACE/WITH/REPAIR/WRITESET/**",
-        "docs/templates/agent-dag.supervised-implementation.json",
-        "docs/templates/agent-dag-process-supervisor.prompt.md",
-        "docs/templates/agent-dag-review-verdict.prompt.md",
-        "docs/templates/agent-dag.schema.json",
-        "./src/workflows/dag/types.ts",
-        "./src/workflows/dag/skills.ts",
-        "./src/executors/dag-pi-executor.ts"
-      ],
-      "allowedPaths": [
-        "REPLACE/WITH/REPAIR/**",
-        "docs/templates/**",
-        "./src/workflows/dag/**",
-        "./src/executors/**"
-      ],
-      "forbiddenPaths": [
-        ".harness/**",
-        "artifacts/**"
-      ],
-      "outputContract": "Repair summary or explicit no-op when process supervisor passed; changed files and tests when revised. Must not ask main session to write artifacts.",
-      "subtask_prompt": "If process-supervisor-pi returned VERDICT: request-revision, apply bounded fixes within writeSet addressing REPAIR_ARTIFACT_JSON.fixScope and preserving REPAIR_ARTIFACT_JSON.invariant. Use REPAIR_ARTIFACT_JSON.failureClass and rootCause before raw logs; raw log is fallback evidence only when rawLogFallbackAllowed is true. If VERDICT: pass, return no-op with evidence. Re-run focused tests when you change code.",
-      "toolProfile": "write"
-    },
-    {
-      "id": "hard-verify-shell",
-      "depends_on": [
-        "repair-pi"
-      ],
-      "complexity": "LOW",
-      "executor": "shell",
-      "role": "verifier",
-      "writePolicy": "read-only",
-      "allowedPaths": [
-        "./**",
-        "docs/**",
-        "scripts/**"
-      ],
-      "forbiddenPaths": [
-        ".harness/**",
-        "artifacts/**"
-      ],
-      "outputContract": "Archived hard verification stdout/stderr with exit codes; no worktree writes.",
-      "subtask_prompt": "Run hard verification after repair round.",
-      "shell": {
-        "preset": "loop-agent-standard-verify",
-        "commands": [
-          "HARNESS_ALLOW_ACTIVE_DAG_RUNS=1 bash scripts/check-repo.sh"
-        ],
-        "verifyEvidence": {
-          "phase": "final",
-          "quota": "full",
-          "commandSource": "inline",
-          "commandCount": 1,
-          "commandLabels": [
-            "active DAG repo governance checks"
-          ],
-          "finalFullRequired": true
-        },
-        "cwd": ".",
-        "timeoutMs": 300000
-      }
-    },
-    {
-      "id": "review-pi",
-      "depends_on": [
-        "hard-verify-shell"
-      ],
-      "complexity": "HIGH",
-      "executor": "pi",
-      "role": "reviewer",
-      "writePolicy": "read-only",
-      "allowedPaths": [
-        "**"
-      ],
-      "forbiddenPaths": [
-        ".harness/**",
-        "artifacts/**"
-      ],
-      "outputContract": "Plain Markdown whose first non-empty line is VERDICT: pass or VERDICT: request-revision; Critical/Important findings force request-revision. No file writes.",
-      "subtask_prompt_markdown": "./agent-dag-review-verdict.prompt.md"
-    },
-    {
-      "id": "review-gate-shell",
-      "depends_on": [
-        "review-pi"
-      ],
-      "complexity": "LOW",
-      "executor": "shell",
-      "role": "verifier",
-      "writePolicy": "read-only",
-      "allowedPaths": [
-        "**"
-      ],
-      "forbiddenPaths": [
-        ".harness/**",
-        "artifacts/**"
-      ],
-      "outputContract": "Deterministic review verdict gate: exit 0 only when review-pi first non-empty assistant output line is pass.",
-      "subtask_prompt": "Deterministic gate: block decision gate unless review-pi emitted VERDICT: pass.",
-      "shell": {
-        "verdictGate": {
-          "fromNodeId": "review-pi",
-          "accept": [
-            "VERDICT: pass"
-          ],
-          "label": "review",
-          "lineMode": "first-verdict-line"
-        },
-        "cwd": ".",
-        "timeoutMs": 60000
-      }
-    },
-    {
-      "id": "decision-pi",
-      "depends_on": [
-        "review-gate-shell",
-        "hard-verify-shell"
-      ],
-      "complexity": "HIGH",
-      "executor": "pi",
-      "role": "reviewer",
-      "writePolicy": "read-only",
-      "allowedPaths": [
-        "**"
-      ],
-      "forbiddenPaths": [
-        ".harness/**",
-        "artifacts/**"
-      ],
-      "outputContract": "Markdown with exactly one DECISION_ENVELOPE_JSON fenced block plus evidence summary. No file writes.",
-      "subtask_prompt_markdown": "./agent-dag-decision-gate.prompt.md",
-      "decisionGate": {
-        "enabled": true,
-        "schemaVersion": 1,
-        "mode": "record-only"
-      }
-    },
-    {
-      "id": "closeout-pi",
-      "depends_on": [
-        "decision-pi"
-      ],
-      "complexity": "MED",
-      "executor": "pi",
-      "role": "closeout",
-      "writePolicy": "read-only",
-      "allowedPaths": [
-        "**"
-      ],
-      "forbiddenPaths": [
-        ".harness/**",
-        "artifacts/**"
-      ],
-      "outputContract": "Plain Markdown closeout referencing verification, supervisor/review verdicts, and decision envelope. No file writes.",
-      "subtask_prompt": "Summarize the supervised DAG outcome: contract, write-set audit, implement/repair, soft/hard verify, process supervisor and review verdicts, decision-pi envelope, and recommended main-session next step. Do not edit files or write root artifacts/**."
-    }
-  ]
-}
+{
+  "$schema": "./agent-dag.schema.json",
+  "version": 3,
+  "title": "Agent DAG supervised implementation template",
+  "runtimeContract": {
+    "schemaVersion": 1,
+    "agentRuntime": "pi-only",
+    "repairWriterProtocol": "explicit-node-v1"
+  },
+  "objective": "Demonstrate a reusable supervised implementation DAG: contract → parallel scouts → plan → write-set audit → write-set gate → implement → soft verify → process supervisor → repair → hard verify → review verdict → review gate → decision gate → closeout. Write-set, process, and review verdict nodes emit first-line VERDICT for deterministic gates, reducing main-session intervention.",
+  "successCriteria": [
+    "contract-pi returns a read-only implementation contract with narrow write boundaries",
+    "scout-src and scout-tests run in parallel without write conflicts",
+    "plan-pi produces a writeSet coverage matrix with explicit exclusive owners",
+    "write-set-audit-pi validates coverage and returns VERDICT pass or request-revision",
+    "write-set-gate-shell blocks implement-pi unless write-set-audit-pi first-line VERDICT is pass",
+    "implement-pi and repair-pi write only inside declared writeSet",
+    "soft-verify-shell archives focused test exit codes before process supervision",
+    "process-supervisor-pi returns first-line VERDICT pass or request-revision",
+    "process-gate-shell deterministically accepts valid supervisor verdicts",
+    "hard-verify-shell archives lint/typecheck/focused tests with active-DAG governance when check-repo runs",
+    "review-pi returns first-line VERDICT using review verdict prompt invariants",
+    "review-gate-shell blocks downstream nodes unless review VERDICT is pass",
+    "decision-pi returns DECISION_ENVELOPE_JSON without pausing runtime by default",
+    "closeout-pi summarizes evidence without writing files"
+  ],
+  "globalConstraints": [
+    "Replace every REPLACE/WITH/... placeholder with concrete repo paths before execution; do not leave template placeholders in production DAG JSON.",
+    "Do not commit from DAG nodes; main session inspects and commits after Decision Gate approval.",
+    "Use only existing executors: pi, shell, static. Cursor is available only through the explicit cursor-prompt sidecar, never as a DAG executor. Pi writer nodes must set toolProfile=write.",
+    "Read-only nodes must not write repository files, including root artifacts/**.",
+    "Exclusive writer nodes must stay within declared writeSet.",
+    "Do not implement automatic retry/resume or mutate historical completed facts.",
+    "Do not create executor: supervisor; supervisor is a role on executor=pi.",
+    "Do not create executor: human, executor: decision, or browser executor.",
+    "Shell governance inside active DAG must use HARNESS_ALLOW_ACTIVE_DAG_RUNS=1 bash scripts/check-repo.sh.",
+    "On Windows, Bash script commands must run through Git Bash or a configured compatible Bash; do not require WSL or POSIX filesystem paths.",
+    "Actual file operation paths must be macOS/Windows compatible; use / only for stable repo refs, JSON/Markdown evidence refs, and glob conventions.",
+    "Prompt templates must not ask main session to write artifacts; node output is the artifact and runner archives it under .harness/dag-runs/.",
+    "Every task must explicitly declare executor; defaults.executor is schema-only and not a runtime fallback.",
+    "Prefer same-rank parallel read-only scouts over serial chains when outputs are independent.",
+    "Same-rank exclusive writeSet entries must be disjoint.",
+    "Use executorModels for model routing; do not add defaults.model or legacy top-level models."
+  ],
+  "defaults": {
+    "executor": "pi",
+    "contextProfile": "slim",
+    "skills": [
+      "ai-engineering-context"
+    ],
+    "writePolicy": "read-only"
+  },
+  "skillsByRole": {
+    "planner": [
+      "loop-agent"
+    ],
+    "scout": [
+      "ai-engineering-context"
+    ],
+    "implementer": [
+      "verification-before-completion"
+    ],
+    "reviewer": [
+      "requesting-code-review",
+      "verification-before-completion"
+    ],
+    "supervisor": [
+      "verification-before-completion",
+      "loop-agent"
+    ],
+    "verifier": [
+      "verification-before-completion",
+      "systematic-debugging"
+    ],
+    "closeout": [
+      "loop-agent",
+      "verification-before-completion"
+    ]
+  },
+  "executorModels": {
+    "pi": {
+      "LOW": "gpt-5.3-codex-spark",
+      "MED": "glm-5.2",
+      "HIGH": "gpt-5.5"
+    }
+  },
+  "verifyStrategy": {
+    "intermediateQuota": "1",
+    "finalQuota": "full",
+    "focusedCommandSource": "adapter"
+  },
+  "tasks": [
+    {
+      "id": "contract-pi",
+      "depends_on": [],
+      "complexity": "MED",
+      "executor": "pi",
+      "role": "planner",
+      "writePolicy": "read-only",
+      "allowedPaths": [
+        "**"
+      ],
+      "forbiddenPaths": [
+        ".harness/**",
+        "artifacts/**"
+      ],
+      "outputContract": "Plain Markdown implementation contract: scope, risks, parallel scout opportunities, verification expectations. No file writes.",
+      "subtask_prompt": "Read the DAG objective and success criteria. Return a concise implementation contract covering scope, narrow write boundaries, risks, and verification expectations. Do not edit files or write root artifacts/**."
+    },
+    {
+      "id": "scout-src",
+      "depends_on": [
+        "contract-pi"
+      ],
+      "complexity": "LOW",
+      "executor": "pi",
+      "role": "scout",
+      "writePolicy": "read-only",
+      "allowedPaths": [
+        "REPLACE/WITH/SOURCE/PATH/**"
+      ],
+      "forbiddenPaths": [
+        ".harness/**",
+        "artifacts/**"
+      ],
+      "outputContract": "Plain Markdown source reconnaissance summary; no file writes.",
+      "subtask_prompt": "Perform read-only source reconnaissance under allowedPaths. List relevant files, patterns, and risks. Do not edit files."
+    },
+    {
+      "id": "scout-tests",
+      "depends_on": [
+        "contract-pi"
+      ],
+      "complexity": "LOW",
+      "executor": "pi",
+      "role": "scout",
+      "writePolicy": "read-only",
+      "allowedPaths": [
+        "REPLACE/WITH/TEST/PATH/**"
+      ],
+      "forbiddenPaths": [
+        ".harness/**",
+        "artifacts/**"
+      ],
+      "outputContract": "Plain Markdown test coverage reconnaissance summary; no file writes.",
+      "subtask_prompt": "Perform read-only test reconnaissance under allowedPaths. List relevant tests, coverage gaps, and focused verification commands. Do not edit files."
+    },
+    {
+      "id": "plan-pi",
+      "depends_on": [
+        "scout-src",
+        "scout-tests"
+      ],
+      "complexity": "MED",
+      "executor": "pi",
+      "role": "planner",
+      "writePolicy": "read-only",
+      "allowedPaths": [
+        "**"
+      ],
+      "forbiddenPaths": [
+        ".harness/**",
+        "artifacts/**"
+      ],
+      "outputContract": "Plain Markdown plan with WriteSet Coverage Matrix (file → owning exclusive node id). No file writes.",
+      "subtask_prompt": "Synthesize upstream scouts into an implementation plan. Include a WriteSet Coverage Matrix table mapping each file that must change to exactly one future exclusive implementer/repair node id. Flag parallel work and verification commands. Do not edit files."
+    },
+    {
+      "id": "write-set-audit-pi",
+      "depends_on": [
+        "plan-pi"
+      ],
+      "complexity": "MED",
+      "executor": "pi",
+      "role": "reviewer",
+      "writePolicy": "read-only",
+      "allowedPaths": [
+        "**"
+      ],
+      "forbiddenPaths": [
+        ".harness/**",
+        "artifacts/**"
+      ],
+      "outputContract": "Plain Markdown whose first non-empty line is VERDICT: pass or VERDICT: request-revision; includes writeSet coverage findings. No file writes.",
+      "subtask_prompt": "Audit plan-pi WriteSet Coverage Matrix against the contract. First non-empty line must be exactly VERDICT: pass or VERDICT: request-revision. List Critical/Important gaps when any required file lacks a single exclusive owner or overlaps forbidden paths. Do not edit files or write root artifacts/**."
+    },
+    {
+      "id": "write-set-gate-shell",
+      "depends_on": [
+        "write-set-audit-pi"
+      ],
+      "complexity": "LOW",
+      "executor": "shell",
+      "role": "verifier",
+      "writePolicy": "read-only",
+      "allowedPaths": [
+        "**"
+      ],
+      "forbiddenPaths": [
+        ".harness/**",
+        "artifacts/**"
+      ],
+      "outputContract": "Deterministic write-set audit verdict gate: exit 0 only when write-set-audit-pi first non-empty assistant output line is pass.",
+      "subtask_prompt": "Deterministic gate: block implement-pi unless write-set-audit-pi emitted VERDICT: pass.",
+      "shell": {
+        "verdictGate": {
+          "fromNodeId": "write-set-audit-pi",
+          "accept": [
+            "VERDICT: pass"
+          ],
+          "label": "write-set audit",
+          "lineMode": "first-verdict-line"
+        },
+        "cwd": ".",
+        "timeoutMs": 60000
+      }
+    },
+    {
+      "id": "implement-pi",
+      "depends_on": [
+        "write-set-gate-shell"
+      ],
+      "complexity": "HIGH",
+      "executor": "pi",
+      "role": "implementer",
+      "writePolicy": "exclusive",
+      "writeSet": [
+        "REPLACE/WITH/IMPLEMENT/WRITESET/**"
+      ],
+      "allowedPaths": [
+        "REPLACE/WITH/IMPLEMENT/**"
+      ],
+      "forbiddenPaths": [
+        ".harness/**",
+        "artifacts/**"
+      ],
+      "outputContract": "Implementation summary with changed files, focused tests run, and risks. Must not ask main session to write artifacts.",
+      "subtask_prompt": "Implement the approved change within writeSet only after write-set-gate-shell passed (upstream VERDICT: pass). If write-set gate blocked, output blocked reason without editing files. Keep changes minimal and run focused tests inside allowedPaths when implementing.",
+      "toolProfile": "write"
+    },
+    {
+      "id": "soft-verify-shell",
+      "depends_on": [
+        "implement-pi"
+      ],
+      "complexity": "LOW",
+      "executor": "shell",
+      "role": "verifier",
+      "writePolicy": "read-only",
+      "allowedPaths": [
+        "REPLACE/WITH/IMPLEMENT/**",
+        "./**"
+      ],
+      "forbiddenPaths": [
+        ".harness/**",
+        "artifacts/**"
+      ],
+      "outputContract": "Archived shell stdout/stderr with exit codes for focused verification; no worktree writes.",
+      "subtask_prompt": "Run focused soft verification before process supervision.",
+      "shell": {
+        "commands": [
+          "npx vitest run REPLACE/WITH/FOCUSED/TEST/GLOB.test.ts --reporter=dot"
+        ],
+        "verifyEvidence": {
+          "phase": "intermediate",
+          "quota": "1",
+          "commandSource": "inline",
+          "commandCount": 1,
+          "commandLabels": [
+            "focused template verification"
+          ]
+        },
+        "cwd": ".",
+        "timeoutMs": 300000
+      }
+    },
+    {
+      "id": "process-supervisor-pi",
+      "depends_on": [
+        "soft-verify-shell",
+        "implement-pi"
+      ],
+      "complexity": "HIGH",
+      "executor": "pi",
+      "role": "supervisor",
+      "writePolicy": "read-only",
+      "allowedPaths": [
+        "**"
+      ],
+      "forbiddenPaths": [
+        ".harness/**",
+        "artifacts/**"
+      ],
+      "outputContract": "Plain Markdown whose first non-empty line is VERDICT: pass or VERDICT: request-revision, followed by a REPAIR_ARTIFACT_JSON fenced block. Audit writeSet coverage, boundary drift, verification gaps, repair scope. No file writes.",
+      "subtask_prompt_markdown": "./agent-dag-process-supervisor.prompt.md"
+    },
+    {
+      "id": "process-gate-shell",
+      "depends_on": [
+        "process-supervisor-pi"
+      ],
+      "complexity": "LOW",
+      "executor": "shell",
+      "role": "verifier",
+      "writePolicy": "read-only",
+      "allowedPaths": [
+        "**"
+      ],
+      "forbiddenPaths": [
+        ".harness/**",
+        "artifacts/**"
+      ],
+      "outputContract": "Deterministic process supervisor verdict gate: exit 0 when first non-empty assistant output line is pass or request-revision; exit non-zero otherwise.",
+      "subtask_prompt": "Deterministic gate: validate process-supervisor-pi first-line VERDICT before repair/hard-verify.",
+      "shell": {
+        "verdictGate": {
+          "fromNodeId": "process-supervisor-pi",
+          "accept": [
+            "VERDICT: pass",
+            "VERDICT: request-revision"
+          ],
+          "label": "process",
+          "lineMode": "first-verdict-line"
+        },
+        "repairArtifactGate": {
+          "fromNodeId": "process-supervisor-pi",
+          "repairNodeId": "repair-pi"
+        },
+        "cwd": ".",
+        "timeoutMs": 60000
+      }
+    },
+    {
+      "id": "repair-pi",
+      "depends_on": [
+        "process-gate-shell",
+        "process-supervisor-pi"
+      ],
+      "complexity": "HIGH",
+      "executor": "pi",
+      "role": "implementer",
+      "writePolicy": "exclusive",
+      "writeSet": [
+        "REPLACE/WITH/REPAIR/WRITESET/**",
+        "docs/templates/agent-dag.supervised-implementation.json",
+        "docs/templates/agent-dag-process-supervisor.prompt.md",
+        "docs/templates/agent-dag-review-verdict.prompt.md",
+        "docs/templates/agent-dag.schema.json",
+        "./src/workflows/dag/types.ts",
+        "./src/workflows/dag/skills.ts",
+        "./src/executors/dag-pi-executor.ts"
+      ],
+      "allowedPaths": [
+        "REPLACE/WITH/REPAIR/**",
+        "docs/templates/**",
+        "./src/workflows/dag/**",
+        "./src/executors/**"
+      ],
+      "forbiddenPaths": [
+        ".harness/**",
+        "artifacts/**"
+      ],
+      "outputContract": "Repair summary or explicit no-op when process supervisor passed; changed files and tests when revised. Must not ask main session to write artifacts.",
+      "subtask_prompt": "If process-supervisor-pi returned VERDICT: request-revision, apply bounded fixes within writeSet addressing REPAIR_ARTIFACT_JSON.fixScope and preserving REPAIR_ARTIFACT_JSON.invariant. Use REPAIR_ARTIFACT_JSON.failureClass and rootCause before raw logs; raw log is fallback evidence only when rawLogFallbackAllowed is true. If VERDICT: pass, return no-op with evidence. Re-run focused tests when you change code.",
+      "toolProfile": "write"
+    },
+    {
+      "id": "hard-verify-shell",
+      "depends_on": [
+        "repair-pi"
+      ],
+      "complexity": "LOW",
+      "executor": "shell",
+      "role": "verifier",
+      "writePolicy": "read-only",
+      "allowedPaths": [
+        "./**",
+        "docs/**",
+        "scripts/**"
+      ],
+      "forbiddenPaths": [
+        ".harness/**",
+        "artifacts/**"
+      ],
+      "outputContract": "Archived hard verification stdout/stderr with exit codes; no worktree writes.",
+      "subtask_prompt": "Run hard verification after repair round.",
+      "shell": {
+        "preset": "loop-agent-standard-verify",
+        "commands": [
+          "HARNESS_ALLOW_ACTIVE_DAG_RUNS=1 bash scripts/check-repo.sh"
+        ],
+        "verifyEvidence": {
+          "phase": "final",
+          "quota": "full",
+          "commandSource": "inline",
+          "commandCount": 1,
+          "commandLabels": [
+            "active DAG repo governance checks"
+          ],
+          "finalFullRequired": true
+        },
+        "cwd": ".",
+        "timeoutMs": 300000
+      }
+    },
+    {
+      "id": "review-pi",
+      "depends_on": [
+        "hard-verify-shell"
+      ],
+      "complexity": "HIGH",
+      "executor": "pi",
+      "role": "reviewer",
+      "writePolicy": "read-only",
+      "allowedPaths": [
+        "**"
+      ],
+      "forbiddenPaths": [
+        ".harness/**",
+        "artifacts/**"
+      ],
+      "outputContract": "Plain Markdown whose first non-empty line is VERDICT: pass or VERDICT: request-revision; Critical/Important findings force request-revision. No file writes.",
+      "subtask_prompt_markdown": "./agent-dag-review-verdict.prompt.md"
+    },
+    {
+      "id": "review-gate-shell",
+      "depends_on": [
+        "review-pi"
+      ],
+      "complexity": "LOW",
+      "executor": "shell",
+      "role": "verifier",
+      "writePolicy": "read-only",
+      "allowedPaths": [
+        "**"
+      ],
+      "forbiddenPaths": [
+        ".harness/**",
+        "artifacts/**"
+      ],
+      "outputContract": "Deterministic review verdict gate: exit 0 only when review-pi first non-empty assistant output line is pass.",
+      "subtask_prompt": "Deterministic gate: block decision gate unless review-pi emitted VERDICT: pass.",
+      "shell": {
+        "verdictGate": {
+          "fromNodeId": "review-pi",
+          "accept": [
+            "VERDICT: pass"
+          ],
+          "label": "review",
+          "lineMode": "first-verdict-line"
+        },
+        "cwd": ".",
+        "timeoutMs": 60000
+      }
+    },
+    {
+      "id": "decision-pi",
+      "depends_on": [
+        "review-gate-shell",
+        "hard-verify-shell"
+      ],
+      "complexity": "HIGH",
+      "executor": "pi",
+      "role": "reviewer",
+      "writePolicy": "read-only",
+      "allowedPaths": [
+        "**"
+      ],
+      "forbiddenPaths": [
+        ".harness/**",
+        "artifacts/**"
+      ],
+      "outputContract": "Markdown with exactly one DECISION_ENVELOPE_JSON fenced block plus evidence summary. No file writes.",
+      "subtask_prompt_markdown": "./agent-dag-decision-gate.prompt.md",
+      "decisionGate": {
+        "enabled": true,
+        "schemaVersion": 1,
+        "mode": "record-only"
+      }
+    },
+    {
+      "id": "closeout-pi",
+      "depends_on": [
+        "decision-pi"
+      ],
+      "complexity": "MED",
+      "executor": "pi",
+      "role": "closeout",
+      "writePolicy": "read-only",
+      "allowedPaths": [
+        "**"
+      ],
+      "forbiddenPaths": [
+        ".harness/**",
+        "artifacts/**"
+      ],
+      "outputContract": "Plain Markdown closeout referencing verification, supervisor/review verdicts, and decision envelope. No file writes.",
+      "subtask_prompt": "Summarize the supervised DAG outcome: contract, write-set audit, implement/repair, soft/hard verify, process supervisor and review verdicts, decision-pi envelope, and recommended main-session next step. Do not edit files or write root artifacts/**."
+    }
+  ]
+}