arkaos 4.48.0 → 4.49.0

package/core/workflow/frontend_gate.py

@@ -35,8 +35,9 @@ from __future__ import annotations
 import json
 import os
 import re
+import time
 from dataclasses import asdict, dataclass
-from datetime import datetime, timezone
+from datetime import UTC, datetime
 from pathlib import Path
 
 from core.shared import safe_session_id as _safe_session_id_module
@@ -44,6 +45,7 @@ from core.workflow import design_authorization
 from core.workflow.flow_enforcer import (
     TRIVIAL_RE,
     _load_last_assistant_messages,
+    shadow_deny_on,
 )
 from core.workflow.specialist_enforcer import _locked_append
 
@@ -93,6 +95,11 @@ class Decision:
     marker_found: str | None = None
     marker_kind: str = "none"   # structured | legacy | trivial | none
     ui_scope: str = "suffix"    # suffix | heuristic
+    # PR-A5a shadow-deny — see flow_enforcer.Decision: what hard mode
+    # WOULD have decided, recorded while warn/off modes keep allowing.
+    would_block: bool = False
+    shadow_reason: str = ""
+    shadow_ms: float = 0.0
 
     def to_stderr_message(self) -> str:
         if self.reason == "legacy-marker":
@@ -237,6 +244,51 @@ def _marker_decision(
                     ui_scope=ui_scope)
 
 
+def _shadow_off_decision(
+    session_id: str,
+    file_path: str,
+    ui_scope: str,
+    transcript_path: str,
+    messages: list[str] | None,
+) -> Decision:
+    """Off mode with shadow-deny on (PR-A5a): evaluate the marker chain
+    anyway and record what hard mode would have decided — silently
+    (reason "flag-off" produces no stderr message)."""
+    if os.environ.get("ARKA_BYPASS_DESIGN") == "1":
+        return Decision(allow=True, reason="flag-off", mode="off",
+                        target_file=file_path, ui_scope=ui_scope,
+                        shadow_reason="env-bypass")
+    start = time.perf_counter()
+    if messages is None:
+        messages = _load_last_assistant_messages(
+            transcript_path, ASSISTANT_WINDOW
+        )
+    marker, kind = _classify_marker(messages)
+    inner = _marker_decision(session_id, marker, kind, "hard", file_path, ui_scope)
+    return Decision(
+        allow=True, reason="flag-off", mode="off", target_file=file_path,
+        marker_found=inner.marker_found, marker_kind=inner.marker_kind,
+        ui_scope=ui_scope, would_block=not inner.allow,
+        shadow_reason=inner.reason,
+        shadow_ms=round((time.perf_counter() - start) * 1000, 3),
+    )
+
+
+def _annotate_warn_shadow(decision: Decision) -> Decision:
+    """Warn mode already evaluates the full chain — annotate what hard
+    mode would have denied (suffix scope, no structured/trivial/persisted
+    marker). Zero added transcript reads; gated on the same kill-switch."""
+    if (
+        decision.allow
+        and decision.ui_scope == "suffix"
+        and decision.reason in ("legacy-marker", "no-design-marker")
+        and shadow_deny_on()
+    ):
+        decision.would_block = True
+        decision.shadow_reason = decision.reason
+    return decision
+
+
 def evaluate(
     tool_name: str,
     transcript_path: str,
@@ -252,8 +304,12 @@ def evaluate(
         return Decision(allow=True, reason="not-ui-scope", target_file=file_path)
     mode = _mode()
     if mode == "off":
-        return Decision(allow=True, reason="flag-off", mode=mode,
-                        target_file=file_path, ui_scope=ui_scope)
+        if not shadow_deny_on():
+            return Decision(allow=True, reason="flag-off", mode=mode,
+                            target_file=file_path, ui_scope=ui_scope)
+        return _shadow_off_decision(
+            session_id, file_path, ui_scope, transcript_path, messages
+        )
     if os.environ.get("ARKA_BYPASS_DESIGN") == "1":
         return Decision(allow=True, reason="env-bypass", mode=mode,
                         target_file=file_path, ui_scope=ui_scope)
@@ -262,7 +318,10 @@ def evaluate(
             transcript_path, ASSISTANT_WINDOW
         )
     marker, kind = _classify_marker(messages)
-    return _marker_decision(session_id, marker, kind, mode, file_path, ui_scope)
+    decision = _marker_decision(session_id, marker, kind, mode, file_path, ui_scope)
+    if mode == "warn":
+        decision = _annotate_warn_shadow(decision)
+    return decision
 
 
 def record_telemetry(session_id: str, tool: str, decision: Decision) -> None:
@@ -275,7 +334,7 @@ def record_telemetry(session_id: str, tool: str, decision: Decision) -> None:
     if safe is None:
         return
     entry = {
-        "ts": datetime.now(timezone.utc).isoformat(),
+        "ts": datetime.now(UTC).isoformat(),
         "session_id": safe,
         "tool": tool,
         **asdict(decision),

package/core/workflow/specialist_enforcer.py

@@ -39,8 +39,9 @@ flow-gate. Same Decision JSON contract as core.workflow.flow_enforcer.
 import contextlib
 import json
 import re
+import time
 from contextlib import contextmanager
-from dataclasses import asdict, dataclass, field
+from dataclasses import asdict, dataclass, field, replace
 from datetime import UTC, datetime
 from functools import lru_cache
 from pathlib import Path
@@ -49,6 +50,7 @@ import yaml
 
 from core.shared import safe_session_id as _safe_session_id_module
 from core.workflow import specialist_authorization, transcript_scope
+from core.workflow.flow_enforcer import shadow_deny_on
 
 try:
     import fcntl  # POSIX only
@@ -138,6 +140,11 @@ class Decision:
     persona_source: str = ""
     is_sidechain: bool = False
     msgs_since_marker: int | None = None
+    # PR-A5a shadow-deny — see flow_enforcer.Decision: what enforcement
+    # WOULD have decided while hooks.specialistEnforcement stays off.
+    would_block: bool = False
+    shadow_reason: str = ""
+    shadow_ms: float = 0.0
 
     def to_stderr_message(self) -> str:
         """The message a blocked session reads.
@@ -432,10 +439,38 @@ def _check_tool_gated(ctx: _Ctx) -> Decision | None:
     return None
 
 
-def _check_feature_flag(ctx: _Ctx) -> Decision | None:
-    if not _feature_flag_on():
-        return Decision(allow=True, reason="feature-flag-off")
-    return None
+def _decide_populated(ctx: _Ctx) -> Decision:
+    """The enforcement pipeline behind the feature flag: populate the
+    context, run the late checks, resolve ownership."""
+    _populate_context(ctx)
+    for late_check in (_check_no_persona, _check_c_suite, _check_lead_allowed_file):
+        decision = late_check(ctx)
+        if decision is not None:
+            return decision
+    return _resolve_ownership_outcome(ctx)
+
+
+def _shadow_decision(ctx: _Ctx) -> Decision:
+    """Run the pipeline in shadow (PR-A5a): allow regardless, record what
+    enforcement would have decided, carrying the resolved persona and
+    ownership context into telemetry. Silent by construction — allow=True
+    means to_stderr_message() returns "". bypass_used/bypass_reason are
+    reset: a bypass of an inactive gate is not a bypass and must not
+    inflate the specialist-telemetry counter — shadow_reason still says
+    "bypass-with-reason", so no information is lost (QG r1, Francisca B1).
+    """
+    start = time.perf_counter()
+    inner = _decide_populated(ctx)
+    return replace(
+        inner,
+        allow=True,
+        reason="feature-flag-off",
+        bypass_used=False,
+        bypass_reason=None,
+        would_block=not inner.allow,
+        shadow_reason=inner.reason,
+        shadow_ms=round((time.perf_counter() - start) * 1000, 3),
+    )
 
 
 def _msgs_since_marker(messages: list[str]) -> int | None:
@@ -626,16 +661,14 @@ def evaluate(
         session_id=session_id, cwd=cwd, tool_input=tool_input or {},
         preloaded_messages=messages, is_sidechain=is_sidechain,
     )
-    for early_check in (_check_tool_gated, _check_feature_flag):
-        decision = early_check(ctx)
-        if decision is not None:
-            return decision
-    _populate_context(ctx)
-    for late_check in (_check_no_persona, _check_c_suite, _check_lead_allowed_file):
-        decision = late_check(ctx)
-        if decision is not None:
-            return decision
-    return _resolve_ownership_outcome(ctx)
+    decision = _check_tool_gated(ctx)
+    if decision is not None:
+        return decision
+    if _feature_flag_on():
+        return _decide_populated(ctx)
+    if not shadow_deny_on():
+        return Decision(allow=True, reason="feature-flag-off")
+    return _shadow_decision(ctx)
 
 
 def record_telemetry(

package/departments/kb/SKILL.md

@@ -24,6 +24,7 @@ allowed-tools: [Read, Write, Edit, Bash, Grep, Glob, Agent, WebFetch, WebSearch]
 | `/kb learn <url>` | Ingest content (YouTube, article, PDF) into KB | Enterprise |
 | `/kb research <topic>` | Research plan and execution with source evaluation | Focused |
 | `/kb ai-research <topic>` | AI-augmented research (Elicit, Perplexity, Claude) | Focused |
+| `/kb research-deep <question>` | Ladder over the operator's own corpus: Obsidian → NotebookLM (egress-guarded) → web, with vault write-back | Focused |
 | `/kb persona <name>` | Build or view a persona from the KB | Enterprise |
 | `/kb moc <cluster>` | Create/update Map of Content | Specialist |
 | `/kb zettelkasten <note>` | Process a note through Zettelkasten workflow | Specialist |

package/departments/kb/skills/research-deep/SKILL.md

@@ -0,0 +1,192 @@
+---
+name: kb/research-deep
+description: >
+  Heavy-research ladder over the operator's own knowledge: Obsidian
+  vault first (cite or declare the gap), then the operator's NotebookLM
+  notebook through the egress-guarded chokepoint, then open web for
+  whatever gap remains — ending in a synthesis note written back to the
+  vault with provenance frontmatter (egress_decision, degraded).
+  TRIGGER: "research deep", "pesquisa profunda", "pergunta ao
+  NotebookLM", "usa o notebook", "deep dive com as minhas fontes",
+  "/kb research-deep <question>". SKIP: general fan-out research whose
+  deliverable is a cited KB note -> arka-research (5 parallel external
+  searchers; this skill is depth over the operator's OWN corpus);
+  defining a research question and its method from scratch ->
+  kb/research-plan (owns the 5-step methodology; this skill executes a
+  source ladder against an already-framed question);
+  library/framework evaluation -> dev research (Lucas); a named
+  competitor -> kb/competitive-intel.
+allowed-tools: [Read, Write, Bash, Grep, Glob, WebFetch, WebSearch, mcp__obsidian__search_notes, mcp__obsidian__write_note, mcp__graphify__query_graph]
+metadata:
+  origin: arkaos
+---
+
+<!-- arka:kb-first-prefix begin -->
+> **KB-first:** query `mcp__obsidian__search_notes` (and
+> `mcp__graphify__query_graph` when configured) and cite `[[wikilinks]]`
+> or graph nodes — or declare the gap — BEFORE any external research.
+> Full doctrine: `arka/SKILL.md` (KB-First Research).
+<!-- arka:kb-first-prefix end -->
+
+# Research Deep — `/kb research-deep <question>`
+
+> **Agent:** Clara (Knowledge Director) | **Framework:** KB-first ladder (Obsidian → NotebookLM → web)
+
+## What It Does
+
+Answers a hard question by climbing four rungs in order — three that
+research, one that writes back — asking the cheapest and most-trusted
+source first. Each rung either answers, or narrows the gap the next rung
+has to fill. The output is a synthesis note written back to the Obsidian
+vault with provenance frontmatter, so the next run starts from a fuller
+vault.
+
+NotebookLM is reached EXCLUSIVELY through the `core.kb.nlm_client`
+chokepoint — the egress guard (deny-by-default policy, client-identifier
+redaction, salted audit trail) screens every payload before anything
+leaves the machine. Never invoke the `notebooklm` binary directly, and
+never install or vendor `notebooklm-py` from this skill: when the tool
+is absent the chokepoint says so and the ladder continues.
+
+## Rung 1 — Obsidian (mandatory, never skipped)
+
+1. `mcp__obsidian__search_notes` on the question and its key terms
+   (plus `mcp__graphify__query_graph` when configured).
+2. Read the hits that matter. Cite them as `[[wikilinks]]` in the
+   synthesis.
+3. Decide honestly: answered, partially answered (name the residual
+   gap), or gap. Only a named gap justifies the next rung.
+
+## Rung 2 — NotebookLM (chokepoint-only, degradation never blocks)
+
+Preflight once per session:
+
+```bash
+~/.arkaos/bin/arka-py - <<'PY'
+from core.kb.nlm_client import check
+r = check()
+print("ok" if r.ok else r.marker)
+PY
+```
+
+Then ask. **Never interpolate the question into the command.** A research
+question routinely carries backticks, `$`, quotes and `$HOME`, and a
+shell that expands them executes the question instead of asking it (and
+`$HOME` expansion alone manufactures a false confidentiality denial).
+The heredoc below is quoted (`<<'PY'`), so the shell passes it through
+untouched.
+
+The scratch path is fixed — `$HOME/.arkaos/tmp/research-deep-gap.txt` —
+so no agent-chosen path reaches the program either. Write the gap there
+with the Write tool (absolute path, expand `$HOME` yourself; create the
+directory first if your runtime's write primitive does not), then:
+
+```bash
+~/.arkaos/bin/arka-py - <<'PY'
+from pathlib import Path
+from core.kb.nlm_client import send
+gap_file = Path.home() / ".arkaos" / "tmp" / "research-deep-gap.txt"
+gap = gap_file.read_text()
+gap_file.unlink()   # one gap per ask: a stale read fails loudly instead
+r = send(gap, action="ask", output_format="markdown")
+print(r.stdout if r.ok else r.marker)
+PY
+```
+
+A `FileNotFoundError` here means the Write did not land — write the gap
+again rather than re-running the ask, which would otherwise have sent
+the previous session's question.
+
+Reading the result — the contract is `NotebookLMResult`:
+
+| Field | Meaning |
+|---|---|
+| `ok=True` | `r.stdout` is the answer; cite it as `NotebookLM (notebook)` |
+| `ok=False, denied=True` | the egress guard refused the payload (e.g. client identifiers survived redaction) — do NOT rephrase-and-retry to evade it; record the marker and move on |
+| `ok=False, degraded=True` | tool absent, timeout, or unusable run — record the marker and move on |
+
+Branch on `ok`, never on `degraded` alone (a denied payload is not a
+success path). When `ok` is False, put the marker line —
+`[arka:source-skipped] notebooklm (<reason>)` — on record in your reply
+AND in the synthesis note, then continue to rung 3. A broken or refused
+upstream narrows the ladder; it never blocks it. Other actions in
+`ALLOWED_ACTIONS`: `report` and `mindmap` (same result contract), and
+`add-source`, which pushes a text INTO the notebook — see the optional
+step in rung 4.
+
+If the preflight says the tool is missing and the operator wants it,
+the install is THEIR command, not this skill's:
+`uv tool install 'notebooklm-py[browser]'`.
+
+## Rung 3 — Open web (only for the residual gap)
+
+`WebSearch` / `WebFetch` scoped to what rungs 1-2 could not answer.
+Prefer primary sources; carry URLs into the synthesis. If rung 2 was
+denied, remember the payload was refused for a confidentiality reason —
+do not paste the same refused content into a web search either.
+
+## Rung 4 — Write-back (always, even on partial answers)
+
+Write the synthesis note to the vault via `mcp__obsidian__write_note`
+(fallback: Write into the vault path), with provenance frontmatter:
+
+```markdown
+---
+title: <question, short>
+type: research-note
+skill: kb/research-deep
+date: <YYYY-MM-DD>
+provenance:
+  rungs_used: [obsidian, notebooklm, web]   # the rungs that ran
+  egress_decision: ok        # ok | denied | degraded | not-attempted
+  egress_reason: ""          # NotebookLMResult.reason when not ok
+  degraded: false            # NotebookLMResult.degraded
+  payload_sha256: "<hex>"    # see the note below — set on denial too
+sources:
+  - "[[<vault note>]]"
+  - "NotebookLM (notebook)"
+  - "<url>"
+---
+
+<synthesis: what is known, what each rung contributed, what remains open>
+```
+
+Field mapping, exactly:
+
+- `degraded`, `egress_reason` and `payload_sha256` are copied from
+  `NotebookLMResult.degraded`, `.reason` and `.payload_sha256`.
+- `egress_decision` names whichever of `ok` / `denied` / `degraded` the
+  result carries, or `not-attempted` when rung 2 never ran — never
+  inferred from the answer text.
+- `payload_sha256` is populated on a DENIAL too (the guard digests what
+  it refused), so record it whenever the field is non-empty and let
+  `egress_decision: denied` say that nothing left the machine.
+
+Optionally feed the notebook back: when the synthesis is worth keeping
+in NotebookLM, send it with `action="add-source"` through the same
+quoted-heredoc pattern as rung 2 (same guard, same result contract).
+
+Link related notes with `[[wikilinks]]` so the graph face of the KB
+benefits too.
+
+## Output
+
+One Obsidian note per run — the synthesis, its `[[wikilinks]]` and URL
+sources, and the provenance frontmatter above (`rungs_used`,
+`egress_decision`, `egress_reason`, `degraded`, `payload_sha256`). Plus,
+in the reply itself, the `[arka:source-skipped]` marker for every rung
+that could not answer.
+
+## Guardrails
+
+- Chokepoint-only: any path to NotebookLM other than
+  `core.kb.nlm_client` is a campaign-decision violation (egress
+  fail-closed, 2026-07-26; contract:
+  `.arkaos/specs/notebooklm-chokepoint.yaml`).
+- Never interpolate research text into a shell command, and never
+  interpolate a chosen path into the program — quoted heredoc plus the
+  fixed scratch path, always.
+- A `denied` result is a confidentiality signal, not an obstacle —
+  evading it through rephrasing, chunking, or the web is forbidden.
+- Rungs that did not run are not listed in `rungs_used`, and markers for
+  skipped sources appear in the note body.

package/departments/kb/skills/research-deep/THIRD-PARTY-NOTICES.md

@@ -0,0 +1,15 @@
+# Third-party notices — kb/research-deep
+
+This skill's content is ArkaOS-native. At runtime, its NotebookLM rung
+shells out — exclusively through the `core.kb.nlm_client` chokepoint —
+to the `notebooklm` CLI provided by the **notebooklm-py** project:
+
+- Project: notebooklm-py — https://github.com/teng-lin/notebooklm-py
+- License: MIT (PyPI metadata, verified 2026-08-03 at version 0.8.0)
+- Relationship: runtime dependency only. ArkaOS does not vendor,
+  redistribute, or auto-install notebooklm-py; the operator installs it
+  themselves (`uv tool install 'notebooklm-py[browser]'`) and the skill
+  degrades gracefully when it is absent.
+
+No notebooklm-py source code or documentation text is included in this
+skill.

package/harness/codex/AGENTS.md

@@ -1,6 +1,6 @@
 # ArkaOS — The Operating System for AI Agent Teams
 
-> v4.48.0 — 89 agents, 17 departments, 332 skills. Generated by `scripts/harness_gen.py`; do not edit.
+> v4.49.0 — 89 agents, 17 departments, 333 skills. Generated by `scripts/harness_gen.py`; do not edit.
 
 You are operating within ArkaOS. Every request routes through the
 appropriate department squad — never respond as a generic assistant.
@@ -28,7 +28,7 @@ appropriate department squad — never respond as a generic assistant.
 | `/fin` | Helena | 10 |
 | `/strat` | Tomas | 10 |
 | `/ecom` | Ricardo | 18 |
-| `/kb` | Clara | 22 |
+| `/kb` | Clara | 23 |
 | `/ops` | Daniel | 25 |
 | `/pm` | Carolina | 12 |
 | `/saas` | Tiago | 15 |

package/harness/copilot/copilot-instructions.md

@@ -1,6 +1,6 @@
 # ArkaOS — The Operating System for AI Agent Teams
 
-> v4.48.0 — 89 agents, 17 departments, 332 skills. Generated by `scripts/harness_gen.py`; do not edit.
+> v4.49.0 — 89 agents, 17 departments, 333 skills. Generated by `scripts/harness_gen.py`; do not edit.
 
 You are operating within ArkaOS. Every request routes through the
 appropriate department squad — never respond as a generic assistant.
@@ -28,7 +28,7 @@ appropriate department squad — never respond as a generic assistant.
 | `/fin` | Helena | 10 |
 | `/strat` | Tomas | 10 |
 | `/ecom` | Ricardo | 18 |
-| `/kb` | Clara | 22 |
+| `/kb` | Clara | 23 |
 | `/ops` | Daniel | 25 |
 | `/pm` | Carolina | 12 |
 | `/saas` | Tiago | 15 |

package/harness/cursor/rules/arkaos.mdc

@@ -1,11 +1,11 @@
 ---
-description: ArkaOS v4.48.0 agent-team contract
+description: ArkaOS v4.49.0 agent-team contract
 alwaysApply: true
 ---
 
 # ArkaOS — The Operating System for AI Agent Teams
 
-> v4.48.0 — 89 agents, 17 departments, 332 skills. Generated by `scripts/harness_gen.py`; do not edit.
+> v4.49.0 — 89 agents, 17 departments, 333 skills. Generated by `scripts/harness_gen.py`; do not edit.
 
 You are operating within ArkaOS. Every request routes through the
 appropriate department squad — never respond as a generic assistant.
@@ -33,7 +33,7 @@ appropriate department squad — never respond as a generic assistant.
 | `/fin` | Helena | 10 |
 | `/strat` | Tomas | 10 |
 | `/ecom` | Ricardo | 18 |
-| `/kb` | Clara | 22 |
+| `/kb` | Clara | 23 |
 | `/ops` | Daniel | 25 |
 | `/pm` | Carolina | 12 |
 | `/saas` | Tiago | 15 |

package/harness/gemini/GEMINI.md

@@ -1,6 +1,6 @@
 # ArkaOS — The Operating System for AI Agent Teams
 
-> v4.48.0 — 89 agents, 17 departments, 332 skills. Generated by `scripts/harness_gen.py`; do not edit.
+> v4.49.0 — 89 agents, 17 departments, 333 skills. Generated by `scripts/harness_gen.py`; do not edit.
 
 You are operating within ArkaOS. Every request routes through the
 appropriate department squad — never respond as a generic assistant.
@@ -28,7 +28,7 @@ appropriate department squad — never respond as a generic assistant.
 | `/fin` | Helena | 10 |
 | `/strat` | Tomas | 10 |
 | `/ecom` | Ricardo | 18 |
-| `/kb` | Clara | 22 |
+| `/kb` | Clara | 23 |
 | `/ops` | Daniel | 25 |
 | `/pm` | Carolina | 12 |
 | `/saas` | Tiago | 15 |

package/harness/opencode/AGENTS.md

@@ -1,6 +1,6 @@
 # ArkaOS — The Operating System for AI Agent Teams
 
-> v4.48.0 — 89 agents, 17 departments, 332 skills. Generated by `scripts/harness_gen.py`; do not edit.
+> v4.49.0 — 89 agents, 17 departments, 333 skills. Generated by `scripts/harness_gen.py`; do not edit.
 
 You are operating within ArkaOS. Every request routes through the
 appropriate department squad — never respond as a generic assistant.
@@ -28,7 +28,7 @@ appropriate department squad — never respond as a generic assistant.
 | `/fin` | Helena | 10 |
 | `/strat` | Tomas | 10 |
 | `/ecom` | Ricardo | 18 |
-| `/kb` | Clara | 22 |
+| `/kb` | Clara | 23 |
 | `/ops` | Daniel | 25 |
 | `/pm` | Carolina | 12 |
 | `/saas` | Tiago | 15 |

package/harness/opencode/agents/arka-architect-gabriel.md

@@ -3,7 +3,7 @@ description: "Software Architect — ArkaOS /dev department"
 mode: subagent
 ---
 
-You are Gabriel, Software Architect of the ArkaOS /dev department (v4.48.0; generated by scripts/harness_gen.py — do not edit).
+You are Gabriel, Software Architect of the ArkaOS /dev department (v4.49.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: system design, system visualization via dev/diagram (architecture + dataflow diagrams delivered as browser artifacts), domain modeling (event storming, bounded contexts), design patterns (GoF, PoEAA), business / domain analysis, API design.
 

package/harness/opencode/agents/arka-brand-director-valentina.md

@@ -3,7 +3,7 @@ description: "Creative Director — ArkaOS /brand department"
 mode: subagent
 ---
 
-You are Valentina, Creative Director of the ArkaOS /brand department (v4.48.0; generated by scripts/harness_gen.py — do not edit).
+You are Valentina, Creative Director of the ArkaOS /brand department (v4.49.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: brand identity creation, reference-video visual analysis via dev/watch (complete frames + transcript — motion and art direction judged on evidence, never on screenshots), visual design direction, UX/UI strategy, design systems, brand voice & tone.
 

package/harness/opencode/agents/arka-cfo-helena.md

@@ -3,7 +3,7 @@ description: "Chief Financial Officer — ArkaOS /fin department"
 mode: subagent
 ---
 
-You are Helena, Chief Financial Officer of the ArkaOS /fin department (v4.48.0; generated by scripts/harness_gen.py — do not edit).
+You are Helena, Chief Financial Officer of the ArkaOS /fin department (v4.49.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: financial planning & analysis, valuation & investment, unit economics & SaaS metrics, risk management & ERM, fundraising & cap tables, cash flow management.
 

package/harness/opencode/agents/arka-chief-of-staff-afonso.md

@@ -3,7 +3,7 @@ description: "Chief of Staff & Governance Lead — ArkaOS /org department"
 mode: subagent
 ---
 
-You are Afonso, Chief of Staff & Governance Lead of the ArkaOS /org department (v4.48.0; generated by scripts/harness_gen.py — do not edit).
+You are Afonso, Chief of Staff & Governance Lead of the ArkaOS /org department (v4.49.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: meeting cadence (daily/weekly/quarterly/annual), OKR & CFR orchestration cross-department, decision records & RACI, premortem / blameless postmortem rituals, governance, board & founder-CEO succession, strategic alignment & single-threaded leadership.
 

package/harness/opencode/agents/arka-community-strategist-beatriz.md

@@ -3,7 +3,7 @@ description: "Community Strategist — ArkaOS /community department"
 mode: subagent
 ---
 
-You are Beatriz, Community Strategist of the ArkaOS /community department (v4.48.0; generated by scripts/harness_gen.py — do not edit).
+You are Beatriz, Community Strategist of the ArkaOS /community department (v4.49.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: community strategy & design, platform selection (Discord, Telegram, Skool, Circle), member onboarding & retention, monetization (membership, courses, coaching), gamification & engagement, niche communities (betting, AI, vertical).
 

package/harness/opencode/agents/arka-content-strategist-rafael.md

@@ -3,7 +3,7 @@ description: "Content Strategist — ArkaOS /content department"
 mode: subagent
 ---
 
-You are Rafael, Content Strategist of the ArkaOS /content department (v4.48.0; generated by scripts/harness_gen.py — do not edit).
+You are Rafael, Content Strategist of the ArkaOS /content department (v4.49.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: viral content design, reference-video analysis via dev/watch (frames + timestamped transcript before judging any video), hook writing & packaging, script structure, content operating systems, platform-specific optimization.
 

package/harness/opencode/agents/arka-conversion-strategist-ines.md

@@ -3,7 +3,7 @@ description: "Conversion Strategist — ArkaOS /landing department"
 mode: subagent
 ---
 
-You are Ines, Conversion Strategist of the ArkaOS /landing department (v4.48.0; generated by scripts/harness_gen.py — do not edit).
+You are Ines, Conversion Strategist of the ArkaOS /landing department (v4.49.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: sales funnels, landing page optimization, offer creation, copywriting (direct response), launch sequences, affiliate marketing.
 

package/harness/opencode/agents/arka-coo-sofia.md

@@ -3,7 +3,7 @@ description: "Chief Operations Officer — ArkaOS /org department"
 mode: subagent
 ---
 
-You are Sofia, Chief Operations Officer of the ArkaOS /org department (v4.48.0; generated by scripts/harness_gen.py — do not edit).
+You are Sofia, Chief Operations Officer of the ArkaOS /org department (v4.49.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: organizational design, process optimization, cross-department coordination, culture & team health, scaling operations, workflow automation.
 

package/harness/opencode/agents/arka-copy-director-eduardo.md

@@ -3,7 +3,7 @@ description: "Copy & Language Director — ArkaOS /quality department"
 mode: subagent
 ---
 
-You are Eduardo, Copy & Language Director of the ArkaOS /quality department (v4.48.0; generated by scripts/harness_gen.py — do not edit).
+You are Eduardo, Copy & Language Director of the ArkaOS /quality department (v4.49.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: spelling and grammar (EN, PT-PT, PT-BR, ES, FR), tone and voice consistency, AI pattern detection and removal, accentuation and orthography, copywriting quality, factual accuracy in text.
 

package/harness/opencode/agents/arka-cqo-marta.md

@@ -3,7 +3,7 @@ description: "Chief Quality Officer — ArkaOS /quality department"
 mode: subagent
 ---
 
-You are Marta, Chief Quality Officer of the ArkaOS /quality department (v4.48.0; generated by scripts/harness_gen.py — do not edit).
+You are Marta, Chief Quality Officer of the ArkaOS /quality department (v4.49.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: quality assurance orchestration, cross-department quality standards, text quality (spelling, grammar, tone), technical quality (code, UX, data), compliance and audit.
 

package/harness/opencode/agents/arka-cto-marco.md

@@ -3,7 +3,7 @@ description: "Chief Technology Officer — ArkaOS /dev department"
 mode: subagent
 ---
 
-You are Marco, Chief Technology Officer of the ArkaOS /dev department (v4.48.0; generated by scripts/harness_gen.py — do not edit).
+You are Marco, Chief Technology Officer of the ArkaOS /dev department (v4.49.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: software architecture, system design, tech strategy, cloud infrastructure, ai/ml systems.
 

package/harness/opencode/agents/arka-design-ops-lead-iris.md

@@ -3,7 +3,7 @@ description: "Design Ops Lead — ArkaOS /brand department"
 mode: subagent
 ---
 
-You are Iris, Design Ops Lead of the ArkaOS /brand department (v4.48.0; generated by scripts/harness_gen.py — do not edit).
+You are Iris, Design Ops Lead of the ArkaOS /brand department (v4.49.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: design tokens (JSON + CSS variables), component libraries (shadcn/ui, Radix, Headless UI), design system governance, figma → code pipelines, accessibility compliance (WCAG 2.2 AA/AAA), cross-platform tokenisation (Style Dictionary, Tailwind).