create-harness-vibe-coding 0.8.19 → 0.9.3

package/templates/common/Harness/a2a/skills/workflow-goal-node.json

@@ -0,0 +1,76 @@
+{
+  "schemaVersion": 1,
+  "skillId": "workflow-goal-node",
+  "name": "Workflow Goal Node",
+  "source": "Harness/a2a/skills/workflow-goal-node.json",
+  "description": "On-demand Agent guide for reading and updating Goal nodes through typed backend actions only.",
+  "nodeType": "goal",
+  "singleGoalPerGroup": {
+    "rule": "A magnetic group that contains a Timer and an Agent may contain at most one Goal node.",
+    "onRejected": "If the backend rejects creating or connecting a second Goal with goal_already_bound, stop: the group already has a Goal bound to its Timer. Do not force a second Goal into the group."
+  },
+  "triggers": [
+    "goal node",
+    "goal update",
+    "goal add item",
+    "goal check item",
+    "goal complete",
+    "tick goal",
+    "acceptance",
+    "request completion",
+    "return to work",
+    "goal watchdog",
+    "connected goal"
+  ],
+  "controlSurface": {
+    "endpoint": "POST /api/workflow/nodes/:node/actions/:action",
+    "readContextFirst": "node Harness/scripts/wf-ui-control.mjs workflow-context --project .",
+    "storage": "Goal/task state sidecars are backend-owned diagnostic storage, never an Agent control surface.",
+    "connectionRequirement": "Agent-authored Goal edits require a linked bidirectional goal edge."
+  },
+  "environment": [
+    "HARNESS_PEER_SESSION_ID",
+    "HARNESS_PEER_RUNTIME",
+    "HARNESS_AGENT_KIND",
+    "HARNESS_WORKFLOW_MODE",
+    "HARNESS_WORKFLOW_NODE_ID",
+    "HARNESS_WORKFLOW_MAP",
+    "HARNESS_NODE_HOME",
+    "HARNESS_NODE_INIT",
+    "HARNESS_WF_UI_URL"
+  ],
+  "policy": {
+    "allowed": [
+      "goal.read",
+      "goal.update",
+      "goal.add",
+      "goal.delete",
+      "goal.replace",
+      "goal.check",
+      "goal.uncheck",
+      "goal.complete",
+      "goal.reopen",
+      "goal.requestCompletion",
+      "goal.returnToWork",
+      "goal.ackWatchdog"
+    ],
+    "requires": [
+      "workflow-context-before-action",
+      "linked-goal-edge-for-agent-actions",
+      "typed-backend-node-actions"
+    ],
+    "denied": [
+      "direct-goal-node-state-file-edit",
+      "goal-node-state-json-mutation",
+      "task-state-mutation",
+      "direct-json-state-mutation",
+      "workflow-map-file-mutation"
+    ]
+  },
+  "prohibitions": [
+    "Never edit `Harness/a2a/**/state.json` directly — use typed actions.",
+    "Never edit Goal or task state files directly.",
+    "Never mutate the workflow map file.",
+    "Never create or connect a second Goal into a Timer/Agent group that already has one (goal_already_bound)."
+  ]
+}

package/templates/common/Harness/a2a/skills/workflow-markdown-node.json

@@ -0,0 +1,79 @@
+{
+  "schemaVersion": 1,
+  "skillId": "workflow-markdown-node",
+  "name": "Workflow Markdown Node",
+  "source": "Harness/a2a/skills/workflow-markdown-node.json",
+  "description": "On-demand Agent guide for reading and writing Markdown nodes through typed backend actions only.",
+  "nodeType": "markdown",
+  "findGuidance": {
+    "how": "Find Markdown nodes by nodeId (exact) or title (substring) with markdown.find. It returns metadata only (nodeId, title, revision) — never content. Share nodes by nodeId only in request contextRefs; receivers read the content through typed actions."
+  },
+  "revisionGuard": {
+    "guidance": "markdown.patch, markdown.append, and markdown.replace accept optional expectedRevision (and lockId). When expectedRevision does not match the current revision, no write occurs.",
+    "conflict": {
+      "error": "markdown_conflict",
+      "fields": ["currentRevision", "expectedRevision"],
+      "recover": "Reread the node (markdown.read), merge your changes, re-acquire the lock if needed, and retry with the fresh currentRevision."
+    },
+    "locked": {
+      "error": "markdown_locked",
+      "fields": ["holder", "expiresAt"],
+      "recover": "The lease expires at expiresAt (default 30 seconds). Wait for expiry or ask the holder to release, then retry."
+    }
+  },
+  "triggers": [
+    "markdown node",
+    "find markdown",
+    "lock markdown",
+    "write notes",
+    "append markdown",
+    "replace markdown",
+    "connected markdown",
+    "durable text output"
+  ],
+  "controlSurface": {
+    "endpoint": "POST /api/workflow/nodes/:node/actions/:action",
+    "readContextFirst": "node Harness/scripts/wf-ui-control.mjs workflow-context --project .",
+    "storage": "Harness/a2a/component-nodes/**/state.json is backend-owned diagnostic storage, never an Agent control surface.",
+    "outputRouting": "Prefer connected writable Markdown nodes for durable notes, reports, task plans, and long-form text."
+  },
+  "environment": [
+    "HARNESS_PEER_SESSION_ID",
+    "HARNESS_PEER_RUNTIME",
+    "HARNESS_AGENT_KIND",
+    "HARNESS_WORKFLOW_MODE",
+    "HARNESS_WORKFLOW_NODE_ID",
+    "HARNESS_WORKFLOW_MAP",
+    "HARNESS_NODE_HOME",
+    "HARNESS_NODE_INIT",
+    "HARNESS_WF_UI_URL"
+  ],
+  "policy": {
+    "allowed": [
+      "markdown.find",
+      "markdown.read",
+      "markdown.append",
+      "markdown.replace",
+      "markdown.patch",
+      "markdown.acquireLock",
+      "markdown.releaseLock"
+    ],
+    "requires": [
+      "workflow-context-before-action",
+      "connected-resource-ref",
+      "typed-backend-node-actions"
+    ],
+    "denied": [
+      "component-state-file-mutation",
+      "direct-component-node-state-file-edit",
+      "direct-json-state-mutation",
+      "workflow-map-file-mutation"
+    ]
+  },
+  "prohibitions": [
+    "Never edit `Harness/a2a/**/state.json` directly — use typed actions.",
+    "Never edit component-node state files or the workflow map file.",
+    "Never inline a Markdown body in a request payload; share the node by nodeId only.",
+    "Never overwrite another writer's changes: always use the lock and expectedRevision, and reread-and-retry on markdown_conflict."
+  ]
+}

package/templates/common/Harness/a2a/skills/workflow-mcp-connector-node.json

@@ -0,0 +1,59 @@
+{
+  "schemaVersion": 1,
+  "skillId": "workflow-mcp-connector-node",
+  "name": "Workflow MCP Connector Node",
+  "source": "Harness/a2a/skills/workflow-mcp-connector-node.json",
+  "description": "On-demand Agent guide for MCP connector nodes as metadata-only capability providers.",
+  "nodeType": "mcp-connector",
+  "createKind": "mcp",
+  "triggers": [
+    "mcp connector node",
+    "mcp node",
+    "mcp tools",
+    "mcp resources",
+    "connected mcp",
+    "capability provider"
+  ],
+  "controlSurface": {
+    "endpoint": "GET /api/workflow/context/:node",
+    "readContextFirst": "node Harness/scripts/wf-ui-control.mjs workflow-context --project .",
+    "storage": "Harness/a2a/capability-nodes/**/state.json is backend-owned diagnostic storage, never an Agent control surface.",
+    "executionModel": "MCP connector nodes expose sanitized metadata only; direct tool invocation needs a separate permission/audit contract."
+  },
+  "environment": [
+    "HARNESS_PEER_SESSION_ID",
+    "HARNESS_PEER_RUNTIME",
+    "HARNESS_AGENT_KIND",
+    "HARNESS_WORKFLOW_MODE",
+    "HARNESS_WORKFLOW_NODE_ID",
+    "HARNESS_WORKFLOW_MAP",
+    "HARNESS_NODE_HOME",
+    "HARNESS_NODE_INIT",
+    "HARNESS_WF_UI_URL"
+  ],
+  "policy": {
+    "allowed": [
+      "state:read",
+      "capability:read",
+      "mcp.metadata.read"
+    ],
+    "requires": [
+      "workflow-context-before-action",
+      "connected-capability-ref"
+    ],
+    "denied": [
+      "capability-state-file-mutation",
+      "direct-capability-node-state-file-edit",
+      "direct-json-state-mutation",
+      "mcp-tool-invocation-without-permission",
+      "mcp-server-spawn",
+      "secret-payloads"
+    ]
+  },
+  "prohibitions": [
+    "Never edit `Harness/a2a/**/state.json` directly — use typed actions.",
+    "Never edit capability-node state files or the workflow map file.",
+    "Never invoke MCP tools without permission and never spawn MCP servers from the agent.",
+    "Never put secret or credential payloads in node actions; metadata exposes key names only."
+  ]
+}

package/templates/common/Harness/a2a/skills/workflow-node-actions.json

@@ -0,0 +1,105 @@
+{
+  "schemaVersion": 1,
+  "skillId": "workflow-node-actions",
+  "name": "Workflow Node Actions",
+  "source": "Harness/a2a/skills/workflow-node-actions.json",
+  "description": "Canonical typed node action command surface. Uses POST /api/workflow/nodes/:node/actions/:action.",
+  "notes": [
+    "timer.fire, timer.tick, and timer.dispatchWakeup are backend-internal; the backend rejects Agent invocations. Agents configure Timers and read wakeup messages on their next turn.",
+    "Share durable context by nodeId only: request payloads reference Markdown nodes, they never inline Markdown bodies.",
+    "Markdown writes honor the lock lease and expectedRevision; on markdown_conflict, reread, merge, and retry."
+  ],
+  "triggers": [
+    "node action",
+    "write markdown",
+    "append markdown",
+    "draw diagram",
+    "draw flowchart",
+    "update excalidraw",
+    "render preview",
+    "read timer",
+    "configure timer",
+    "timer interval",
+    "timer control",
+    "start timer",
+    "stop timer",
+    "update goal",
+    "goal add item",
+    "goal check item",
+    "goal complete",
+    "find markdown",
+    "lock markdown",
+    "send agent message",
+    "broadcast agent message",
+    "reply agent",
+    "read bridge messages",
+    "shared markdown context",
+    "agent direct message",
+    "agent group message",
+    "发送消息",
+    "群发消息",
+    "回复 Agent",
+    "共享上下文",
+    "共享 Markdown",
+    "delegate agent",
+    "read agent output",
+    "绘制流程图",
+    "写入节点",
+    "回读节点"
+  ],
+  "environment": [
+    "HARNESS_PEER_SESSION_ID",
+    "HARNESS_PEER_RUNTIME",
+    "HARNESS_AGENT_KIND",
+    "HARNESS_WORKFLOW_MODE",
+    "HARNESS_WORKFLOW_NODE_ID",
+    "HARNESS_WORKFLOW_MAP",
+    "HARNESS_NODE_HOME",
+    "HARNESS_NODE_INIT",
+    "HARNESS_WF_UI_URL"
+  ],
+  "policy": {
+    "mainAgent": [
+      "workflow-node-actions",
+      "typed-backend-node-actions",
+      "read-before-mutating",
+      "verify-connected-context",
+      "prefer-connected-resource-output",
+      "prefer-connected-agent-workers",
+      "prefer-agent-message-actions",
+      "prefer-shared-markdown-context",
+      "api-only-node-state-control",
+      "timer-typed-actions",
+      "send-terminal-input"
+    ],
+    "subagent": [
+      "read-actions-only-when-authorized",
+      "send-message-to-connected-agent-peers",
+      "reply-through-agent-message-actions",
+      "return-evidence"
+    ],
+    "denied": [
+      "no-source-file-reads-for-graph-state",
+      "workflow-map-file-mutation",
+      "component-state-file-mutation",
+      "event-state-file-mutation",
+      "direct-event-node-state-file-edit",
+      "event-node-state-json-mutation",
+      "capability-state-file-mutation",
+      "goal-state-file-mutation",
+      "direct-goal-node-state-file-edit",
+      "direct-json-state-mutation",
+      "task-state-mutation",
+      "secret-payloads",
+      "timer.fire",
+      "timer.tick",
+      "timer.dispatchWakeup"
+    ]
+  },
+  "prohibitions": [
+    "Never edit `Harness/a2a/**/state.json` directly — use typed actions.",
+    "Never invoke timer.fire, timer.tick, or timer.dispatchWakeup; they are backend-internal and rejected for agents.",
+    "Never edit node-map, component-node, event-node, capability, Goal, or task state files.",
+    "Never inline Markdown bodies in request payloads; reference nodes by nodeId only."
+  ]
+}

package/templates/common/Harness/a2a/skills/workflow-node-map.json

@@ -0,0 +1,71 @@
+{
+  "schemaVersion": 1,
+  "skillId": "workflow-node-map",
+  "name": "Workflow Node Map",
+  "source": "Harness/a2a/skills/workflow-node-map.json",
+  "description": "Canonical API-only workflow node-map read and mutation commands for Main Agent nodes.",
+  "triggers": [
+    "read graph",
+    "create node",
+    "connect nodes",
+    "disconnect nodes",
+    "move node",
+    "delete node",
+    "spawn agent node",
+    "delegate worker",
+    "control canvas",
+    "arrange workflow",
+    "控制画布",
+    "连接节点",
+    "删除节点",
+    "连接状态",
+    "连线",
+    "谁连着"
+  ],
+  "environment": [
+    "HARNESS_PEER_SESSION_ID",
+    "HARNESS_PEER_RUNTIME",
+    "HARNESS_AGENT_KIND",
+    "HARNESS_WORKFLOW_MODE",
+    "HARNESS_WORKFLOW_NODE_ID",
+    "HARNESS_WORKFLOW_MAP",
+    "HARNESS_NODE_HOME",
+    "HARNESS_NODE_INIT",
+    "HARNESS_WF_UI_URL"
+  ],
+  "policy": {
+    "mainAgent": [
+      "api-only-node-map-control",
+      "no-direct-workflow-map-writes",
+      "workflow-node-map",
+      "read-workflow-map-diagnostic-only",
+      "agent.readGraph",
+      "agent.createNode",
+      "agent.connectNodes",
+      "agent.disconnectNodes",
+      "agent.moveNode",
+      "agent.deleteNode",
+      "agent.deleteNodes",
+      "create-subagent-node",
+      "connect-agent-worker",
+      "connect-managed-nodes",
+      "delete-saved-node",
+      "stop-managed-node"
+    ],
+    "subagent": [
+      "read-workflow-map-diagnostic-only",
+      "return-evidence"
+    ],
+    "subagentDenied": [
+      "create-agent-node",
+      "create-task-node",
+      "workflow-node-map-control",
+      "node-map-control",
+      "workflow-map-file-mutation",
+      "spawn-pty-subagents"
+    ],
+    "denied": [
+      "no-source-file-reads-for-graph-state"
+    ]
+  }
+}

package/templates/common/Harness/a2a/skills/workflow-ontology.json

@@ -0,0 +1,54 @@
+{
+  "schemaVersion": 1,
+  "skillId": "workflow-ontology",
+  "name": "Workflow Ontology",
+  "source": "Harness/a2a/skills/workflow-ontology.json",
+  "description": "Canonical read-only semantic model for Agent nodes. Uses GET /api/workflow/ontology so Agents understand node classes, relations, and action affordances before acting.",
+  "triggers": [
+    "workflow semantics",
+    "node ontology",
+    "node classes",
+    "relation semantics",
+    "action affordances",
+    "choose capability",
+    "choose connected node",
+    "before acting",
+    "语义",
+    "节点能力"
+  ],
+  "environment": [
+    "HARNESS_PEER_SESSION_ID",
+    "HARNESS_PEER_RUNTIME",
+    "HARNESS_AGENT_KIND",
+    "HARNESS_WORKFLOW_MODE",
+    "HARNESS_WORKFLOW_NODE_ID",
+    "HARNESS_WORKFLOW_MAP",
+    "HARNESS_NODE_HOME",
+    "HARNESS_NODE_INIT",
+    "HARNESS_WF_UI_URL"
+  ],
+  "policy": {
+    "mainAgent": [
+      "workflow-ontology",
+      "read-semantic-node-model",
+      "read-action-affordances",
+      "read-before-acting",
+      "prefer-connected-resource-output",
+      "prefer-typed-backend-actions"
+    ],
+    "subagent": [
+      "workflow-ontology",
+      "read-semantic-node-model",
+      "return-evidence"
+    ],
+    "denied": [
+      "workflow-map-file-mutation",
+      "component-state-file-mutation",
+      "event-state-file-mutation",
+      "capability-state-file-mutation",
+      "goal-state-file-mutation",
+      "task-state-mutation",
+      "invented-node-actions"
+    ]
+  }
+}

package/templates/common/Harness/a2a/skills/workflow-resource-node.json

@@ -0,0 +1,68 @@
+{
+  "schemaVersion": 1,
+  "skillId": "workflow-resource-node",
+  "name": "Workflow Resource Node",
+  "source": "Harness/a2a/skills/workflow-resource-node.json",
+  "description": "On-demand Agent guide for File, Markdown, and Excalidraw resource nodes through typed backend actions only.",
+  "nodeType": "resource",
+  "triggers": [
+    "resource node",
+    "markdown node",
+    "file node",
+    "diagram node",
+    "excalidraw node",
+    "connected output",
+    "write notes",
+    "draw diagram"
+  ],
+  "controlSurface": {
+    "endpoint": "POST /api/workflow/nodes/:node/actions/:action",
+    "readContextFirst": "node Harness/scripts/wf-ui-control.mjs workflow-context --project .",
+    "storage": "Harness/a2a/component-nodes/**/state.json is backend-owned diagnostic storage, never an Agent control surface.",
+    "outputRouting": "Prefer connected writable resource nodes over terminal prose for durable output."
+  },
+  "environment": [
+    "HARNESS_PEER_SESSION_ID",
+    "HARNESS_PEER_RUNTIME",
+    "HARNESS_AGENT_KIND",
+    "HARNESS_WORKFLOW_MODE",
+    "HARNESS_WORKFLOW_NODE_ID",
+    "HARNESS_WORKFLOW_MAP",
+    "HARNESS_NODE_HOME",
+    "HARNESS_NODE_INIT",
+    "HARNESS_WF_UI_URL"
+  ],
+  "policy": {
+    "allowed": [
+      "markdown.read",
+      "markdown.replace",
+      "markdown.append",
+      "markdown.patch",
+      "excalidraw.readScene",
+      "excalidraw.saveScene",
+      "excalidraw.patchScene",
+      "excalidraw.renderPreview",
+      "file.readMeta",
+      "file.readText",
+      "file.readBytes",
+      "file.refresh"
+    ],
+    "requires": [
+      "workflow-context-before-action",
+      "typed-backend-node-actions"
+    ],
+    "denied": [
+      "component-state-file-mutation",
+      "direct-component-node-state-file-edit",
+      "direct-json-state-mutation",
+      "workflow-map-file-mutation",
+      "secret-payloads"
+    ]
+  },
+  "prohibitions": [
+    "Never edit `Harness/a2a/**/state.json` directly — use typed actions.",
+    "Never edit component-node state files or the workflow map file.",
+    "Never put secret or credential payloads in node actions; action payloads may be recorded.",
+    "Never invent node actions that the backend does not expose; read this manual before acting."
+  ]
+}

package/templates/common/Harness/a2a/skills/workflow-skill-group-node.json

@@ -0,0 +1,56 @@
+{
+  "schemaVersion": 1,
+  "skillId": "workflow-skill-group-node",
+  "name": "Workflow Skill Group Node",
+  "source": "Harness/a2a/skills/workflow-skill-group-node.json",
+  "description": "On-demand Agent guide for using Skill group capability nodes as metadata capability providers.",
+  "nodeType": "skill-group",
+  "triggers": [
+    "skill group node",
+    "skill bundle",
+    "capability pack",
+    "connected skill group",
+    "attached skills"
+  ],
+  "controlSurface": {
+    "endpoint": "GET /api/workflow/context/:node",
+    "readContextFirst": "node Harness/scripts/wf-ui-control.mjs workflow-context --project .",
+    "storage": "Harness/a2a/capability-nodes/**/state.json is backend-owned diagnostic storage, never an Agent control surface.",
+    "executionModel": "Skill group nodes advertise skills to connected Agents; they are not independent executors."
+  },
+  "environment": [
+    "HARNESS_PEER_SESSION_ID",
+    "HARNESS_PEER_RUNTIME",
+    "HARNESS_AGENT_KIND",
+    "HARNESS_WORKFLOW_MODE",
+    "HARNESS_WORKFLOW_NODE_ID",
+    "HARNESS_WORKFLOW_MAP",
+    "HARNESS_NODE_HOME",
+    "HARNESS_NODE_INIT",
+    "HARNESS_WF_UI_URL"
+  ],
+  "policy": {
+    "allowed": [
+      "state:read",
+      "capability:read",
+      "skill.metadata.read"
+    ],
+    "requires": [
+      "workflow-context-before-action",
+      "connected-capability-ref"
+    ],
+    "denied": [
+      "capability-state-file-mutation",
+      "direct-capability-node-state-file-edit",
+      "direct-json-state-mutation",
+      "independent-skill-execution",
+      "secret-payloads"
+    ]
+  },
+  "prohibitions": [
+    "Never edit `Harness/a2a/**/state.json` directly — use typed actions.",
+    "Never edit capability-node state files or the workflow map file.",
+    "Never treat the group as an executor: it only advertises skills, and you run them in your own session under your own permissions.",
+    "Never put secret or credential payloads in node actions; action payloads may be recorded."
+  ]
+}

package/templates/common/Harness/a2a/skills/workflow-timer-node.json

@@ -0,0 +1,81 @@
+{
+  "schemaVersion": 1,
+  "skillId": "workflow-timer-node",
+  "name": "Workflow Timer Node",
+  "source": "Harness/a2a/skills/workflow-timer-node.json",
+  "description": "On-demand Agent guide for controlling Timer nodes through typed backend actions only.",
+  "nodeType": "timer",
+  "wakeup": {
+    "role": "The Timer is the only source of wakeup messages; the Goal node never wakes agents. Configure the Timer and the backend dispatches wakeup messages when it fires to every connected agent: the magnetic group (dock-linked members) plus agents connected by an ordinary edge with an event or control relation.",
+    "readOnNextTurn": "When a timer fires, a wakeup message with type 'wakeup' appears in your inbox; read it on your next turn. The message carries timerNodeId, scheduledAt, firedAt, and goalNodeId when the group has a Goal node.",
+    "goalCheck": "When the wakeup message references a Goal node, check the Goal state and tick its items before continuing."
+  },
+  "internalActions": {
+    "timer.fire": "backend-internal; agents must never invoke it.",
+    "timer.tick": "backend-internal; agents must never invoke it.",
+    "timer.dispatchWakeup": "backend-internal; agents must never invoke it."
+  },
+  "triggers": [
+    "timer node",
+    "timer control",
+    "timer interval",
+    "configure timer",
+    "start timer",
+    "stop timer",
+    "timer countdown",
+    "wakeup",
+    "wake me up",
+    "health check timer",
+    "connected timer"
+  ],
+  "controlSurface": {
+    "endpoint": "POST /api/workflow/nodes/:node/actions/:action",
+    "readContextFirst": "node Harness/scripts/wf-ui-control.mjs workflow-context --project .",
+    "storage": "Harness/a2a/event-nodes/**/state.json is backend-owned diagnostic storage, never an Agent control surface.",
+    "connectionRequirement": "Agent-authored Timer control requires an Agent -> Timer relation=control edge. Timer -> Agent relation=event only delivers events."
+  },
+  "environment": [
+    "HARNESS_PEER_SESSION_ID",
+    "HARNESS_PEER_RUNTIME",
+    "HARNESS_AGENT_KIND",
+    "HARNESS_WORKFLOW_MODE",
+    "HARNESS_WORKFLOW_NODE_ID",
+    "HARNESS_WORKFLOW_MAP",
+    "HARNESS_NODE_HOME",
+    "HARNESS_NODE_INIT",
+    "HARNESS_WF_UI_URL"
+  ],
+  "policy": {
+    "allowed": [
+      "timer.read",
+      "timer.configure",
+      "timer.enable",
+      "timer.disable",
+      "timer.setInterval",
+      "timer.setMode",
+      "timer.ackWatchdog",
+      "timer.resetWatchdog"
+    ],
+    "requires": [
+      "workflow-context-before-action",
+      "timer-control-edge-for-agent-actions",
+      "typed-backend-node-actions"
+    ],
+    "denied": [
+      "direct-event-node-state-file-edit",
+      "event-node-state-json-mutation",
+      "direct-json-state-mutation",
+      "workflow-map-file-mutation",
+      "invented-timer-actions",
+      "timer.fire",
+      "timer.tick",
+      "timer.dispatchWakeup"
+    ]
+  },
+  "prohibitions": [
+    "Never edit `Harness/a2a/**/state.json` directly — use typed actions.",
+    "Never invoke timer.fire, timer.tick, or timer.dispatchWakeup; they are backend-internal and rejected for agents.",
+    "Never edit event-node state files or the workflow map file.",
+    "Never invent timer actions that the backend does not expose."
+  ]
+}