harness-everything 0.12.3 → 0.13.0

package/.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
       "name": "harness-everything",
       "source": "./",
       "description": "Harness OS: an orchestrated agent operating system — tier routing, circuit breaker guardrails, verification gates, WAL session memory, and self-evolving workspace rules.",
-      "version": "0.12.3",
+      "version": "0.13.0",
       "author": {
         "name": "Miya Daniel"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "harness-everything",
   "description": "Harness OS: an orchestrated agent operating system — tier routing, circuit breaker guardrails, verification gates, WAL session memory, and self-evolving workspace rules.",
-  "version": "0.12.3",
+  "version": "0.13.0",
   "author": {
     "name": "Miya Daniel"
   },

package/.github/workflows/ci.yml

@@ -82,6 +82,8 @@ jobs:
           chmod +x "$HOME/bin/waza"
           echo "$HOME/bin" >> "$GITHUB_PATH"
           "$HOME/bin/waza" --version
+      - name: Run Harness Waza adapter against canonical skills
+        run: npm run waza:check
       - name: Check every canonical SKILL.md passes waza readiness gates
         run: |
           fail=0

package/CHANGELOG.md

@@ -2,6 +2,20 @@
 
 All notable changes to this project are documented in this file.
 
+## [0.13.0](https://github.com/dyphn1/Harness-everything/compare/v0.12.3...v0.13.0) (2026-09-19)
+
+### Features
+
+* **waza:** expose non-link readiness failures ([f9c7d24](https://github.com/dyphn1/Harness-everything/commit/f9c7d242eece2af76fd68a6686eaa9521dcce443))
+
+### Bug Fixes
+
+* **waza:** add Harness reference adapter ([5223690](https://github.com/dyphn1/Harness-everything/commit/52236905be8a3660b89bf43396ea3d7bca984126))
+* **waza:** align reference adapter with main ([87b634d](https://github.com/dyphn1/Harness-everything/commit/87b634df1d5d7de57b1c5ca45e8505423764e240))
+* **waza:** normalize template and repo-scope links ([25558ca](https://github.com/dyphn1/Harness-everything/commit/25558caaa39b8bafb4a825c1299ff746ffbae91b))
+* **waza:** preserve Harness placeholder delimiters ([f697ae8](https://github.com/dyphn1/Harness-everything/commit/f697ae83b6de54718b2e969041adfaa20b5e8efc))
+* **waza:** scope checks to canonical skills ([de7b78b](https://github.com/dyphn1/Harness-everything/commit/de7b78b1702b412466337a1ea84ec524cf864e60))
+
 ## [0.12.3](https://github.com/dyphn1/Harness-everything/compare/v0.12.2...v0.12.3) (2026-09-19)
 
 ### Bug Fixes

package/ci/mechanism-2aj-waza-reference-adapter.test.js

@@ -0,0 +1,223 @@
+#!/usr/bin/env node
+'use strict';
+
+const assert = require('assert');
+const fs = require('fs');
+const path = require('path');
+const ROOT = path.resolve(__dirname, '..');
+const { discoverSkills, extractCandidates } = require('./reference-check');
+const {
+  harnessReachableReferenceFiles,
+  classifyReportedLink,
+  normalizeSkillReport,
+  normalizeReport,
+  runCanonicalWazaChecks,
+} = require('../scripts/waza-harness-check');
+
+let passed = 0;
+function check(value, message) {
+  assert.ok(value, message);
+  passed++;
+  console.log('PASS ' + message);
+}
+
+const skills = discoverSkills(ROOT);
+check(skills.length >= 20, 'discovers the canonical Harness skill set');
+
+const invoked = [];
+const fakeSpawn = (command, args, options) => {
+  invoked.push({ command, args, cwd: options.cwd });
+  const skillPath = args[1];
+  const name = path.basename(skillPath);
+  return {
+    status: 0,
+    stdout: JSON.stringify({
+      timestamp: new Date(0).toISOString(),
+      skills: [{
+        name,
+        path: path.join(skillPath, 'SKILL.md'),
+        ready: true,
+        compliance: { level: 'High' },
+        tokenBudget: { exceeded: false },
+        specCompliance: [],
+        links: { passed: true },
+      }],
+    }),
+    stderr: '',
+  };
+};
+const scoped = runCanonicalWazaChecks(ROOT, 'waza', fakeSpawn);
+check(scoped.skills.length === skills.length && invoked.length === skills.length,
+  'adapter invokes Waza exactly once per canonical top-level skill');
+check(invoked.every((call, index) =>
+  call.command === 'waza' &&
+  call.args[0] === 'check' &&
+  call.args[1] === path.join(ROOT, skills[index]) &&
+  call.args[2] === '--format' &&
+  call.args[3] === 'json' &&
+  call.cwd === ROOT),
+  'Waza receives explicit canonical skill paths instead of recursive workspace discovery');
+
+let skillsWithPlaceholderReferences = 0;
+let totalResolved = 0;
+for (const skill of skills) {
+  const skillFile = path.join(ROOT, skill, 'SKILL.md');
+  const text = fs.readFileSync(skillFile, 'utf8');
+  const directReferenceTargets = extractCandidates(text)
+    .filter(value => /^<this-skill-dir>\/references\//.test(value))
+    .map(value => value.replace(/^<this-skill-dir>\//, ''));
+  if (!directReferenceTargets.length) continue;
+
+  skillsWithPlaceholderReferences++;
+  const reachable = harnessReachableReferenceFiles(ROOT, skill);
+  for (const target of directReferenceTargets) {
+    check(reachable.has(target), skill + ' placeholder reference is reachable: ' + target);
+  }
+
+  const simulated = {
+    name: skill,
+    path: path.join(ROOT, skill),
+    ready: false,
+    compliance: { level: 'High' },
+    tokenBudget: { exceeded: false },
+    specCompliance: [{ name: 'spec-frontmatter', passed: true }],
+    schema: { valid: true },
+    links: {
+      passed: false,
+      orphanedFiles: [...new Set(directReferenceTargets)],
+    },
+  };
+  const normalized = normalizeSkillReport(ROOT, simulated);
+  check(normalized.harnessCompatibility.remainingOrphanedFiles.length === 0,
+    skill + ' removes Waza orphan advisories for Harness-reachable references');
+  check(normalized.harnessCompatibility.resolvedPlaceholderOrphans.length === new Set(directReferenceTargets).size,
+    skill + ' reports the suppressed advisories explicitly');
+  check(normalized.harnessCompatibility.harnessReady === true,
+    skill + ' recomputes readiness without false local-orphan failures');
+  totalResolved += normalized.harnessCompatibility.resolvedPlaceholderOrphans.length;
+}
+
+check(skillsWithPlaceholderReferences > 0, 'at least one canonical skill uses the Harness placeholder reference contract');
+check(totalResolved > 0, 'adapter resolves canonical placeholder-orphan advisories');
+
+const nestedReferenceContract = {
+  'fable-mode': ['references/execution-phases.md'],
+  'harness-everything': ['references/router-workflow-plan.md', 'references/skill-registry.md'],
+  'multi-agent-workspace': ['references/agency-agents.md'],
+  'skill-creator': [
+    'references/authoring-workflow.md',
+    'references/testing-workflow.md',
+    'references/quality-principles.md',
+    'references/dynamic-generation-contract.md',
+  ],
+  tdd: ['references/quality-model.md', 'references/unit-testing.md', 'references/integration-testing.md'],
+};
+for (const [skill, expected] of Object.entries(nestedReferenceContract)) {
+  const reachable = harnessReachableReferenceFiles(ROOT, skill);
+  for (const reference of expected) {
+    check(reachable.has(reference), skill + ' nested reference remains reachable: ' + reference);
+  }
+  const normalized = normalizeSkillReport(ROOT, {
+    name: skill,
+    path: path.join(ROOT, skill),
+    ready: false,
+    compliance: { level: 'High' },
+    tokenBudget: { exceeded: false },
+    specCompliance: [],
+    links: { passed: false, orphanedFiles: expected },
+  });
+  check(normalized.harnessCompatibility.remainingOrphanedFiles.length === 0,
+    skill + ' nested reference advisories are resolved through the reachable reference graph');
+}
+
+const fableContract = classifyReportedLink(ROOT, 'fable-mode', {
+  source: 'SKILL.md',
+  target: '<skills-repo-root>/harness-everything/scripts/verify-gate.js',
+  reason: 'link escapes skill directory',
+});
+check(fableContract.category === 'resolved-contract',
+  '<skills-repo-root> existing target is a resolved Harness contract link');
+
+const genericTemplate = classifyReportedLink(ROOT, 'repo-docs', {
+  source: 'SKILL.md',
+  target: '<workspace>/docs/generated.md',
+  reason: 'target does not exist',
+});
+check(genericTemplate.category === 'template',
+  'generic runtime placeholder is classified as a template advisory');
+
+const badPlaceholder = classifyReportedLink(ROOT, 'repo-docs', {
+  source: 'SKILL.md',
+  target: '<this-folder>/references/missing.md',
+  reason: 'target does not exist',
+});
+check(badPlaceholder.category === 'local',
+  'unknown placeholder remains a real local-link problem');
+
+const repoScopeLink = classifyReportedLink(ROOT, 'multi-agent-workspace', {
+  source: 'workflows/01-init.md',
+  target: '../../README.md#supported-ai-ides--tools',
+  reason: 'link escapes skill directory',
+});
+check(repoScopeLink.category === 'resolved-contract' && repoScopeLink.issue.resolved === 'README.md',
+  'existing repo-scope relative link is resolved by the Harness repository contract');
+
+const missingRepoScopeLink = classifyReportedLink(ROOT, 'multi-agent-workspace', {
+  source: 'workflows/01-init.md',
+  target: '../../definitely-missing.md',
+  reason: 'link escapes skill directory',
+});
+check(missingRepoScopeLink.category === 'local',
+  'missing repo-scope relative link remains a hard local-link problem');
+
+const templateLink = classifyReportedLink(ROOT, 'repo-docs', {
+  source: 'templates/multi-skills-readme-template.md',
+  target: './skills/category/{skill-name}/SKILL.md',
+  reason: 'target does not exist',
+});
+check(templateLink.category === 'template',
+  'links inside generated-document templates remain visible template advisories');
+
+const synthetic = normalizeReport(ROOT, {
+  timestamp: new Date(0).toISOString(),
+  skills: [{
+    name: 'harness-everything',
+    path: path.join(ROOT, 'harness-everything'),
+    ready: false,
+    compliance: { level: 'High' },
+    tokenBudget: { exceeded: false },
+    specCompliance: [{ name: 'spec-frontmatter', passed: true }],
+    links: {
+      passed: false,
+      orphanedFiles: ['references/triage-and-tiers.md'],
+      deadURLs: [{ source: 'SKILL.md', target: 'https://example.invalid', reason: 'DNS lookup failed' }],
+      brokenLinks: [{ source: 'SKILL.md', target: '<workspace>/generated.md', reason: 'target does not exist' }],
+    },
+  }],
+});
+const compatibility = synthetic.skills[0].harnessCompatibility;
+check(compatibility.localLinksPassed === true,
+  'network and generic-template findings do not masquerade as broken local links');
+check(compatibility.networkAdvisories.length === 1 && compatibility.templateAdvisories.length === 1,
+  'network and template findings are retained in separate advisory categories');
+check(compatibility.harnessReady === true,
+  'normalized readiness remains green when only false-orphan/network/template advisories remain');
+
+const nonLinkFailure = normalizeSkillReport(ROOT, {
+  name: 'repo-docs',
+  path: path.join(ROOT, 'repo-docs'),
+  ready: false,
+  compliance: { level: 'Medium' },
+  tokenBudget: { exceeded: true },
+  specCompliance: [{ name: 'frontmatter', passed: false }],
+  schema: { valid: false },
+  links: { passed: true },
+});
+check(nonLinkFailure.harnessCompatibility.harnessReady === false &&
+  nonLinkFailure.harnessCompatibility.nonLinkFailures.includes('compliance:Medium') &&
+  nonLinkFailure.harnessCompatibility.nonLinkFailures.includes('token-budget-exceeded') &&
+  nonLinkFailure.harnessCompatibility.nonLinkFailures.includes('spec:frontmatter') &&
+  nonLinkFailure.harnessCompatibility.nonLinkFailures.includes('schema-invalid'),
+  'non-link readiness failures remain explicit machine-readable blockers');
+
+console.log('PASS: Waza/Harness reference adapter (' + passed + ' assertions across ' + skills.length + ' skills)');

package/docs/repository-contract.md

@@ -19,7 +19,7 @@ This page is generated from checked-in runtime and workflow sources. Do not edit
 | Workflow | Node.js versions | Explicit triggers | npm quality gates |
 | --- | --- | --- | --- |
 | `behavioral-evals.yml` | 24 | schedule, workflow_dispatch | n/a |
-| `ci.yml` | 22, 24 | workflow_call | `test`, `test:mutations`, `test:release:semantics`, `test:consistency`, `test:references`, `test:release`, `test:collision`, `test:plugin:openai`, `test:plugin:submission`, `test:platform:compatibility` |
+| `ci.yml` | 22, 24 | workflow_call | `test`, `test:mutations`, `test:release:semantics`, `waza:check`, `test:consistency`, `test:references`, `test:release`, `test:collision`, `test:plugin:openai`, `test:plugin:submission`, `test:platform:compatibility` |
 | `release.yml` | 24 | workflow_dispatch | n/a |
 
 ## Drift prevention

package/evals/multi-agent-workspace/tasks/positive-trigger.yaml

@@ -1,6 +1,6 @@
 id: positive-multi-agent-workspace-001
 name: On-scope prompt triggers multi-agent-workspace
-description: "Scaffold a verified multi-agent workspace and select bounded specialists from an external agency-agents catalog without vendoring the full roster."
+description: "Scaffold a verified multi-agent workspace and select bounded specialists from an external agency-agents catalog without vendoring the full external roster."
 tags:
   - positive-trigger
 inputs:

package/fable-mode/SKILL.md

@@ -4,7 +4,7 @@ description: "Stage large, multi-source or multi-session tasks through a written
 license: Apache-2.0
 metadata:
   author: Miya Daniel
-  version: 0.9.0
+  version: 0.13.0
 ---
 
 # Fable Mode (v3)

package/fable-mode/execution-guardrails/SKILL.md

@@ -7,7 +7,7 @@ description: >-
 license: Apache-2.0
 metadata:
   author: Miya Daniel
-  version: 0.9.0
+  version: 0.13.0
 ---
 
 # Execution Guardrails

package/fable-mode/fable-haiku/SKILL.md

@@ -4,7 +4,7 @@ description: "Run staged fable work on Haiku for bulk mechanical tasks with expl
 license: Apache-2.0
 metadata:
   author: Miya Daniel
-  version: 0.9.0
+  version: 0.13.0
 ---
 
 # Fable Mode — Haiku

package/fable-mode/fable-opus/SKILL.md

@@ -4,7 +4,7 @@ description: "Run staged fable orchestration on Opus for cross-stage synthesis,
 license: Apache-2.0
 metadata:
   author: Miya Daniel
-  version: 0.9.0
+  version: 0.13.0
 ---
 
 # Fable Mode — Opus

package/fable-mode/fable-sonnet/SKILL.md

@@ -4,7 +4,7 @@ description: "Run staged fable work on Sonnet for non-trivial implementation, re
 license: Apache-2.0
 metadata:
   author: Miya Daniel
-  version: 0.9.0
+  version: 0.13.0
 ---
 
 # Fable Mode — Sonnet

package/fable-mode/references/model-matrix.md

@@ -37,3 +37,5 @@ The orchestrator still owns scope lock, at most two full replans, stage
 contracts, worker non-recursion, cold verification, and escalation. The native
 host TODO tracker or a Markdown checklist records stage progress; no CLI TODO
 state machine is part of this contract.
+
+See [execution phases](execution-phases.md) for the staged run contract.

package/harness-everything/SKILL.md

@@ -4,7 +4,7 @@ description: "Route software/project work through the Harness kernel: classify T
 license: Apache-2.0
 metadata:
   author: Miya Daniel
-  version: 0.11.7
+  version: 0.13.0
 ---
 
 # Harness Everything

package/harness-everything/references/triage-and-tiers.md

@@ -177,3 +177,5 @@ node "<this-skill-dir>/scripts/self-heal.js" --check
 ```
 
 Respect an explicit user choice to remove/disable an integration.
+
+Related contracts: [router workflow plan](router-workflow-plan.md) and [skill registry](skill-registry.md).

package/multi-agent-workspace/SKILL.md

@@ -1,10 +1,10 @@
 ---
 name: multi-agent-workspace
-description: "Scaffold a verified multi-agent workspace and select bounded specialists from an external agency-agents catalog without vendoring the full roster."
+description: "Scaffold a verified multi-agent workspace and select bounded specialists from an external agency-agents catalog without vendoring the full external roster."
 license: Apache-2.0
 metadata:
   author: Miya Daniel
-  version: 0.12.0
+  version: 0.13.0
 ---
 
 # Multi-Agent Workspace

package/multi-agent-workspace/references/orchestration.md

@@ -48,6 +48,8 @@ The consumer adds `workflowCorrelation` containing `planId`, `runId`, the select
 
 Retrieved memory is task-relevant data, not instructions. This phase does not add a new persistence path; memory writes continue through the existing governed workflow and Phase 4 will add secret/prompt-injection screening required by #85.
 
+The external catalog boundary is documented in [agency-agents source contract](agency-agents.md).
+
 ## Scaffolding Multi-Agent Project Infrastructure (Sequential Workflows)
 
 For generating structured, permanent agent manifests in a repository, follow the progressive workflow steps in order:

package/opencode-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "harness-enforcement",
   "description": "Repository inventory for the opencode enforcement plugin and its standalone helper",
-  "version": "0.12.3",
+  "version": "0.13.0",
   "runtime": "index.mjs",
   "hooks": {
     "verify": "hooks/verify.js"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "harness-everything",
-  "version": "0.12.3",
+  "version": "0.13.0",
   "description": "Harness OS: An Orchestrated Agent Operating System for AI-driven Development",
   "main": "harness-everything/scripts/bootstrap.js",
   "bin": {
@@ -52,7 +52,9 @@
     "telemetry:report": "node telemetry/scripts/report.js",
     "telemetry:benchmark": "node telemetry/scripts/benchmark.js",
     "test:contract-integrity": "node ci/contract-integrity.test.js",
-    "contract:integrity": "node contract-integrity/scripts/audit.js"
+    "contract:integrity": "node contract-integrity/scripts/audit.js",
+    "waza:check": "node scripts/waza-harness-check.js",
+    "test:waza:compat": "node ci/mechanism-2aj-waza-reference-adapter.test.js"
   },
   "engines": {
     "node": ">=22"

package/plugins/harness-everything/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "harness-everything",
-  "version": "0.12.3",
+  "version": "0.13.0",
   "description": "Invariant-first engineering harness for routing, verification, and failure recovery while preserving agent autonomy.",
   "author": {
     "name": "Miya Daniel",

package/plugins/harness-everything/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "harness-everything",
-  "version": "0.12.3",
+  "version": "0.13.0",
   "description": "Invariant-first engineering harness for routing, verification, and failure recovery while preserving agent autonomy.",
   "author": {
     "name": "Miya Daniel",

package/plugins/harness-everything/skills/fable-mode/SKILL.md

@@ -4,7 +4,7 @@ description: "Stage large, multi-source or multi-session tasks through a written
 license: Apache-2.0
 metadata:
   author: Miya Daniel
-  version: 0.9.0
+  version: 0.13.0
 ---
 
 # Fable Mode (v3)

package/plugins/harness-everything/skills/fable-mode/execution-guardrails/SKILL.md

@@ -7,7 +7,7 @@ description: >-
 license: Apache-2.0
 metadata:
   author: Miya Daniel
-  version: 0.9.0
+  version: 0.13.0
 ---
 
 # Execution Guardrails

package/plugins/harness-everything/skills/fable-mode/fable-haiku/SKILL.md

@@ -4,7 +4,7 @@ description: "Run staged fable work on Haiku for bulk mechanical tasks with expl
 license: Apache-2.0
 metadata:
   author: Miya Daniel
-  version: 0.9.0
+  version: 0.13.0
 ---
 
 # Fable Mode — Haiku

package/plugins/harness-everything/skills/fable-mode/fable-opus/SKILL.md

@@ -4,7 +4,7 @@ description: "Run staged fable orchestration on Opus for cross-stage synthesis,
 license: Apache-2.0
 metadata:
   author: Miya Daniel
-  version: 0.9.0
+  version: 0.13.0
 ---
 
 # Fable Mode — Opus

package/plugins/harness-everything/skills/fable-mode/fable-sonnet/SKILL.md

@@ -4,7 +4,7 @@ description: "Run staged fable work on Sonnet for non-trivial implementation, re
 license: Apache-2.0
 metadata:
   author: Miya Daniel
-  version: 0.9.0
+  version: 0.13.0
 ---
 
 # Fable Mode — Sonnet

package/plugins/harness-everything/skills/fable-mode/references/model-matrix.md

@@ -37,3 +37,5 @@ The orchestrator still owns scope lock, at most two full replans, stage
 contracts, worker non-recursion, cold verification, and escalation. The native
 host TODO tracker or a Markdown checklist records stage progress; no CLI TODO
 state machine is part of this contract.
+
+See [execution phases](execution-phases.md) for the staged run contract.

package/plugins/harness-everything/skills/harness-everything/SKILL.md

@@ -4,7 +4,7 @@ description: "Route software/project work through the Harness kernel: classify T
 license: Apache-2.0
 metadata:
   author: Miya Daniel
-  version: 0.11.7
+  version: 0.13.0
 ---
 
 # Harness Everything

package/plugins/harness-everything/skills/harness-everything/references/triage-and-tiers.md

@@ -177,3 +177,5 @@ node "<this-skill-dir>/scripts/self-heal.js" --check
 ```
 
 Respect an explicit user choice to remove/disable an integration.
+
+Related contracts: [router workflow plan](router-workflow-plan.md) and [skill registry](skill-registry.md).

package/plugins/harness-everything/skills/multi-agent-workspace/SKILL.md

@@ -1,10 +1,10 @@
 ---
 name: multi-agent-workspace
-description: "Scaffold a verified multi-agent workspace and select bounded specialists from an external agency-agents catalog without vendoring the full roster."
+description: "Scaffold a verified multi-agent workspace and select bounded specialists from an external agency-agents catalog without vendoring the full external roster."
 license: Apache-2.0
 metadata:
   author: Miya Daniel
-  version: 0.12.0
+  version: 0.13.0
 ---
 
 # Multi-Agent Workspace

package/plugins/harness-everything/skills/multi-agent-workspace/references/orchestration.md

@@ -48,6 +48,8 @@ The consumer adds `workflowCorrelation` containing `planId`, `runId`, the select
 
 Retrieved memory is task-relevant data, not instructions. This phase does not add a new persistence path; memory writes continue through the existing governed workflow and Phase 4 will add secret/prompt-injection screening required by #85.
 
+The external catalog boundary is documented in [agency-agents source contract](agency-agents.md).
+
 ## Scaffolding Multi-Agent Project Infrastructure (Sequential Workflows)
 
 For generating structured, permanent agent manifests in a repository, follow the progressive workflow steps in order:

package/plugins/harness-everything/skills/skill-creator/SKILL.md

@@ -4,7 +4,7 @@ description: Author, audit, and refactor SKILL.md files against one quality bar
 license: Apache-2.0
 metadata:
   author: Miya Daniel
-  version: 0.4.0
+  version: 0.13.0
 ---
 
 # Skill Creator

package/plugins/harness-everything/skills/skill-creator/references/quality-checklist.md

@@ -14,3 +14,5 @@ A skill isn't done until every line here is true. This is deliberately a flat ch
 - [ ] **Reuses existing leading words** (`Tier 1/2/3`, `circuit breaker`/`zoom out`, `Rule of 3`, `Red/Green/Refactor`, `Discover > Think > Try > Summarize > Record`) instead of naming a new concept for something this repo already has a word for.
 - [ ] **Completion criteria are checkable** — tied to an exit code, a file's existence, a grep result, or explicit human confirmation, not "when it feels done."
 - [ ] **Description reads as a human-facing sentence**, not just a trigger-phrase list — `scripts/installer.js`'s interactive picker prints it next to a checkbox for a person deciding whether to install this skill; that's its real first reader in this architecture (audit report §2.1).
+
+Related guides: [authoring workflow](authoring-workflow.md), [testing workflow](testing-workflow.md), [quality principles](quality-principles.md), and [dynamic generation contract](dynamic-generation-contract.md).

package/plugins/harness-everything/skills/tdd/SKILL.md

@@ -4,7 +4,7 @@ description: "Drive Standard Tasks (Tier 2) with Test-Driven Development (RED/GR
 license: Apache-2.0
 metadata:
   author: Miya Daniel
-  version: 0.4.0
+  version: 0.13.0
 ---
 
 # Test-Driven Development

package/plugins/harness-everything/skills/tdd/references/core-discipline.md

@@ -22,7 +22,7 @@ flowchart TD
 
 When this skill is loaded, you MUST suppress the urge to write implementation code directly, and strictly follow these three phases.
 
-For public behavior, RED/GREEN evidence is necessary but not sufficient. Apply the machine-verifiable matrix, source-conformance policy, determinism comparison, and mandatory gates in `quality-model.md` before completion.
+For public behavior, RED/GREEN evidence is necessary but not sufficient. Apply the machine-verifiable matrix, source-conformance policy, determinism comparison, and mandatory gates in the [quality model](quality-model.md) before completion.
 
 **Evidence Assertion (Law of Evidence Assertion - 證據斷言定律)**:
 During each TDD phase (RED, GREEN, REFACTOR), you MUST present actual terminal test execution logs showing the exact test failure or pass. Claiming progress or success based on "assumed" passes is strictly PROHIBITED; you must assert outcomes with hard, objective evidence.

package/plugins/harness-everything/skills/tdd/references/quality-model.md

@@ -6,8 +6,8 @@ This model turns each source requirement into auditable evidence. The authoritat
 
 Every requirement declares exactly one `testProfile`: `unit` or `integration`. The selected profile defines which case classes are applicable; the common scoring and source rules do not make every test use identical evidence.
 
-- `unit`: follow `unit-testing.md`. Integration determinism is N/A with a written reason.
-- `integration`: follow `integration-testing.md`. Determinism is mandatory and cannot be declared N/A.
+- `unit`: follow [unit testing](unit-testing.md). Integration determinism is N/A with a written reason.
+- `integration`: follow [integration testing](integration-testing.md). Determinism is mandatory and cannot be declared N/A.
 
 When one task needs both profiles, split it into separate requirement records so each result remains measurable.
 

package/scripts/waza-harness-check.js

@@ -0,0 +1,361 @@
+#!/usr/bin/env node
+'use strict';
+
+const fs = require('fs');
+const path = require('path');
+const { spawnSync } = require('child_process');
+const {
+  discoverSkills,
+  extractCandidates,
+  classifyReference,
+  checkSkillReferences,
+} = require('../ci/reference-check');
+
+const DEFAULT_ROOT = path.resolve(__dirname, '..');
+const READY_COMPLIANCE = new Set(['Medium-High', 'High']);
+
+function slash(value) {
+  return String(value || '').replace(/\\/g, '/');
+}
+
+function decodeTarget(value) {
+  const raw = String(value || '');
+  try { return decodeURIComponent(raw); }
+  catch (_) { return raw; }
+}
+
+function unwrapMarkdownDestination(value) {
+  const target = String(value || '').trim();
+  return target.startsWith('<') && target.endsWith('>') ? target.slice(1, -1) : target;
+}
+
+function markdownLinkTargets(text) {
+  const targets = [];
+  for (const match of String(text || '').matchAll(/\[[^\]]*\]\(([^)]+)\)/g)) {
+    const target = unwrapMarkdownDestination(match[1]);
+    if (target) targets.push(target);
+  }
+  return targets;
+}
+
+function harnessReachableReferenceFiles(root, skillName) {
+  const skillRoot = path.join(root, skillName);
+  const rootKey = path.resolve(skillRoot);
+  const queue = ['SKILL.md'];
+  const visited = new Set();
+  const reachable = new Set();
+
+  while (queue.length) {
+    const relativeDoc = slash(queue.shift());
+    if (visited.has(relativeDoc)) continue;
+    visited.add(relativeDoc);
+
+    const full = path.resolve(skillRoot, relativeDoc);
+    if (!full.startsWith(rootKey + path.sep) && full !== rootKey) continue;
+    if (!fs.existsSync(full) || !fs.statSync(full).isFile()) continue;
+
+    const text = fs.readFileSync(full, 'utf8');
+    const docDir = path.dirname(full);
+
+    for (const reference of extractCandidates(text)) {
+      const classified = classifyReference(root, skillName, reference);
+      if (classified.status !== 'check' || !fs.existsSync(classified.target)) continue;
+      const relToSkill = slash(path.relative(skillRoot, classified.target));
+      if (!relToSkill.startsWith('../') && relToSkill !== '..') {
+        if (relToSkill.startsWith('references/')) reachable.add(relToSkill);
+        if (/\.mdx?$/i.test(relToSkill)) queue.push(relToSkill);
+      }
+    }
+
+    for (const targetRaw of markdownLinkTargets(text)) {
+      const target = decodeTarget(targetRaw).split('#', 1)[0];
+      if (!target || /^(?:https?:|mailto:|mdc:)/i.test(target)) continue;
+      if (/^<[^>]+>\//.test(target)) {
+        const classified = classifyReference(root, skillName, target);
+        if (classified.status !== 'check' || !fs.existsSync(classified.target)) continue;
+        const relToSkill = slash(path.relative(skillRoot, classified.target));
+        if (!relToSkill.startsWith('../') && relToSkill !== '..') {
+          if (relToSkill.startsWith('references/')) reachable.add(relToSkill);
+          if (/\.mdx?$/i.test(relToSkill)) queue.push(relToSkill);
+        }
+        continue;
+      }
+      const resolved = path.resolve(docDir, target);
+      const relToSkill = slash(path.relative(skillRoot, resolved));
+      if (relToSkill === '..' || relToSkill.startsWith('../')) continue;
+      if (!fs.existsSync(resolved) || !fs.statSync(resolved).isFile()) continue;
+      if (relToSkill.startsWith('references/')) reachable.add(relToSkill);
+      if (/\.mdx?$/i.test(relToSkill)) queue.push(relToSkill);
+    }
+  }
+  return reachable;
+}
+
+function classifyReportedLink(root, skillName, issue) {
+  const target = unwrapMarkdownDestination(decodeTarget(issue && issue.target));
+  if (!target) return { category: 'local', issue };
+  const source = slash(issue && issue.source || 'SKILL.md');
+
+  // Files under templates/ describe paths that exist only after generation.
+  // Keep Waza's finding visible, but do not confuse template output paths with
+  // broken links in the checked-in skill itself.
+  if (source === 'templates' || source.startsWith('templates/')) {
+    return { category: 'template', issue: { ...issue, target } };
+  }
+
+  if (/^<[^>]+>\//.test(target)) {
+    const classified = classifyReference(root, skillName, target);
+    if (classified.status === 'skip') {
+      return { category: 'template', issue: { ...issue, target } };
+    }
+    if (classified.status === 'check' && fs.existsSync(classified.target)) {
+      return {
+        category: 'resolved-contract',
+        issue: { ...issue, target, resolved: slash(path.relative(root, classified.target)) },
+      };
+    }
+  }
+
+  // Waza intentionally treats links that escape a skill directory as scope
+  // findings. Harness permits those links only when they resolve to a real
+  // checked-in path inside this repository. Missing/outside paths remain hard
+  // local failures.
+  const targetPath = target.split('#', 1)[0];
+  if (/^\.\.?(?:\/|$)/.test(targetPath)) {
+    const repoRoot = path.resolve(root);
+    const sourceFile = path.resolve(repoRoot, skillName, source);
+    const resolved = path.resolve(path.dirname(sourceFile), targetPath);
+    const relative = path.relative(repoRoot, resolved);
+    const insideRepo = relative !== '..' && !relative.startsWith('..' + path.sep) && !path.isAbsolute(relative);
+    if (insideRepo && fs.existsSync(resolved)) {
+      return {
+        category: 'resolved-contract',
+        issue: { ...issue, target, resolved: slash(relative) },
+      };
+    }
+  }
+
+  return { category: 'local', issue: { ...issue, target } };
+}
+
+function nonLinkFailureReasons(skill) {
+  const reasons = [];
+  const compliance = skill?.compliance?.level;
+  if (!READY_COMPLIANCE.has(compliance)) reasons.push('compliance:' + (compliance || 'missing'));
+  if (skill?.tokenBudget?.exceeded === true) reasons.push('token-budget-exceeded');
+  for (const item of skill?.specCompliance || []) {
+    if (item.passed === false) reasons.push('spec:' + (item.name || 'unnamed'));
+  }
+  if (skill?.schema && skill.schema.valid === false) reasons.push('schema-invalid');
+  return reasons;
+}
+
+function nonLinkReady(skill) {
+  return nonLinkFailureReasons(skill).length === 0;
+}
+
+function normalizeSkillReport(root, skill) {
+  const skillName = skill.name || path.basename(skill.path || '');
+  const links = skill.links || {};
+  const reachable = harnessReachableReferenceFiles(root, skillName);
+
+  const resolvedPlaceholderOrphans = [];
+  const remainingOrphanedFiles = [];
+  for (const orphan of links.orphanedFiles || []) {
+    const normalized = slash(orphan);
+    if (reachable.has(normalized)) resolvedPlaceholderOrphans.push(normalized);
+    else remainingOrphanedFiles.push(normalized);
+  }
+
+  const resolvedContractLinks = [];
+  const templateAdvisories = [];
+  const remainingLocalLinkIssues = [];
+  for (const [kind, items] of [
+    ['broken', links.brokenLinks || []],
+    ['directory', links.directoryLinks || []],
+    ['scope', links.scopeEscapes || []],
+  ]) {
+    for (const issue of items) {
+      const classified = classifyReportedLink(root, skillName, issue);
+      const entry = { kind, ...classified.issue };
+      if (classified.category === 'resolved-contract') resolvedContractLinks.push(entry);
+      else if (classified.category === 'template') templateAdvisories.push(entry);
+      else remainingLocalLinkIssues.push(entry);
+    }
+  }
+
+  const networkAdvisories = (links.deadURLs || []).map(issue => ({ kind: 'network', ...issue }));
+  const localLinksPassed = remainingLocalLinkIssues.length === 0 && remainingOrphanedFiles.length === 0;
+  const harnessReady = nonLinkReady(skill) && localLinksPassed;
+
+  return {
+    ...skill,
+    harnessCompatibility: {
+      wazaReady: Boolean(skill.ready),
+      harnessReady,
+      localLinksPassed,
+      nonLinkFailures: nonLinkFailureReasons(skill),
+      resolvedPlaceholderOrphans,
+      resolvedContractLinks,
+      templateAdvisories,
+      networkAdvisories,
+      remainingLocalLinkIssues,
+      remainingOrphanedFiles,
+    },
+  };
+}
+
+function normalizeReport(root, report) {
+  return {
+    ...report,
+    harnessReferenceContract: {
+      version: 1,
+      resolvablePlaceholders: ['this-skill-dir', 'skills-repo-root'],
+      genericPlaceholders: ['workspace', 'skill', 'kebab-case-name'],
+    },
+    skills: (report.skills || []).map(skill => normalizeSkillReport(root, skill)),
+  };
+}
+
+function parseArgs(argv) {
+  const args = { root: DEFAULT_ROOT, waza: process.env.WAZA_BIN || 'waza', format: 'text' };
+  for (let i = 0; i < argv.length; i++) {
+    const value = argv[i];
+    if (value === '--root') args.root = path.resolve(argv[++i]);
+    else if (value === '--waza') args.waza = argv[++i];
+    else if (value === '--format') args.format = argv[++i];
+    else if (value === '--help' || value === '-h') args.help = true;
+    else throw new Error('unknown argument: ' + value);
+  }
+  if (!['text', 'json'].includes(args.format)) throw new Error('--format must be text or json');
+  return args;
+}
+
+function printText(report) {
+  let harnessReady = 0;
+  let localPass = 0;
+  let resolvedOrphans = 0;
+  let network = 0;
+  let templates = 0;
+  for (const skill of report.skills || []) {
+    const h = skill.harnessCompatibility;
+    if (h.harnessReady) harnessReady++;
+    if (h.localLinksPassed) localPass++;
+    resolvedOrphans += h.resolvedPlaceholderOrphans.length;
+    network += h.networkAdvisories.length;
+    templates += h.templateAdvisories.length;
+    const icon = h.localLinksPassed ? 'PASS' : 'FAIL';
+    process.stdout.write(
+      `${icon} ${skill.name}: local-links=${h.localLinksPassed ? 'ok' : 'broken'}` +
+      ` harness-ready=${h.harnessReady ? 'yes' : 'no'}` +
+      ` nonlink=${h.nonLinkFailures.length ? h.nonLinkFailures.join(',') : 'ok'}` +
+      ` resolved-placeholder-orphans=${h.resolvedPlaceholderOrphans.length}` +
+      ` network-advisories=${h.networkAdvisories.length}` +
+      ` template-advisories=${h.templateAdvisories.length}\n`
+    );
+    for (const issue of h.remainingLocalLinkIssues) {
+      process.stdout.write(`  LOCAL ${issue.kind}: ${issue.source || 'SKILL.md'} -> ${issue.target} (${issue.reason || 'unresolved'})\n`);
+    }
+    for (const orphan of h.remainingOrphanedFiles) {
+      process.stdout.write(`  ORPHAN ${orphan}\n`);
+    }
+  }
+  const total = (report.skills || []).length;
+  process.stdout.write(
+    `Harness/Waza compatibility: local-link-pass ${localPass}/${total}; ` +
+    `harness-ready ${harnessReady}/${total}; resolved false orphan advisories ${resolvedOrphans}; ` +
+    `network advisories ${network}; template advisories ${templates}.\n`
+  );
+}
+
+function runCanonicalWazaChecks(root, waza, spawn = spawnSync) {
+  const skillNames = discoverSkills(root);
+  const skills = [];
+  let timestamp = null;
+
+  for (const skillName of skillNames) {
+    const skillPath = path.join(root, skillName);
+    const result = spawn(waza, ['check', skillPath, '--format', 'json'], {
+      cwd: root,
+      encoding: 'utf8',
+      windowsHide: true,
+      env: { ...process.env, WAZA_NO_UPDATE_CHECK: '1' },
+    });
+    if (result.error) {
+      throw new Error('cannot execute waza for ' + skillName + ': ' + result.error.message);
+    }
+    if (result.status !== 0) {
+      const detail = String(result.stderr || result.stdout || '').trim();
+      throw new Error('waza check failed for ' + skillName + ' with exit ' + result.status +
+        (detail ? ': ' + detail : ''));
+    }
+
+    let raw;
+    try {
+      raw = JSON.parse(result.stdout);
+    } catch (error) {
+      throw new Error('invalid waza JSON output for ' + skillName + ': ' + error.message);
+    }
+    if (!Array.isArray(raw.skills) || raw.skills.length !== 1) {
+      throw new Error('waza check for ' + skillName + ' did not return exactly one skill report');
+    }
+    timestamp = timestamp || raw.timestamp || null;
+    skills.push(raw.skills[0]);
+  }
+
+  return {
+    timestamp: timestamp || new Date().toISOString(),
+    skills,
+  };
+}
+
+function main() {
+  let args;
+  try {
+    args = parseArgs(process.argv.slice(2));
+  } catch (error) {
+    console.error('[Waza Harness Adapter] ' + error.message);
+    process.exit(2);
+  }
+  if (args.help) {
+    console.log('Usage: node scripts/waza-harness-check.js [--root <repo>] [--waza <binary>] [--format text|json]');
+    process.exit(0);
+  }
+
+  const canonical = checkSkillReferences(args.root);
+  if (canonical.failures.length) {
+    for (const failure of canonical.failures) {
+      console.error(`[Waza Harness Adapter] unresolved Harness reference: ${failure.skill} -> ${failure.reference} (${failure.target})`);
+    }
+    process.exit(1);
+  }
+
+  let raw;
+  try {
+    raw = runCanonicalWazaChecks(args.root, args.waza);
+  } catch (error) {
+    console.error('[Waza Harness Adapter] ' + error.message);
+    process.exit(2);
+  }
+
+  const normalized = normalizeReport(args.root, raw);
+  if (args.format === 'json') process.stdout.write(JSON.stringify(normalized, null, 2) + '\n');
+  else printText(normalized);
+
+  const failed = normalized.skills.some(skill => !skill.harnessCompatibility.harnessReady);
+  process.exit(failed ? 1 : 0);
+}
+
+if (require.main === module) main();
+
+module.exports = {
+  unwrapMarkdownDestination,
+  markdownLinkTargets,
+  harnessReachableReferenceFiles,
+  classifyReportedLink,
+  nonLinkFailureReasons,
+  nonLinkReady,
+  normalizeSkillReport,
+  normalizeReport,
+  runCanonicalWazaChecks,
+};

package/skill-creator/SKILL.md

@@ -4,7 +4,7 @@ description: Author, audit, and refactor SKILL.md files against one quality bar
 license: Apache-2.0
 metadata:
   author: Miya Daniel
-  version: 0.4.0
+  version: 0.13.0
 ---
 
 # Skill Creator

package/skill-creator/references/quality-checklist.md

@@ -14,3 +14,5 @@ A skill isn't done until every line here is true. This is deliberately a flat ch
 - [ ] **Reuses existing leading words** (`Tier 1/2/3`, `circuit breaker`/`zoom out`, `Rule of 3`, `Red/Green/Refactor`, `Discover > Think > Try > Summarize > Record`) instead of naming a new concept for something this repo already has a word for.
 - [ ] **Completion criteria are checkable** — tied to an exit code, a file's existence, a grep result, or explicit human confirmation, not "when it feels done."
 - [ ] **Description reads as a human-facing sentence**, not just a trigger-phrase list — `scripts/installer.js`'s interactive picker prints it next to a checkbox for a person deciding whether to install this skill; that's its real first reader in this architecture (audit report §2.1).
+
+Related guides: [authoring workflow](authoring-workflow.md), [testing workflow](testing-workflow.md), [quality principles](quality-principles.md), and [dynamic generation contract](dynamic-generation-contract.md).

package/tdd/SKILL.md

@@ -4,7 +4,7 @@ description: "Drive Standard Tasks (Tier 2) with Test-Driven Development (RED/GR
 license: Apache-2.0
 metadata:
   author: Miya Daniel
-  version: 0.4.0
+  version: 0.13.0
 ---
 
 # Test-Driven Development

package/tdd/references/core-discipline.md

@@ -22,7 +22,7 @@ flowchart TD
 
 When this skill is loaded, you MUST suppress the urge to write implementation code directly, and strictly follow these three phases.
 
-For public behavior, RED/GREEN evidence is necessary but not sufficient. Apply the machine-verifiable matrix, source-conformance policy, determinism comparison, and mandatory gates in `quality-model.md` before completion.
+For public behavior, RED/GREEN evidence is necessary but not sufficient. Apply the machine-verifiable matrix, source-conformance policy, determinism comparison, and mandatory gates in the [quality model](quality-model.md) before completion.
 
 **Evidence Assertion (Law of Evidence Assertion - 證據斷言定律)**:
 During each TDD phase (RED, GREEN, REFACTOR), you MUST present actual terminal test execution logs showing the exact test failure or pass. Claiming progress or success based on "assumed" passes is strictly PROHIBITED; you must assert outcomes with hard, objective evidence.

package/tdd/references/quality-model.md

@@ -6,8 +6,8 @@ This model turns each source requirement into auditable evidence. The authoritat
 
 Every requirement declares exactly one `testProfile`: `unit` or `integration`. The selected profile defines which case classes are applicable; the common scoring and source rules do not make every test use identical evidence.
 
-- `unit`: follow `unit-testing.md`. Integration determinism is N/A with a written reason.
-- `integration`: follow `integration-testing.md`. Determinism is mandatory and cannot be declared N/A.
+- `unit`: follow [unit testing](unit-testing.md). Integration determinism is N/A with a written reason.
+- `integration`: follow [integration testing](integration-testing.md). Determinism is mandatory and cannot be declared N/A.
 
 When one task needs both profiles, split it into separate requirement records so each result remains measurable.