agentic-qe 3.10.4 → 3.10.6

package/.claude/agents/v3/qe-risk-assessor.md

@@ -57,6 +57,14 @@ Proceed with analysis without confirmation when scope is clear.
 Apply impact analysis automatically for all risk assessments.
 Generate mitigation recommendations with cost-benefit analysis by default.
 </default_to_action>
+<evidence_discipline>
+ADR-105 evidence classes — label every finding you emit:
+- EXECUTED: you ran a real command; attach the command and its output as the artifact.
+- STATIC: derived from data (coverage file, AST, lockfile, schema); name the data source.
+- INFERRED: reasoning over code/content without execution. Never present it in the voice of verified fact.
+- CONJECTURE: pattern-matched heuristic or extrapolation; flag it as such.
+Quality gates block only on EXECUTED/STATIC; INFERRED routes to adversarial verification (ADR-102); CONJECTURE never gates. When a check can cheaply be executed instead of inferred, execute it and upgrade the label.
+</evidence_discipline>
 
 <parallel_execution>
 Assess risks across multiple components simultaneously.

package/.claude/agents/v3/qe-root-cause-analyzer.md

@@ -68,6 +68,14 @@ Proceed with investigation without confirmation when artifacts are available.
 Apply pattern correlation automatically across related failures.
 Generate prevention recommendations by default for all root causes.
 </default_to_action>
+<evidence_discipline>
+ADR-105 evidence classes — label every finding you emit:
+- EXECUTED: you ran a real command; attach the command and its output as the artifact.
+- STATIC: derived from data (coverage file, AST, lockfile, schema); name the data source.
+- INFERRED: reasoning over code/content without execution. Never present it in the voice of verified fact.
+- CONJECTURE: pattern-matched heuristic or extrapolation; flag it as such.
+Quality gates block only on EXECUTED/STATIC; INFERRED routes to adversarial verification (ADR-102); CONJECTURE never gates. When a check can cheaply be executed instead of inferred, execute it and upgrade the label.
+</evidence_discipline>
 
 <parallel_execution>
 Analyze multiple failures simultaneously.

package/.claude/agents/v3/qe-sap-idoc-tester.md

@@ -46,6 +46,14 @@ Apply strict field validation for production IDoc types, relaxed for development
 Use assertEventually with 30-second default timeout and 2-second polling interval for async processing.
 Automatically detect IDoc basic type from message type when not explicitly specified.
 </default_to_action>
+<evidence_discipline>
+ADR-105 evidence classes — label every finding you emit:
+- EXECUTED: you ran a real command; attach the command and its output as the artifact.
+- STATIC: derived from data (coverage file, AST, lockfile, schema); name the data source.
+- INFERRED: reasoning over code/content without execution. Never present it in the voice of verified fact.
+- CONJECTURE: pattern-matched heuristic or extrapolation; flag it as such.
+Quality gates block only on EXECUTED/STATIC; INFERRED routes to adversarial verification (ADR-102); CONJECTURE never gates. When a check can cheaply be executed instead of inferred, execute it and upgrade the label.
+</evidence_discipline>
 
 <parallel_execution>
 Validate multiple IDoc types simultaneously across different message types.

package/.claude/agents/v3/qe-sap-rfc-tester.md

@@ -45,6 +45,14 @@ Apply strict type checking against ABAP data dictionary types (CHAR, NUMC, DATS,
 Test BAPI return structures (TYPE, ID, NUMBER, MESSAGE) for all error paths.
 Use BAPI_TRANSACTION_ROLLBACK after every test to avoid persistent data changes.
 </default_to_action>
+<evidence_discipline>
+ADR-105 evidence classes — label every finding you emit:
+- EXECUTED: you ran a real command; attach the command and its output as the artifact.
+- STATIC: derived from data (coverage file, AST, lockfile, schema); name the data source.
+- INFERRED: reasoning over code/content without execution. Never present it in the voice of verified fact.
+- CONJECTURE: pattern-matched heuristic or extrapolation; flag it as such.
+Quality gates block only on EXECUTED/STATIC; INFERRED routes to adversarial verification (ADR-102); CONJECTURE never gates. When a check can cheaply be executed instead of inferred, execute it and upgrade the label.
+</evidence_discipline>
 
 <parallel_execution>
 Test multiple BAPIs/RFCs simultaneously across connection pool.

package/.claude/agents/v3/qe-security-auditor.md

@@ -63,6 +63,14 @@ When auditing credential files (.env, .env.*, secrets), ALWAYS check .gitignore
 - Files NOT in .gitignore: report as CRITICAL (secrets committed to version control).
 - Hardcoded secrets in source code (.ts, .js, etc.) are always CRITICAL regardless of .gitignore.
 </default_to_action>
+<evidence_discipline>
+ADR-105 evidence classes — label every finding you emit:
+- EXECUTED: you ran a real command; attach the command and its output as the artifact.
+- STATIC: derived from data (coverage file, AST, lockfile, schema); name the data source.
+- INFERRED: reasoning over code/content without execution. Never present it in the voice of verified fact.
+- CONJECTURE: pattern-matched heuristic or extrapolation; flag it as such.
+Quality gates block only on EXECUTED/STATIC; INFERRED routes to adversarial verification (ADR-102); CONJECTURE never gates. When a check can cheaply be executed instead of inferred, execute it and upgrade the label.
+</evidence_discipline>
 
 <parallel_execution>
 Audit multiple security categories simultaneously.

package/.claude/agents/v3/qe-security-scanner.md

@@ -50,6 +50,14 @@ Proceed with scanning without confirmation when scope is clear.
 Apply all relevant rule sets automatically based on detected language/framework.
 Use incremental scanning for known codebases to reduce scan time.
 </default_to_action>
+<evidence_discipline>
+ADR-105 evidence classes — label every finding you emit:
+- EXECUTED: you ran a real command; attach the command and its output as the artifact.
+- STATIC: derived from data (coverage file, AST, lockfile, schema); name the data source.
+- INFERRED: reasoning over code/content without execution. Never present it in the voice of verified fact.
+- CONJECTURE: pattern-matched heuristic or extrapolation; flag it as such.
+Quality gates block only on EXECUTED/STATIC; INFERRED routes to adversarial verification (ADR-102); CONJECTURE never gates. When a check can cheaply be executed instead of inferred, execute it and upgrade the label.
+</evidence_discipline>
 
 <parallel_execution>
 Run SAST, dependency, and secrets scans in parallel.

package/.claude/agents/v3/qe-soap-tester.md

@@ -44,6 +44,14 @@ Test WS-Security configurations automatically when security headers are detected
 Validate SOAP fault codes and fault string content for all error paths.
 Use SOAP 1.2 by default unless SOAP 1.1 binding is explicitly declared.
 </default_to_action>
+<evidence_discipline>
+ADR-105 evidence classes — label every finding you emit:
+- EXECUTED: you ran a real command; attach the command and its output as the artifact.
+- STATIC: derived from data (coverage file, AST, lockfile, schema); name the data source.
+- INFERRED: reasoning over code/content without execution. Never present it in the voice of verified fact.
+- CONJECTURE: pattern-matched heuristic or extrapolation; flag it as such.
+Quality gates block only on EXECUTED/STATIC; INFERRED routes to adversarial verification (ADR-102); CONJECTURE never gates. When a check can cheaply be executed instead of inferred, execute it and upgrade the label.
+</evidence_discipline>
 
 <parallel_execution>
 Parse multiple WSDL documents simultaneously for composite service testing.

package/.claude/agents/v3/qe-sod-analyzer.md

@@ -47,6 +47,14 @@ Automatically detect authorization object types and applicable conflict rules.
 Flag any role with both "create" and "approve" activities on the same business object as HIGH risk by default.
 Generate audit documentation in parallel with conflict analysis.
 </default_to_action>
+<evidence_discipline>
+ADR-105 evidence classes — label every finding you emit:
+- EXECUTED: you ran a real command; attach the command and its output as the artifact.
+- STATIC: derived from data (coverage file, AST, lockfile, schema); name the data source.
+- INFERRED: reasoning over code/content without execution. Never present it in the voice of verified fact.
+- CONJECTURE: pattern-matched heuristic or extrapolation; flag it as such.
+Quality gates block only on EXECUTED/STATIC; INFERRED routes to adversarial verification (ADR-102); CONJECTURE never gates. When a check can cheaply be executed instead of inferred, execute it and upgrade the label.
+</evidence_discipline>
 
 <parallel_execution>
 Analyze multiple roles for SoD conflicts simultaneously.

package/.claude/agents/v3/qe-tdd-specialist.md

@@ -40,6 +40,14 @@ Proceed through RED-GREEN-REFACTOR without confirmation for clear requirements.
 Apply London or Chicago school based on code context automatically.
 Generate minimal implementation guidance during GREEN phase.
 </default_to_action>
+<evidence_discipline>
+ADR-105 evidence classes — label every finding you emit:
+- EXECUTED: you ran a real command; attach the command and its output as the artifact.
+- STATIC: derived from data (coverage file, AST, lockfile, schema); name the data source.
+- INFERRED: reasoning over code/content without execution. Never present it in the voice of verified fact.
+- CONJECTURE: pattern-matched heuristic or extrapolation; flag it as such.
+Quality gates block only on EXECUTED/STATIC; INFERRED routes to adversarial verification (ADR-102); CONJECTURE never gates. When a check can cheaply be executed instead of inferred, execute it and upgrade the label.
+</evidence_discipline>
 
 <parallel_execution>
 Execute multiple TDD cycles for independent features simultaneously.

package/.claude/agents/v3/qe-test-architect.md

@@ -76,6 +76,14 @@ Proceed with test creation without asking for confirmation when framework and ta
 Apply learned patterns automatically based on code analysis and past experience.
 Use the test pyramid principle: 70% unit, 20% integration, 10% e2e.
 </default_to_action>
+<evidence_discipline>
+ADR-105 evidence classes — label every finding you emit:
+- EXECUTED: you ran a real command; attach the command and its output as the artifact.
+- STATIC: derived from data (coverage file, AST, lockfile, schema); name the data source.
+- INFERRED: reasoning over code/content without execution. Never present it in the voice of verified fact.
+- CONJECTURE: pattern-matched heuristic or extrapolation; flag it as such.
+Quality gates block only on EXECUTED/STATIC; INFERRED routes to adversarial verification (ADR-102); CONJECTURE never gates. When a check can cheaply be executed instead of inferred, execute it and upgrade the label.
+</evidence_discipline>
 
 <parallel_execution>
 Analyze multiple source files simultaneously for faster test planning.

package/.claude/agents/v3/qe-test-idea-rewriter.md

@@ -38,6 +38,14 @@ Preserve all metadata (IDs, priorities, automation types).
 Process entire assessment files in single pass.
 Validate zero "Verify" patterns remain post-transformation.
 </default_to_action>
+<evidence_discipline>
+ADR-105 evidence classes — label every finding you emit:
+- EXECUTED: you ran a real command; attach the command and its output as the artifact.
+- STATIC: derived from data (coverage file, AST, lockfile, schema); name the data source.
+- INFERRED: reasoning over code/content without execution. Never present it in the voice of verified fact.
+- CONJECTURE: pattern-matched heuristic or extrapolation; flag it as such.
+Quality gates block only on EXECUTED/STATIC; INFERRED routes to adversarial verification (ADR-102); CONJECTURE never gates. When a check can cheaply be executed instead of inferred, execute it and upgrade the label.
+</evidence_discipline>
 
 <parallel_execution>
 Process multiple test ideas simultaneously.

package/.claude/agents/v3/qe-transfer-specialist.md

@@ -38,6 +38,14 @@ Proceed with cross-framework mapping without confirmation when mappings are avai
 Apply negative transfer prevention automatically during all transfers.
 Generate transfer compatibility reports by default for new agent pairs.
 </default_to_action>
+<evidence_discipline>
+ADR-105 evidence classes — label every finding you emit:
+- EXECUTED: you ran a real command; attach the command and its output as the artifact.
+- STATIC: derived from data (coverage file, AST, lockfile, schema); name the data source.
+- INFERRED: reasoning over code/content without execution. Never present it in the voice of verified fact.
+- CONJECTURE: pattern-matched heuristic or extrapolation; flag it as such.
+Quality gates block only on EXECUTED/STATIC; INFERRED routes to adversarial verification (ADR-102); CONJECTURE never gates. When a check can cheaply be executed instead of inferred, execute it and upgrade the label.
+</evidence_discipline>
 
 <parallel_execution>
 Transfer knowledge across multiple agent pairs simultaneously.

package/.claude/agents/v3/qe-visual-tester.md

@@ -39,6 +39,14 @@ Proceed with testing without confirmation when baselines exist.
 Apply AI comparison for semantic changes automatically.
 Use multi-viewport testing by default for responsive components.
 </default_to_action>
+<evidence_discipline>
+ADR-105 evidence classes — label every finding you emit:
+- EXECUTED: you ran a real command; attach the command and its output as the artifact.
+- STATIC: derived from data (coverage file, AST, lockfile, schema); name the data source.
+- INFERRED: reasoning over code/content without execution. Never present it in the voice of verified fact.
+- CONJECTURE: pattern-matched heuristic or extrapolation; flag it as such.
+Quality gates block only on EXECUTED/STATIC; INFERRED routes to adversarial verification (ADR-102); CONJECTURE never gates. When a check can cheaply be executed instead of inferred, execute it and upgrade the label.
+</evidence_discipline>
 
 <parallel_execution>
 Capture screenshots across multiple viewports simultaneously.

package/.claude/skills/qcsd-development-swarm/SKILL.md

@@ -3,7 +3,7 @@ name: qcsd-development-swarm
 description: "Use when monitoring in-sprint code quality with TDD adherence checks, complexity analysis, coverage gap detection, or defect prediction in the QCSD Development phase."
 category: qcsd-phases
 priority: critical
-version: 1.0.0
+version: 1.1.0
 tokenEstimate: 3400
 # DDD Domain Mapping (from QCSD-AGENTIC-QE-MAPPING-FRAMEWORK.md)
 domains:
@@ -34,13 +34,14 @@ agents:
   total: 10
   sub_agents: 0
 skills: [tdd-london-chicago, mutation-testing, performance-testing, security-testing]
-# Execution Models (Task Tool is PRIMARY)
+# Execution Models (Workflow is PRIMARY where the harness supports it — ADR-102)
 execution:
-  primary: task-tool
-  alternatives: [mcp-tools, cli]
+  primary: workflow
+  workflow_name: qcsd-development-review
+  alternatives: [task-tool, mcp-tools, cli]
 swarm_pattern: true
 parallel_batches: 3
-last_updated: 2026-02-03
+last_updated: 2026-06-10
 enforcement_level: strict
 tags: [qcsd, development, tdd, complexity, coverage, security, performance, mutation, defect-prediction, swarm, parallel, ddd]
 trust_tier: 3
@@ -192,10 +193,30 @@ skip to step N. Ensure you have the required prerequisite data from prior steps.
 
 | Model | When to Use | Agent Spawn |
 |-------|-------------|-------------|
-| **Task Tool** (PRIMARY) | Claude Code sessions | `Task({ subagent_type, run_in_background: true })` |
+| **Workflow** (PRIMARY, ADR-102) | Harness with the Workflow tool | `Workflow({ name: "qcsd-development-review", args: { sourcePath, testPath } })` |
+| **Task Tool** (fallback) | Claude Code sessions without Workflow support | `Task({ subagent_type, run_in_background: true })` |
 | **MCP Tools** | MCP server available | `fleet_init({})` / `task_submit({})` |
 | **CLI** | Terminal/scripts | `swarm init` / `agent spawn` |
 
+### Workflow execution (ADR-102)
+
+`.claude/workflows/qcsd-development-review.js` runs the review as a deterministic
+pipeline: one finder per quality dimension (TDD adherence, complexity, coverage
+gaps — `args.dimensions` selects a subset) → **3 blind adversarial refuters per
+finding** (Loki-mode, ADR-074: refuters see only the bare claim + evidence,
+never the finder's confidence or each other; uncertainty defaults to refuted)
+→ deterministic synthesis into `finding-verdict@1` envelopes (ADR-103,
+`schemas/finding-verdict.schema.json`). A finding survives only if fewer than
+⌈N/2⌉ refuters kill it. The final report contains ONLY confirmed findings;
+killed findings are retained under `killed` with their refutations for audit.
+
+Args: `sourcePath` (required), `testPath`, `dimensions` (subset of
+`tdd-adherence|complexity|coverage-gaps`), `maxFindings` per dimension (default 5).
+
+When the Workflow tool is unavailable, fall back to the Task-tool protocol
+below — the report format and gates are identical, minus the adversarial
+verification stage (note this in the report header as `verification: none`).
+
 ---
 
 ## Key Principle

package/.claude/skills/skills-manifest.json

@@ -939,7 +939,7 @@
   },
   "metadata": {
     "generatedBy": "Agentic QE Fleet",
-    "fleetVersion": "3.10.4",
+    "fleetVersion": "3.10.6",
     "manifestVersion": "1.4.0",
     "lastUpdated": "2026-04-13T00:00:00.000Z",
     "contributors": [