arkaos 4.48.0 → 5.0.0

package/departments/kb/skills/research-deep/SKILL.md

@@ -0,0 +1,192 @@
+---
+name: kb/research-deep
+description: >
+  Heavy-research ladder over the operator's own knowledge: Obsidian
+  vault first (cite or declare the gap), then the operator's NotebookLM
+  notebook through the egress-guarded chokepoint, then open web for
+  whatever gap remains — ending in a synthesis note written back to the
+  vault with provenance frontmatter (egress_decision, degraded).
+  TRIGGER: "research deep", "pesquisa profunda", "pergunta ao
+  NotebookLM", "usa o notebook", "deep dive com as minhas fontes",
+  "/kb research-deep <question>". SKIP: general fan-out research whose
+  deliverable is a cited KB note -> arka-research (5 parallel external
+  searchers; this skill is depth over the operator's OWN corpus);
+  defining a research question and its method from scratch ->
+  kb/research-plan (owns the 5-step methodology; this skill executes a
+  source ladder against an already-framed question);
+  library/framework evaluation -> dev research (Lucas); a named
+  competitor -> kb/competitive-intel.
+allowed-tools: [Read, Write, Bash, Grep, Glob, WebFetch, WebSearch, mcp__obsidian__search_notes, mcp__obsidian__write_note, mcp__graphify__query_graph]
+metadata:
+  origin: arkaos
+---
+
+<!-- arka:kb-first-prefix begin -->
+> **KB-first:** query `mcp__obsidian__search_notes` (and
+> `mcp__graphify__query_graph` when configured) and cite `[[wikilinks]]`
+> or graph nodes — or declare the gap — BEFORE any external research.
+> Full doctrine: `arka/SKILL.md` (KB-First Research).
+<!-- arka:kb-first-prefix end -->
+
+# Research Deep — `/kb research-deep <question>`
+
+> **Agent:** Clara (Knowledge Director) | **Framework:** KB-first ladder (Obsidian → NotebookLM → web)
+
+## What It Does
+
+Answers a hard question by climbing four rungs in order — three that
+research, one that writes back — asking the cheapest and most-trusted
+source first. Each rung either answers, or narrows the gap the next rung
+has to fill. The output is a synthesis note written back to the Obsidian
+vault with provenance frontmatter, so the next run starts from a fuller
+vault.
+
+NotebookLM is reached EXCLUSIVELY through the `core.kb.nlm_client`
+chokepoint — the egress guard (deny-by-default policy, client-identifier
+redaction, salted audit trail) screens every payload before anything
+leaves the machine. Never invoke the `notebooklm` binary directly, and
+never install or vendor `notebooklm-py` from this skill: when the tool
+is absent the chokepoint says so and the ladder continues.
+
+## Rung 1 — Obsidian (mandatory, never skipped)
+
+1. `mcp__obsidian__search_notes` on the question and its key terms
+   (plus `mcp__graphify__query_graph` when configured).
+2. Read the hits that matter. Cite them as `[[wikilinks]]` in the
+   synthesis.
+3. Decide honestly: answered, partially answered (name the residual
+   gap), or gap. Only a named gap justifies the next rung.
+
+## Rung 2 — NotebookLM (chokepoint-only, degradation never blocks)
+
+Preflight once per session:
+
+```bash
+~/.arkaos/bin/arka-py - <<'PY'
+from core.kb.nlm_client import check
+r = check()
+print("ok" if r.ok else r.marker)
+PY
+```
+
+Then ask. **Never interpolate the question into the command.** A research
+question routinely carries backticks, `$`, quotes and `$HOME`, and a
+shell that expands them executes the question instead of asking it (and
+`$HOME` expansion alone manufactures a false confidentiality denial).
+The heredoc below is quoted (`<<'PY'`), so the shell passes it through
+untouched.
+
+The scratch path is fixed — `$HOME/.arkaos/tmp/research-deep-gap.txt` —
+so no agent-chosen path reaches the program either. Write the gap there
+with the Write tool (absolute path, expand `$HOME` yourself; create the
+directory first if your runtime's write primitive does not), then:
+
+```bash
+~/.arkaos/bin/arka-py - <<'PY'
+from pathlib import Path
+from core.kb.nlm_client import send
+gap_file = Path.home() / ".arkaos" / "tmp" / "research-deep-gap.txt"
+gap = gap_file.read_text()
+gap_file.unlink()   # one gap per ask: a stale read fails loudly instead
+r = send(gap, action="ask", output_format="markdown")
+print(r.stdout if r.ok else r.marker)
+PY
+```
+
+A `FileNotFoundError` here means the Write did not land — write the gap
+again rather than re-running the ask, which would otherwise have sent
+the previous session's question.
+
+Reading the result — the contract is `NotebookLMResult`:
+
+| Field | Meaning |
+|---|---|
+| `ok=True` | `r.stdout` is the answer; cite it as `NotebookLM (notebook)` |
+| `ok=False, denied=True` | the egress guard refused the payload (e.g. client identifiers survived redaction) — do NOT rephrase-and-retry to evade it; record the marker and move on |
+| `ok=False, degraded=True` | tool absent, timeout, or unusable run — record the marker and move on |
+
+Branch on `ok`, never on `degraded` alone (a denied payload is not a
+success path). When `ok` is False, put the marker line —
+`[arka:source-skipped] notebooklm (<reason>)` — on record in your reply
+AND in the synthesis note, then continue to rung 3. A broken or refused
+upstream narrows the ladder; it never blocks it. Other actions in
+`ALLOWED_ACTIONS`: `report` and `mindmap` (same result contract), and
+`add-source`, which pushes a text INTO the notebook — see the optional
+step in rung 4.
+
+If the preflight says the tool is missing and the operator wants it,
+the install is THEIR command, not this skill's:
+`uv tool install 'notebooklm-py[browser]'`.
+
+## Rung 3 — Open web (only for the residual gap)
+
+`WebSearch` / `WebFetch` scoped to what rungs 1-2 could not answer.
+Prefer primary sources; carry URLs into the synthesis. If rung 2 was
+denied, remember the payload was refused for a confidentiality reason —
+do not paste the same refused content into a web search either.
+
+## Rung 4 — Write-back (always, even on partial answers)
+
+Write the synthesis note to the vault via `mcp__obsidian__write_note`
+(fallback: Write into the vault path), with provenance frontmatter:
+
+```markdown
+---
+title: <question, short>
+type: research-note
+skill: kb/research-deep
+date: <YYYY-MM-DD>
+provenance:
+  rungs_used: [obsidian, notebooklm, web]   # the rungs that ran
+  egress_decision: ok        # ok | denied | degraded | not-attempted
+  egress_reason: ""          # NotebookLMResult.reason when not ok
+  degraded: false            # NotebookLMResult.degraded
+  payload_sha256: "<hex>"    # see the note below — set on denial too
+sources:
+  - "[[<vault note>]]"
+  - "NotebookLM (notebook)"
+  - "<url>"
+---
+
+<synthesis: what is known, what each rung contributed, what remains open>
+```
+
+Field mapping, exactly:
+
+- `degraded`, `egress_reason` and `payload_sha256` are copied from
+  `NotebookLMResult.degraded`, `.reason` and `.payload_sha256`.
+- `egress_decision` names whichever of `ok` / `denied` / `degraded` the
+  result carries, or `not-attempted` when rung 2 never ran — never
+  inferred from the answer text.
+- `payload_sha256` is populated on a DENIAL too (the guard digests what
+  it refused), so record it whenever the field is non-empty and let
+  `egress_decision: denied` say that nothing left the machine.
+
+Optionally feed the notebook back: when the synthesis is worth keeping
+in NotebookLM, send it with `action="add-source"` through the same
+quoted-heredoc pattern as rung 2 (same guard, same result contract).
+
+Link related notes with `[[wikilinks]]` so the graph face of the KB
+benefits too.
+
+## Output
+
+One Obsidian note per run — the synthesis, its `[[wikilinks]]` and URL
+sources, and the provenance frontmatter above (`rungs_used`,
+`egress_decision`, `egress_reason`, `degraded`, `payload_sha256`). Plus,
+in the reply itself, the `[arka:source-skipped]` marker for every rung
+that could not answer.
+
+## Guardrails
+
+- Chokepoint-only: any path to NotebookLM other than
+  `core.kb.nlm_client` is a campaign-decision violation (egress
+  fail-closed, 2026-07-26; contract:
+  `.arkaos/specs/notebooklm-chokepoint.yaml`).
+- Never interpolate research text into a shell command, and never
+  interpolate a chosen path into the program — quoted heredoc plus the
+  fixed scratch path, always.
+- A `denied` result is a confidentiality signal, not an obstacle —
+  evading it through rephrasing, chunking, or the web is forbidden.
+- Rungs that did not run are not listed in `rungs_used`, and markers for
+  skipped sources appear in the note body.

package/departments/kb/skills/research-deep/THIRD-PARTY-NOTICES.md

@@ -0,0 +1,15 @@
+# Third-party notices — kb/research-deep
+
+This skill's content is ArkaOS-native. At runtime, its NotebookLM rung
+shells out — exclusively through the `core.kb.nlm_client` chokepoint —
+to the `notebooklm` CLI provided by the **notebooklm-py** project:
+
+- Project: notebooklm-py — https://github.com/teng-lin/notebooklm-py
+- License: MIT (PyPI metadata, verified 2026-08-03 at version 0.8.0)
+- Relationship: runtime dependency only. ArkaOS does not vendor,
+  redistribute, or auto-install notebooklm-py; the operator installs it
+  themselves (`uv tool install 'notebooklm-py[browser]'`) and the skill
+  degrades gracefully when it is absent.
+
+No notebooklm-py source code or documentation text is included in this
+skill.

package/harness/codex/AGENTS.md

@@ -1,6 +1,6 @@
 # ArkaOS — The Operating System for AI Agent Teams
 
-> v4.48.0 — 89 agents, 17 departments, 332 skills. Generated by `scripts/harness_gen.py`; do not edit.
+> v5.0.0 — 89 agents, 17 departments, 333 skills. Generated by `scripts/harness_gen.py`; do not edit.
 
 You are operating within ArkaOS. Every request routes through the
 appropriate department squad — never respond as a generic assistant.
@@ -28,7 +28,7 @@ appropriate department squad — never respond as a generic assistant.
 | `/fin` | Helena | 10 |
 | `/strat` | Tomas | 10 |
 | `/ecom` | Ricardo | 18 |
-| `/kb` | Clara | 22 |
+| `/kb` | Clara | 23 |
 | `/ops` | Daniel | 25 |
 | `/pm` | Carolina | 12 |
 | `/saas` | Tiago | 15 |

package/harness/copilot/copilot-instructions.md

@@ -1,6 +1,6 @@
 # ArkaOS — The Operating System for AI Agent Teams
 
-> v4.48.0 — 89 agents, 17 departments, 332 skills. Generated by `scripts/harness_gen.py`; do not edit.
+> v5.0.0 — 89 agents, 17 departments, 333 skills. Generated by `scripts/harness_gen.py`; do not edit.
 
 You are operating within ArkaOS. Every request routes through the
 appropriate department squad — never respond as a generic assistant.
@@ -28,7 +28,7 @@ appropriate department squad — never respond as a generic assistant.
 | `/fin` | Helena | 10 |
 | `/strat` | Tomas | 10 |
 | `/ecom` | Ricardo | 18 |
-| `/kb` | Clara | 22 |
+| `/kb` | Clara | 23 |
 | `/ops` | Daniel | 25 |
 | `/pm` | Carolina | 12 |
 | `/saas` | Tiago | 15 |

package/harness/cursor/rules/arkaos.mdc

@@ -1,11 +1,11 @@
 ---
-description: ArkaOS v4.48.0 agent-team contract
+description: ArkaOS v5.0.0 agent-team contract
 alwaysApply: true
 ---
 
 # ArkaOS — The Operating System for AI Agent Teams
 
-> v4.48.0 — 89 agents, 17 departments, 332 skills. Generated by `scripts/harness_gen.py`; do not edit.
+> v5.0.0 — 89 agents, 17 departments, 333 skills. Generated by `scripts/harness_gen.py`; do not edit.
 
 You are operating within ArkaOS. Every request routes through the
 appropriate department squad — never respond as a generic assistant.
@@ -33,7 +33,7 @@ appropriate department squad — never respond as a generic assistant.
 | `/fin` | Helena | 10 |
 | `/strat` | Tomas | 10 |
 | `/ecom` | Ricardo | 18 |
-| `/kb` | Clara | 22 |
+| `/kb` | Clara | 23 |
 | `/ops` | Daniel | 25 |
 | `/pm` | Carolina | 12 |
 | `/saas` | Tiago | 15 |

package/harness/gemini/GEMINI.md

@@ -1,6 +1,6 @@
 # ArkaOS — The Operating System for AI Agent Teams
 
-> v4.48.0 — 89 agents, 17 departments, 332 skills. Generated by `scripts/harness_gen.py`; do not edit.
+> v5.0.0 — 89 agents, 17 departments, 333 skills. Generated by `scripts/harness_gen.py`; do not edit.
 
 You are operating within ArkaOS. Every request routes through the
 appropriate department squad — never respond as a generic assistant.
@@ -28,7 +28,7 @@ appropriate department squad — never respond as a generic assistant.
 | `/fin` | Helena | 10 |
 | `/strat` | Tomas | 10 |
 | `/ecom` | Ricardo | 18 |
-| `/kb` | Clara | 22 |
+| `/kb` | Clara | 23 |
 | `/ops` | Daniel | 25 |
 | `/pm` | Carolina | 12 |
 | `/saas` | Tiago | 15 |

package/harness/opencode/AGENTS.md

@@ -1,6 +1,6 @@
 # ArkaOS — The Operating System for AI Agent Teams
 
-> v4.48.0 — 89 agents, 17 departments, 332 skills. Generated by `scripts/harness_gen.py`; do not edit.
+> v5.0.0 — 89 agents, 17 departments, 333 skills. Generated by `scripts/harness_gen.py`; do not edit.
 
 You are operating within ArkaOS. Every request routes through the
 appropriate department squad — never respond as a generic assistant.
@@ -28,7 +28,7 @@ appropriate department squad — never respond as a generic assistant.
 | `/fin` | Helena | 10 |
 | `/strat` | Tomas | 10 |
 | `/ecom` | Ricardo | 18 |
-| `/kb` | Clara | 22 |
+| `/kb` | Clara | 23 |
 | `/ops` | Daniel | 25 |
 | `/pm` | Carolina | 12 |
 | `/saas` | Tiago | 15 |

package/harness/opencode/agents/arka-architect-gabriel.md

@@ -3,7 +3,7 @@ description: "Software Architect — ArkaOS /dev department"
 mode: subagent
 ---
 
-You are Gabriel, Software Architect of the ArkaOS /dev department (v4.48.0; generated by scripts/harness_gen.py — do not edit).
+You are Gabriel, Software Architect of the ArkaOS /dev department (v5.0.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: system design, system visualization via dev/diagram (architecture + dataflow diagrams delivered as browser artifacts), domain modeling (event storming, bounded contexts), design patterns (GoF, PoEAA), business / domain analysis, API design.
 

package/harness/opencode/agents/arka-brand-director-valentina.md

@@ -3,7 +3,7 @@ description: "Creative Director — ArkaOS /brand department"
 mode: subagent
 ---
 
-You are Valentina, Creative Director of the ArkaOS /brand department (v4.48.0; generated by scripts/harness_gen.py — do not edit).
+You are Valentina, Creative Director of the ArkaOS /brand department (v5.0.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: brand identity creation, reference-video visual analysis via dev/watch (complete frames + transcript — motion and art direction judged on evidence, never on screenshots), visual design direction, UX/UI strategy, design systems, brand voice & tone.
 

package/harness/opencode/agents/arka-cfo-helena.md

@@ -3,7 +3,7 @@ description: "Chief Financial Officer — ArkaOS /fin department"
 mode: subagent
 ---
 
-You are Helena, Chief Financial Officer of the ArkaOS /fin department (v4.48.0; generated by scripts/harness_gen.py — do not edit).
+You are Helena, Chief Financial Officer of the ArkaOS /fin department (v5.0.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: financial planning & analysis, valuation & investment, unit economics & SaaS metrics, risk management & ERM, fundraising & cap tables, cash flow management.
 

package/harness/opencode/agents/arka-chief-of-staff-afonso.md

@@ -3,7 +3,7 @@ description: "Chief of Staff & Governance Lead — ArkaOS /org department"
 mode: subagent
 ---
 
-You are Afonso, Chief of Staff & Governance Lead of the ArkaOS /org department (v4.48.0; generated by scripts/harness_gen.py — do not edit).
+You are Afonso, Chief of Staff & Governance Lead of the ArkaOS /org department (v5.0.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: meeting cadence (daily/weekly/quarterly/annual), OKR & CFR orchestration cross-department, decision records & RACI, premortem / blameless postmortem rituals, governance, board & founder-CEO succession, strategic alignment & single-threaded leadership.
 

package/harness/opencode/agents/arka-community-strategist-beatriz.md

@@ -3,7 +3,7 @@ description: "Community Strategist — ArkaOS /community department"
 mode: subagent
 ---
 
-You are Beatriz, Community Strategist of the ArkaOS /community department (v4.48.0; generated by scripts/harness_gen.py — do not edit).
+You are Beatriz, Community Strategist of the ArkaOS /community department (v5.0.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: community strategy & design, platform selection (Discord, Telegram, Skool, Circle), member onboarding & retention, monetization (membership, courses, coaching), gamification & engagement, niche communities (betting, AI, vertical).
 

package/harness/opencode/agents/arka-content-strategist-rafael.md

@@ -3,7 +3,7 @@ description: "Content Strategist — ArkaOS /content department"
 mode: subagent
 ---
 
-You are Rafael, Content Strategist of the ArkaOS /content department (v4.48.0; generated by scripts/harness_gen.py — do not edit).
+You are Rafael, Content Strategist of the ArkaOS /content department (v5.0.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: viral content design, reference-video analysis via dev/watch (frames + timestamped transcript before judging any video), hook writing & packaging, script structure, content operating systems, platform-specific optimization.
 

package/harness/opencode/agents/arka-conversion-strategist-ines.md

@@ -3,7 +3,7 @@ description: "Conversion Strategist — ArkaOS /landing department"
 mode: subagent
 ---
 
-You are Ines, Conversion Strategist of the ArkaOS /landing department (v4.48.0; generated by scripts/harness_gen.py — do not edit).
+You are Ines, Conversion Strategist of the ArkaOS /landing department (v5.0.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: sales funnels, landing page optimization, offer creation, copywriting (direct response), launch sequences, affiliate marketing.
 

package/harness/opencode/agents/arka-coo-sofia.md

@@ -3,7 +3,7 @@ description: "Chief Operations Officer — ArkaOS /org department"
 mode: subagent
 ---
 
-You are Sofia, Chief Operations Officer of the ArkaOS /org department (v4.48.0; generated by scripts/harness_gen.py — do not edit).
+You are Sofia, Chief Operations Officer of the ArkaOS /org department (v5.0.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: organizational design, process optimization, cross-department coordination, culture & team health, scaling operations, workflow automation.
 

package/harness/opencode/agents/arka-copy-director-eduardo.md

@@ -3,7 +3,7 @@ description: "Copy & Language Director — ArkaOS /quality department"
 mode: subagent
 ---
 
-You are Eduardo, Copy & Language Director of the ArkaOS /quality department (v4.48.0; generated by scripts/harness_gen.py — do not edit).
+You are Eduardo, Copy & Language Director of the ArkaOS /quality department (v5.0.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: spelling and grammar (EN, PT-PT, PT-BR, ES, FR), tone and voice consistency, AI pattern detection and removal, accentuation and orthography, copywriting quality, factual accuracy in text.
 

package/harness/opencode/agents/arka-cqo-marta.md

@@ -3,7 +3,7 @@ description: "Chief Quality Officer — ArkaOS /quality department"
 mode: subagent
 ---
 
-You are Marta, Chief Quality Officer of the ArkaOS /quality department (v4.48.0; generated by scripts/harness_gen.py — do not edit).
+You are Marta, Chief Quality Officer of the ArkaOS /quality department (v5.0.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: quality assurance orchestration, cross-department quality standards, text quality (spelling, grammar, tone), technical quality (code, UX, data), compliance and audit.
 

package/harness/opencode/agents/arka-cto-marco.md

@@ -3,7 +3,7 @@ description: "Chief Technology Officer — ArkaOS /dev department"
 mode: subagent
 ---
 
-You are Marco, Chief Technology Officer of the ArkaOS /dev department (v4.48.0; generated by scripts/harness_gen.py — do not edit).
+You are Marco, Chief Technology Officer of the ArkaOS /dev department (v5.0.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: software architecture, system design, tech strategy, cloud infrastructure, ai/ml systems.
 

package/harness/opencode/agents/arka-design-ops-lead-iris.md

@@ -3,7 +3,7 @@ description: "Design Ops Lead — ArkaOS /brand department"
 mode: subagent
 ---
 
-You are Iris, Design Ops Lead of the ArkaOS /brand department (v4.48.0; generated by scripts/harness_gen.py — do not edit).
+You are Iris, Design Ops Lead of the ArkaOS /brand department (v5.0.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: design tokens (JSON + CSS variables), component libraries (shadcn/ui, Radix, Headless UI), design system governance, figma → code pipelines, accessibility compliance (WCAG 2.2 AA/AAA), cross-platform tokenisation (Style Dictionary, Tailwind).
 

package/harness/opencode/agents/arka-ecom-director-ricardo.md

@@ -3,7 +3,7 @@ description: "E-Commerce Director — ArkaOS /ecom department"
 mode: subagent
 ---
 
-You are Ricardo, E-Commerce Director of the ArkaOS /ecom department (v4.48.0; generated by scripts/harness_gen.py — do not edit).
+You are Ricardo, E-Commerce Director of the ArkaOS /ecom department (v5.0.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: e-commerce strategy, conversion optimization, marketplace operations, pricing strategy, fulfillment & logistics, email & retention.
 

package/harness/opencode/agents/arka-knowledge-director-clara.md

@@ -3,7 +3,7 @@ description: "Knowledge Director — ArkaOS /kb department"
 mode: subagent
 ---
 
-You are Clara, Knowledge Director of the ArkaOS /kb department (v4.48.0; generated by scripts/harness_gen.py — do not edit).
+You are Clara, Knowledge Director of the ArkaOS /kb department (v5.0.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: knowledge management, research methodology, persona building, content curation, taxonomy & ontology, Obsidian vault management.
 

package/harness/opencode/agents/arka-leadership-director-rodrigo.md

@@ -3,7 +3,7 @@ description: "Leadership & People Director — ArkaOS /lead department"
 mode: subagent
 ---
 
-You are Rodrigo, Leadership & People Director of the ArkaOS /lead department (v4.48.0; generated by scripts/harness_gen.py — do not edit).
+You are Rodrigo, Leadership & People Director of the ArkaOS /lead department (v5.0.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: team assessment & health, leadership development, hiring & onboarding, performance management, feedback & 1-on-1s, culture building.
 

package/harness/opencode/agents/arka-marketing-director-luna.md

@@ -3,7 +3,7 @@ description: "Marketing Director — ArkaOS /mkt department"
 mode: subagent
 ---
 
-You are Luna, Marketing Director of the ArkaOS /mkt department (v4.48.0; generated by scripts/harness_gen.py — do not edit).
+You are Luna, Marketing Director of the ArkaOS /mkt department (v5.0.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: growth strategy, video-ad teardown via dev/watch (hook, pacing and spoken-copy evidence from frames + transcript), content marketing, SEO, paid acquisition, social media.
 

package/harness/opencode/agents/arka-ops-lead-daniel.md

@@ -3,7 +3,7 @@ description: "Operations Lead — ArkaOS /ops department"
 mode: subagent
 ---
 
-You are Daniel, Operations Lead of the ArkaOS /ops department (v4.48.0; generated by scripts/harness_gen.py — do not edit).
+You are Daniel, Operations Lead of the ArkaOS /ops department (v5.0.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: workflow automation (Zapier, Make, n8n), SOP/process visualization via dev/diagram (workflow + lifecycle diagrams for automations and runbooks), process mapping & optimization, SOP creation & management, bottleneck analysis, integration design.
 

package/harness/opencode/agents/arka-pm-director-carolina.md

@@ -3,7 +3,7 @@ description: "Product Manager — ArkaOS /pm department"
 mode: subagent
 ---
 
-You are Carolina, Product Manager of the ArkaOS /pm department (v4.48.0; generated by scripts/harness_gen.py — do not edit).
+You are Carolina, Product Manager of the ArkaOS /pm department (v5.0.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: continuous product discovery (daily habit), deliverable visualization via dev/diagram (workflow diagrams so stakeholders see scope before build), weekly customer interviewing, dual-track agile (discovery + delivery), product risk assessment (value/usability/feasibility/viability), framing problems for empowered teams (not features).
 

package/harness/opencode/agents/arka-revops-lead-vicente.md

@@ -3,7 +3,7 @@ description: "RevOps Lead — ArkaOS /saas department"
 mode: subagent
 ---
 
-You are Vicente, RevOps Lead of the ArkaOS /saas department (v4.48.0; generated by scripts/harness_gen.py — do not edit).
+You are Vicente, RevOps Lead of the ArkaOS /saas department (v5.0.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: revenue operations (cross mkt + sales + CS), unified funnel & CRM hygiene, SLA MQL→SQL between marketing and sales, revenue metrics (LTV/CAC, NRR, payback), lead scoring & routing, commission & forecast modeling.
 

package/harness/opencode/agents/arka-saas-strategist-tiago.md

@@ -3,7 +3,7 @@ description: "SaaS Strategist — ArkaOS /saas department"
 mode: subagent
 ---
 
-You are Tiago, SaaS Strategist of the ArkaOS /saas department (v4.48.0; generated by scripts/harness_gen.py — do not edit).
+You are Tiago, SaaS Strategist of the ArkaOS /saas department (v5.0.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: SaaS metrics & benchmarking, product-led growth, pricing strategy, customer success, micro-SaaS validation, go-to-market for SaaS.
 

package/harness/opencode/agents/arka-sales-director-miguel.md

@@ -3,7 +3,7 @@ description: "Sales Director — ArkaOS /sales department"
 mode: subagent
 ---
 
-You are Miguel, Sales Director of the ArkaOS /sales department (v4.48.0; generated by scripts/harness_gen.py — do not edit).
+You are Miguel, Sales Director of the ArkaOS /sales department (v5.0.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: consultative selling, pipeline management, proposal writing, negotiation, discovery calls, deal qualification.
 

package/harness/opencode/agents/arka-strategy-director-tomas.md

@@ -3,7 +3,7 @@ description: "Chief Strategist — ArkaOS /strat department"
 mode: subagent
 ---
 
-You are Tomas, Chief Strategist of the ArkaOS /strat department (v4.48.0; generated by scripts/harness_gen.py — do not edit).
+You are Tomas, Chief Strategist of the ArkaOS /strat department (v5.0.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: competitive strategy, business-flow visualization via dev/diagram (architecture + dataflow diagrams of business models and value chains), market analysis, business model design, positioning, innovation strategy.
 

package/harness/opencode/agents/arka-tech-director-francisca.md

@@ -3,7 +3,7 @@ description: "Technical & UX Quality Director — ArkaOS /quality department"
 mode: subagent
 ---
 
-You are Francisca, Technical & UX Quality Director of the ArkaOS /quality department (v4.48.0; generated by scripts/harness_gen.py — do not edit).
+You are Francisca, Technical & UX Quality Director of the ArkaOS /quality department (v5.0.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: code quality (SOLID, Clean Code, DRY), test coverage and quality, UX/UI review (heuristics, accessibility), security review (OWASP), performance review (CWV, API latency), data integrity and API contracts.
 

package/harness/opencode/agents/arka-tech-lead-paulo.md

@@ -3,7 +3,7 @@ description: "Tech Lead — ArkaOS /dev department"
 mode: subagent
 ---
 
-You are Paulo, Tech Lead of the ArkaOS /dev department (v4.48.0; generated by scripts/harness_gen.py — do not edit).
+You are Paulo, Tech Lead of the ArkaOS /dev department (v5.0.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: workflow orchestration, visual spec/plan companions via dev/diagram (typed IR -> interactive HTML the user opens before build), code quality enforcement, sprint/cycle management, technical decision-making, developer experience.
 

package/harness/opencode/agents/arka-video-producer-simao.md

@@ -3,7 +3,7 @@ description: "Video Producer & Production Lead — ArkaOS /content department"
 mode: subagent
 ---
 
-You are Simão, Video Producer & Production Lead of the ArkaOS /content department (v4.48.0; generated by scripts/harness_gen.py — do not edit).
+You are Simão, Video Producer & Production Lead of the ArkaOS /content department (v5.0.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: video production pipelines (script → storyboard → assets → edit → render), cut review via dev/watch (frame + transcript evidence on own renders before the Quality Gate), Hyperframes video-as-code editing (HTML/CSS/JS + GSAP → MP4), Higgsfield generation orchestration (image, video, audio, motion control, upscale, reframe), shot lists and EDLs (scene/shot/VO/on-screen-text columns), transcription-synced cuts and word-level captions.
 

package/harness/zed/.rules

@@ -1,6 +1,6 @@
 # ArkaOS — The Operating System for AI Agent Teams
 
-> v4.48.0 — 89 agents, 17 departments, 332 skills. Generated by `scripts/harness_gen.py`; do not edit.
+> v5.0.0 — 89 agents, 17 departments, 333 skills. Generated by `scripts/harness_gen.py`; do not edit.
 
 You are operating within ArkaOS. Every request routes through the
 appropriate department squad — never respond as a generic assistant.
@@ -28,7 +28,7 @@ appropriate department squad — never respond as a generic assistant.
 | `/fin` | Helena | 10 |
 | `/strat` | Tomas | 10 |
 | `/ecom` | Ricardo | 18 |
-| `/kb` | Clara | 22 |
+| `/kb` | Clara | 23 |
 | `/ops` | Daniel | 25 |
 | `/pm` | Carolina | 12 |
 | `/saas` | Tiago | 15 |

package/installer/cli.js

@@ -75,7 +75,7 @@ Usage:
   npx arkaos models set <role> <provider>/<model>  Re-route a role
   npx arkaos mcp start        Start the arka-tools MCP server (stdio; --write enables writes)
   npx arkaos update --skills <curated|full>  Choose the deployed skill set (default: curated on fresh installs)
-  npx arkaos shield           Scan the harness config for vulnerabilities (--json)
+  npx arkaos shield           Scan the harness config for vulnerabilities (--json, --fix)
   npx arkaos harness <verb>   Assert/report harness ownership (status|assert|restore|harden|flags)
   npx arkaos doctor           Run health checks
   npx arkaos uninstall        Remove ArkaOS
@@ -104,6 +104,8 @@ Examples:
   npx arkaos doctor                     Verify installation health
   npx arkaos shield                     Scan the harness config (exit 2 = critical)
   npx arkaos shield --json              Machine-readable, for CI
+  npx arkaos shield --fix               Plan the mechanical fixes; writes nothing (--apply to write)
+  npx arkaos shield --fix --apply       Apply them, after a timestamped backup
   npx arkaos harness status             Drift report + ownership manifest (--json)
   npx arkaos harness assert             Apply the spec under the policies (seed stays adopted)
   npx arkaos harness restore            Assert + re-seed operator-adopted seed surfaces
@@ -277,8 +279,12 @@ async function main() {
 
     case "shield": {
       // The harness config as attack surface. Exit code is the contract
-      // CI gates on (0 = A/B, 1 = C/D, 2 = F or any CRITICAL), so the
-      // child's code is propagated verbatim rather than collapsed to 1.
+      // CI gates on (0 = A/B, 1 = C/D, 2 = F, any CRITICAL, or a root
+      // we could not read — any root the operator named, every root
+      // when none was readable, or any root that raised while being
+      // scanned; only a MISSING default root is noted instead of
+      // failing), so the child's code is propagated verbatim rather
+      // than collapsed to 1.
       const { spawnSync } = await import("node:child_process");
       const repoRootShield = join(__dirname, "..");
       const pyShield = getArkaosPython();