harness-everything 0.16.1 → 0.16.3

package/ci/mechanism-31-opencode-hardlock-evidence.test.js

@@ -3,14 +3,16 @@ const path = require('path');
 const helper = require('./test-helper');
 const {
   BLOCKED_MARKER,
-  HARDLOCK_MESSAGE,
+  FIRST_CYCLE_MARKERS,
   INSTALLED_PLUGIN_NAME,
-  POST_REFLECTION_MARKER,
-  PRELOCK_MARKER,
+  PRE_REFLECTION_MARKER,
+  PROBE_CONTRACT,
+  REFLECTION_REQUIRED_MESSAGE,
+  RETRIP_MARKERS,
   verifyEvidence,
-} = require('../behavioral-evals/opencode-hardlock-live');
+} = require('../behavioral-evals/opencode-reflection-gate-live');
 
-console.log('\n[31] opencode live hard-lock evidence contract...');
+console.log('\n[31] opencode live Rule-of-3 reflection evidence contract...');
 
 function writeJson(file, value) {
   fs.mkdirSync(path.dirname(file), { recursive: true });
@@ -18,121 +20,63 @@ function writeJson(file, value) {
 }
 
 function makeEvidence() {
-  const dir = helper.tempDir('.mechanism-test-opencode-live-evidence');
+  const dir = helper.tempDir('.mechanism-test-opencode-live-reflection-evidence');
   fs.mkdirSync(path.join(dir, 'workspace'), { recursive: true });
   fs.mkdirSync(path.join(dir, 'state'), { recursive: true });
   const pluginHash = 'a'.repeat(64);
   writeJson(path.join(dir, 'metadata.json'), {
-    schemaVersion: 1,
-    stateIsolated: true,
-    installedPluginName: INSTALLED_PLUGIN_NAME,
-    pluginSha256: pluginHash,
-    installedPluginSha256: pluginHash,
-  });
-  const toolEvent = (input) => JSON.stringify({
-    type: 'tool',
-    part: { tool: 'edit', state: { input } },
+    schemaVersion: 2, probeContract: PROBE_CONTRACT, stateIsolated: true,
+    installedPluginName: INSTALLED_PLUGIN_NAME, pluginSha256: pluginHash, installedPluginSha256: pluginHash,
   });
+  const toolEvent = (input) => JSON.stringify({ type: 'tool', part: { tool: 'edit', state: { input } } });
   fs.writeFileSync(path.join(dir, 'transcript.jsonl'), [
-    toolEvent({ filePath: 'probe.txt', text: PRELOCK_MARKER }),
-    toolEvent({ filePath: 'probe.txt', text: POST_REFLECTION_MARKER }),
+    toolEvent({ filePath: 'probe.txt', text: PRE_REFLECTION_MARKER }),
+    ...FIRST_CYCLE_MARKERS.map((marker) => toolEvent({ filePath: 'probe.txt', text: marker })),
     toolEvent({ filePath: 'probe.txt', text: BLOCKED_MARKER }),
-    JSON.stringify({ type: 'text', part: { text: `${HARDLOCK_MESSAGE} after a repeat failure post-reflection.` } }),
-    '',
+    ...RETRIP_MARKERS.map((marker) => toolEvent({ filePath: 'probe.txt', text: marker })),
+    JSON.stringify({ type: 'text', part: { text: REFLECTION_REQUIRED_MESSAGE } }), '',
   ].join('\n'));
   fs.writeFileSync(path.join(dir, 'stderr.txt'), '', 'utf8');
-  fs.writeFileSync(path.join(dir, 'workspace', 'probe.txt'), `baseline\n${PRELOCK_MARKER}\n${POST_REFLECTION_MARKER}\n`, 'utf8');
+  fs.writeFileSync(path.join(dir, 'workspace', 'probe.txt'), ['baseline', PRE_REFLECTION_MARKER, ...FIRST_CYCLE_MARKERS, ...RETRIP_MARKERS, ''].join('\n'), 'utf8');
+  const signature = 'npm test: HARNESS_LIVE_PROBE_RED';
   writeJson(path.join(dir, 'state', 'circuit-breaker.json'), {
-    failures: {
-      'npm test: HARNESS_LIVE_PROBE_RED': { count: 4, firstSeen: 1, lastSeen: 5 },
-    },
-    hardLock: true,
-    lastReflection: 4,
-    lastReflectionSignature: 'npm test: HARNESS_LIVE_PROBE_RED',
-    reflectionPending: false,
-    reflectionRequestedAt: null,
-    reflectionToken: null,
-    reflectionSignature: null,
+    failures: { [signature]: { count: 3, firstSeen: 5, lastSeen: 8 } },
+    lastReflection: 4, lastReflectionSignature: signature, reflectionPending: true,
+    reflectionRequestedAt: 8, reflectionToken: 'second456', reflectionSignature: signature,
+  });
+  writeJson(path.join(dir, 'state', 'compliance.json'), {
+    sessionStart: 1, totalEdits: 6, verifiedEdits: 0, circuitBreakerTrips: 2, reflectionsForced: 2,
   });
   fs.writeFileSync(path.join(dir, 'state', 'zoom-out-report.md'), [
-    '## Goal',
-    'exercise the breaker',
-    '## Failed Attempts',
-    'three controlled failures',
-    '## Verified Facts',
-    'the verification fixture intentionally stays red',
-    '## Diagnosis',
-    'this is a live enforcement probe',
-    '## Decision',
-    'RESUME: reproduce the same failure once after reflection',
-    'Reflection token: abc123',
-    '',
+    '## Goal','exercise the Rule-of-3 reflection gate','## Failed Attempts','three controlled failures',
+    '## Verified Facts','the verification fixture intentionally stays red','## Diagnosis','this is a live enforcement probe',
+    '## Decision','RESUME: reproduce the same three-failure cycle after reflection','Reflection token: first123','',
   ].join('\n'));
   return dir;
 }
 
 try {
-  const valid = makeEvidence();
-  let result = verifyEvidence(valid);
-  helper.check('31. complete attributed hard-lock evidence passes', result.passed, JSON.stringify(result.checks.filter((entry) => !entry.pass)));
+  const valid=makeEvidence(); let result=verifyEvidence(valid);
+  helper.check('31. complete attributed reflection/re-trip evidence passes',result.passed,JSON.stringify(result.checks.filter((entry)=>!entry.pass)));
 
-  const wrongPlugin = makeEvidence();
-  const metadataFile = path.join(wrongPlugin, 'metadata.json');
-  const metadata = JSON.parse(fs.readFileSync(metadataFile, 'utf8'));
-  metadata.installedPluginSha256 = 'b'.repeat(64);
-  writeJson(metadataFile, metadata);
-  result = verifyEvidence(wrongPlugin);
-  helper.check(
-    '31. evidence fails when the installed plugin hash differs from the canonical source hash',
-    !result.passed && result.checks.some((entry) => entry.name === 'installed plugin is byte-identical to the recorded canonical source' && !entry.pass),
-    JSON.stringify(result.checks),
-  );
+  const wrongPlugin=makeEvidence(); const mf=path.join(wrongPlugin,'metadata.json'); const md=JSON.parse(fs.readFileSync(mf,'utf8'));
+  md.installedPluginSha256='b'.repeat(64); writeJson(mf,md); result=verifyEvidence(wrongPlugin);
+  helper.check('31. evidence fails when the installed plugin hash differs from the canonical source hash',!result.passed&&result.checks.some((e)=>e.name==='installed plugin is byte-identical to the recorded canonical source'&&!e.pass),JSON.stringify(result.checks));
 
-  const landed = makeEvidence();
-  fs.appendFileSync(path.join(landed, 'workspace', 'probe.txt'), `${BLOCKED_MARKER}\n`);
-  result = verifyEvidence(landed);
-  helper.check(
-    '31. negative control fails if the blocked marker reached the filesystem',
-    !result.passed && result.checks.some((entry) => entry.name === 'blocked marker did not reach the filesystem' && !entry.pass),
-    JSON.stringify(result.checks),
-  );
+  const landed=makeEvidence(); fs.appendFileSync(path.join(landed,'workspace','probe.txt'),`${BLOCKED_MARKER}\n`); result=verifyEvidence(landed);
+  helper.check('31. reflection gate fails if the blocked marker reached the filesystem',!result.passed&&result.checks.some((e)=>e.name==='reflection-pending blocked marker did not reach the filesystem'&&!e.pass),JSON.stringify(result.checks));
 
-  const unlocked = makeEvidence();
-  const breakerFile = path.join(unlocked, 'state', 'circuit-breaker.json');
-  const breaker = JSON.parse(fs.readFileSync(breakerFile, 'utf8'));
-  breaker.hardLock = false;
-  writeJson(breakerFile, breaker);
-  result = verifyEvidence(unlocked);
-  helper.check(
-    '31. evidence fails without a pre-reset hard-lock snapshot',
-    !result.passed && result.checks.some((entry) => entry.name === 'pre-reset breaker snapshot is hard-locked' && !entry.pass),
-    JSON.stringify(result.checks),
-  );
+  const retired=makeEvidence(); const bf=path.join(retired,'state','circuit-breaker.json'); const bs=JSON.parse(fs.readFileSync(bf,'utf8')); bs.hardLock=true; writeJson(bf,bs); result=verifyEvidence(retired);
+  helper.check('31. current evidence rejects the retired hardLock field',!result.passed&&result.checks.some((e)=>e.name==='snapshot has no retired hardLock field'&&!e.pass),JSON.stringify(result.checks));
 
-  const noAttempt = makeEvidence();
-  const transcript = fs.readFileSync(path.join(noAttempt, 'transcript.jsonl'), 'utf8')
-    .split(/\r?\n/)
-    .filter((line) => !line.includes(BLOCKED_MARKER))
-    .join('\n');
-  fs.writeFileSync(path.join(noAttempt, 'transcript.jsonl'), transcript);
-  result = verifyEvidence(noAttempt);
-  helper.check(
-    '31. evidence fails when the final blocked edit was never observed as a structured tool attempt',
-    !result.passed && result.checks.some((entry) => entry.name === 'structured tool trace contains the final blocked edit attempt' && !entry.pass),
-    JSON.stringify(result.checks),
-  );
+  const noRetrip=makeEvidence(); const rf=path.join(noRetrip,'state','circuit-breaker.json'); const rs=JSON.parse(fs.readFileSync(rf,'utf8')); rs.reflectionPending=false; rs.reflectionToken=null; rs.reflectionSignature=null; writeJson(rf,rs); result=verifyEvidence(noRetrip);
+  helper.check('31. evidence fails without a second Rule-of-3 reflection request',!result.passed&&result.checks.some((e)=>e.name==='three more matching failures request a second reflection instead of a permanent lock'&&!e.pass),JSON.stringify(result.checks));
 
-  const noReflection = makeEvidence();
-  fs.rmSync(path.join(noReflection, 'state', 'zoom-out-report.md'));
-  result = verifyEvidence(noReflection);
-  helper.check(
-    '31. evidence fails without the preserved reflection artifact',
-    !result.passed && result.checks.some((entry) => entry.name === 'reflection artifact is valid and preserved' && !entry.pass),
-    JSON.stringify(result.checks),
-  );
+  const noAttempt=makeEvidence(); const tf=path.join(noAttempt,'transcript.jsonl'); fs.writeFileSync(tf,fs.readFileSync(tf,'utf8').split(/\r?\n/).filter((line)=>!line.includes(BLOCKED_MARKER)).join('\n')); result=verifyEvidence(noAttempt);
+  helper.check('31. evidence fails when no structured edit was attempted during reflectionPending',!result.passed&&result.checks.some((e)=>e.name==='structured tool trace contains the edit attempt blocked by reflectionPending'&&!e.pass),JSON.stringify(result.checks));
+
+  const noReflection=makeEvidence(); fs.rmSync(path.join(noReflection,'state','zoom-out-report.md')); result=verifyEvidence(noReflection);
+  helper.check('31. evidence fails without the preserved first reflection artifact',!result.passed&&result.checks.some((e)=>e.name==='first reflection artifact is valid and preserved'&&!e.pass),JSON.stringify(result.checks));
 
   helper.finish();
-} catch (error) {
-  helper.check('31. OpenCode hard-lock live evidence contract', false, error.stack);
-  helper.finish();
-}
+} catch(error) { helper.check('31. OpenCode Rule-of-3 reflection live evidence contract',false,error.stack); helper.finish(); }

package/ci/router-workflow-plan.test.js

@@ -262,6 +262,25 @@ check(kernelUnknown.stdout.includes('ROUTER WORKFLOW PLAN (JSON)'), 'kernel emit
 check(kernelUnknown.stdout.includes('"strategySelection":"deferred"'), 'kernel exposes deferred unclassified selection');
 check(!/RECOMMENDED TIER:\s*Tier 1/i.test(kernelUnknown.stdout), 'kernel does not expose a silent Tier 1 fallback for unmatched prompts');
 
+const notificationStateHome = fs.mkdtempSync(path.join(os.tmpdir(), 'harness-router-notification-fail-open-'));
+const notificationStateFile = path.join(notificationStateHome, 'not-a-directory');
+fs.writeFileSync(notificationStateFile, 'x', 'utf8');
+const kernelNotificationPersistFailure = spawnSync(process.execPath, [kernelRouter], {
+  cwd: ROOT,
+  encoding: 'utf8',
+  input: JSON.stringify({
+    session_id: 'router-host-notification-fail-open',
+    cwd: ROOT,
+    hook_event_name: 'UserPromptSubmit',
+    prompt: '<task-notification><task-id>background-1</task-id><status>completed</status></task-notification>',
+  }),
+  env: { ...process.env, HARNESS_STATE_HOME: notificationStateFile, HARNESS_WORKSPACE_ROOT: ROOT },
+});
+check(kernelNotificationPersistFailure.status === 0, 'host notification persistence failure stays fail-open');
+check(kernelNotificationPersistFailure.stdout.includes('Host notification — no active execution contract; ignored for routing.'), 'host notification remains a routing no-op when state persistence fails');
+check(kernelNotificationPersistFailure.stderr.includes('routing state was not persisted'), 'host notification persistence failure remains visible as a reminder');
+fs.rmSync(notificationStateHome, { recursive: true, force: true });
+
 const kernelIterative = spawnSync(process.execPath, [kernelRouter, 'Fix this checkout bug and add a regression test.'], {
   cwd: ROOT,
   encoding: 'utf8',

package/docker-verify.sh

@@ -86,24 +86,63 @@ if ! node -e "const s=require('./.claude/harness-everything/state/sessions/defau
 fi
 echo "✅ PASS: Valid reflection report released the breaker (self-recovery)."
 
-# Second trip on the same signature must hard-lock even though a report exists
-# (the report is stale relative to lastFailureAt, and the cycle budget is spent).
-node -e "require('fs').writeFileSync('.claude/harness-everything/state/sessions/default/rule-of-3-state.json', JSON.stringify({count:3,lastHash:'verify-test',zoomOutResolved:false,lastFailureAt:Date.now()+60000,zoomOutCycles:1}))"
+# 3a-ter. Re-trip: three more failures on the same signature after a released
+# cycle ask for ANOTHER zoom-out. #190 retired the second-stage escalation, so
+# the contract is exit 2 plus the reflection-required message the hook actually
+# prints - never a permanent lock (ci/mechanism-2a-rule-of-3.test.js:58-64).
+echo -e "\n---> Running 3a-ter: Re-trip requests another zoom-out"
+# Seed through the hooks' own resolver: since #42 runtime state lives in the
+# global, workspace-keyed state root ($HARNESS_STATE_HOME or
+# ~/.agents/harness-everything/...), and a repo-relative seed only reaches the
+# hook while the one-time legacy migration can still move it.
+STATE_DIR=$(node -e "process.stdout.write(require('./hooks/scripts/lib/harness-state').getSessionDir(null, 'default'))")
+RETRIP_AT=$(node -e "process.stdout.write(String(Date.now()))")
+node -e "require('fs').writeFileSync(process.argv[1], JSON.stringify({count:3,lastHash:'verify-test',zoomOutResolved:false,lastFailureAt:Number(process.argv[2]),zoomOutCycles:1}))" "$STATE_DIR/rule-of-3-state.json" "$RETRIP_AT"
 set +e
 node hooks/scripts/rule-of-3.js 2>rule-of-3-err.log
 EXIT_CODE=$?
 set -e
 if [ "$EXIT_CODE" -ne 2 ]; then
-  echo "❌ FAIL: Second trip did not hard-lock (expected 2, got $EXIT_CODE)"
+  echo "❌ FAIL: Re-trip did not request another zoom-out (expected 2, got $EXIT_CODE)"
   cat rule-of-3-err.log
   exit 1
 fi
-if ! grep -q "hard lock" rule-of-3-err.log; then
-  echo "❌ FAIL: Second-trip output did not contain hard-lock escalation message"
+if ! grep -q "RULE OF 3 CIRCUIT BREAKER TRIGGERED" rule-of-3-err.log; then
+  echo "❌ FAIL: Re-trip output did not contain the circuit-breaker trigger message"
   cat rule-of-3-err.log
   exit 1
 fi
-echo "✅ PASS: Second trip on the same signature hard-locked for human decision."
+if ! grep -q "ACTION REQUIRED (reflect first)" rule-of-3-err.log; then
+  echo "❌ FAIL: Re-trip output did not demand reflection"
+  cat rule-of-3-err.log
+  exit 1
+fi
+# Negative guard: the retired escalation wording must never come back (#190).
+if grep -qi "hard lock" rule-of-3-err.log; then # this must never match
+  echo "❌ FAIL: Re-trip printed the retired hard-lock escalation, which no longer exists"
+  cat rule-of-3-err.log
+  exit 1
+fi
+echo "✅ PASS: Re-trip asked for another zoom-out, with no retired escalation wording."
+
+# A fresh report, written after the re-trip failure, releases the breaker again.
+printf '## Goal\nx\n## Failed Attempts\nx\n## Verified Facts\nx\n## Diagnosis\nx\n## Decision\nRESUME: second untried approach\n' > "$STATE_DIR/zoom-out-report.md"
+set +e
+node hooks/scripts/rule-of-3.js
+EXIT_CODE=$?
+set -e
+if [ "$EXIT_CODE" -ne 0 ]; then
+  echo "❌ FAIL: Fresh reflection report did not release the re-tripped breaker (expected 0, got $EXIT_CODE)"
+  exit 1
+fi
+if ! node -e "const s=JSON.parse(require('fs').readFileSync(process.argv[1],'utf8')); process.exit(s.count===0 && s.zoomOutResolved===true && s.zoomOutCycles===2 ? 0 : 1)" "$STATE_DIR/rule-of-3-state.json"; then
+  echo "❌ FAIL: Breaker state not updated after the second report release"
+  cat "$STATE_DIR/rule-of-3-state.json"
+  exit 1
+fi
+echo "✅ PASS: A fresh report released the re-tripped breaker (advisory re-trip, not an escalation)."
+
+# harness:reset stays an optional manual clear, not a required escalation step.
 npm run harness:reset
 
 

package/docs/mechanism-first-skill-mesh.md

@@ -55,7 +55,7 @@ HARNESS_DECISION
 tier: 2
 strategy: iterative-single
 workflow_state: active
-required: route-before-execution, objective-verification, loop-budget
+required: scope-lock, objective-verification, loop-awareness
 suggest: tdd, verification-loop
 suggestion_policy: evaluate-applicability
 escape_policy: workflow-uncovered-scope-only

package/docs/workflows/zoom-out.md

@@ -4,7 +4,7 @@
 
 Source of truth: `zoom-out/SKILL.md`.
 
-Contract summary from SKILL.md — Trigger: three same-signature failures or an explicit loop/rethink request. Output: fact-checked report ending in `RESUME` or `ESCALATE`. State: writes the session `zoom-out-report.md`; reset may clear breaker state. Gate: `hooks/scripts/rule-of-3.js` plus a valid report; reset only after the second cycle. USE FOR: "you are stuck in a loop", "the same error keeps failing", "rethink your assumptions". DO NOT USE FOR: routine single-failure debugging, greenfield planning without failures.
+Contract summary from SKILL.md — Trigger: three same-signature failures or an explicit loop/rethink request. Output: fact-checked report ending in `RESUME` or `ESCALATE`. State: writes the session `zoom-out-report.md`; reset may clear breaker state. Gate: `hooks/scripts/rule-of-3.js` plus a valid report; a later three-failure cycle requests another reflection. USE FOR: "you are stuck in a loop", "the same error keeps failing", "rethink your assumptions". DO NOT USE FOR: routine single-failure debugging, greenfield planning without failures.
 
 ## 1. Skill Behavior Workflow
 
@@ -16,9 +16,9 @@ graph TD
   Fill --> Decide{RESUME or ESCALATE?}
   Decide -->|untried path| Resume[RESUME On Untried Path]
   Decide -->|genuine user decision| Escalate[ESCALATE With Options]
-  Resume --> Again{Repeated Breaker Cycle?}
-  Again -->|second cycle| Reset[npm run harness reset]
-  Reset --> Evolve[Record Insight With self-evolve]
+  Resume --> Again{Three More Matching Failures?}
+  Again -->|yes| Cycle[Another Zoom-Out Cycle]
+  Cycle --> Evolve[Record Insight With self-evolve]
   Again -->|no| Done([Report Complete])
   Escalate --> Done
 ```
@@ -47,7 +47,7 @@ graph TD
   Write --> Choice{Untried Path Exists?}
   Choice -->|yes| Resume2[RESUME On Untried Path]
   Choice -->|no| Esc2[ESCALATE With Options]
-  Resume2 -->|repeated cycle| Reset2[npm run harness reset Then self-evolve]
+  Resume2 -->|three more matching failures| Cycle2[Another Zoom-Out Cycle Then self-evolve]
 ```
 
 Template: `zoom-out/templates/zoom-out-report.template.md`. Enforcement: `hooks/scripts/rule-of-3.js`. Deep dive: `zoom-out/references/circuit-breaker.md`.
@@ -58,5 +58,5 @@ Template: `zoom-out/templates/zoom-out-report.template.md`. Enforcement: `hooks/
 - [ ] Goal, files, configuration, and logs were rechecked with read-only tools before any resume
 - [ ] `templates/zoom-out-report.template.md` was filled and the session `zoom-out-report.md` ends in `RESUME` or `ESCALATE`
 - [ ] Resume targeted only an untried path; genuine user decisions were escalated with options
-- [ ] Reset via `npm run harness:reset` happened only after the second cycle, with the insight recorded via `self-evolve`
+- [ ] A later three-failure cycle ran another zoom-out; `npm run harness:reset` was used only as an optional manual clear, with the insight recorded via `self-evolve`
 - [ ] Routine single-failure debugging and greenfield planning without failures were not routed here

package/fable-mode/CONTRACT-FORMAT.md

@@ -2,7 +2,8 @@
 
 Issue #85 Phase 3 makes the stage map a machine-readable execution contract.
 The router still chooses only the execution topology. Fable owns the stage map,
-model selector, worker briefs, stage audit, replan budget, and cold verifier.
+model selector, worker briefs, stage audit, advisory replan limits, and cold
+verifier.
 Phase 4 adds an optional bounded ensemble modifier without creating a new base
 topology.
 

package/fable-mode/SKILL.md

@@ -4,7 +4,7 @@ description: "Stage large, multi-source or multi-session tasks through a written
 license: Apache-2.0
 metadata:
   author: Miya Daniel
-  version: 0.16.1
+  version: 0.16.3
 ---
 
 # Fable Mode (v3)

package/fable-mode/agents/fable-orchestrator.md

@@ -53,12 +53,13 @@ overlap reject dispatch instead of becoming a verbal warning.
 
 The stage map remains a living orchestration document only inside those
 constraints. When new information invalidates it, re-plan and create revised
-stage contracts before dispatching new work. Replan budget comes from `workflowPlan.limits.maxReplans` and is accounted by
-the runtime controller. Re-enter through `workflow-disposition.js start`; a
-third full replan under the default budget is machine-blocked as
-`replan-budget-exhausted` instead of being only an orchestration reminder. Scope rule:
-deliver the task as specified; new scope discovered mid-run is surfaced as a
-recommendation at delivery, not silently built.
+stage contracts before dispatching new work. `workflowPlan.limits.maxReplans`
+is advisory orchestration guidance, not a machine-enforced counter. Re-enter
+through `workflow-disposition.js start`; after repeated replans, consider a
+zoom-out/reflection and keep the reason explicit, but do not block execution
+solely because an advisory count was reached. Scope rule: deliver the task as
+specified; new scope discovered mid-run is surfaced as a recommendation at
+delivery, not silently built.
 
 **2. Delegate by name and validated batch.** Every artifact-producing stage goes
 to a named agent via the Task tool:
@@ -76,11 +77,12 @@ spawn workers.
 
 For `fable-parallel`, spawn only stages in the same validated execution batch;
 never invent an additional parallel edge. A stage depending on another stage is
-not in the same ready batch. Never exceed `workflowPlan.limits.maxWorkers`. The router plan is the numeric
-source of truth; `workflow-plan-consumer.js` chunks ready sets to that cap and
-runtime worker leases enforce it when the host exposes stable worker IDs. For
-other Fable strategies, serialize the returned batches unless a later validated
-plan says otherwise.
+not in the same ready batch. Treat `workflowPlan.limits.maxWorkers` as a
+planning cap you are expected to respect: it is advisory. `workflow-plan-consumer.js`
+returns every dependency-ready stage without chunking to that cap, and nothing
+leases or counts workers at runtime, so exceeding it is your own judgement call,
+not a blocked action. For other Fable strategies, serialize the returned batches
+unless a later validated plan says otherwise.
 
 **3. Verify with a check that can fail — external artifacts only.** Each stage
 defines a pass condition an external artifact satisfies: a test that runs, a file

package/fable-mode/execution-guardrails/SKILL.md

@@ -7,7 +7,7 @@ description: >-
 license: Apache-2.0
 metadata:
   author: Miya Daniel
-  version: 0.16.1
+  version: 0.16.3
 ---
 
 # Execution Guardrails

package/fable-mode/fable-haiku/SKILL.md

@@ -4,7 +4,7 @@ description: "Run staged fable work on Haiku for bulk mechanical tasks with expl
 license: Apache-2.0
 metadata:
   author: Miya Daniel
-  version: 0.16.1
+  version: 0.16.3
 ---
 
 # Fable Mode — Haiku

package/fable-mode/fable-opus/SKILL.md

@@ -4,7 +4,7 @@ description: "Run staged fable orchestration on Opus for cross-stage synthesis,
 license: Apache-2.0
 metadata:
   author: Miya Daniel
-  version: 0.16.1
+  version: 0.16.3
 ---
 
 # Fable Mode — Opus

package/fable-mode/fable-sonnet/SKILL.md

@@ -4,7 +4,7 @@ description: "Run staged fable work on Sonnet for non-trivial implementation, re
 license: Apache-2.0
 metadata:
   author: Miya Daniel
-  version: 0.16.1
+  version: 0.16.3
 ---
 
 # Fable Mode — Sonnet

package/harness-everything/SKILL.md

@@ -4,7 +4,7 @@ description: "Route software/project work through the Harness kernel: classify T
 license: Apache-2.0
 metadata:
   author: Miya Daniel
-  version: 0.16.1
+  version: 0.16.3
 ---
 
 # Harness Everything

package/harness-everything/references/router-workflow-plan.md

@@ -54,14 +54,14 @@ If the structured contract is missing or invalid, the kernel emits a degraded/un
 | Strategy | Selection rule | Key invariants |
 |---|---|---|
 | `direct-single` | Tier 1 bounded/trivial task | scope lock, verify before claim |
-| `iterative-single` | Tier 2 ordinary diagnosis/TDD/tool loop | objective verification, explicit iteration budget |
+| `iterative-single` | Tier 2 ordinary diagnosis/TDD/tool loop | objective verification, advisory iteration guidance |
 | `fable-staged` | Tier 3 dependent work or parallel independence not proven | stage contracts, cold verifier |
 | `fable-parallel` | Tier 3 with explicit independent workstreams and read-only/disjoint write scope | stage contracts, parallel scope contract, synthesis barrier |
 | `fable-multi-agent-workspace` | durable multi-session task needing reusable specialists | workspace state, handoffs, stage contracts, cold verifier |
 
 Tier 3 alone never implies a persistent workspace. Likewise, an `independent` label alone is insufficient for `fable-parallel`: the write set must also be `read-only` or `disjoint`.
 
-The Phase 2 `iterative-single` loop budget is **8 iterations**. This is a policy bound chosen for control, not a measured optimum. It is separate from the rule-of-3 repeated-failure breaker.
+The Phase 2 `iterative-single` plan exposes **8 iterations** as advisory planning guidance, not a machine-enforced stop. Continue when evidence justifies it; the separate rule-of-3 repeated-failure reflection gate remains the hard boundary.
 
 ## Explicit user choice and prohibitions
 
@@ -110,7 +110,7 @@ This does not choose a topology and does not itself enforce the gate. Phase 5 ow
 
 Examples:
 
-- `objective-verification` and `loop-budget` are mandatory for `iterative-single`;
+- `loop-awareness` and `objective-verification` are mandatory for `iterative-single`, on top of the base `scope-lock`, `verify-before-claim`, and `replan-after-repeated-failure`;
 - `tdd` and `verification-loop` remain advisory skill suggestions;
 - `stage-contracts` and `cold-verification` are mandatory for Fable topologies;
 - `multi-agent-workspace` is suggested only when the selected topology actually requires durable workspace behavior.

package/harness-everything/scripts/kernel-router.js

@@ -120,10 +120,7 @@ function run(raw) {
   } catch (error) { failure = error; }
   if (hostNotification && !persisted?.workflow) {
     console.log('\n=> Host notification — no active execution contract; ignored for routing.');
-    if (failure) {
-      console.error('[Workflow Router] ' + failure.message);
-      process.exitCode = 2;
-    }
+    if (failure) console.error('[Workflow Reminder] routing state was not persisted: ' + failure.message);
     return;
   }
   if (result?.sanitized) console.log(result.sanitized);

package/opencode-plugin/README.md

@@ -62,10 +62,8 @@ normalized success/failure field to key a signature on for tools in general):
 - the follow-up asks for a tokenized `zoom-out-report.md` artifact with the
   required reflection sections; the artifact is accepted through the real
   edit hook and records `lastReflection`
-- the same signature failing again after that reflection was recorded
-  hard-locks the breaker
 - after a valid reflection, the signature count resets; another three matching failures trigger another zoom-out
-  or a new session starts
+- `npm run harness:reset` remains an optional manual state clear; a repeated cycle does not create a permanent second-stage lock
 
 Idle handling is bounded: after a failed verification, the plugin records that
 the follow-up is pending and ignores repeated `session.idle` events until a new

package/opencode-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "harness-enforcement",
   "description": "Repository inventory for the opencode enforcement plugin and its standalone helper",
-  "version": "0.16.1",
+  "version": "0.16.3",
   "runtime": "index.mjs",
   "hooks": {
     "verify": "hooks/verify.js"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "harness-everything",
-  "version": "0.16.1",
+  "version": "0.16.3",
   "description": "Harness OS: An Orchestrated Agent Operating System for AI-driven Development",
   "main": "harness-everything/scripts/bootstrap.js",
   "bin": {
@@ -40,7 +40,8 @@
     "eval:behavioral": "node behavioral-evals/run.js run",
     "eval:behavioral:validate": "node behavioral-evals/run.js validate",
     "eval:behavioral:plugin": "node behavioral-evals/run-with-plugin.js run",
-    "eval:opencode:hardlock-live": "node behavioral-evals/opencode-hardlock-live.js run",
+    "eval:opencode:reflection-gate-live": "node behavioral-evals/opencode-reflection-gate-live.js run",
+    "eval:opencode:hardlock-live": "node behavioral-evals/opencode-reflection-gate-live.js run",
     "eval:paired": "node behavioral-evals/paired-benchmark.js run",
     "eval:paired:summarize": "node behavioral-evals/paired-benchmark.js summarize",
     "test:ab": "node ci/ab-test-harness.js validate",

package/plugins/harness-everything/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "harness-everything",
-  "version": "0.16.1",
+  "version": "0.16.3",
   "description": "Invariant-first engineering harness for routing, verification, and failure recovery while preserving agent autonomy.",
   "author": {
     "name": "Miya Daniel",

package/plugins/harness-everything/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "harness-everything",
-  "version": "0.16.1",
+  "version": "0.16.3",
   "description": "Invariant-first engineering harness for routing, verification, and failure recovery while preserving agent autonomy.",
   "author": {
     "name": "Miya Daniel",

package/plugins/harness-everything/skills/fable-mode/CONTRACT-FORMAT.md

@@ -2,7 +2,8 @@
 
 Issue #85 Phase 3 makes the stage map a machine-readable execution contract.
 The router still chooses only the execution topology. Fable owns the stage map,
-model selector, worker briefs, stage audit, replan budget, and cold verifier.
+model selector, worker briefs, stage audit, advisory replan limits, and cold
+verifier.
 Phase 4 adds an optional bounded ensemble modifier without creating a new base
 topology.
 

package/plugins/harness-everything/skills/fable-mode/SKILL.md

@@ -4,7 +4,7 @@ description: "Stage large, multi-source or multi-session tasks through a written
 license: Apache-2.0
 metadata:
   author: Miya Daniel
-  version: 0.16.1
+  version: 0.16.3
 ---
 
 # Fable Mode (v3)

package/plugins/harness-everything/skills/fable-mode/agents/fable-orchestrator.md

@@ -53,12 +53,13 @@ overlap reject dispatch instead of becoming a verbal warning.
 
 The stage map remains a living orchestration document only inside those
 constraints. When new information invalidates it, re-plan and create revised
-stage contracts before dispatching new work. Replan budget comes from `workflowPlan.limits.maxReplans` and is accounted by
-the runtime controller. Re-enter through `workflow-disposition.js start`; a
-third full replan under the default budget is machine-blocked as
-`replan-budget-exhausted` instead of being only an orchestration reminder. Scope rule:
-deliver the task as specified; new scope discovered mid-run is surfaced as a
-recommendation at delivery, not silently built.
+stage contracts before dispatching new work. `workflowPlan.limits.maxReplans`
+is advisory orchestration guidance, not a machine-enforced counter. Re-enter
+through `workflow-disposition.js start`; after repeated replans, consider a
+zoom-out/reflection and keep the reason explicit, but do not block execution
+solely because an advisory count was reached. Scope rule: deliver the task as
+specified; new scope discovered mid-run is surfaced as a recommendation at
+delivery, not silently built.
 
 **2. Delegate by name and validated batch.** Every artifact-producing stage goes
 to a named agent via the Task tool:
@@ -76,11 +77,12 @@ spawn workers.
 
 For `fable-parallel`, spawn only stages in the same validated execution batch;
 never invent an additional parallel edge. A stage depending on another stage is
-not in the same ready batch. Never exceed `workflowPlan.limits.maxWorkers`. The router plan is the numeric
-source of truth; `workflow-plan-consumer.js` chunks ready sets to that cap and
-runtime worker leases enforce it when the host exposes stable worker IDs. For
-other Fable strategies, serialize the returned batches unless a later validated
-plan says otherwise.
+not in the same ready batch. Treat `workflowPlan.limits.maxWorkers` as a
+planning cap you are expected to respect: it is advisory. `workflow-plan-consumer.js`
+returns every dependency-ready stage without chunking to that cap, and nothing
+leases or counts workers at runtime, so exceeding it is your own judgement call,
+not a blocked action. For other Fable strategies, serialize the returned batches
+unless a later validated plan says otherwise.
 
 **3. Verify with a check that can fail — external artifacts only.** Each stage
 defines a pass condition an external artifact satisfies: a test that runs, a file

package/plugins/harness-everything/skills/fable-mode/execution-guardrails/SKILL.md

@@ -7,7 +7,7 @@ description: >-
 license: Apache-2.0
 metadata:
   author: Miya Daniel
-  version: 0.16.1
+  version: 0.16.3
 ---
 
 # Execution Guardrails