@tea-agent/loop-agent 0.13.0 → 0.15.0

package/docs/templates/agent-dag.supervised-implementation.json

@@ -1,620 +1,620 @@
-{
-  "$schema": "./agent-dag.schema.json",
-  "version": 3,
-  "title": "Agent DAG supervised implementation template",
-  "runtimeContract": {
-    "schemaVersion": 1,
-    "agentRuntime": "pi-only",
-    "repairWriterProtocol": "explicit-node-v1"
-  },
-  "objective": "Demonstrate a reusable supervised implementation DAG: contract → parallel scouts → plan → write-set audit → verdict format repair → bounded plan revision → final write-set audit → verdict format repair → write-set gate → implement → soft verify → process supervisor → repair → hard verify → review verdict → review gate → decision gate → closeout. Write-set, process, and review verdict nodes emit first-line VERDICT for deterministic gates, reducing main-session intervention.",
-  "successCriteria": [
-    "contract-pi returns a read-only implementation contract with narrow write boundaries",
-    "scout-src and scout-tests run in parallel without write conflicts",
-    "plan-pi produces a writeSet coverage matrix with explicit exclusive owners",
-    "write-set-audit-pi validates coverage and returns VERDICT pass or request-revision",
-    "write-set-audit-format-repair-pi provides one read-only format recovery attempt without changing substantive findings",
-    "plan-revision-pi performs at most one read-only revision round and never expands task allowedPaths",
-    "final-write-set-audit-pi re-audits the effective plan after the bounded revision round",
-    "write-set-gate-shell blocks implement-pi unless the normalized final audit VERDICT is pass",
-    "implement-pi and repair-pi write only inside declared writeSet",
-    "soft-verify-shell archives focused test exit codes before process supervision",
-    "process-supervisor-pi returns first-line VERDICT pass or request-revision",
-    "process-gate-shell deterministically accepts valid supervisor verdicts",
-    "hard-verify-shell archives lint/typecheck/focused tests with active-DAG governance when check-repo runs",
-    "review-pi returns first-line VERDICT using review verdict prompt invariants",
-    "review-gate-shell blocks downstream nodes unless review VERDICT is pass",
-    "decision-pi returns DECISION_ENVELOPE_JSON without pausing runtime by default",
-    "closeout-pi summarizes evidence without writing files"
-  ],
-  "globalConstraints": [
-    "Replace every REPLACE/WITH/... placeholder with concrete repo paths before execution; do not leave template placeholders in production DAG JSON.",
-    "Do not commit from DAG nodes; main session inspects and commits after Decision Gate approval.",
-    "Use only existing executors: pi, shell, static. Cursor is available only through the explicit cursor-prompt sidecar, never as a DAG executor. Pi writer nodes must set toolProfile=write.",
-    "Read-only nodes must not write repository files, including root artifacts/**.",
-    "Exclusive writer nodes must stay within declared writeSet.",
-    "Do not implement automatic retry/resume or mutate historical completed facts.",
-    "Do not create executor: supervisor; supervisor is a role on executor=pi.",
-    "Do not create executor: human, executor: decision, or browser executor.",
-    "Shell governance inside active DAG must use HARNESS_ALLOW_ACTIVE_DAG_RUNS=1 bash scripts/check-repo.sh.",
-    "On Windows, Bash script commands must run through Git Bash or a configured compatible Bash; do not require WSL or POSIX filesystem paths.",
-    "Actual file operation paths must be macOS/Windows compatible; use / only for stable repo refs, JSON/Markdown evidence refs, and glob conventions.",
-    "Prompt templates must not ask main session to write artifacts; node output is the artifact and runner archives it under .harness/dag-runs/.",
-    "Every task must explicitly declare executor; defaults.executor is schema-only and not a runtime fallback.",
-    "Prefer same-rank parallel read-only scouts over serial chains when outputs are independent.",
-    "Same-rank exclusive writeSet entries must be disjoint.",
-    "Use executorModels for model routing; do not add defaults.model or legacy top-level models.",
-    "Write-set plan revision is bounded to one round; format repair remains read-only and cannot expand task allowedPaths or authorize writes."
-  ],
-  "defaults": {
-    "executor": "pi",
-    "contextProfile": "slim",
-    "skills": [
-      "ai-engineering-context"
-    ],
-    "writePolicy": "read-only"
-  },
-  "skillsByRole": {
-    "planner": [
-      "loop-agent"
-    ],
-    "scout": [
-      "ai-engineering-context"
-    ],
-    "implementer": [
-      "verification-before-completion"
-    ],
-    "reviewer": [
-      "requesting-code-review",
-      "verification-before-completion"
-    ],
-    "supervisor": [
-      "verification-before-completion",
-      "loop-agent"
-    ],
-    "verifier": [
-      "verification-before-completion",
-      "systematic-debugging"
-    ],
-    "closeout": [
-      "loop-agent",
-      "verification-before-completion"
-    ]
-  },
-  "executorModels": {
-    "pi": {
-      "LOW": "gpt-5.3-codex-spark",
-      "MED": "glm-5.2",
-      "HIGH": "gpt-5.5"
-    }
-  },
-  "verifyStrategy": {
-    "intermediateQuota": "1",
-    "finalQuota": "full",
-    "focusedCommandSource": "adapter"
-  },
-  "tasks": [
-    {
-      "id": "contract-pi",
-      "depends_on": [],
-      "complexity": "MED",
-      "executor": "pi",
-      "role": "planner",
-      "writePolicy": "read-only",
-      "allowedPaths": [
-        "**"
-      ],
-      "forbiddenPaths": [
-        ".harness/**",
-        "artifacts/**"
-      ],
-      "outputContract": "Plain Markdown implementation contract: scope, risks, parallel scout opportunities, verification expectations. No file writes.",
-      "subtask_prompt": "Read the DAG objective and success criteria. Return a concise implementation contract covering scope, narrow write boundaries, risks, and verification expectations. Do not edit files or write root artifacts/**."
-    },
-    {
-      "id": "scout-src",
-      "depends_on": [
-        "contract-pi"
-      ],
-      "complexity": "LOW",
-      "executor": "pi",
-      "role": "scout",
-      "writePolicy": "read-only",
-      "allowedPaths": [
-        "REPLACE/WITH/SOURCE/PATH/**"
-      ],
-      "forbiddenPaths": [
-        ".harness/**",
-        "artifacts/**"
-      ],
-      "outputContract": "Plain Markdown source reconnaissance summary; no file writes.",
-      "subtask_prompt": "Perform read-only source reconnaissance under allowedPaths. List relevant files, patterns, and risks. Do not edit files."
-    },
-    {
-      "id": "scout-tests",
-      "depends_on": [
-        "contract-pi"
-      ],
-      "complexity": "LOW",
-      "executor": "pi",
-      "role": "scout",
-      "writePolicy": "read-only",
-      "allowedPaths": [
-        "REPLACE/WITH/TEST/PATH/**"
-      ],
-      "forbiddenPaths": [
-        ".harness/**",
-        "artifacts/**"
-      ],
-      "outputContract": "Plain Markdown test coverage reconnaissance summary; no file writes.",
-      "subtask_prompt": "Perform read-only test reconnaissance under allowedPaths. List relevant tests, coverage gaps, and focused verification commands. Do not edit files."
-    },
-    {
-      "id": "plan-pi",
-      "depends_on": [
-        "scout-src",
-        "scout-tests"
-      ],
-      "complexity": "MED",
-      "executor": "pi",
-      "role": "planner",
-      "writePolicy": "read-only",
-      "allowedPaths": [
-        "**"
-      ],
-      "forbiddenPaths": [
-        ".harness/**",
-        "artifacts/**"
-      ],
-      "outputContract": "Plain Markdown plan with WriteSet Coverage Matrix (file → owning exclusive node id). No file writes.",
-      "subtask_prompt": "Synthesize upstream scouts into an implementation plan. Include a WriteSet Coverage Matrix table mapping each file that must change to exactly one future exclusive implementer/repair node id. Flag parallel work and verification commands. Do not edit files."
-    },
-    {
-      "id": "write-set-audit-pi",
-      "depends_on": [
-        "plan-pi"
-      ],
-      "complexity": "MED",
-      "executor": "pi",
-      "role": "reviewer",
-      "writePolicy": "read-only",
-      "allowedPaths": [
-        "**"
-      ],
-      "forbiddenPaths": [
-        ".harness/**",
-        "artifacts/**"
-      ],
-      "outputContract": "Plain Markdown whose first non-empty line is VERDICT: pass or VERDICT: request-revision; includes writeSet coverage findings. No file writes.",
-      "subtask_prompt": "Audit plan-pi WriteSet Coverage Matrix against the contract. First non-empty line must be exactly VERDICT: pass or VERDICT: request-revision. List Critical/Important gaps when any required file lacks a single exclusive owner or overlaps forbidden paths. Do not edit files or write root artifacts/**."
-    },
-    {
-      "id": "write-set-audit-format-repair-pi",
-      "depends_on": [
-        "write-set-audit-pi"
-      ],
-      "complexity": "LOW",
-      "executor": "pi",
-      "role": "reviewer",
-      "writePolicy": "read-only",
-      "allowedPaths": [
-        "**"
-      ],
-      "forbiddenPaths": [
-        ".harness/**",
-        "artifacts/**"
-      ],
-      "outputContract": "Plain Markdown whose first non-empty line is exactly VERDICT: pass or VERDICT: request-revision, followed by the original audit findings without substantive changes. No file writes.",
-      "subtask_prompt": "Normalize write-set-audit-pi output; this is the single read-only format-repair attempt for the initial audit. First non-empty line must be exactly VERDICT: pass or VERDICT: request-revision. Preserve an existing valid verdict exactly. If the verdict is missing or malformed but the audit states an unambiguous conclusion, add only the matching canonical verdict and preserve the findings. Do not add, remove, or reclassify substantive findings. If the conclusion is ambiguous, emit VERDICT: request-revision and report the format ambiguity. Do not infer a pass from general prose, expand task allowedPaths, or edit files."
-    },
-    {
-      "id": "write-set-format-gate-shell",
-      "depends_on": [
-        "write-set-audit-format-repair-pi"
-      ],
-      "complexity": "LOW",
-      "executor": "shell",
-      "role": "verifier",
-      "writePolicy": "read-only",
-      "allowedPaths": [
-        "**"
-      ],
-      "forbiddenPaths": [
-        ".harness/**",
-        "artifacts/**"
-      ],
-      "outputContract": "Deterministic initial write-set verdict format gate: accept pass or request-revision so the bounded plan-revision stage can run; reject missing or unexpected verdicts.",
-      "subtask_prompt": "Validate the normalized initial write-set audit verdict before the bounded plan-revision stage. This gate does not authorize implementation writes.",
-      "shell": {
-        "verdictGate": {
-          "fromNodeId": "write-set-audit-format-repair-pi",
-          "accept": [
-            "VERDICT: pass",
-            "VERDICT: request-revision"
-          ],
-          "label": "initial write-set audit format",
-          "lineMode": "first-verdict-line"
-        },
-        "cwd": ".",
-        "timeoutMs": 60000
-      }
-    },
-    {
-      "id": "plan-revision-pi",
-      "depends_on": [
-        "write-set-format-gate-shell",
-        "plan-pi",
-        "write-set-audit-format-repair-pi"
-      ],
-      "complexity": "MED",
-      "executor": "pi",
-      "role": "planner",
-      "writePolicy": "read-only",
-      "allowedPaths": [
-        "**"
-      ],
-      "forbiddenPaths": [
-        ".harness/**",
-        "artifacts/**"
-      ],
-      "outputContract": "PASS_NO_REVISION_NEEDED when the normalized initial audit passed, otherwise a complete revised implementation plan with a corrected WriteSet Coverage Matrix. No file writes.",
-      "subtask_prompt": "Perform the single bounded plan-revision round. If the normalized verdict is VERDICT: pass, output PASS_NO_REVISION_NEEDED and do not change the original plan. If it is VERDICT: request-revision, return a complete revised plan that resolves every finding and includes a corrected WriteSet Coverage Matrix. Do not expand task allowedPaths, weaken forbiddenPaths, or edit files."
-    },
-    {
-      "id": "final-write-set-audit-pi",
-      "depends_on": [
-        "plan-pi",
-        "plan-revision-pi",
-        "write-set-audit-format-repair-pi"
-      ],
-      "complexity": "MED",
-      "executor": "pi",
-      "role": "reviewer",
-      "writePolicy": "read-only",
-      "allowedPaths": [
-        "**"
-      ],
-      "forbiddenPaths": [
-        ".harness/**",
-        "artifacts/**"
-      ],
-      "outputContract": "Plain Markdown whose first non-empty line is VERDICT: pass or VERDICT: request-revision; includes final writeSet coverage findings after the single plan-revision round. No file writes.",
-      "subtask_prompt": "Perform the final write-set audit after the single bounded plan-revision round. When plan-revision-pi returned PASS_NO_REVISION_NEEDED, audit the original plan-pi output; otherwise audit the complete revised plan. First non-empty line must be exactly VERDICT: pass or VERDICT: request-revision. Request revision if any required file still lacks one exclusive owner, writeSet is broad or placeholder, forbidden paths overlap, or an initial finding remains unresolved. Do not expand task allowedPaths or edit files."
-    },
-    {
-      "id": "final-write-set-audit-format-repair-pi",
-      "depends_on": [
-        "final-write-set-audit-pi"
-      ],
-      "complexity": "LOW",
-      "executor": "pi",
-      "role": "reviewer",
-      "writePolicy": "read-only",
-      "allowedPaths": [
-        "**"
-      ],
-      "forbiddenPaths": [
-        ".harness/**",
-        "artifacts/**"
-      ],
-      "outputContract": "Plain Markdown whose first non-empty line is exactly VERDICT: pass or VERDICT: request-revision, followed by the original final-audit findings without substantive changes. No file writes.",
-      "subtask_prompt": "Normalize final-write-set-audit-pi output; this is the single read-only format-repair attempt for the final audit. Preserve an existing valid verdict exactly. If the verdict is missing or malformed but the audit states an unambiguous conclusion, add only the matching canonical verdict and preserve the findings. Do not add, remove, or reclassify substantive findings. If the conclusion is ambiguous, emit VERDICT: request-revision. Do not infer a pass from general prose, expand task allowedPaths, or edit files."
-    },
-    {
-      "id": "write-set-gate-shell",
-      "depends_on": [
-        "final-write-set-audit-format-repair-pi"
-      ],
-      "complexity": "LOW",
-      "executor": "shell",
-      "role": "verifier",
-      "writePolicy": "read-only",
-      "allowedPaths": [
-        "**"
-      ],
-      "forbiddenPaths": [
-        ".harness/**",
-        "artifacts/**"
-      ],
-      "outputContract": "Deterministic final write-set audit verdict gate: exit 0 only when final-write-set-audit-format-repair-pi emits VERDICT: pass after the bounded revision round.",
-      "subtask_prompt": "Deterministic gate: block implement-pi unless the normalized final write-set audit emitted VERDICT: pass.",
-      "shell": {
-        "verdictGate": {
-          "fromNodeId": "final-write-set-audit-format-repair-pi",
-          "accept": [
-            "VERDICT: pass"
-          ],
-          "label": "write-set audit",
-          "lineMode": "first-verdict-line"
-        },
-        "cwd": ".",
-        "timeoutMs": 60000
-      }
-    },
-    {
-      "id": "implement-pi",
-      "depends_on": [
-        "write-set-gate-shell",
-        "plan-pi",
-        "plan-revision-pi",
-        "final-write-set-audit-format-repair-pi"
-      ],
-      "complexity": "HIGH",
-      "executor": "pi",
-      "role": "implementer",
-      "writePolicy": "exclusive",
-      "writeSet": [
-        "REPLACE/WITH/IMPLEMENT/WRITESET/**"
-      ],
-      "allowedPaths": [
-        "REPLACE/WITH/IMPLEMENT/**"
-      ],
-      "forbiddenPaths": [
-        ".harness/**",
-        "artifacts/**"
-      ],
-      "outputContract": "Implementation summary with changed files, focused tests run, and risks. Must not ask main session to write artifacts.",
-      "subtask_prompt": "Implement the approved change within writeSet only after write-set-gate-shell passed (upstream VERDICT: pass). If write-set gate blocked, output blocked reason without editing files. Keep changes minimal and run focused tests inside allowedPaths when implementing.",
-      "toolProfile": "write"
-    },
-    {
-      "id": "soft-verify-shell",
-      "depends_on": [
-        "implement-pi"
-      ],
-      "complexity": "LOW",
-      "executor": "shell",
-      "role": "verifier",
-      "writePolicy": "read-only",
-      "allowedPaths": [
-        "REPLACE/WITH/IMPLEMENT/**",
-        "./**"
-      ],
-      "forbiddenPaths": [
-        ".harness/**",
-        "artifacts/**"
-      ],
-      "outputContract": "Archived shell stdout/stderr with exit codes for focused verification; no worktree writes.",
-      "subtask_prompt": "Run focused soft verification before process supervision.",
-      "shell": {
-        "commands": [
-          "npx vitest run REPLACE/WITH/FOCUSED/TEST/GLOB.test.ts --reporter=dot"
-        ],
-        "verifyEvidence": {
-          "phase": "intermediate",
-          "quota": "1",
-          "commandSource": "inline",
-          "commandCount": 1,
-          "commandLabels": [
-            "focused template verification"
-          ]
-        },
-        "cwd": ".",
-        "timeoutMs": 300000
-      }
-    },
-    {
-      "id": "process-supervisor-pi",
-      "depends_on": [
-        "soft-verify-shell",
-        "implement-pi"
-      ],
-      "complexity": "HIGH",
-      "executor": "pi",
-      "role": "supervisor",
-      "writePolicy": "read-only",
-      "allowedPaths": [
-        "**"
-      ],
-      "forbiddenPaths": [
-        ".harness/**",
-        "artifacts/**"
-      ],
-      "outputContract": "Plain Markdown whose first non-empty line is VERDICT: pass or VERDICT: request-revision, followed by a REPAIR_ARTIFACT_JSON fenced block. Audit writeSet coverage, boundary drift, verification gaps, repair scope. No file writes.",
-      "subtask_prompt_markdown": "./agent-dag-process-supervisor.prompt.md"
-    },
-    {
-      "id": "process-gate-shell",
-      "depends_on": [
-        "process-supervisor-pi"
-      ],
-      "complexity": "LOW",
-      "executor": "shell",
-      "role": "verifier",
-      "writePolicy": "read-only",
-      "allowedPaths": [
-        "**"
-      ],
-      "forbiddenPaths": [
-        ".harness/**",
-        "artifacts/**"
-      ],
-      "outputContract": "Deterministic process supervisor verdict gate: exit 0 when first non-empty assistant output line is pass or request-revision; exit non-zero otherwise.",
-      "subtask_prompt": "Deterministic gate: validate process-supervisor-pi first-line VERDICT before repair/hard-verify.",
-      "shell": {
-        "verdictGate": {
-          "fromNodeId": "process-supervisor-pi",
-          "accept": [
-            "VERDICT: pass",
-            "VERDICT: request-revision"
-          ],
-          "label": "process",
-          "lineMode": "first-verdict-line"
-        },
-        "repairArtifactGate": {
-          "fromNodeId": "process-supervisor-pi",
-          "repairNodeId": "repair-pi"
-        },
-        "cwd": ".",
-        "timeoutMs": 60000
-      }
-    },
-    {
-      "id": "repair-pi",
-      "depends_on": [
-        "process-gate-shell",
-        "process-supervisor-pi"
-      ],
-      "complexity": "HIGH",
-      "executor": "pi",
-      "role": "implementer",
-      "writePolicy": "exclusive",
-      "writeSet": [
-        "REPLACE/WITH/REPAIR/WRITESET/**",
-        "docs/templates/agent-dag.supervised-implementation.json",
-        "docs/templates/agent-dag-process-supervisor.prompt.md",
-        "docs/templates/agent-dag-review-verdict.prompt.md",
-        "docs/templates/agent-dag.schema.json",
-        "./src/workflows/dag/types.ts",
-        "./src/workflows/dag/skills.ts",
-        "./src/executors/dag-pi-executor.ts"
-      ],
-      "allowedPaths": [
-        "REPLACE/WITH/REPAIR/**",
-        "docs/templates/**",
-        "./src/workflows/dag/**",
-        "./src/executors/**"
-      ],
-      "forbiddenPaths": [
-        ".harness/**",
-        "artifacts/**"
-      ],
-      "outputContract": "Repair summary or explicit no-op when process supervisor passed; changed files and tests when revised. Must not ask main session to write artifacts.",
-      "subtask_prompt": "If process-supervisor-pi returned VERDICT: request-revision, apply bounded fixes within writeSet addressing REPAIR_ARTIFACT_JSON.fixScope and preserving REPAIR_ARTIFACT_JSON.invariant. Use REPAIR_ARTIFACT_JSON.failureClass and rootCause before raw logs; raw log is fallback evidence only when rawLogFallbackAllowed is true. If VERDICT: pass, return no-op with evidence. Re-run focused tests when you change code.",
-      "toolProfile": "write"
-    },
-    {
-      "id": "hard-verify-shell",
-      "depends_on": [
-        "repair-pi"
-      ],
-      "complexity": "LOW",
-      "executor": "shell",
-      "role": "verifier",
-      "writePolicy": "read-only",
-      "allowedPaths": [
-        "./**",
-        "docs/**",
-        "scripts/**"
-      ],
-      "forbiddenPaths": [
-        ".harness/**",
-        "artifacts/**"
-      ],
-      "outputContract": "Archived hard verification stdout/stderr with exit codes; no worktree writes.",
-      "subtask_prompt": "Run hard verification after repair round.",
-      "shell": {
-        "preset": "loop-agent-standard-verify",
-        "commands": [
-          "HARNESS_ALLOW_ACTIVE_DAG_RUNS=1 bash scripts/check-repo.sh"
-        ],
-        "verifyEvidence": {
-          "phase": "final",
-          "quota": "full",
-          "commandSource": "inline",
-          "commandCount": 1,
-          "commandLabels": [
-            "active DAG repo governance checks"
-          ],
-          "finalFullRequired": true
-        },
-        "cwd": ".",
-        "timeoutMs": 300000
-      }
-    },
-    {
-      "id": "review-pi",
-      "depends_on": [
-        "hard-verify-shell"
-      ],
-      "complexity": "HIGH",
-      "executor": "pi",
-      "role": "reviewer",
-      "writePolicy": "read-only",
-      "allowedPaths": [
-        "**"
-      ],
-      "forbiddenPaths": [
-        ".harness/**",
-        "artifacts/**"
-      ],
-      "outputContract": "Plain Markdown whose first non-empty line is VERDICT: pass or VERDICT: request-revision; Critical/Important findings force request-revision. No file writes.",
-      "subtask_prompt_markdown": "./agent-dag-review-verdict.prompt.md"
-    },
-    {
-      "id": "review-gate-shell",
-      "depends_on": [
-        "review-pi"
-      ],
-      "complexity": "LOW",
-      "executor": "shell",
-      "role": "verifier",
-      "writePolicy": "read-only",
-      "allowedPaths": [
-        "**"
-      ],
-      "forbiddenPaths": [
-        ".harness/**",
-        "artifacts/**"
-      ],
-      "outputContract": "Deterministic review verdict gate: exit 0 only when review-pi first non-empty assistant output line is pass.",
-      "subtask_prompt": "Deterministic gate: block decision gate unless review-pi emitted VERDICT: pass.",
-      "shell": {
-        "verdictGate": {
-          "fromNodeId": "review-pi",
-          "accept": [
-            "VERDICT: pass"
-          ],
-          "label": "review",
-          "lineMode": "first-verdict-line"
-        },
-        "cwd": ".",
-        "timeoutMs": 60000
-      }
-    },
-    {
-      "id": "decision-pi",
-      "depends_on": [
-        "review-gate-shell",
-        "hard-verify-shell"
-      ],
-      "complexity": "HIGH",
-      "executor": "pi",
-      "role": "reviewer",
-      "writePolicy": "read-only",
-      "allowedPaths": [
-        "**"
-      ],
-      "forbiddenPaths": [
-        ".harness/**",
-        "artifacts/**"
-      ],
-      "outputContract": "Markdown with exactly one DECISION_ENVELOPE_JSON fenced block plus evidence summary. No file writes.",
-      "subtask_prompt_markdown": "./agent-dag-decision-gate.prompt.md",
-      "decisionGate": {
-        "enabled": true,
-        "schemaVersion": 1,
-        "mode": "record-only"
-      }
-    },
-    {
-      "id": "closeout-pi",
-      "depends_on": [
-        "decision-pi"
-      ],
-      "complexity": "MED",
-      "executor": "pi",
-      "role": "closeout",
-      "writePolicy": "read-only",
-      "allowedPaths": [
-        "**"
-      ],
-      "forbiddenPaths": [
-        ".harness/**",
-        "artifacts/**"
-      ],
-      "outputContract": "Plain Markdown closeout referencing verification, supervisor/review verdicts, and decision envelope. No file writes.",
-      "subtask_prompt": "Summarize the supervised DAG outcome: contract, write-set audit, implement/repair, soft/hard verify, process supervisor and review verdicts, decision-pi envelope, and recommended main-session next step. Do not edit files or write root artifacts/**."
-    }
-  ]
-}
+{
+  "$schema": "./agent-dag.schema.json",
+  "version": 3,
+  "title": "Agent DAG supervised implementation template",
+  "runtimeContract": {
+    "schemaVersion": 1,
+    "agentRuntime": "pi-only",
+    "repairWriterProtocol": "explicit-node-v1"
+  },
+  "objective": "Demonstrate a reusable supervised implementation DAG: contract → parallel scouts → plan → write-set audit → verdict format repair → bounded plan revision → final write-set audit → verdict format repair → write-set gate → implement → soft verify → process supervisor → repair → hard verify → review verdict → review gate → decision gate → closeout. Write-set, process, and review verdict nodes emit first-line VERDICT for deterministic gates, reducing main-session intervention.",
+  "successCriteria": [
+    "contract-pi returns a read-only implementation contract with narrow write boundaries",
+    "scout-src and scout-tests run in parallel without write conflicts",
+    "plan-pi produces a writeSet coverage matrix with explicit exclusive owners",
+    "write-set-audit-pi validates coverage and returns VERDICT pass or request-revision",
+    "write-set-audit-format-repair-pi provides one read-only format recovery attempt without changing substantive findings",
+    "plan-revision-pi performs at most one read-only revision round and never expands task allowedPaths",
+    "final-write-set-audit-pi re-audits the effective plan after the bounded revision round",
+    "write-set-gate-shell blocks implement-pi unless the normalized final audit VERDICT is pass",
+    "implement-pi and repair-pi write only inside declared writeSet",
+    "soft-verify-shell archives focused test exit codes before process supervision",
+    "process-supervisor-pi returns first-line VERDICT pass or request-revision",
+    "process-gate-shell deterministically accepts valid supervisor verdicts",
+    "hard-verify-shell archives lint/typecheck/focused tests with active-DAG governance when check-repo runs",
+    "review-pi returns first-line VERDICT using review verdict prompt invariants",
+    "review-gate-shell blocks downstream nodes unless review VERDICT is pass",
+    "decision-pi returns DECISION_ENVELOPE_JSON without pausing runtime by default",
+    "closeout-pi summarizes evidence without writing files"
+  ],
+  "globalConstraints": [
+    "Replace every REPLACE/WITH/... placeholder with concrete repo paths before execution; do not leave template placeholders in production DAG JSON.",
+    "Do not commit from DAG nodes; main session inspects and commits after Decision Gate approval.",
+    "Use only existing executors: pi, shell, static. Cursor is available only through the explicit cursor-prompt sidecar, never as a DAG executor. Pi writer nodes must set toolProfile=write.",
+    "Read-only nodes must not write repository files, including root artifacts/**.",
+    "Exclusive writer nodes must stay within declared writeSet.",
+    "Do not implement automatic retry/resume or mutate historical completed facts.",
+    "Do not create executor: supervisor; supervisor is a role on executor=pi.",
+    "Do not create executor: human, executor: decision, or browser executor.",
+    "Shell governance inside active DAG must use HARNESS_ALLOW_ACTIVE_DAG_RUNS=1 bash scripts/check-repo.sh.",
+    "On Windows, Bash script commands must run through Git Bash or a configured compatible Bash; do not require WSL or POSIX filesystem paths.",
+    "Actual file operation paths must be macOS/Windows compatible; use / only for stable repo refs, JSON/Markdown evidence refs, and glob conventions.",
+    "Prompt templates must not ask main session to write artifacts; node output is the artifact and runner archives it under .harness/dag-runs/.",
+    "Every task must explicitly declare executor; defaults.executor is schema-only and not a runtime fallback.",
+    "Prefer same-rank parallel read-only scouts over serial chains when outputs are independent.",
+    "Same-rank exclusive writeSet entries must be disjoint.",
+    "Use executorModels for model routing; do not add defaults.model or legacy top-level models.",
+    "Write-set plan revision is bounded to one round; format repair remains read-only and cannot expand task allowedPaths or authorize writes."
+  ],
+  "defaults": {
+    "executor": "pi",
+    "contextProfile": "slim",
+    "skills": [
+      "ai-engineering-context"
+    ],
+    "writePolicy": "read-only"
+  },
+  "skillsByRole": {
+    "planner": [
+      "loop-agent"
+    ],
+    "scout": [
+      "ai-engineering-context"
+    ],
+    "implementer": [
+      "verification-before-completion"
+    ],
+    "reviewer": [
+      "requesting-code-review",
+      "verification-before-completion"
+    ],
+    "supervisor": [
+      "verification-before-completion",
+      "loop-agent"
+    ],
+    "verifier": [
+      "verification-before-completion",
+      "systematic-debugging"
+    ],
+    "closeout": [
+      "loop-agent",
+      "verification-before-completion"
+    ]
+  },
+  "executorModels": {
+    "pi": {
+      "LOW": "gpt-5.3-codex-spark",
+      "MED": "glm-5.2",
+      "HIGH": "gpt-5.5"
+    }
+  },
+  "verifyStrategy": {
+    "intermediateQuota": "1",
+    "finalQuota": "full",
+    "focusedCommandSource": "adapter"
+  },
+  "tasks": [
+    {
+      "id": "contract-pi",
+      "depends_on": [],
+      "complexity": "MED",
+      "executor": "pi",
+      "role": "planner",
+      "writePolicy": "read-only",
+      "allowedPaths": [
+        "**"
+      ],
+      "forbiddenPaths": [
+        ".harness/**",
+        "artifacts/**"
+      ],
+      "outputContract": "Plain Markdown implementation contract: scope, risks, parallel scout opportunities, verification expectations. No file writes.",
+      "subtask_prompt": "Read the DAG objective and success criteria. Return a concise implementation contract covering scope, narrow write boundaries, risks, and verification expectations. Do not edit files or write root artifacts/**."
+    },
+    {
+      "id": "scout-src",
+      "depends_on": [
+        "contract-pi"
+      ],
+      "complexity": "LOW",
+      "executor": "pi",
+      "role": "scout",
+      "writePolicy": "read-only",
+      "allowedPaths": [
+        "REPLACE/WITH/SOURCE/PATH/**"
+      ],
+      "forbiddenPaths": [
+        ".harness/**",
+        "artifacts/**"
+      ],
+      "outputContract": "Plain Markdown source reconnaissance summary; no file writes.",
+      "subtask_prompt": "Perform read-only source reconnaissance under allowedPaths. List relevant files, patterns, and risks. Do not edit files."
+    },
+    {
+      "id": "scout-tests",
+      "depends_on": [
+        "contract-pi"
+      ],
+      "complexity": "LOW",
+      "executor": "pi",
+      "role": "scout",
+      "writePolicy": "read-only",
+      "allowedPaths": [
+        "REPLACE/WITH/TEST/PATH/**"
+      ],
+      "forbiddenPaths": [
+        ".harness/**",
+        "artifacts/**"
+      ],
+      "outputContract": "Plain Markdown test coverage reconnaissance summary; no file writes.",
+      "subtask_prompt": "Perform read-only test reconnaissance under allowedPaths. List relevant tests, coverage gaps, and focused verification commands. Do not edit files."
+    },
+    {
+      "id": "plan-pi",
+      "depends_on": [
+        "scout-src",
+        "scout-tests"
+      ],
+      "complexity": "MED",
+      "executor": "pi",
+      "role": "planner",
+      "writePolicy": "read-only",
+      "allowedPaths": [
+        "**"
+      ],
+      "forbiddenPaths": [
+        ".harness/**",
+        "artifacts/**"
+      ],
+      "outputContract": "Plain Markdown plan with WriteSet Coverage Matrix (file → owning exclusive node id). No file writes.",
+      "subtask_prompt": "Synthesize upstream scouts into an implementation plan. Include a WriteSet Coverage Matrix table mapping each file that must change to exactly one future exclusive implementer/repair node id. Flag parallel work and verification commands. Do not edit files."
+    },
+    {
+      "id": "write-set-audit-pi",
+      "depends_on": [
+        "plan-pi"
+      ],
+      "complexity": "MED",
+      "executor": "pi",
+      "role": "reviewer",
+      "writePolicy": "read-only",
+      "allowedPaths": [
+        "**"
+      ],
+      "forbiddenPaths": [
+        ".harness/**",
+        "artifacts/**"
+      ],
+      "outputContract": "Plain Markdown whose first non-empty line is VERDICT: pass or VERDICT: request-revision; includes writeSet coverage findings. No file writes.",
+      "subtask_prompt": "Audit plan-pi WriteSet Coverage Matrix against the contract. First non-empty line must be exactly VERDICT: pass or VERDICT: request-revision. List Critical/Important gaps when any required file lacks a single exclusive owner or overlaps forbidden paths. Do not edit files or write root artifacts/**."
+    },
+    {
+      "id": "write-set-audit-format-repair-pi",
+      "depends_on": [
+        "write-set-audit-pi"
+      ],
+      "complexity": "LOW",
+      "executor": "pi",
+      "role": "reviewer",
+      "writePolicy": "read-only",
+      "allowedPaths": [
+        "**"
+      ],
+      "forbiddenPaths": [
+        ".harness/**",
+        "artifacts/**"
+      ],
+      "outputContract": "Plain Markdown whose first non-empty line is exactly VERDICT: pass or VERDICT: request-revision, followed by the original audit findings without substantive changes. No file writes.",
+      "subtask_prompt": "Normalize write-set-audit-pi output; this is the single read-only format-repair attempt for the initial audit. First non-empty line must be exactly VERDICT: pass or VERDICT: request-revision. Preserve an existing valid verdict exactly. If the verdict is missing or malformed but the audit states an unambiguous conclusion, add only the matching canonical verdict and preserve the findings. Do not add, remove, or reclassify substantive findings. If the conclusion is ambiguous, emit VERDICT: request-revision and report the format ambiguity. Do not infer a pass from general prose, expand task allowedPaths, or edit files."
+    },
+    {
+      "id": "write-set-format-gate-shell",
+      "depends_on": [
+        "write-set-audit-format-repair-pi"
+      ],
+      "complexity": "LOW",
+      "executor": "shell",
+      "role": "verifier",
+      "writePolicy": "read-only",
+      "allowedPaths": [
+        "**"
+      ],
+      "forbiddenPaths": [
+        ".harness/**",
+        "artifacts/**"
+      ],
+      "outputContract": "Deterministic initial write-set verdict format gate: accept pass or request-revision so the bounded plan-revision stage can run; reject missing or unexpected verdicts.",
+      "subtask_prompt": "Validate the normalized initial write-set audit verdict before the bounded plan-revision stage. This gate does not authorize implementation writes.",
+      "shell": {
+        "verdictGate": {
+          "fromNodeId": "write-set-audit-format-repair-pi",
+          "accept": [
+            "VERDICT: pass",
+            "VERDICT: request-revision"
+          ],
+          "label": "initial write-set audit format",
+          "lineMode": "first-verdict-line"
+        },
+        "cwd": ".",
+        "timeoutMs": 60000
+      }
+    },
+    {
+      "id": "plan-revision-pi",
+      "depends_on": [
+        "write-set-format-gate-shell",
+        "plan-pi",
+        "write-set-audit-format-repair-pi"
+      ],
+      "complexity": "MED",
+      "executor": "pi",
+      "role": "planner",
+      "writePolicy": "read-only",
+      "allowedPaths": [
+        "**"
+      ],
+      "forbiddenPaths": [
+        ".harness/**",
+        "artifacts/**"
+      ],
+      "outputContract": "PASS_NO_REVISION_NEEDED when the normalized initial audit passed, otherwise a complete revised implementation plan with a corrected WriteSet Coverage Matrix. No file writes.",
+      "subtask_prompt": "Perform the single bounded plan-revision round. If the normalized verdict is VERDICT: pass, output PASS_NO_REVISION_NEEDED and do not change the original plan. If it is VERDICT: request-revision, return a complete revised plan that resolves every finding and includes a corrected WriteSet Coverage Matrix. Do not expand task allowedPaths, weaken forbiddenPaths, or edit files."
+    },
+    {
+      "id": "final-write-set-audit-pi",
+      "depends_on": [
+        "plan-pi",
+        "plan-revision-pi",
+        "write-set-audit-format-repair-pi"
+      ],
+      "complexity": "MED",
+      "executor": "pi",
+      "role": "reviewer",
+      "writePolicy": "read-only",
+      "allowedPaths": [
+        "**"
+      ],
+      "forbiddenPaths": [
+        ".harness/**",
+        "artifacts/**"
+      ],
+      "outputContract": "Plain Markdown whose first non-empty line is VERDICT: pass or VERDICT: request-revision; includes final writeSet coverage findings after the single plan-revision round. No file writes.",
+      "subtask_prompt": "Perform the final write-set audit after the single bounded plan-revision round. When plan-revision-pi returned PASS_NO_REVISION_NEEDED, audit the original plan-pi output; otherwise audit the complete revised plan. First non-empty line must be exactly VERDICT: pass or VERDICT: request-revision. Request revision if any required file still lacks one exclusive owner, writeSet is broad or placeholder, forbidden paths overlap, or an initial finding remains unresolved. Do not expand task allowedPaths or edit files."
+    },
+    {
+      "id": "final-write-set-audit-format-repair-pi",
+      "depends_on": [
+        "final-write-set-audit-pi"
+      ],
+      "complexity": "LOW",
+      "executor": "pi",
+      "role": "reviewer",
+      "writePolicy": "read-only",
+      "allowedPaths": [
+        "**"
+      ],
+      "forbiddenPaths": [
+        ".harness/**",
+        "artifacts/**"
+      ],
+      "outputContract": "Plain Markdown whose first non-empty line is exactly VERDICT: pass or VERDICT: request-revision, followed by the original final-audit findings without substantive changes. No file writes.",
+      "subtask_prompt": "Normalize final-write-set-audit-pi output; this is the single read-only format-repair attempt for the final audit. Preserve an existing valid verdict exactly. If the verdict is missing or malformed but the audit states an unambiguous conclusion, add only the matching canonical verdict and preserve the findings. Do not add, remove, or reclassify substantive findings. If the conclusion is ambiguous, emit VERDICT: request-revision. Do not infer a pass from general prose, expand task allowedPaths, or edit files."
+    },
+    {
+      "id": "write-set-gate-shell",
+      "depends_on": [
+        "final-write-set-audit-format-repair-pi"
+      ],
+      "complexity": "LOW",
+      "executor": "shell",
+      "role": "verifier",
+      "writePolicy": "read-only",
+      "allowedPaths": [
+        "**"
+      ],
+      "forbiddenPaths": [
+        ".harness/**",
+        "artifacts/**"
+      ],
+      "outputContract": "Deterministic final write-set audit verdict gate: exit 0 only when final-write-set-audit-format-repair-pi emits VERDICT: pass after the bounded revision round.",
+      "subtask_prompt": "Deterministic gate: block implement-pi unless the normalized final write-set audit emitted VERDICT: pass.",
+      "shell": {
+        "verdictGate": {
+          "fromNodeId": "final-write-set-audit-format-repair-pi",
+          "accept": [
+            "VERDICT: pass"
+          ],
+          "label": "write-set audit",
+          "lineMode": "first-verdict-line"
+        },
+        "cwd": ".",
+        "timeoutMs": 60000
+      }
+    },
+    {
+      "id": "implement-pi",
+      "depends_on": [
+        "write-set-gate-shell",
+        "plan-pi",
+        "plan-revision-pi",
+        "final-write-set-audit-format-repair-pi"
+      ],
+      "complexity": "HIGH",
+      "executor": "pi",
+      "role": "implementer",
+      "writePolicy": "exclusive",
+      "writeSet": [
+        "REPLACE/WITH/IMPLEMENT/WRITESET/**"
+      ],
+      "allowedPaths": [
+        "REPLACE/WITH/IMPLEMENT/**"
+      ],
+      "forbiddenPaths": [
+        ".harness/**",
+        "artifacts/**"
+      ],
+      "outputContract": "Implementation summary with changed files, focused tests run, and risks. Must not ask main session to write artifacts.",
+      "subtask_prompt": "Implement the approved change within writeSet only after write-set-gate-shell passed (upstream VERDICT: pass). If write-set gate blocked, output blocked reason without editing files. Keep changes minimal and run focused tests inside allowedPaths when implementing.",
+      "toolProfile": "write"
+    },
+    {
+      "id": "soft-verify-shell",
+      "depends_on": [
+        "implement-pi"
+      ],
+      "complexity": "LOW",
+      "executor": "shell",
+      "role": "verifier",
+      "writePolicy": "read-only",
+      "allowedPaths": [
+        "REPLACE/WITH/IMPLEMENT/**",
+        "./**"
+      ],
+      "forbiddenPaths": [
+        ".harness/**",
+        "artifacts/**"
+      ],
+      "outputContract": "Archived shell stdout/stderr with exit codes for focused verification; no worktree writes.",
+      "subtask_prompt": "Run focused soft verification before process supervision.",
+      "shell": {
+        "commands": [
+          "npx vitest run REPLACE/WITH/FOCUSED/TEST/GLOB.test.ts --reporter=dot"
+        ],
+        "verifyEvidence": {
+          "phase": "intermediate",
+          "quota": "1",
+          "commandSource": "inline",
+          "commandCount": 1,
+          "commandLabels": [
+            "focused template verification"
+          ]
+        },
+        "cwd": ".",
+        "timeoutMs": 300000
+      }
+    },
+    {
+      "id": "process-supervisor-pi",
+      "depends_on": [
+        "soft-verify-shell",
+        "implement-pi"
+      ],
+      "complexity": "HIGH",
+      "executor": "pi",
+      "role": "supervisor",
+      "writePolicy": "read-only",
+      "allowedPaths": [
+        "**"
+      ],
+      "forbiddenPaths": [
+        ".harness/**",
+        "artifacts/**"
+      ],
+      "outputContract": "Plain Markdown whose first non-empty line is VERDICT: pass or VERDICT: request-revision, followed by a REPAIR_ARTIFACT_JSON fenced block. Audit writeSet coverage, boundary drift, verification gaps, repair scope. No file writes.",
+      "subtask_prompt_markdown": "./agent-dag-process-supervisor.prompt.md"
+    },
+    {
+      "id": "process-gate-shell",
+      "depends_on": [
+        "process-supervisor-pi"
+      ],
+      "complexity": "LOW",
+      "executor": "shell",
+      "role": "verifier",
+      "writePolicy": "read-only",
+      "allowedPaths": [
+        "**"
+      ],
+      "forbiddenPaths": [
+        ".harness/**",
+        "artifacts/**"
+      ],
+      "outputContract": "Deterministic process supervisor verdict gate: exit 0 when first non-empty assistant output line is pass or request-revision; exit non-zero otherwise.",
+      "subtask_prompt": "Deterministic gate: validate process-supervisor-pi first-line VERDICT before repair/hard-verify.",
+      "shell": {
+        "verdictGate": {
+          "fromNodeId": "process-supervisor-pi",
+          "accept": [
+            "VERDICT: pass",
+            "VERDICT: request-revision"
+          ],
+          "label": "process",
+          "lineMode": "first-verdict-line"
+        },
+        "repairArtifactGate": {
+          "fromNodeId": "process-supervisor-pi",
+          "repairNodeId": "repair-pi"
+        },
+        "cwd": ".",
+        "timeoutMs": 60000
+      }
+    },
+    {
+      "id": "repair-pi",
+      "depends_on": [
+        "process-gate-shell",
+        "process-supervisor-pi"
+      ],
+      "complexity": "HIGH",
+      "executor": "pi",
+      "role": "implementer",
+      "writePolicy": "exclusive",
+      "writeSet": [
+        "REPLACE/WITH/REPAIR/WRITESET/**",
+        "docs/templates/agent-dag.supervised-implementation.json",
+        "docs/templates/agent-dag-process-supervisor.prompt.md",
+        "docs/templates/agent-dag-review-verdict.prompt.md",
+        "docs/templates/agent-dag.schema.json",
+        "./src/workflows/dag/types.ts",
+        "./src/workflows/dag/skills.ts",
+        "./src/executors/dag-pi-executor.ts"
+      ],
+      "allowedPaths": [
+        "REPLACE/WITH/REPAIR/**",
+        "docs/templates/**",
+        "./src/workflows/dag/**",
+        "./src/executors/**"
+      ],
+      "forbiddenPaths": [
+        ".harness/**",
+        "artifacts/**"
+      ],
+      "outputContract": "Repair summary or explicit no-op when process supervisor passed; changed files and tests when revised. Must not ask main session to write artifacts.",
+      "subtask_prompt": "If process-supervisor-pi returned VERDICT: request-revision, apply bounded fixes within writeSet addressing REPAIR_ARTIFACT_JSON.fixScope and preserving REPAIR_ARTIFACT_JSON.invariant. Use REPAIR_ARTIFACT_JSON.failureClass and rootCause before raw logs; raw log is fallback evidence only when rawLogFallbackAllowed is true. If VERDICT: pass, return no-op with evidence. Re-run focused tests when you change code.",
+      "toolProfile": "write"
+    },
+    {
+      "id": "hard-verify-shell",
+      "depends_on": [
+        "repair-pi"
+      ],
+      "complexity": "LOW",
+      "executor": "shell",
+      "role": "verifier",
+      "writePolicy": "read-only",
+      "allowedPaths": [
+        "./**",
+        "docs/**",
+        "scripts/**"
+      ],
+      "forbiddenPaths": [
+        ".harness/**",
+        "artifacts/**"
+      ],
+      "outputContract": "Archived hard verification stdout/stderr with exit codes; no worktree writes.",
+      "subtask_prompt": "Run hard verification after repair round.",
+      "shell": {
+        "preset": "loop-agent-standard-verify",
+        "commands": [
+          "HARNESS_ALLOW_ACTIVE_DAG_RUNS=1 bash scripts/check-repo.sh"
+        ],
+        "verifyEvidence": {
+          "phase": "final",
+          "quota": "full",
+          "commandSource": "inline",
+          "commandCount": 1,
+          "commandLabels": [
+            "active DAG repo governance checks"
+          ],
+          "finalFullRequired": true
+        },
+        "cwd": ".",
+        "timeoutMs": 300000
+      }
+    },
+    {
+      "id": "review-pi",
+      "depends_on": [
+        "hard-verify-shell"
+      ],
+      "complexity": "HIGH",
+      "executor": "pi",
+      "role": "reviewer",
+      "writePolicy": "read-only",
+      "allowedPaths": [
+        "**"
+      ],
+      "forbiddenPaths": [
+        ".harness/**",
+        "artifacts/**"
+      ],
+      "outputContract": "Plain Markdown whose first non-empty line is VERDICT: pass or VERDICT: request-revision; Critical/Important findings force request-revision. No file writes.",
+      "subtask_prompt_markdown": "./agent-dag-review-verdict.prompt.md"
+    },
+    {
+      "id": "review-gate-shell",
+      "depends_on": [
+        "review-pi"
+      ],
+      "complexity": "LOW",
+      "executor": "shell",
+      "role": "verifier",
+      "writePolicy": "read-only",
+      "allowedPaths": [
+        "**"
+      ],
+      "forbiddenPaths": [
+        ".harness/**",
+        "artifacts/**"
+      ],
+      "outputContract": "Deterministic review verdict gate: exit 0 only when review-pi first non-empty assistant output line is pass.",
+      "subtask_prompt": "Deterministic gate: block decision gate unless review-pi emitted VERDICT: pass.",
+      "shell": {
+        "verdictGate": {
+          "fromNodeId": "review-pi",
+          "accept": [
+            "VERDICT: pass"
+          ],
+          "label": "review",
+          "lineMode": "first-verdict-line"
+        },
+        "cwd": ".",
+        "timeoutMs": 60000
+      }
+    },
+    {
+      "id": "decision-pi",
+      "depends_on": [
+        "review-gate-shell",
+        "hard-verify-shell"
+      ],
+      "complexity": "HIGH",
+      "executor": "pi",
+      "role": "reviewer",
+      "writePolicy": "read-only",
+      "allowedPaths": [
+        "**"
+      ],
+      "forbiddenPaths": [
+        ".harness/**",
+        "artifacts/**"
+      ],
+      "outputContract": "Markdown with exactly one DECISION_ENVELOPE_JSON fenced block plus evidence summary. No file writes.",
+      "subtask_prompt_markdown": "./agent-dag-decision-gate.prompt.md",
+      "decisionGate": {
+        "enabled": true,
+        "schemaVersion": 1,
+        "mode": "record-only"
+      }
+    },
+    {
+      "id": "closeout-pi",
+      "depends_on": [
+        "decision-pi"
+      ],
+      "complexity": "MED",
+      "executor": "pi",
+      "role": "closeout",
+      "writePolicy": "read-only",
+      "allowedPaths": [
+        "**"
+      ],
+      "forbiddenPaths": [
+        ".harness/**",
+        "artifacts/**"
+      ],
+      "outputContract": "Plain Markdown closeout referencing verification, supervisor/review verdicts, and decision envelope. No file writes.",
+      "subtask_prompt": "Summarize the supervised DAG outcome: contract, write-set audit, implement/repair, soft/hard verify, process supervisor and review verdicts, decision-pi envelope, and recommended main-session next step. Do not edit files or write root artifacts/**."
+    }
+  ]
+}