agentic-engineering-harness 0.4.16 → 0.5.1

package/docs/V0.5.1.md

@@ -0,0 +1,129 @@
+# v0.5.1 — Zero-friction Paseo entrypoint
+
+v0.5.1 makes `aeh start` the interactive product entrypoint for a Harness-enabled repository. After startup, the user can work from Paseo by writing normal engineering requests; repository-changing prompts are automatically routed through the Harness instead of requiring the user to invoke triage, QUICK, SPEC, SDD, TaskContracts, workers, validators or reviewers manually.
+
+## Start
+
+With AEH installed in the project:
+
+```bash
+aeh start
+```
+
+Equivalent package-manager invocations include:
+
+```bash
+npx aeh start
+npm exec aeh -- start
+```
+
+`npm aeh start` is not the canonical npm bin syntax. Use `npm exec aeh -- start` when invoking the locally installed package through npm.
+
+By default `aeh start`:
+
+1. loads `.harness/project.yaml` and the resolved agent topology;
+2. selects the configured interactive lead, normally `lead`/Codex;
+3. verifies that Paseo and the lead runtime are available;
+4. reconciles managed toolchain dependencies automatically when they are missing;
+5. starts `paseo daemon start --web-ui` only when the daemon is not already running;
+6. creates a persistent Paseo session for the project or reuses the compatible prior session;
+7. bootstraps that lead with the `engineering-workflow` invariant;
+8. waits until initialization reaches `AEH READY` before reporting the session ready.
+
+State is machine-local and gitignored under:
+
+```text
+.harness/paseo/lead-session.json
+.harness/paseo/lead-bootstrap.md
+```
+
+The command deliberately does not rewrite the user's global `~/.paseo/config.json`.
+
+## Prompt semantics
+
+Once the generated lead is open in Paseo, a normal prompt such as:
+
+```text
+Add rate limiting to the public authentication endpoints and cover it with tests.
+```
+
+is interpreted as:
+
+```text
+natural-language prompt
+        ↓
+repository inspection
+        ↓
+automatic triage evidence
+        ↓
+QUICK or SPEC
+        ↓
+QuickContract or SDD/TaskContract
+        ↓
+seal
+        ↓
+Harness execution
+        ↓
+planner DAG / worker waves
+        ↓
+deterministic validators + evidence
+        ↓
+review quality convergence
+        ↓
+lead semantic acceptance
+        ↓
+configured deterministic delivery
+```
+
+The parent Paseo lead must not implement a repository-changing prompt directly as a shortcut around this pipeline.
+
+Read-only questions may be answered directly when they do not mutate repository state. Existing GitHub issue requests enter the issue-driven path automatically. If a task initially appears QUICK but implementation reveals architecture, security, schema, public API, cross-module or otherwise unsafe scope, the lead escalates it to SPEC rather than widening the QuickContract.
+
+## Session reuse
+
+`aeh start` reuses `.harness/paseo/lead-session.json` when the previous session still exists and its bootstrap version, project root, selected lead, provider, model and title remain compatible.
+
+Create a clean lead explicitly with:
+
+```bash
+aeh start --new
+```
+
+Other startup controls:
+
+```bash
+aeh start --no-web-ui
+aeh start --no-setup
+aeh start --lead lead
+aeh start --title "AEH Lead"
+aeh start /path/to/repository
+```
+
+`--no-setup` disables automatic toolchain reconciliation. If Paseo or the selected lead runtime is unavailable in that mode, startup fails instead of silently falling back to a different agent/runtime.
+
+## Configuration
+
+New projects receive:
+
+```yaml
+orchestration:
+  provider: paseo
+  interactive:
+    autoSetup: true
+    webUi: true
+    leadAgent: lead
+    reuseSession: true
+    stateDir: .harness/paseo
+    title: AEH Lead
+```
+
+The lead is resolved from the active topology; the start implementation does not hard-code Codex. Projects can therefore replace the logical lead while preserving the same Harness entry semantics.
+
+## Defense in depth
+
+The automatic path is enforced at two conversational layers:
+
+- the persistent `aeh start` bootstrap makes the rule part of the Paseo lead conversation;
+- generated `AGENTS.md` independently states that repository-changing conversational prompts must enter `engineering-workflow`.
+
+The deterministic Harness remains the acceptance authority. Paseo and the lead decide how to interpret and route the prompt, but do not replace sealing, scope enforcement, validators, evidence, review convergence or final acceptance gates.

package/docs/V0.5.md

@@ -0,0 +1,116 @@
+# v0.5 — Architecture Close, Scale and Organization Governance
+
+v0.5 closes the original single-host architecture and adds the first scale/governance layer. The deterministic Harness remains the only acceptance authority: planner/reviewer/remote-worker output is evidence or proposed change, never an acceptance decision.
+
+## v0.4.17 — Control-Plane Snapshot & Hard Freeze
+
+Every run materializes `.harness/controller/<task>/files` plus a manifest containing per-file SHA-256, a composite SHA-256, AEH version and controller Git SHA when available. The snapshot includes project config, agent topology, generated topology, toolchain source/lock, policy directories, schemas and skills. When AEH modifies itself, controller source modules are frozen as well.
+
+Agent skill text is loaded from the snapshot. OPA reads policies through the frozen policy root. If live controller files change during the run, the run records controller drift but continues to use the old snapshot. The changed controller becomes eligible only on the next run.
+
+## v0.4.18 — Executable Multi-Worker Planner Waves
+
+SPEC tasks with planning enabled are decomposed by the configured planner into a typed task DAG. The plan is rejected unless task IDs/dependencies/agents/scopes are valid and every TaskContract requirement is assigned to at least one implementation task.
+
+Each local delegation executes in its own detached Git worktree. Accepted earlier-wave patches are materialized first, the frozen task/controller context is copied, and a baseline commit is created. The worker returns a binary patch. Within each wave the coordinator checks every patch before applying any patch, then applies all accepted patches and runs a deterministic barrier. Only a PASS barrier unlocks the next wave.
+
+Graphify is conservative scheduling evidence: scope overlap, shared structural nodes, communities, graph distance and high-centrality nodes can serialize tasks. Graphify cannot override the explicit dependency DAG or redefine desired architecture.
+
+## v0.4.19 — Requirement Evidence Graph
+
+`.harness/evidence/<task>.json` records nodes for requirements, planner tasks, changed files, deterministic checks, review findings, agent sessions, commit and pull request. Requirement coverage requires both:
+
+1. a task assigned to the requirement that produced a concrete changed file; and
+2. PASS results for all validators declared by the requirement.
+
+When `evidence.requireComplete=true`, incomplete coverage is a deterministic failure and enters the normal autonomous remediation/escalation lifecycle.
+
+## v0.4.20 — Worker Sandbox Hardening
+
+Podman remains optional globally but can be required by policy or task risk. Supported OpenCode sandbox runs default to a read-only container root, rootless user namespace, `cap-drop=ALL`, no-new-privileges, PID limits, ephemeral HOME and tmpfs. Network is denied when project policy or the logical agent denies network. CPU/RAM/tmpfs and immutable image digests are configurable. Only explicitly allowlisted environment/credential variables cross the boundary; SSH agents, host sockets and credentials are not projected implicitly.
+
+Both the logical-agent prompt path and the legacy Podman worker executor use the hardened policy.
+
+## Scale and organization governance
+
+### Distributed workers
+
+The distributed protocol has filesystem and HTTP queue transports. Jobs are leased with expiry/reclaim semantics. A remote worker clones the frozen base ref, materializes accepted prior-wave patches, executes one delegated task and returns a binary patch plus session metadata. The coordinator rechecks scope and patch applicability and runs all deterministic barriers.
+
+Remote workers are deliberately **untrusted patch producers**. They do not become validation or normative authorities. Git credentials remain on worker nodes and are not serialized into jobs.
+
+Commands:
+
+```bash
+aeh worker serve . --port 8787 --host 0.0.0.0
+aeh worker run . --worker-id node-01
+```
+
+For remote HTTP workers set `distributed.provider: http`, `distributed.endpoint` and optionally `distributed.tokenEnv` on worker/coordinator configs as appropriate.
+
+### Organization policy bundles
+
+Organization bundles contain `bundle.json`, file hashes, optional inheritance and policy directories. Sources may be local or remote and can pin the manifest SHA-256. Optional Cosign blob verification can require a configured public key and signature. Resolved bundles are cached under `.harness/policy-bundles` and frozen into the active controller snapshot before execution.
+
+```bash
+aeh policy sync
+```
+
+### Statistical eval dashboards
+
+Repeated evals compute pass-rate Wilson intervals plus mean/median/standard deviation/confidence intervals for score, duration, tokens, cost, repairs and human interventions.
+
+```bash
+aeh eval repeat EVAL-001 --variant balanced --runs 10
+aeh eval dashboard EVAL-001
+```
+
+### Native structured runtime adapters and resume
+
+The agent contract layer exposes JSON Schemas in addition to Zod schemas. Runtimes that support native output schemas receive them; Zod remains the final parser/validator. Codex and OpenCode direct sessions expose resume/session primitives, while Paseo sessions resume through `send/wait/logs`. Ephemeral Podman sessions intentionally do not pretend they can resume host sessions without an explicit persisted session volume.
+
+### MCP benchmark and packs
+
+The MCP benchmark records a baseline serialized-config token estimate, local/remote reachability latency, permission-surface heuristic and stale-data risk. This is intentionally not yet a claim about exact runtime tool-schema tokens; runtime-native introspection is the next benchmark refinement.
+
+```bash
+aeh mcp benchmark
+```
+
+Default named packs remain least-privilege: research, browser and GitHub read-only are enabled as catalog groupings; observability stays opt-in.
+
+## Default execution flow
+
+```text
+Intent / GitHub Issue
+        ↓
+Toolchain doctor/setup
+        ↓
+QUICK or SPEC
+        ↓
+Seal normative task inputs
+        ↓
+Resolve org policies + topology
+        ↓
+Freeze control plane
+        ↓
+Planner DAG
+        ↓
+Isolated local/remote worker waves
+        ↓
+Deterministic barriers
+        ↓
+Requirement evidence gate
+        ↓
+Reviewer quality convergence
+        ↓
+Regression rollback / model escalation / replan as needed
+        ↓
+Final quality gate + lead acceptance
+        ↓
+Deterministic delivery
+        ↓
+Final evidence graph + controller drift record
+```
+
+The user remains human-on-exception: product decisions, contradictory normative requirements and genuinely unavailable external resources are escalation states; implementation defects, review debt, worker failures and strategy churn remain autonomous recovery concerns.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentic-engineering-harness",
-  "version": "0.4.16",
+  "version": "0.5.1",
   "description": "OSS-first engineering harness for deterministic, spec-driven and issue-driven multi-agent software delivery.",
   "type": "module",
   "bin": { "engineering-harness": "./dist/entry.js", "aeh": "./dist/entry.js" },
@@ -14,5 +14,5 @@
   "bugs": { "url": "https://github.com/JamesMorales04/agentic-engineering-harness/issues" },
   "publishConfig": { "access": "public" },
   "license": "Apache-2.0",
-  "keywords": ["ai-agents", "codex", "opencode", "paseo", "sdd", "github-issues", "issue-driven-development", "quick-contract", "gherkin", "agent-routing", "agent-presets", "mcp", "github-delivery", "worktrees", "multi-model", "quality-convergence", "toolchain", "mise", "bootstrap", "human-on-exception", "deterministic-validation", "engineering-harness", "slsa", "opentelemetry"]
+  "keywords": ["ai-agents", "codex", "opencode", "paseo", "sdd", "github-issues", "issue-driven-development", "quick-contract", "gherkin", "agent-routing", "agent-presets", "mcp", "github-delivery", "worktrees", "multi-model", "multi-worker", "distributed-workers", "quality-convergence", "evidence-graph", "policy-bundles", "sandbox", "toolchain", "mise", "bootstrap", "human-on-exception", "deterministic-validation", "engineering-harness", "slsa", "opentelemetry"]
 }

package/schemas/project.schema.json

@@ -8,9 +8,11 @@
     "version": { "const": 1 },
     "project": { "type": "object", "required": ["name"], "properties": { "name": { "type": "string", "minLength": 1 } } },
     "agents": { "type": "object", "properties": { "configPath": { "type": "string" }, "generatedPath": { "type": "string" }, "activeProfile": { "type": "string" }, "required": { "type": "boolean" }, "findingsDir": { "type": "string" } } },
+    "controlPlane": { "type": "object", "properties": { "snapshotDir": { "type": "string" }, "include": { "type": "array", "items": { "type": "string" } }, "required": { "type": "boolean" } } },
     "workflow": { "type": "object", "properties": {
       "quick": { "type": "object", "properties": { "maxFiles": { "type": "integer", "minimum": 1 }, "disallowedDomains": { "type": "array", "items": { "type": "string" } } } },
       "issueIntake": { "type": "object", "properties": { "enabled": { "type": "boolean" }, "snapshotDir": { "type": "string" }, "verifyDriftOnRun": { "type": "boolean" }, "requireOpen": { "type": "boolean" }, "plannerAgent": { "type": "string", "minLength": 1 }, "autoHandoff": { "type": "boolean" } } },
+      "planning": { "type": "object", "properties": { "enabled": { "type": "boolean" }, "plannerAgent": { "type": "string" }, "worktreeIsolation": { "type": "boolean" }, "barrierValidation": { "type": "boolean" }, "maxWaveConcurrency": { "type": "integer", "minimum": 1 }, "distributed": { "type": "boolean" } } },
       "reviews": { "type": "object", "properties": {
         "enabled": { "type": "boolean" }, "reviewQuick": { "type": "boolean" }, "leadAcceptance": { "type": "boolean" }, "leadAcceptanceQuick": { "type": "boolean" },
         "maxRemediationRounds": { "type": "integer", "minimum": 0, "deprecated": true },
@@ -21,16 +23,33 @@
         "escalation": { "type": "object", "properties": { "criticalStartStage": { "type": "integer", "minimum": 0 }, "replanResumeStage": { "type": "integer", "minimum": 0 }, "stages": { "type": "array", "items": { "type": "object", "required": ["name"], "properties": { "name": { "type": "string", "minLength": 1 }, "action": { "enum": ["remediate", "diagnose", "replan"] }, "agent": { "type": "string", "minLength": 1 }, "model": { "type": "string", "minLength": 1 } } } } } }
       } }
     } },
-    "orchestration": { "type": "object", "properties": { "provider": { "type": "string" }, "required": { "type": "boolean" }, "worker": { "type": "object", "properties": { "provider": { "type": "string" }, "model": { "type": "string" }, "maxRepairAttempts": { "type": "integer", "minimum": 0 }, "timeoutSeconds": { "type": "integer", "minimum": 1 }, "titlePrefix": { "type": "string" } } } } },
+    "orchestration": { "type": "object", "properties": {
+      "provider": { "type": "string" },
+      "required": { "type": "boolean" },
+      "worker": { "type": "object", "properties": { "provider": { "type": "string" }, "model": { "type": "string" }, "maxRepairAttempts": { "type": "integer", "minimum": 0 }, "timeoutSeconds": { "type": "integer", "minimum": 1 }, "titlePrefix": { "type": "string" } } },
+      "interactive": { "type": "object", "properties": { "autoSetup": { "type": "boolean" }, "webUi": { "type": "boolean" }, "leadAgent": { "type": "string", "minLength": 1 }, "reuseSession": { "type": "boolean" }, "stateDir": { "type": "string", "minLength": 1 }, "title": { "type": "string", "minLength": 1 } } }
+    } },
     "toolchain": { "type": "object", "properties": { "configPath": { "type": "string" }, "lockPath": { "type": "string" }, "statePath": { "type": "string" }, "generatedMisePath": { "type": "string" } } },
-    "mcp": { "type": "object", "properties": { "servers": { "type": "object", "additionalProperties": { "type": "object", "required": ["type"], "properties": { "description": { "type": "string" }, "type": { "enum": ["local", "remote"] }, "command": { "type": "array", "items": { "type": "string" }, "minItems": 1 }, "url": { "type": "string", "format": "uri" }, "environment": { "type": "object", "additionalProperties": { "type": "string" } }, "headers": { "type": "object", "additionalProperties": { "type": "string" } }, "oauth": { "type": "boolean" }, "enabled": { "type": "boolean" }, "timeoutMs": { "type": "integer", "minimum": 1 }, "codemode": { "type": "boolean" } } } } } },
-    "delivery": { "type": "object", "properties": {
-      "stateDir": { "type": "string" },
-      "github": { "type": "object", "properties": { "enabled": { "type": "boolean" }, "tokenEnv": { "type": "string", "minLength": 1 }, "repository": { "type": "string", "pattern": "^[^/]+/[^/]+$" }, "apiBaseUrl": { "type": "string", "format": "uri" }, "assignTokenOwner": { "type": "boolean" }, "labels": { "type": "array", "items": { "type": "string" } }, "branchPattern": { "type": "string", "minLength": 1 }, "finalizeOnAcceptance": { "type": "boolean" }, "pullRequestDraft": { "type": "boolean" } } },
-      "paseo": { "type": "object", "properties": { "enabled": { "type": "boolean" }, "createWorkspace": { "type": "boolean" }, "autoUseWorkspace": { "type": "boolean" }, "worktreeSlugPattern": { "type": "string", "minLength": 1 } } }
+    "mcp": { "type": "object", "properties": {
+      "servers": { "type": "object", "additionalProperties": { "type": "object", "required": ["type"], "properties": { "description": { "type": "string" }, "type": { "enum": ["local", "remote"] }, "command": { "type": "array", "items": { "type": "string" }, "minItems": 1 }, "url": { "type": "string", "format": "uri" }, "environment": { "type": "object", "additionalProperties": { "type": "string" } }, "headers": { "type": "object", "additionalProperties": { "type": "string" } }, "oauth": { "type": "boolean" }, "enabled": { "type": "boolean" }, "timeoutMs": { "type": "integer", "minimum": 1 }, "codemode": { "type": "boolean" } } } },
+      "benchmark": { "type": "object", "properties": { "enabled": { "type": "boolean" }, "resultsDir": { "type": "string" }, "repetitions": { "type": "integer", "minimum": 1 } } },
+      "packs": { "type": "object", "additionalProperties": { "type": "object", "required": ["servers"], "properties": { "servers": { "type": "array", "items": { "type": "string" } }, "enabled": { "type": "boolean" } } } }
     } },
-    "memory": { "type": "object" }, "codeIntelligence": { "type": "object" }, "sdd": { "type": "object" }, "validation": { "type": "object" }, "security": { "type": "object" }, "telemetry": { "type": "object" }, "evals": { "type": "object" }, "provenance": { "type": "object" }
+    "delivery": { "type": "object", "properties": { "stateDir": { "type": "string" }, "github": { "type": "object", "properties": { "enabled": { "type": "boolean" }, "tokenEnv": { "type": "string", "minLength": 1 }, "repository": { "type": "string", "pattern": "^[^/]+/[^/]+$" }, "apiBaseUrl": { "type": "string", "format": "uri" }, "assignTokenOwner": { "type": "boolean" }, "labels": { "type": "array", "items": { "type": "string" } }, "branchPattern": { "type": "string", "minLength": 1 }, "finalizeOnAcceptance": { "type": "boolean" }, "pullRequestDraft": { "type": "boolean" } } }, "paseo": { "type": "object", "properties": { "enabled": { "type": "boolean" }, "createWorkspace": { "type": "boolean" }, "autoUseWorkspace": { "type": "boolean" }, "worktreeSlugPattern": { "type": "string", "minLength": 1 } } } } },
+    "memory": { "type": "object" },
+    "codeIntelligence": { "type": "object", "properties": { "provider": { "type": "string" }, "required": { "type": "boolean" }, "graphPath": { "type": "string" }, "snapshotDir": { "type": "string" }, "refreshCommand": { "type": "string" }, "scheduling": { "type": "object", "properties": { "useEdges": { "type": "boolean" }, "maxGraphHops": { "type": "integer", "minimum": 1 }, "maxSharedNodes": { "type": "integer", "minimum": 0 }, "centralityConflictThreshold": { "type": "number", "minimum": 0 } } } } },
+    "evidence": { "type": "object", "properties": { "enabled": { "type": "boolean" }, "outputDir": { "type": "string" }, "requireComplete": { "type": "boolean" } } },
+    "organization": { "type": "object", "properties": { "policyBundles": { "type": "object", "properties": { "cacheDir": { "type": "string" }, "required": { "type": "boolean" }, "sources": { "type": "array", "items": { "$ref": "#/$defs/policyBundleSource" } } } } } },
+    "distributed": { "type": "object", "properties": { "enabled": { "type": "boolean" }, "provider": { "type": "string" }, "queueDir": { "type": "string" }, "endpoint": { "type": "string", "format": "uri" }, "tokenEnv": { "type": "string" }, "pollIntervalMs": { "type": "integer", "minimum": 1 }, "leaseSeconds": { "type": "integer", "minimum": 1 }, "workerId": { "type": "string" } } },
+    "sdd": { "type": "object" }, "validation": { "type": "object" },
+    "security": { "type": "object", "properties": { "sandbox": { "type": "object", "properties": { "provider": { "type": "string" }, "required": { "type": "boolean" }, "image": { "type": "string" }, "imageDigest": { "type": "string" }, "network": { "type": "boolean" }, "extraArgs": { "type": "array", "items": { "type": "string" } }, "readOnlyRoot": { "type": "boolean" }, "ephemeralHome": { "type": "boolean" }, "noNewPrivileges": { "type": "boolean" }, "capDropAll": { "type": "boolean" }, "pidsLimit": { "type": "integer", "minimum": 1 }, "memory": { "type": "string" }, "cpus": { "type": "number", "exclusiveMinimum": 0 }, "tmpfs": { "type": "array", "items": { "type": "string" } }, "forceForRisks": { "type": "array", "items": { "enum": ["low", "medium", "high"] } }, "environmentAllowlist": { "type": "array", "items": { "type": "string" } }, "credentialEnvAllowlist": { "type": "array", "items": { "type": "string" } } } }, "tools": { "type": "array", "items": { "type": "string" } } } },
+    "telemetry": { "type": "object" },
+    "evals": { "type": "object", "properties": { "corpusDir": { "type": "string" }, "resultsDir": { "type": "string" }, "workspacesDir": { "type": "string" }, "defaultRuns": { "type": "integer", "minimum": 1 }, "confidenceLevel": { "type": "number", "exclusiveMinimum": 0, "exclusiveMaximum": 1 } } },
+    "provenance": { "type": "object" }
+  },
+  "$defs": {
+    "severityNumbers": { "type": "object", "properties": { "critical": { "type": "integer", "minimum": 0 }, "high": { "type": "integer", "minimum": 0 }, "medium": { "type": "integer", "minimum": 0 }, "low": { "type": "integer", "minimum": 0 }, "note": { "type": "integer", "minimum": 0 } } },
+    "policyBundleSource": { "type": "object", "required": ["name"], "properties": { "name": { "type": "string", "minLength": 1 }, "path": { "type": "string" }, "url": { "type": "string", "format": "uri" }, "sha256": { "type": "string", "pattern": "^[a-f0-9]{64}$" }, "required": { "type": "boolean" }, "publicKey": { "type": "string" }, "signature": { "type": "string" } } }
   },
-  "$defs": { "severityNumbers": { "type": "object", "properties": { "critical": { "type": "integer", "minimum": 0 }, "high": { "type": "integer", "minimum": 0 }, "medium": { "type": "integer", "minimum": 0 }, "low": { "type": "integer", "minimum": 0 }, "note": { "type": "integer", "minimum": 0 } } } },
   "additionalProperties": false
 }

package/skills/engineering-workflow/SKILL.md

@@ -7,6 +7,14 @@ purpose: Turn a natural-language engineering request or existing GitHub issue in
 
 You are the engineering lead entrypoint. The user may be operating from Paseo mobile and should not need to know Harness commands or manually provision engineering dependencies.
 
+## Persistent interactive entry
+
+When the current Paseo conversation was created by `aeh start`, its bootstrap is a standing instruction for the entire session. Every later user request that can mutate the repository is automatically an engineering-workflow input. The user must not need to say `aeh`, request triage, choose QUICK/SPEC, create an SDD, or name internal agents. Build the evidence and make those decisions through the Harness yourself.
+
+The bootstrap may provide an exact local AEH invocation instead of the literal `aeh` executable. Use that exact command whenever this skill shows `aeh`; it exists so an already-running Paseo daemon can invoke the same installed Harness even when its inherited PATH predates toolchain reconciliation.
+
+Read-only questions may be answered directly if they perform no repository mutation. Never use that exception to make an unsealed change. Do not bypass the Harness by implementing a mutating request directly in the parent Paseo lead.
+
 ## Entry protocol
 
 1. Identify the repository root and read `AGENTS.md`, `.harness/project.yaml`, `.harness/agents.source.jsonc`, `.harness/toolchain.yaml` when present, relevant architecture docs and current Git state.
@@ -101,7 +109,7 @@ If a QUICK implementation later reveals one of these conditions, stop the quick
 
 ## Mobile/Paseo behavior
 
-When started as a Codex lead inside Paseo, remain the parent session. Use the Harness as the control layer and allow it to spawn routed OpenCode/Codex work through the configured transports. Before delegation, reconcile the toolchain autonomously when needed. For `implement issue #X`, prefer `aeh issue implement X`; that command owns intake, freeze, optional handoff/worktree, execution and configured accepted-delivery finalization. Surface only meaningful status, deterministic failures that cannot self-recover, permission requests, true human-on-exception states, final acceptance and resulting PR/delivery state to the user. Do not surface every remediation or provisioning step as a request for approval.
+When started as a Codex lead inside Paseo, remain the parent session. When that session was created by `aeh start`, treat every later repository-changing prompt as automatically invoking this skill; never ask the user to select the Harness workflow first. Use the Harness as the control layer and allow it to spawn routed OpenCode/Codex work through the configured transports. Before delegation, reconcile the toolchain autonomously when needed. For `implement issue #X`, prefer `aeh issue implement X`; that command owns intake, freeze, optional handoff/worktree, execution and configured accepted-delivery finalization. Surface only meaningful status, deterministic failures that cannot self-recover, permission requests, true human-on-exception states, final acceptance and resulting PR/delivery state to the user. Do not surface every remediation or provisioning step as a request for approval.
 
 ## Self-modification
 

package/templates/AGENTS.md

@@ -1,5 +1,11 @@
 # Engineering Agent Contract
 
+## Interactive entry
+
+When a user is interacting through Paseo or another conversational coding-agent UI, every natural-language request that could mutate this repository must enter through the `engineering-workflow` Harness path. The user does not need to mention AEH, QUICK, SPEC, SDD, TaskContracts or validators. Build triage evidence automatically, obey the deterministic QUICK/SPEC result and invoke the Harness rather than editing directly as a shortcut. Read-only questions may be answered directly when they do not mutate repository state.
+
+`aeh start` is the preferred Paseo entrypoint. It creates or reuses a persistent top-level Harness lead whose conversation is bootstrapped with this rule.
+
 ## Lead agent
 
 The lead agent owns requirements interpretation, architecture, SDD artifacts, decomposition, review and final semantic acceptance. Prefer Codex for this role.

package/templates/project.yaml

@@ -10,6 +10,11 @@ agents:
   required: true
   findingsDir: .harness/findings
 
+controlPlane:
+  snapshotDir: .harness/controller
+  required: true
+  include: []
+
 workflow:
   quick:
     maxFiles: 5
@@ -30,6 +35,13 @@ workflow:
     requireOpen: true
     plannerAgent: planner
     autoHandoff: true
+  planning:
+    enabled: true
+    plannerAgent: planner
+    worktreeIsolation: true
+    barrierValidation: true
+    maxWaveConcurrency: 4
+    distributed: false
   reviews:
     enabled: true
     reviewQuick: false
@@ -82,6 +94,13 @@ orchestration:
   worker:
     provider: opencode
     maxRepairAttempts: 2
+  interactive:
+    autoSetup: true
+    webUi: true
+    leadAgent: lead
+    reuseSession: true
+    stateDir: .harness/paseo
+    title: AEH Lead
 
 toolchain:
   configPath: .harness/toolchain.yaml
@@ -119,6 +138,23 @@ mcp:
       url: https://mcp.sentry.dev/mcp
       enabled: false
       timeoutMs: 10000
+  benchmark:
+    enabled: false
+    resultsDir: .harness/mcp-benchmarks
+    repetitions: 3
+  packs:
+    research:
+      servers: [context7]
+      enabled: true
+    browser:
+      servers: [playwright, context7]
+      enabled: true
+    github-readonly:
+      servers: [github]
+      enabled: true
+    observability:
+      servers: [sentry]
+      enabled: false
 
 delivery:
   stateDir: .harness/delivery
@@ -149,6 +185,29 @@ codeIntelligence:
   required: false
   graphPath: graphify-out/graph.json
   snapshotDir: .harness/graphify
+  scheduling:
+    useEdges: true
+    maxGraphHops: 1
+    maxSharedNodes: 0
+    centralityConflictThreshold: 0.35
+
+evidence:
+  enabled: true
+  outputDir: .harness/evidence
+  requireComplete: true
+
+organization:
+  policyBundles:
+    cacheDir: .harness/policy-bundles
+    required: false
+    sources: []
+
+distributed:
+  enabled: false
+  provider: filesystem
+  queueDir: .harness/distributed
+  pollIntervalMs: 1000
+  leaseSeconds: 1800
 
 sdd:
   specsDir: specs
@@ -175,6 +234,14 @@ security:
   sandbox:
     provider: podman
     required: false
+    readOnlyRoot: true
+    ephemeralHome: true
+    noNewPrivileges: true
+    capDropAll: true
+    pidsLimit: 512
+    forceForRisks: []
+    environmentAllowlist: []
+    credentialEnvAllowlist: []
   tools:
     - opengrep
     - trivy
@@ -190,7 +257,9 @@ evals:
   corpusDir: evals/corpus
   resultsDir: .harness/evals/results
   workspacesDir: .harness/evals/workspaces
+  defaultRuns: 5
+  confidenceLevel: 0.95
 
 provenance:
   outputDir: .harness/provenance
-  buildType: https://github.com/JamesMorales04/agentic-engineering-harness/v0.4
+  buildType: https://github.com/JamesMorales04/agentic-engineering-harness/v0.5

package/templates/toolchain.yaml

@@ -22,7 +22,7 @@ profiles:
     tools: [uv, graphify]
   validation:
     extends: [core]
-    tools: [opa, opengrep, trivy]
+    tools: [opa, opengrep, trivy, cosign]
   full:
     extends: [agents, intelligence, validation]
     tools: [podman, dotnet, bun]
@@ -117,6 +117,13 @@ tools:
     container:
       image: ghcr.io/aquasecurity/trivy:latest
 
+  cosign:
+    kind: mise
+    command: cosign
+    source: "aqua:sigstore/cosign"
+    version: latest
+    activateWhen: [organization:signed-policy]
+
   podman:
     kind: system
     command: podman