@walwal-harness/cli 7.1.2 → 7.1.6

package/assets/templates/AGENTS.md.template

@@ -1,83 +1,118 @@
-# AGENTS.md — Project Context for AI Agents
+# AGENTS.md — {{PROJECT_NAME}}
+# walwal-harness v7.1 | Company Mode
+# Installed: {{DATE}} | CLAUDE.md is a symlink to this file.
 
-> 이 파일은 모든 AI 에이전트(Claude, Cursor, Copilot, Windsurf 등)의 공통 진입점입니다.
-> CLAUDE.md는 이 파일의 심볼릭 링크입니다.
-> Generated by walwal-harness ({{DATE}})
+---
 
-## Project
+## 1. Entry Points
 
-- **Name**: (Planner가 설정)
-- **Description**: (Planner가 설정)
-- **Phase**: INIT
-- **Harness**: `.harness/HARNESS.md` 참조
+Two Owner-facing commands. Nothing else reaches the company.
 
-## Tech Stack
+| Command | When |
+|---|---|
+| `/goal` | Set, update, or extend a mission |
+| `/hot-fix` | Emergency fix independent of the active goal |
 
-- Backend: (scan-project.sh가 감지)
-- Frontend: (scan-project.sh가 감지)
-- Database: (scan-project.sh가 감지)
+`/ceo`, `/cto`, `/cqo`, `/coo`, `/cdo`, `/ops`, `/hiring` are not slash commands.
+Internal routing uses agent/skill wiring only.
 
-## IA-MAP (Information Architecture)
+---
 
-> Planner가 프로젝트 시작 시 확정합니다.
-> `[?]` 태그는 Planner가 분류해야 하는 미확인 경로입니다.
+## 2. Think Before Acting
+
+Don't assume. Don't hide confusion.
+
+- State assumptions before implementing. If uncertain, ask.
+- If multiple approaches exist, name them — don't pick silently.
+- Minimum change that solves the problem. No speculative scope.
+- If something is unclear, stop. Name what is unclear. Ask.
+
+For hot-fix: smallest correct patch only. Do not "improve" adjacent code.
+For goal: define verifiable success criteria before CEO routes to CXX.
+
+---
+
+## 3. Company Structure
 
 ```
-/
-├── AGENTS.md             # [META] 프로젝트 컨텍스트           → Planner
-├── CLAUDE.md             # [META] → AGENTS.md 심볼릭 링크
-└── .harness/             # [HARNESS] 하네스 시스템             → Planner
+Owner
+  └─ /goal or /hot-fix
+      └─ harness-ceo          orchestrator — Owner's only contact
+          ├─ harness-coo      research, hypothesis, service direction
+          ├─ harness-cdo      branding, UI/UX, design review
+          ├─ harness-cto      architecture, API, platform, implementation
+          ├─ harness-cqo      quality gates, regression, archive, gotcha/convention
+          └─ harness-ops      build monitoring, log analysis, service events
 ```
 
-## Rules (모든 에이전트 공통)
-
-### 읽기/쓰기 권한
-
-| 파일 | 읽기 | 쓰기 |
-|------|------|------|
-| AGENTS.md | 전체 | Planner만 |
-| .harness/actions/api-contract.json | 전체 | Planner만 |
-| .harness/actions/feature-list.json | 전체 | passes: Generator, 나머지: Planner |
-| .harness/progress.json | 전체 | 전체 (Session Boundary Protocol에 따라 업데이트) |
-| `[BE]` 소유 경로 | 전체 | Generator-Backend만 |
-| `[FE]` 소유 경로 | 전체 | Generator-Frontend만 |
-| .harness/archive/ | 전체 | 쓰기 금지 (불변) |
-| .harness/gotchas/ | 전체 | Dispatcher만 |
-
-### 금지 사항
-
-- AGENTS.md를 Planner 외 에이전트가 수정
-- 서비스 간 직접 DB 접근
-- 테스트 삭제/약화
-- archive/ 내 파일 수정
-- 아티팩트 상태가 `draft` 미만인 선행 아티팩트에 의존하여 작업 시작
-
-### 품질 게이트 (v3.1)
-
-| 게이트 | 시점 | 내용 |
-|--------|------|------|
-| **Pre-Eval Gate** | Generator → Evaluator 전환 | tsc, eslint, jest/vitest 자동 실행. 실패 시 Generator 리라우팅 |
-| **파일 소유권 검증** | 에이전트 전환 시 | git diff로 권한 밖 파일 수정 감지 |
-| **아티팩트 선행조건** | 에이전트 시작 전 | progress.json.artifacts 상태 확인 |
-| **에스컬레이션** | 3회 연속 실패 | Planner에게 scope 축소/접근 변경 요청 |
-
-### Evaluation System (v3.2)
-
-| 설정 | 값 |
-|------|------|
-| PASS 기준 | **2.80 / 3.00 이상** |
-| FAIL 기준 | 2.79 이하 (예외 없음) |
-| Evidence 없는 Score | 0점 강제 |
-| AC 부분 통과 | FAIL (100% 필수) |
-| Regression 실패 1건+ | FAIL (신규 점수 무관) |
-
-- Planner는 feature-list.json에 **Executable AC** (type: api/visual/e2e + verify 조건) 필수 작성
-- Evaluator는 Adversarial Rules에 따라 적대적으로 검증 (rubber-stamping 금지)
-- 이전 Sprint PASS 기능은 Regression Checkpoint로 재검증
-- Eval-Functional ↔ Eval-Visual 간 Cross-Validation으로 불일치 감지
-
-### 메모리 오염 방어
-
-- gotcha/memory 항목은 `unverified` 상태로 시작, Planner 리뷰 후 `verified` 승격
-- TTL 만료 항목은 Planner 스프린트 전환 시 리뷰 (갱신 또는 삭제)
-- 코드/git으로 검증 불가한 항목은 즉시 삭제
+Each CXX:
+- Runs in a **fresh session context** — no shared memory with CEO's session
+- Records decisions in `.harness/documents/{mission_name}/{cxx}.md`
+- Delegates all specialist work to hired workers — never executes directly
+- If a required worker is absent, invokes `harness-hiring` before assigning
+
+CEO rejects any CXX report that contains completed deliverables without matching worker records.
+
+---
+
+## 4. Mission Flow
+
+### Goal
+
+1. CEO reads the Owner request. Decides: brainstorm first, or assign immediately.
+2. CEO sends scoped questions to relevant CXX only.
+3. Each CXX hires workers, collects reports, records decisions in `{cxx}.md`.
+4. CEO aggregates CXX outputs, routes to next CXX or reports to Owner.
+
+**Complete when:** `.harness/documents/{mission_name}/ceo.md` contains a final Owner report.
+
+### Hot Fix
+
+1. CEO receives emergency request. Immediately summons CTO and CQO.
+2. CTO designs the minimum patch path. Hires implementation workers.
+3. Workers implement. CTO verifies evidence, writes `cto.md`.
+4. CQO runs regression gate. Registers a lesson in `.harness/gotchas/` or `.harness/conventions/`. Writes `cqo.md`.
+5. Archive only after CQO verdict: **PASS**.
+
+**Complete when:** `cto.md`, `cqo.md`, and at least one new gotcha or convention entry exist.
+
+Note: A docmeta skip decision on harness documents (ceo.md, cto.md, cqo.md, worker reports) does not authorize skipping any mission protocol step. These are mission records, not derived output documents.
+
+---
+
+## 5. Harness Runtime
+
+| Path | Role |
+|---|---|
+| `.harness/documents/{mission}/` | CXX decisions and worker reports per mission |
+| `.harness/conventions/` | Durable rules (CQO writes, survives missions) |
+| `.harness/gotchas/` | Recurrence-prevention records (CQO writes per hot-fix) |
+| `.harness/memories/` | Long-term shared context |
+| `.harness/shared/HR-Resource/` | Hireable worker skill pool |
+| `.harness/archive/` | CQO-approved completed missions (immutable) |
+| `.harness/logs/YYYY-MM-DD/` | OPS exception logs (non-happy-path only) |
+
+`.harness/` is the mission state store. Not a build artifact. Do not delete.
+
+---
+
+## 6. Hard Rules
+
+1. **No source edit without `{mission}/cto.md`** — CTO scope sign-off is required before any source file is modified.
+2. **No CXX impersonation** — The active model must not act as CEO/CTO/CQO inline. Use installed harness skills in fresh sessions.
+3. **No unnamed workers** — All specialist work routes through `harness-hiring` → `harness-resource-manager`.
+4. **No archive without CQO verdict** — `{mission}/cqo.md` with explicit PASS must exist.
+5. **No gotcha skip** — Every hot-fix produces at least one `.harness/gotchas/` or `.harness/conventions/` entry.
+6. **This file is read-only during missions** — Raise a separate `/goal` to update AGENTS.md.
+7. **CEO routes only to CXX — never to workers** — CEO must not dispatch, hire, or brief specialist workers directly. Implementation workers are hired by CTO. Evaluator/tester workers are hired by CQO.
+8. **No CXX self-execution** — CXX agents coordinate and manage only. A CXX that produces deliverables without matching worker records has violated its scope. CEO must reject such reports.
+9. **No verdict without worker evidence** — CQO cannot issue ACCEPTED/REJECTED without a Worker Evidence Manifest referencing at least one evaluator worker. Self-inspection by CQO is not valid evidence.
+10. **Hierarchical worker ownership** — Hired workers are installed under `.claude/skills/{owning-cxx}/{worker}/` and `.codex/skills/{owning-cxx}/{worker}/`; mission worker reports live under `.harness/documents/{mission}/{owning-cxx}/workers/`. Flat `{mission}/workers/` reports are legacy and signal an ownership violation unless explicitly migrated.
+
+---
+
+## 7. Project Context
+
+- **Tech Stack**: {{TECH_STACK}}
+- **Structure**: {{PROJECT_STRUCTURE}}
+- **Harness installed**: {{DATE}}

package/bin/init.js

@@ -21,6 +21,17 @@ const isAuto = args.includes('--auto');
 const isForce = args.includes('--force');
 const isHelp = args.includes('--help') || args.includes('-h');
 
+function getOptionValue(name) {
+  const eqPrefix = `${name}=`;
+  const eqArg = args.find((a) => a.startsWith(eqPrefix));
+  if (eqArg) return eqArg.slice(eqPrefix.length);
+  const idx = args.indexOf(name);
+  if (idx !== -1 && args[idx + 1] && !args[idx + 1].startsWith('-')) {
+    return args[idx + 1];
+  }
+  return null;
+}
+
 // ─────────────────────────────────────────
 // Resolve project root
 // ─────────────────────────────────────────
@@ -28,6 +39,9 @@ const isHelp = args.includes('--help') || args.includes('-h');
 // inside node_modules, NOT the consumer project root.
 // We detect this and walk up to find the actual project root.
 function resolveProjectRoot() {
+  const explicitRoot = getOptionValue('--project-root');
+  if (explicitRoot) return path.resolve(explicitRoot);
+
   let cwd = process.cwd();
 
   // If we're running inside node_modules, walk up to the project root
@@ -430,12 +444,12 @@ function scaffoldHarness() {
   }
 
   const rosterPath = path.join(HARNESS_DIR, 'shared', 'hr-roster.json');
-  if (!fileExists(rosterPath) || isForce) {
+  if (!fileExists(rosterPath)) {
     fs.writeFileSync(rosterPath, JSON.stringify({ hired: [] }, null, 2) + '\n');
   }
 
   const resourceIndexPath = path.join(HARNESS_DIR, 'shared', 'resource-index.json');
-  if (!fileExists(resourceIndexPath) || isForce) {
+  if (!fileExists(resourceIndexPath)) {
     fs.writeFileSync(resourceIndexPath, JSON.stringify({ aliases: {}, keywords: {} }, null, 2) + '\n');
   }
 
@@ -1183,17 +1197,40 @@ function detectMigrationNeeded() {
   const configPath = path.join(HARNESS_DIR, 'config.json');
   const memoryPath = path.join(HARNESS_DIR, 'memory.md');
   const memoryTplPath = path.join(PKG_ROOT, 'assets', 'templates', 'memory.md');
+  const rosterPath = path.join(HARNESS_DIR, 'shared', 'hr-roster.json');
+  const resourceIndexPath = path.join(HARNESS_DIR, 'shared', 'resource-index.json');
   const flags = {
     progressV3toV4: false,
     progressLegacyRouting: false,
     configMissingCompanyMode: false,
     configLegacyRouting: false,
+    coreSkillsStale: false,
+    hrResourcePoolStale: false,
+    rosterCodexPathsMissing: false,
+    resourceIndexCodexWordingMissing: false,
     memoryMissingSystemEntries: [],
     gotchaMissingEntries: {},   // { "<filename>": [G-IDs...] }
     conventionMissingEntries: {}, // { "<filename>": [C-IDs...] }
     bundleVersionStale: null,    // { current, installed }
   };
 
+  const coreSkills = ['ceo', 'coo', 'cdo', 'cto', 'cqo', 'ops', 'hiring', 'resource-manager', 'brick-office'];
+  for (const skill of coreSkills) {
+    const srcPath = path.join(PKG_ROOT, 'HR-Resource', skill, 'SKILL.md');
+    if (!fs.existsSync(srcPath)) continue;
+    const srcBody = fs.readFileSync(srcPath, 'utf8');
+    for (const root of [CLAUDE_SKILLS_DIR, CODEX_SKILLS_DIR]) {
+      const destPath = path.join(root, `harness-${skill}`, 'SKILL.md');
+      if (!fs.existsSync(destPath) || fs.readFileSync(destPath, 'utf8') !== srcBody) {
+        flags.coreSkillsStale = true;
+      }
+    }
+    const poolPath = path.join(HARNESS_DIR, 'shared', 'HR-Resource', skill, 'SKILL.md');
+    if (fs.existsSync(path.dirname(poolPath)) && (!fs.existsSync(poolPath) || fs.readFileSync(poolPath, 'utf8') !== srcBody)) {
+      flags.hrResourcePoolStale = true;
+    }
+  }
+
   // Gotcha entry-level diff: for each bundled gotcha file, compare entry IDs.
   // 사용자가 직접 추가한 [G-NNN] 은 절대 건드리지 않으며, 패키지에서 새로
   // 도입된 시스템 entry 만 append 대상.
@@ -1266,6 +1303,27 @@ function detectMigrationNeeded() {
       ) flags.configLegacyRouting = true;
     } catch {}
   }
+  if (fs.existsSync(rosterPath)) {
+    try {
+      const roster = JSON.parse(fs.readFileSync(rosterPath, 'utf8'));
+      const hired = Array.isArray(roster.hired) ? roster.hired : [];
+      flags.rosterCodexPathsMissing = hired.some((entry) => {
+        if (!entry || typeof entry !== 'object' || !entry.worker) return false;
+        const owner = entry.owner || entry.owningCxx;
+        const flatClaude = /^\.claude\/skills\/[^/]+\/SKILL\.md$/.test(entry.skillPaths?.claude || '');
+        const flatCodex = /^\.codex\/skills\/[^/]+\/SKILL\.md$/.test(entry.skillPaths?.codex || '');
+        return !owner || !entry.skillPaths?.codex || !entry.skillPaths?.claude || /^\.claude\/skills\//.test(entry.skillPath || '') || flatClaude || flatCodex;
+      });
+    } catch {}
+  }
+  if (fs.existsSync(resourceIndexPath)) {
+    try {
+      const idx = JSON.parse(fs.readFileSync(resourceIndexPath, 'utf8'));
+      if (!idx.invocation || !idx.invocation.codex || !idx.invocation.claude) {
+        flags.resourceIndexCodexWordingMissing = true;
+      }
+    } catch {}
+  }
   if (fs.existsSync(memoryPath) && fs.existsSync(memoryTplPath)) {
     try {
       const userMem = fs.readFileSync(memoryPath, 'utf8');
@@ -1355,6 +1413,18 @@ function showMigrationProposal(flags) {
   if (flags.configLegacyRouting) {
     console.log('  • config.json: legacy dispatcher/conductor wording → v7 CEO/CXX wording');
   }
+  if (flags.coreSkillsStale) {
+    console.log('  • .claude/.codex skills: harness-* core skills 최신 패키지로 refresh');
+  }
+  if (flags.hrResourcePoolStale) {
+    console.log('  • .harness/shared/HR-Resource: core HR pool 최신 패키지로 refresh');
+  }
+  if (flags.rosterCodexPathsMissing) {
+    console.log('  • hr-roster.json: 기존 hired worker 보존 + Claude/Codex skillPaths 보강');
+  }
+  if (flags.resourceIndexCodexWordingMissing) {
+    console.log('  • resource-index.json: Claude/Codex skill invocation wording 보강');
+  }
   if (flags.memoryMissingSystemEntries && flags.memoryMissingSystemEntries.length) {
     console.log('  • memory.md: 시스템 entry 누락 — append 가능');
     console.log('    [' + flags.memoryMissingSystemEntries.join(', ') + ']');
@@ -1397,6 +1467,10 @@ function runMigrate(opts = {}) {
     !flags.progressLegacyRouting &&
     !flags.configMissingCompanyMode &&
     !flags.configLegacyRouting &&
+    !flags.coreSkillsStale &&
+    !flags.hrResourcePoolStale &&
+    !flags.rosterCodexPathsMissing &&
+    !flags.resourceIndexCodexWordingMissing &&
     (!flags.memoryMissingSystemEntries || flags.memoryMissingSystemEntries.length === 0) &&
     gotchaMissingTotal === 0 &&
     conventionMissingTotal === 0 &&
@@ -1405,7 +1479,7 @@ function runMigrate(opts = {}) {
     console.log('');
     let pkgVer = 'unknown';
     try { pkgVer = JSON.parse(fs.readFileSync(path.join(PKG_ROOT, 'package.json'), 'utf8')).version; } catch {}
-    log(`이미 최신 — bundle v${pkgVer} 일치, progress v${TARGET_PROGRESS_VERSION} v7 routing, config.company_mode, memory 시스템 entry, gotcha entry 모두 sync.`);
+    log(`이미 최신 — bundle v${pkgVer} 일치, progress v${TARGET_PROGRESS_VERSION} v7 routing, config.company_mode, Codex skill wiring, memory 시스템 entry, gotcha entry 모두 sync.`);
     return;
   }
 
@@ -1474,6 +1548,99 @@ function runMigrate(opts = {}) {
     }
   }
 
+  // 2a. Refresh installed core harness skills and HR core pool without
+  //     touching hired worker skills or roster state.
+  if (flags.hrResourcePoolStale) {
+    const hrResourceSrc = path.join(PKG_ROOT, 'HR-Resource');
+    const hrResourceDest = path.join(HARNESS_DIR, 'shared', 'HR-Resource');
+    if (fs.existsSync(hrResourceSrc)) {
+      log('  .harness/shared/HR-Resource: core pool refresh');
+      if (!dryRun) copyDir(hrResourceSrc, hrResourceDest);
+    }
+  }
+  if (flags.coreSkillsStale) {
+    log('  .claude/.codex skills: harness-* core skills refresh');
+    if (!dryRun) installSkills();
+  }
+
+  // 2b. hr-roster.json — preserve hired worker history, add tool-specific
+  //     paths so Codex can reuse existing hires without relying on .claude.
+  const rosterPath = path.join(HARNESS_DIR, 'shared', 'hr-roster.json');
+  if (flags.rosterCodexPathsMissing && fs.existsSync(rosterPath)) {
+    const original = fs.readFileSync(rosterPath, 'utf8');
+    try {
+      const roster = JSON.parse(original);
+      const hired = Array.isArray(roster.hired) ? roster.hired : [];
+      let changed = false;
+      roster.hired = hired.map((entry) => {
+        if (!entry || typeof entry !== 'object' || !entry.worker) return entry;
+        const worker = entry.worker;
+        const owner = entry.owner || entry.owningCxx || 'unknown';
+        const scopedPrefix = owner ? `${owner}/` : '';
+        const claudePath = entry.skillPaths?.claude || (
+          /^\.claude\/skills\//.test(entry.skillPath || '')
+            ? entry.skillPath
+            : `.claude/skills/${scopedPrefix}${worker}/SKILL.md`
+        );
+        const codexPath = entry.skillPaths?.codex || (
+          /^\.codex\/skills\//.test(entry.skillPath || '')
+            ? entry.skillPath
+            : `.codex/skills/${scopedPrefix}${worker}/SKILL.md`
+        );
+        const next = {
+          ...entry,
+          owner,
+          skillPath: `.harness/shared/HR-Resource/${worker}/SKILL.md`,
+          skillPaths: {
+            ...(entry.skillPaths || {}),
+            claude: /^\.claude\/skills\/[^/]+\/SKILL\.md$/.test(claudePath)
+              ? `.claude/skills/${scopedPrefix}${worker}/SKILL.md`
+              : claudePath,
+            codex: /^\.codex\/skills\/[^/]+\/SKILL\.md$/.test(codexPath)
+              ? `.codex/skills/${scopedPrefix}${worker}/SKILL.md`
+              : codexPath,
+            source: `.harness/shared/HR-Resource/${worker}/SKILL.md`,
+          },
+        };
+        if (JSON.stringify(next) !== JSON.stringify(entry)) changed = true;
+        return next;
+      });
+      if (changed) {
+        log(`  hr-roster.json: ${roster.hired.length}개 hired worker에 Codex 경로 보강`);
+        if (!dryRun) {
+          fs.writeFileSync(path.join(backupDir, 'hr-roster.json'), original);
+          fs.writeFileSync(rosterPath, JSON.stringify(roster, null, 2) + '\n');
+        }
+      }
+    } catch (e) {
+      log(`  WARNING: hr-roster.json parse failed, skipped (${e.message})`);
+    }
+  }
+
+  // 2c. resource-index.json — keep aliases/keywords, add tool wording.
+  const resourceIndexPath = path.join(HARNESS_DIR, 'shared', 'resource-index.json');
+  if (flags.resourceIndexCodexWordingMissing && fs.existsSync(resourceIndexPath)) {
+    const original = fs.readFileSync(resourceIndexPath, 'utf8');
+    try {
+      const idx = JSON.parse(original);
+      idx.aliases = idx.aliases || {};
+      idx.keywords = idx.keywords || {};
+      idx.invocation = {
+        ...(idx.invocation || {}),
+        claude: 'Invoke the installed skill by name from .claude/skills/{owning-cxx}/{worker}/SKILL.md.',
+        codex: 'Use the installed skill by name from .codex/skills/{owning-cxx}/{worker}/SKILL.md.',
+        source: 'Candidate pool lives in .harness/shared/HR-Resource/{worker}/SKILL.md.',
+      };
+      log('  resource-index.json: Claude/Codex invocation wording 보강');
+      if (!dryRun) {
+        fs.writeFileSync(path.join(backupDir, 'resource-index.json'), original);
+        fs.writeFileSync(resourceIndexPath, JSON.stringify(idx, null, 2) + '\n');
+      }
+    } catch (e) {
+      log(`  WARNING: resource-index.json parse failed, skipped (${e.message})`);
+    }
+  }
+
   // 3. memory.md — append missing system entries (M-NEXUS-*, M-SYS-*) only.
   //    User-added [M-NNN] entries are NEVER touched.
   const memoryPath = path.join(HARNESS_DIR, 'memory.md');

package/commands/goal.md

@@ -18,6 +18,8 @@ Required flow:
 8. CEO must require worker report paths under `.harness/documents/{mission_name}/workers/` before accepting CXX completion.
 9. Do not invoke internal roles through slash commands; commands are Owner entrypoints only.
 
+Note: Harness documents (ceo.md, cto.md, cqo.md, worker reports) are mission records, not derived output documents. A docmeta skip decision on these files does not authorize skipping any harness protocol step.
+
 Owner request:
 
 ```

package/commands/hot-fix.md

@@ -9,14 +9,17 @@ Route the Owner request to the installed `harness-ceo` agent/skill as an emergen
 
 Required flow:
 1. Create `.harness/documents/{hotfix_name}/ceo.md`.
-2. CEO summons CTO and CQO; summon COO/CDO only when planning or UX decisions are involved.
+2. CEO summons CTO and CQO first; summon COO/CDO only when planning or UX decisions are involved.
 3. CTO applies the smallest correct patch path through hired implementation skills.
-4. CXX roles must not directly execute specialist deliverables. They must use hired workers for implementation, QA, ops checks, and documentation even when the fix is small.
-5. If a required worker is missing, CEO or the responsible CXX must invoke the installed `harness-hiring` skill before assigning the work.
-6. CQO records regression coverage and recurrence prevention with worker report paths under `.harness/documents/{hotfix_name}/workers/`.
-7. Register durable lessons in `.harness/gotchas/`, `.harness/conventions/`, or `.harness/memories/` as appropriate.
-8. Archive only after CQO has accepted the fix.
-9. Do not invoke internal roles through slash commands; commands are Owner entrypoints only.
+4. CXX roles must start in a fresh session context. Do not let the default model impersonate a missing CXX or worker.
+5. CXX roles must not directly execute specialist deliverables. They must use hired workers for implementation, QA, ops checks, and documentation even when the fix is small.
+6. If a required worker is missing, CEO or the responsible CXX must invoke the installed `harness-hiring` skill before assigning the work.
+7. CEO must require worker report paths under `.harness/documents/{hotfix_name}/workers/` before accepting CXX completion.
+8. CQO must register durable lessons in `.harness/gotchas/`, `.harness/conventions/`, or `.harness/memories/`. This step is mandatory, not optional, even for small fixes.
+9. Archive only after CQO has accepted the fix.
+10. Do not invoke internal roles through slash commands; commands are Owner entrypoints only.
+
+Note: Harness documents (ceo.md, cto.md, cqo.md, worker reports) are mission records, not derived output documents. A docmeta skip decision on these files does not authorize skipping any harness protocol step.
 
 Hot-fix request:
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@walwal-harness/cli",
-  "version": "7.1.2",
+  "version": "7.1.6",
   "description": "Company-style AI agent harness for Claude and Codex. Installs commands, CXX agents, skills, HR-Resource hiring pool, and project-local .harness runtime state.",
   "bin": {
     "walwal-harness": "bin/init.js"

package/scripts/harness-worker-evidence-validate.sh

@@ -11,6 +11,16 @@ mode="${2:-text}"
 violations=()
 
 has_worker_report() {
+  local mission_dir="$1"
+  local owner="${2:-}"
+  if [ -n "$owner" ]; then
+    find "$mission_dir/$owner/workers" -maxdepth 1 -type f -name '*.md' 2>/dev/null | grep -q .
+  else
+    find "$mission_dir"/{coo,cdo,cto,cqo,ops}/workers -maxdepth 1 -type f -name '*.md' 2>/dev/null | grep -q .
+  fi
+}
+
+has_legacy_flat_worker_report() {
   local mission_dir="$1"
   find "$mission_dir/workers" -maxdepth 1 -type f -name '*.md' 2>/dev/null | grep -q .
 }
@@ -19,16 +29,21 @@ for mission_dir in "$DOC_ROOT"/*; do
   [ -d "$mission_dir" ] || continue
   mission_name="$(basename "$mission_dir")"
 
-  cxx_docs=()
+  if has_legacy_flat_worker_report "$mission_dir"; then
+    violations+=("$mission_name:legacy-flat-workers")
+  fi
+
   for cxx in coo cdo cto cqo ops; do
     cxx_path="$mission_dir/$cxx.md"
     [ -s "$cxx_path" ] || continue
-    cxx_docs+=("$cxx.md")
+    if ! has_worker_report "$mission_dir" "$cxx"; then
+      violations+=("$mission_name:$cxx.md")
+    fi
   done
 
-  [ "${#cxx_docs[@]}" -gt 0 ] || continue
-  if ! has_worker_report "$mission_dir"; then
-    violations+=("$mission_name:${cxx_docs[*]}")
+  cqo_path="$mission_dir/cqo.md"
+  if [ -s "$cqo_path" ] && grep -Eq '\b(ACCEPTED|REJECTED|PASS|FAIL)\b' "$cqo_path" && ! has_worker_report "$mission_dir" "cqo"; then
+    violations+=("$mission_name:cqo-verdict-without-evaluator")
   fi
 done
 
@@ -51,8 +66,8 @@ else
     mission="${violation%%:*}"
     docs="${violation#*:}"
     echo "- mission: $mission"
-    echo "  cxx_docs: $docs"
-    echo "  required: at least one .harness/documents/$mission/workers/{worker-name}.md report"
+    echo "  issue: $docs"
+    echo "  required: worker reports under .harness/documents/$mission/{cxx}/workers/{worker-name}.md"
   done
 fi