harness-everything 0.49.0 → 0.50.0

package/.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
       "name": "harness-everything",
       "source": "./",
       "description": "Harness OS: an orchestrated agent operating system — tier routing, circuit breaker guardrails, verification gates, WAL session memory, and self-evolving workspace rules.",
-      "version": "0.49.0",
+      "version": "0.50.0",
       "author": {
         "name": "Miya Daniel"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "harness-everything",
   "description": "Harness OS: an orchestrated agent operating system — tier routing, circuit breaker guardrails, verification gates, WAL session memory, and self-evolving workspace rules.",
-  "version": "0.49.0",
+  "version": "0.50.0",
   "author": {
     "name": "Miya Daniel"
   },

package/.github/workflows/ci.yml

@@ -21,88 +21,6 @@ jobs:
       - name: Verify pilot instrumentation, sanitizer and offline replay
         run: python3 benchmarks/issue290-pilot/check.py
 
-  doc-governance:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v7
-        with:
-          fetch-depth: 0
-      - uses: actions/setup-node@v7
-        with:
-          node-version: 24
-      - name: Run base-owned document governance guard
-        env:
-          HARNESS_GUARD_EVENT: ${{ github.event_name }}
-          HARNESS_GUARD_BASE_SHA: ${{ github.event.pull_request.base.sha }}
-          HARNESS_GUARD_CANDIDATE_SHA: ${{ github.event.pull_request.head.sha }}
-        run: |
-          node -e 'const crypto = require("node:crypto");
-          const fs = require("node:fs");
-          const os = require("node:os");
-          const path = require("node:path");
-          const { spawnSync } = require("node:child_process");
-          (function main() {
-          const guardPath = "scripts/doc-governance-guard.js";
-          const event = process.env.HARNESS_GUARD_EVENT || "unknown";
-          const baseInput = process.env.HARNESS_GUARD_BASE_SHA || "";
-          const candidateInput = process.env.HARNESS_GUARD_CANDIDATE_SHA || "";
-          function warn(state, message) {
-            console.log("::warning title=" + state + "::" + message);
-            if (process.env.GITHUB_STEP_SUMMARY) fs.appendFileSync(process.env.GITHUB_STEP_SUMMARY, "## Document governance guard\n\n**" + state + "**: " + message + "\n\n", "utf8");
-          }
-          function git(args) {
-            const result = spawnSync("git", args, { encoding: "buffer", maxBuffer: 16 * 1024 * 1024, env: { ...process.env, GIT_CONFIG_NOSYSTEM: "1", GIT_NO_REPLACE_OBJECTS: "1", GIT_PAGER: "cat", GIT_TERMINAL_PROMPT: "0" } });
-            if (result.error) throw result.error;
-            if (result.status !== 0) throw new Error("git " + args[0] + " failed: " + Buffer.from(result.stderr || result.stdout || "").toString("utf8").trim());
-            return Buffer.from(result.stdout || "");
-          }
-          function resolveCommit(input, label) {
-            if (!/^(?:[0-9a-f]{40}|[0-9a-f]{64})$/i.test(input)) throw new Error(label + " is not a full commit SHA");
-            const resolved = git(["rev-parse", "--verify", "--quiet", "--end-of-options", input + "^{commit}"]).toString("ascii").trim().toLowerCase();
-            if (resolved !== input.toLowerCase()) throw new Error(label + " did not resolve to the supplied commit SHA");
-            return resolved;
-          }
-          if (event !== "pull_request") {
-            warn("UNCHECKED", "No externally selected PR base/head is available for event " + event + "; the base-owned guard was not executed.");
-            return;
-          }
-          try {
-            const base = resolveCommit(baseInput, "PR base SHA");
-            const candidate = resolveCommit(candidateInput, "PR head SHA");
-            const checkout = process.env.GITHUB_SHA || "unavailable";
-            console.log("PR head SHA used by the guard: " + candidate);
-            console.log("GITHUB_SHA used by checkout and the ordinary suite: " + checkout + " (the pull_request checkout may be a synthetic merge commit).");
-            const entries = git(["ls-tree", "-z", "--full-tree", base, "--", guardPath]);
-            if (entries.length === 0) {
-              warn("BOOTSTRAP_UNCHECKED", "Trusted base " + base + " has no " + guardPath + "; candidate guard was not executed. Independent review of the frozen candidate guard is required.");
-              return;
-            }
-            if (entries[entries.length - 1] !== 0) throw new Error("base guard tree entry is not NUL terminated");
-            const entry = entries.subarray(0, entries.length - 1);
-            const tab = entry.indexOf(9);
-            if (tab < 0 || entry.subarray(tab + 1).toString("utf8") !== guardPath) throw new Error("base guard tree entry is malformed");
-            const [mode, type, oid] = entry.subarray(0, tab).toString("ascii").split(" ");
-            if (!(["100644", "100755"].includes(mode)) || type !== "blob" || !/^(?:[0-9a-f]{40}|[0-9a-f]{64})$/i.test(oid || "")) throw new Error("base guard is not a regular Git blob");
-            const guardBytes = git(["cat-file", "blob", oid]);
-            const digest = crypto.createHash("sha256").update(guardBytes).digest("hex");
-            console.log("Base guard blob: " + oid + "; SHA-256: " + digest);
-            const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), "harness-doc-governance-"));
-            const tempGuard = path.join(tempDir, "doc-governance-guard.js");
-            try {
-              fs.writeFileSync(tempGuard, guardBytes, { mode: 0o600 });
-              const result = spawnSync(process.execPath, [tempGuard, "--repo", process.cwd(), "--base", base, "--candidate", candidate], { encoding: "buffer", maxBuffer: 64 * 1024 * 1024, env: { ...process.env, GIT_CONFIG_NOSYSTEM: "1", GIT_NO_REPLACE_OBJECTS: "1", GIT_PAGER: "cat", GIT_TERMINAL_PROMPT: "0" } });
-              if (result.error) throw result.error;
-              if (result.stdout) process.stdout.write(result.stdout);
-              if (result.stderr) process.stderr.write(result.stderr);
-              process.exitCode = result.status === null ? 1 : result.status;
-            } finally {
-              fs.rmSync(tempDir, { recursive: true, force: true });
-            }
-          } catch (error) {
-            console.error("Document governance guard setup failed: " + (error.message || String(error)));
-            process.exitCode = 1;
-          }
-          })();'
   self-regression:
     strategy:
       fail-fast: false

package/.github/workflows/doc-governance.yml

@@ -0,0 +1,91 @@
+name: Document Governance
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+  workflow_call:
+
+jobs:
+  doc-governance:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+        with:
+          fetch-depth: 0
+      - uses: actions/setup-node@v7
+        with:
+          node-version: 24
+      - name: Run base-owned document governance guard
+        env:
+          HARNESS_GUARD_EVENT: ${{ github.event_name }}
+          HARNESS_GUARD_BASE_SHA: ${{ github.event.pull_request.base.sha }}
+          HARNESS_GUARD_CANDIDATE_SHA: ${{ github.event.pull_request.head.sha }}
+        run: |
+          node -e 'const crypto = require("node:crypto");
+          const fs = require("node:fs");
+          const os = require("node:os");
+          const path = require("node:path");
+          const { spawnSync } = require("node:child_process");
+          (function main() {
+          const guardPath = "scripts/doc-governance-guard.js";
+          const event = process.env.HARNESS_GUARD_EVENT || "unknown";
+          const baseInput = process.env.HARNESS_GUARD_BASE_SHA || "";
+          const candidateInput = process.env.HARNESS_GUARD_CANDIDATE_SHA || "";
+          function warn(state, message) {
+            console.log("::warning title=" + state + "::" + message);
+            if (process.env.GITHUB_STEP_SUMMARY) fs.appendFileSync(process.env.GITHUB_STEP_SUMMARY, "## Document governance guard\n\n**" + state + "**: " + message + "\n\n", "utf8");
+          }
+          function git(args) {
+            const result = spawnSync("git", args, { encoding: "buffer", maxBuffer: 16 * 1024 * 1024, env: { ...process.env, GIT_CONFIG_NOSYSTEM: "1", GIT_NO_REPLACE_OBJECTS: "1", GIT_PAGER: "cat", GIT_TERMINAL_PROMPT: "0" } });
+            if (result.error) throw result.error;
+            if (result.status !== 0) throw new Error("git " + args[0] + " failed: " + Buffer.from(result.stderr || result.stdout || "").toString("utf8").trim());
+            return Buffer.from(result.stdout || "");
+          }
+          function resolveCommit(input, label) {
+            if (!/^(?:[0-9a-f]{40}|[0-9a-f]{64})$/i.test(input)) throw new Error(label + " is not a full commit SHA");
+            const resolved = git(["rev-parse", "--verify", "--quiet", "--end-of-options", input + "^{commit}"]).toString("ascii").trim().toLowerCase();
+            if (resolved !== input.toLowerCase()) throw new Error(label + " did not resolve to the supplied commit SHA");
+            return resolved;
+          }
+          if (event !== "pull_request") {
+            warn("UNCHECKED", "No externally selected PR base/head is available for event " + event + "; the base-owned guard was not executed.");
+            return;
+          }
+          try {
+            const base = resolveCommit(baseInput, "PR base SHA");
+            const candidate = resolveCommit(candidateInput, "PR head SHA");
+            const checkout = process.env.GITHUB_SHA || "unavailable";
+            console.log("PR head SHA used by the guard: " + candidate);
+            console.log("GITHUB_SHA used by checkout and the ordinary suite: " + checkout + " (the pull_request checkout may be a synthetic merge commit).");
+            const entries = git(["ls-tree", "-z", "--full-tree", base, "--", guardPath]);
+            if (entries.length === 0) {
+              warn("BOOTSTRAP_UNCHECKED", "Trusted base " + base + " has no " + guardPath + "; candidate guard was not executed. Independent review of the frozen candidate guard is required.");
+              return;
+            }
+            if (entries[entries.length - 1] !== 0) throw new Error("base guard tree entry is not NUL terminated");
+            const entry = entries.subarray(0, entries.length - 1);
+            const tab = entry.indexOf(9);
+            if (tab < 0 || entry.subarray(tab + 1).toString("utf8") !== guardPath) throw new Error("base guard tree entry is malformed");
+            const [mode, type, oid] = entry.subarray(0, tab).toString("ascii").split(" ");
+            if (!(["100644", "100755"].includes(mode)) || type !== "blob" || !/^(?:[0-9a-f]{40}|[0-9a-f]{64})$/i.test(oid || "")) throw new Error("base guard is not a regular Git blob");
+            const guardBytes = git(["cat-file", "blob", oid]);
+            const digest = crypto.createHash("sha256").update(guardBytes).digest("hex");
+            console.log("Base guard blob: " + oid + "; SHA-256: " + digest);
+            const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), "harness-doc-governance-"));
+            const tempGuard = path.join(tempDir, "doc-governance-guard.js");
+            try {
+              fs.writeFileSync(tempGuard, guardBytes, { mode: 0o600 });
+              const result = spawnSync(process.execPath, [tempGuard, "--repo", process.cwd(), "--base", base, "--candidate", candidate], { encoding: "buffer", maxBuffer: 64 * 1024 * 1024, env: { ...process.env, GIT_CONFIG_NOSYSTEM: "1", GIT_NO_REPLACE_OBJECTS: "1", GIT_PAGER: "cat", GIT_TERMINAL_PROMPT: "0" } });
+              if (result.error) throw result.error;
+              if (result.stdout) process.stdout.write(result.stdout);
+              if (result.stderr) process.stderr.write(result.stderr);
+              process.exitCode = result.status === null ? 1 : result.status;
+            } finally {
+              fs.rmSync(tempDir, { recursive: true, force: true });
+            }
+          } catch (error) {
+            console.error("Document governance guard setup failed: " + (error.message || String(error)));
+            process.exitCode = 1;
+          }
+          })();'

package/.github/workflows/release.yml

@@ -19,12 +19,15 @@ permissions:
   id-token: write
 
 jobs:
-  # Release publication is gated by exactly the same test matrix as a PR.
+  # Release publication waits for the full CI matrix and document governance.
   gate:
     uses: ./.github/workflows/ci.yml
 
+  doc-governance:
+    uses: ./.github/workflows/doc-governance.yml
+
   release:
-    needs: gate
+    needs: [gate, doc-governance]
     runs-on: ubuntu-latest
     steps:
       - name: Checkout full release history

package/CHANGELOG.md

@@ -2,6 +2,16 @@
 
 All notable changes to this project are documented in this file.
 
+## [0.50.0](https://github.com/dyphn1/Harness-everything/compare/v0.49.0...v0.50.0) (2026-11-09)
+
+### Features
+
+* **governance:** split the guard workflow and protect only authoritative doc membership ([5a46e67](https://github.com/dyphn1/Harness-everything/commit/5a46e673525a28f9df770b8eefe2dce4bf7ae9e8))
+
+### Bug Fixes
+
+* **governance:** keep the extracted guard job in the release gate ([24c3b10](https://github.com/dyphn1/Harness-everything/commit/24c3b10a6530dd33fff22788a2219bd36ceb1447))
+
 ## [0.49.0](https://github.com/dyphn1/Harness-everything/compare/v0.48.0...v0.49.0) (2026-11-08)
 
 ### Features

package/ci/mechanism-2ax-doc-lifecycle.test.js

@@ -1625,15 +1625,25 @@ checkCase('2ax. frozen Git-object guard with bootstrap and tamper controls', ()
     'plugins/harness-everything/skills/harness-everything/scripts/project-docs-resolver.js',
     '.agents/harness-everything/project-docs.json',
     '.agents/harness-everything/document-inventory.json',
-    '.github/workflows/ci.yml',
+    '.agents/harness-everything/errors/README.md',
+    '.github/workflows/doc-governance.yml',
     'package.json',
     'self-evolve/scripts/self-regression.js',
     'ci/mechanism-test.js',
     'ci/mutation-check.js',
     'ci/lib/isolated-test-process.js',
     'ci/test-helper.js',
+    'scripts/errors-sync.js',
     'scripts/verify-all.js'
   ];
+  const membershipPaths = ['AGENTS.md', 'SECURITY.md', 'CODE_OF_CONDUCT.md', 'PRIVACY.md', 'TERMS.md', 'docs/document-lifecycle.md'];
+  const membershipPrefixPaths = ['docs/policy/existing.md', 'docs/prd/future.md'];
+  const fixtureSupportPaths = [
+    '.github/workflows/ci.yml',
+    'benchmarks/issue290-pilot/README.md',
+    '.agents/harness-everything/errors/E-0001-fixture.md',
+    ...membershipPrefixPaths
+  ];
   const frozenGuard = fs.readFileSync(governanceGuardPath);
   const frozenTest = fs.readFileSync(__filename);
   const frozenGuardPath = path.join(tempRoot, 'frozen-doc-governance-guard.js');
@@ -1680,6 +1690,13 @@ checkCase('2ax. frozen Git-object guard with bootstrap and tamper controls', ()
           : fs.readFileSync(path.join(REPOSITORY_ROOT, ...relativePath.split('/')));
       writeRelative(root, relativePath, bytes);
     }
+    for (const relativePath of membershipPaths) writeRelative(root, relativePath, fs.readFileSync(path.join(REPOSITORY_ROOT, relativePath)));
+    for (const relativePath of fixtureSupportPaths) {
+      const bytes = relativePath === '.github/workflows/ci.yml'
+        ? fs.readFileSync(path.join(REPOSITORY_ROOT, relativePath))
+        : Buffer.from(`baseline ${relativePath}\n`);
+      writeRelative(root, relativePath, bytes);
+    }
     const copyScenarioTree = (from, into) => {
       fs.mkdirSync(into, { recursive: true });
       for (const entry of fs.readdirSync(from, { withFileTypes: true })) {
@@ -1715,6 +1732,9 @@ checkCase('2ax. frozen Git-object guard with bootstrap and tamper controls', ()
   }
 
   const fixture = createFixture();
+  resetFixture(fixture);
+  writeRelative(fixture.root, 'docs/adr/GRPH-001.md', 'baseline ADR\n');
+  fixture.base = commitFixture(fixture.root, 'add ADR fixture member');
   const ordinaryPath = path.join(fixture.root, 'docs', 'ordinary.md');
   fs.writeFileSync(ordinaryPath, 'ordinary document edit\n');
   // Git for Windows rejects LF paths even when they are added directly to the index.
@@ -1737,6 +1757,9 @@ checkCase('2ax. frozen Git-object guard with bootstrap and tamper controls', ()
   assert.strictEqual(positive.report.verifier.sha256, crypto.createHash('sha256').update(frozenGuard).digest('hex'));
   assert.strictEqual(positive.report.verifier.matchesBaseObject, true, 'running verifier bytes match the baseline guard blob');
   assert.deepStrictEqual(positive.report.trustSurface.paths.slice(0, trustedPaths.length).map(item => item.path), trustedPaths, 'fixed trust surface is explicit');
+  for (const relativePath of [...membershipPaths, ...membershipPrefixPaths]) {
+    assert.ok(positive.report.trustSurface.paths.some(item => item.path === relativePath), `${relativePath} is an explicit membership-only path`);
+  }
   const scenarioExpectedPath = 'ci/fixtures/doc-lifecycle/scenarios/active-to-active/expected.json';
   const scenarioOracle = positive.report.trustSurface.paths.find(item => item.path === scenarioExpectedPath);
   assert.ok(scenarioOracle, 'tracked scenario oracle is part of the baseline trust surface');
@@ -1784,6 +1807,90 @@ checkCase('2ax. frozen Git-object guard with bootstrap and tamper controls', ()
   assert.strictEqual(unchanged.status, 0, 'an unchanged tree passes');
   assert.strictEqual(unchanged.report.verdict, 'PASS');
 
+  resetFixture(fixture);
+  const ciWorkflowPath = path.join(fixture.root, '.github/workflows/ci.yml');
+  const ciWorkflow = fs.readFileSync(ciWorkflowPath, 'utf8');
+  assert.ok(ciWorkflow.includes('  pilot-offline-evidence:\n    runs-on: ubuntu-latest'), 'unrelated CI job fixture exists');
+  writeRelative(fixture.root, '.github/workflows/ci.yml', ciWorkflow.replace('  pilot-offline-evidence:\n    runs-on: ubuntu-latest', '  pilot-offline-evidence:\n    name: Updated unrelated CI job\n    runs-on: ubuntu-latest'));
+  const unrelatedCiCandidate = commitFixture(fixture.root, 'change unrelated CI job');
+  const unrelatedCi = runFrozenGuard(fixture, fixture.base, unrelatedCiCandidate);
+  assert.strictEqual(unrelatedCi.status, 0, 'unrelated ci.yml job changes pass');
+  assert.strictEqual(unrelatedCi.report.verdict, 'PASS');
+
+  resetFixture(fixture);
+  writeRelative(fixture.root, '.github/workflows/doc-governance.yml', `${fs.readFileSync(path.join(fixture.root, '.github/workflows/doc-governance.yml'), 'utf8')}\n# guard workflow change\n`);
+  const governanceWorkflowCandidate = commitFixture(fixture.root, 'change guard workflow');
+  const governanceWorkflowChange = runFrozenGuard(fixture, fixture.base, governanceWorkflowCandidate);
+  assert.strictEqual(governanceWorkflowChange.status, 2, 'the standalone guard workflow remains review-required');
+  assert.strictEqual(governanceWorkflowChange.report.verdict, 'REVIEW_REQUIRED');
+
+  resetFixture(fixture);
+  for (const relativePath of ['benchmarks/issue290-pilot/README.md', '.agents/harness-everything/errors/E-0001-fixture.md']) {
+    fs.appendFileSync(path.join(fixture.root, ...relativePath.split('/')), '\nrecord update\n');
+  }
+  const recordsCandidate = commitFixture(fixture.root, 'change records only');
+  const recordsOnly = runFrozenGuard(fixture, fixture.base, recordsCandidate);
+  assert.strictEqual(recordsOnly.status, 0, 'benchmark and error-ledger records are outside the governance verdict');
+  assert.strictEqual(recordsOnly.report.verdict, 'PASS');
+
+  resetFixture(fixture);
+  writeRelative(fixture.root, '.github/workflows/doc-governance.yml', `${fs.readFileSync(path.join(fixture.root, '.github/workflows/doc-governance.yml'), 'utf8')}\n# guard workflow change\n`);
+  fs.appendFileSync(path.join(fixture.root, '.agents/harness-everything/errors/E-0001-fixture.md'), '\nrecord update\n');
+  const mixedCandidate = commitFixture(fixture.root, 'change T1 and T3');
+  assert.strictEqual(runFrozenGuard(fixture, fixture.base, mixedCandidate).report.verdict, 'REVIEW_REQUIRED', 'a T1 change controls a mixed T1 and T3 change');
+
+  for (const relativePath of membershipPaths) {
+    resetFixture(fixture);
+    fs.appendFileSync(path.join(fixture.root, relativePath), '\nordinary content revision\n');
+    const candidate = commitFixture(fixture.root, `revise ${relativePath}`);
+    const result = runFrozenGuard(fixture, fixture.base, candidate);
+    assert.strictEqual(result.report.verdict, 'PASS', `${relativePath} content revision does not require U5`);
+  }
+
+  for (const relativePath of membershipPrefixPaths) {
+    resetFixture(fixture);
+    fs.appendFileSync(path.join(fixture.root, ...relativePath.split('/')), '\nordinary content revision\n');
+    const candidate = commitFixture(fixture.root, `revise ${relativePath}`);
+    assert.strictEqual(runFrozenGuard(fixture, fixture.base, candidate).report.verdict, 'PASS', `${relativePath} content revision does not require U5`);
+  }
+
+  for (const relativePath of ['docs/policy/new.md', 'docs/prd/new.md']) {
+    resetFixture(fixture);
+    writeRelative(fixture.root, relativePath, 'new T1 member\n');
+    const candidate = commitFixture(fixture.root, `add ${relativePath}`);
+    assert.strictEqual(runFrozenGuard(fixture, fixture.base, candidate).report.verdict, 'REVIEW_REQUIRED', `adding ${relativePath} changes protected membership`);
+  }
+
+  resetFixture(fixture);
+  fixtureGit(fixture.root, ['rm', '--quiet', '--', 'AGENTS.md']);
+  const deletedRootAgentsCandidate = commitFixture(fixture.root, 'delete root AGENTS');
+  assert.strictEqual(runFrozenGuard(fixture, fixture.base, deletedRootAgentsCandidate).report.verdict, 'REVIEW_REQUIRED', 'deleting root AGENTS changes protected membership');
+
+  resetFixture(fixture);
+  const changedRootAgentsModeCandidate = commitFixture(fixture.root, 'change root AGENTS mode', 'AGENTS.md');
+  assert.strictEqual(runFrozenGuard(fixture, fixture.base, changedRootAgentsModeCandidate).report.verdict, 'REVIEW_REQUIRED', 'changing root AGENTS mode is not a content-only revision');
+
+  resetFixture(fixture);
+  fixtureGit(fixture.root, ['mv', '--', 'AGENTS.md', 'docs/AGENTS.md']);
+  const renamedRootAgentsCandidate = commitFixture(fixture.root, 'move root AGENTS');
+  assert.strictEqual(runFrozenGuard(fixture, fixture.base, renamedRootAgentsCandidate).report.verdict, 'REVIEW_REQUIRED', 'moving root AGENTS out changes protected membership');
+
+  resetFixture(fixture);
+  writeRelative(fixture.root, 'docs/adr/GRPH-001.md', 'revised ADR contents\n');
+  const adrContentCandidate = commitFixture(fixture.root, 'revise ADR contents');
+  assert.strictEqual(runFrozenGuard(fixture, fixture.base, adrContentCandidate).report.verdict, 'PASS', 'ADR content revisions do not require U5');
+
+  resetFixture(fixture);
+  fixtureGit(fixture.root, ['rm', '--quiet', '--', 'docs/adr/GRPH-001.md']);
+  const deletedAdrCandidate = commitFixture(fixture.root, 'delete ADR');
+  assert.strictEqual(runFrozenGuard(fixture, fixture.base, deletedAdrCandidate).report.verdict, 'REVIEW_REQUIRED', 'deleting an ADR changes protected membership');
+
+  resetFixture(fixture);
+  fs.mkdirSync(path.join(fixture.root, 'docs/records'), { recursive: true });
+  fixtureGit(fixture.root, ['mv', '--', 'docs/adr/GRPH-001.md', 'docs/records/GRPH-001.md']);
+  const movedAdrCandidate = commitFixture(fixture.root, 'move ADR out of governed folder');
+  assert.strictEqual(runFrozenGuard(fixture, fixture.base, movedAdrCandidate).report.verdict, 'REVIEW_REQUIRED', 'moving an ADR out of the governed folder requires review');
+
   const rawIdentity = entry => ({ mode: entry.mode, type: entry.type, oid: entry.oid });
   const configuredIdentity = (commit, relativePath) => {
     const tree = parseTreeOracle(fixtureGit(fixture.root, ['ls-tree', '-r', '-z', '--full-tree', commit]));
@@ -1813,11 +1920,12 @@ checkCase('2ax. frozen Git-object guard with bootstrap and tamper controls', ()
   writeRelative(fixture.root, 'docs/governed-index.md', 'changed derived output\n');
   const derivedCandidate = commitFixture(fixture.root, 'change derived document');
   const derivedChange = runFrozenGuard(fixture, fixture.base, derivedCandidate);
-  assert.strictEqual(derivedChange.status, 2, 'derived content change still requires review');
-  assert.strictEqual(derivedChange.report.verdict, 'REVIEW_REQUIRED');
-  const derivedEntry = derivedChange.report.policyPreservation.configuredPaths.missingOrChanged.find(item => item.path === 'docs/governed-index.md');
-  assert.ok(derivedEntry, 'derived content change remains in review-required paths');
-  assert.strictEqual(derivedEntry.state, 'review_required');
+  assert.strictEqual(derivedChange.status, 0, 'generated-view content changes are left to ordinary CI');
+  assert.strictEqual(derivedChange.report.verdict, 'PASS');
+  const derivedEntry = derivedChange.report.policyPreservation.configuredPaths.paths.find(item => item.path === 'docs/governed-index.md');
+  assert.ok(derivedEntry, 'derived content change remains visible in the report');
+  assert.strictEqual(derivedEntry.state, 'pass');
+  assert.match(derivedEntry.reason, /regenerate-equals CI/);
   assert.deepStrictEqual(derivedEntry.base, configuredIdentity(fixture.base, 'docs/governed-index.md'));
   assert.deepStrictEqual(derivedEntry.candidate, configuredIdentity(derivedCandidate, 'docs/governed-index.md'));
 
@@ -1930,8 +2038,10 @@ checkCase('2ax. frozen Git-object guard with bootstrap and tamper controls', ()
   writeRelative(globFixture.root, 'generated/view.md', 'changed derived glob output\n');
   const derivedGlobCandidate = commitFixture(globFixture.root, 'change derived glob member');
   const derivedGlob = runFrozenGuard(globFixture, globFixture.base, derivedGlobCandidate);
-  assert.strictEqual(derivedGlob.status, 2, 'a derived glob member content change requires review');
-  assert.strictEqual(derivedGlob.report.policyPreservation.configuredPaths.paths.find(item => item.path === 'generated/view.md').state, 'review_required');
+  assert.strictEqual(derivedGlob.status, 0, 'a generated-view revision is left to ordinary CI');
+  const derivedGlobEntry = derivedGlob.report.policyPreservation.configuredPaths.paths.find(item => item.path === 'generated/view.md');
+  assert.strictEqual(derivedGlobEntry.state, 'pass');
+  assert.match(derivedGlobEntry.reason, /regenerate-equals CI/);
 
   if (process.platform !== 'win32') {
     resetFixture(globFixture);
@@ -2119,11 +2229,20 @@ checkCase('2ax. frozen Git-object guard with bootstrap and tamper controls', ()
   assert.notStrictEqual(missingCommit.status, 0);
   assert.notStrictEqual(missingCommit.report.verdict, 'PASS');
 
-  checkCase('2ax. CI workflow keeps the base-owned guard in a failing standalone job', () => {
-    const workflowPath = path.join(REPOSITORY_ROOT, '.github/workflows/ci.yml');
+  checkCase('2ax. guard has a standalone workflow outside the general CI workflow', () => {
+    const workflowPath = path.join(REPOSITORY_ROOT, '.github/workflows/doc-governance.yml');
+    assert.ok(fs.existsSync(workflowPath), 'dedicated document-governance workflow exists');
+  });
+
+  checkCase('2ax. standalone workflow keeps the base-owned guard in a failing job', () => {
+    const workflowPath = path.join(REPOSITORY_ROOT, '.github/workflows/doc-governance.yml');
     const workflow = require('js-yaml').load(fs.readFileSync(workflowPath, 'utf8'));
+    const ciWorkflow = require('js-yaml').load(fs.readFileSync(path.join(REPOSITORY_ROOT, '.github/workflows/ci.yml'), 'utf8'));
     const job = workflow.jobs['doc-governance'];
     assert.ok(job, 'standalone doc-governance job exists');
+    assert.ok(!ciWorkflow.jobs['doc-governance'], 'general CI workflow no longer carries the governance runner');
+    assert.deepStrictEqual(workflow.on, ciWorkflow.on, 'standalone guard keeps the original CI workflow triggers');
+    assert.ok(!/"paths(?:-ignore)?"/.test(JSON.stringify(workflow.on)), 'the guard workflow is not path-filtered');
     assert.strictEqual(job['runs-on'], 'ubuntu-latest');
     assert.notStrictEqual(job['continue-on-error'], true, 'the job does not mask guard failures');
     assert.ok(job.steps.some(step => step.uses === 'actions/checkout@v7' && step.with['fetch-depth'] === 0), 'job fetches base Git objects');
@@ -2131,7 +2250,6 @@ checkCase('2ax. frozen Git-object guard with bootstrap and tamper controls', ()
     const guardStep = job.steps.find(step => step.name === 'Run base-owned document governance guard');
     assert.ok(guardStep, 'standalone job owns the guard step');
     assert.notStrictEqual(guardStep['continue-on-error'], true, 'the guard step propagates nonzero exits');
-    assert.ok(!workflow.jobs['self-regression'].steps.some(step => step.name === guardStep.name), 'self-regression no longer runs the guard');
     const command = String(guardStep.run || '').trimEnd();
     const inline = command.match(/^node -e '([\s\S]*)'$/);
     assert.ok(inline, 'guard step remains a directly executable Node script');
@@ -2169,7 +2287,7 @@ checkCase('2ax. frozen Git-object guard with bootstrap and tamper controls', ()
     assert.match(passEvent.output, /"verdict": "PASS"/);
 
     resetFixture(fixture);
-    writeRelative(fixture.root, 'docs/governed-index.md', 'changed derived output for CI simulation\n');
+    writeRelative(fixture.root, '.github/workflows/doc-governance.yml', `${fs.readFileSync(path.join(fixture.root, '.github/workflows/doc-governance.yml'), 'utf8')}\n# guard workflow change\n`);
     const reviewCandidate = commitFixture(fixture.root, 'simulate guard review failure');
     const reviewEvent = simulate('pull_request', fixture.base, reviewCandidate);
     assert.strictEqual(reviewEvent.status, 2, 'REVIEW_REQUIRED stays a failing workflow job');
@@ -2183,6 +2301,18 @@ checkCase('2ax. frozen Git-object guard with bootstrap and tamper controls', ()
       assert.strictEqual(result.status, exitCode, `the standalone job propagates guard exit ${exitCode}`);
     }
   });
+
+  checkCase('2ax. release gate calls and waits for the standalone document-governance workflow', () => {
+    const releaseWorkflow = require('js-yaml').load(fs.readFileSync(path.join(REPOSITORY_ROOT, '.github/workflows/release.yml'), 'utf8'));
+    const ciWorkflow = require('js-yaml').load(fs.readFileSync(path.join(REPOSITORY_ROOT, '.github/workflows/ci.yml'), 'utf8'));
+    const governanceWorkflow = require('js-yaml').load(fs.readFileSync(path.join(REPOSITORY_ROOT, '.github/workflows/doc-governance.yml'), 'utf8'));
+
+    assert.strictEqual(releaseWorkflow.jobs.gate.uses, './.github/workflows/ci.yml', 'release keeps the CI reusable-workflow gate');
+    assert.strictEqual(releaseWorkflow.jobs['doc-governance']?.uses, './.github/workflows/doc-governance.yml', 'release calls the extracted governance workflow');
+    assert.deepStrictEqual(releaseWorkflow.jobs.release.needs, ['gate', 'doc-governance'], 'release waits for CI and document governance');
+    assert.ok(!ciWorkflow.jobs['doc-governance'], 'CI does not duplicate the extracted governance runner');
+    assert.ok(governanceWorkflow.jobs['doc-governance'], 'the called standalone workflow owns the governance job');
+  });
 });
 
 helper.finish();

package/docs/document-lifecycle.md

@@ -4,6 +4,25 @@ Contract for the documentation family: project docs configuration (D5), document
 
 Documentation is a **consumer** of the #320 workflow/obligation abstractions. Nothing here is a second router, a standing maintenance loop or a cognitive lock: every check is a pure function that reports diagnostics.
 
+## Governance tiers and placement (#401)
+
+```mermaid
+flowchart TD
+  A["Document or path change"] --> B{"T1 scope?"}
+  B -->|membership, policy or guard implementation| C["REVIEW_REQUIRED"]
+  B -->|ordinary content revision| D["No U5; run lifecycle, conflict and link checks"]
+  B -->|no| E{"T3 evidence or notes?"}
+  E -->|yes| F["No document-governance verdict; ordinary CI still applies"]
+  E -->|no| G["T2: ordinary CI; generated views use regenerate-equals"]
+```
+
+| Tier or convention | Scope and handling |
+| --- | --- |
+| **T1 — strict** | ADRs, `docs/policy/`, future `docs/prd/`, named authoritative docs, root `AGENTS.md`, `SECURITY.md`, `CODE_OF_CONDUCT.md`, `PRIVACY.md` and `TERMS.md`, the guard workflow, guard/doc-check/lifecycle/resolver code, policy JSON, the error-ledger schema/generator, `package.json`, generic runners/helpers and policy-bearing fixtures. Membership, delete/rename, policy-map and governance-implementation changes require review. Ordinary content revisions do not require U5; normal lifecycle, conflict and link checks still apply. Root files are membership-only. |
+| **T2 — ordinary CI** | Other docs and skills, plus generated views checked by regenerate-equals. No document-governance verdict. |
+| **T3 — records** | Benchmark/evidence payloads, non-policy fixtures, error-ledger records, `CHANGELOG.md` and notes receive no document-governance verdict; ordinary CI, security and provenance checks still apply. The ledger schema/generator and policy-bearing fixtures remain T1. |
+| **Placement** | Put new authoritative docs in `docs/adr/`, `docs/policy/` or future `docs/prd/`; put observations in `docs/records/`. Keep existing authoritative files such as `docs/architecture.md`, `docs/doc-workflow-reconciliation.md` and this contract as named exceptions. No existing files move in this slice. |
+
 ## Scope of this slice (original 2026-10-20 checkpoint; Phase 3b/3c status updated 2026-10-25)
 
 This table distinguishes merged mechanism code from end-to-end workflow integration. The last reviewed `main` commit is `29b1d65b398e2622af97bf067078373b7fa76b26` (v0.36.2). That release commit carries `[skip ci]` and only bumps package/distribution versions on top of `e5d22584e243d5b5e587ee0279625e97a9033160`, whose full-gate `CI` run [39374474269](https://github.com/dyphn1/Harness-everything/actions/runs/39374474269) completed with every job succeeded. The historical Windows System One resident teardown (`S1-RS15`) was observed in attempt 1 of [run 39175240370](https://github.com/dyphn1/Harness-everything/actions/runs/39175240370) on `main@75e04359ae5bf11a41739f8eb04d25a76ee8f3a7`; that run completed successfully on attempt 2 and says nothing about `29b1d65`. Treat the resident teardown as a known platform limitation only when a current run on the exact SHA reproduces it, and require an all-green full-gate run for that SHA before calling any baseline green.

package/docs/repository-contract.md

@@ -20,6 +20,7 @@ This page is generated from checked-in runtime and workflow sources. Do not edit
 | --- | --- | --- | --- |
 | `behavioral-evals.yml` | 24 | schedule, workflow_dispatch | n/a |
 | `ci.yml` | 22, 24 | workflow_call | `test`, `test:mutations`, `test:release:semantics`, `waza:check`, `test:consistency`, `test:references`, `test:release`, `test:collision`, `test:plugin:openai`, `test:plugin:submission`, `test:platform:compatibility`, `test:portability` |
+| `doc-governance.yml` | 24 | workflow_call | n/a |
 | `release.yml` | 24 | workflow_dispatch | n/a |
 
 ## Drift prevention

package/opencode-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "harness-enforcement",
   "description": "Repository inventory for the opencode enforcement plugin and its standalone helper",
-  "version": "0.49.0",
+  "version": "0.50.0",
   "runtime": "index.mjs",
   "hooks": {
     "verify": "hooks/verify.js"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "harness-everything",
-  "version": "0.49.0",
+  "version": "0.50.0",
   "description": "Harness OS: An Orchestrated Agent Operating System for AI-driven Development",
   "main": "harness-everything/scripts/bootstrap.js",
   "bin": {

package/plugins/harness-everything/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "harness-everything",
-  "version": "0.49.0",
+  "version": "0.50.0",
   "description": "Invariant-first engineering harness for routing, verification, and failure recovery while preserving agent autonomy.",
   "author": {
     "name": "Miya Daniel",

package/plugins/harness-everything/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "harness-everything",
-  "version": "0.49.0",
+  "version": "0.50.0",
   "description": "Invariant-first engineering harness for routing, verification, and failure recovery while preserving agent autonomy.",
   "author": {
     "name": "Miya Daniel",

package/sbom.cdx.json

@@ -2,23 +2,23 @@
   "$schema": "https://cyclonedx.org/schema/bom-1.7.schema.json",
   "bomFormat": "CycloneDX",
   "specVersion": "1.7",
-  "serialNumber": "urn:uuid:962b7322-7ab3-5bae-8399-c8e93c5d6717",
+  "serialNumber": "urn:uuid:d9117a7d-8bb7-597a-91d9-1bb5afbdcbb0",
   "version": 1,
   "metadata": {
-    "timestamp": "2026-11-08T20:01:04.125Z",
+    "timestamp": "2026-11-09T00:33:16.486Z",
     "tools": [
       {
         "vendor": "Harness Everything",
         "name": "generate-sbom.js",
-        "version": "0.49.0"
+        "version": "0.50.0"
       }
     ],
     "component": {
       "type": "application",
-      "bom-ref": "pkg:npm/harness-everything@0.49.0",
+      "bom-ref": "pkg:npm/harness-everything@0.50.0",
       "name": "harness-everything",
-      "version": "0.49.0",
-      "purl": "pkg:npm/harness-everything@0.49.0"
+      "version": "0.50.0",
+      "purl": "pkg:npm/harness-everything@0.50.0"
     }
   },
   "components": [
@@ -2033,7 +2033,7 @@
       ]
     },
     {
-      "ref": "pkg:npm/harness-everything@0.49.0",
+      "ref": "pkg:npm/harness-everything@0.50.0",
       "dependsOn": [
         "pkg:npm/%40commitlint/cli@19.8.1",
         "pkg:npm/%40commitlint/config-conventional@19.8.1",

package/scripts/doc-governance-guard.js

@@ -17,15 +17,19 @@ const TRUST_SURFACE_PATHS = [
   'plugins/harness-everything/skills/harness-everything/scripts/project-docs-resolver.js',
   '.agents/harness-everything/project-docs.json',
   '.agents/harness-everything/document-inventory.json',
-  '.github/workflows/ci.yml',
+  '.agents/harness-everything/errors/README.md',
+  '.github/workflows/doc-governance.yml',
   'package.json',
   'self-evolve/scripts/self-regression.js',
   'ci/mechanism-test.js',
   'ci/mutation-check.js',
   'ci/lib/isolated-test-process.js',
   'ci/test-helper.js',
+  'scripts/errors-sync.js',
   'scripts/verify-all.js'
 ];
+const MEMBERSHIP_ONLY_PATHS = ['AGENTS.md', 'SECURITY.md', 'CODE_OF_CONDUCT.md', 'PRIVACY.md', 'TERMS.md', 'docs/document-lifecycle.md'];
+const MEMBERSHIP_ONLY_PREFIXES = ['docs/policy/', 'docs/prd/'];
 const TRUST_SURFACE_PREFIXES = ['ci/fixtures/doc-lifecycle/scenarios/'];
 
 function sha256(bytes) {
@@ -207,9 +211,25 @@ function sameIdentity(left, right) {
   return stable(identity(left)) === stable(identity(right));
 }
 
+function sameMembership(left, right) {
+  if (!left || !right) return left === right;
+  return regularBlob(left) && regularBlob(right) && left.mode === right.mode;
+}
+
 function trustSurfacePaths(baseTree, candidateTree) {
   const fixed = TRUST_SURFACE_PATHS.map(relativePath => ({ key: pathKey(relativePath), path: relativePath }));
-  const fixedKeys = new Set(fixed.map(item => item.key));
+  const membershipPaths = new Map(MEMBERSHIP_ONLY_PATHS.map(relativePath => [pathKey(relativePath), relativePath]));
+  for (const sourceTree of [baseTree, candidateTree]) {
+    for (const [key, entry] of sourceTree) {
+      if (MEMBERSHIP_ONLY_PREFIXES.some(prefix => entry.pathBytes.subarray(0, Buffer.byteLength(prefix)).equals(Buffer.from(prefix)))) {
+        membershipPaths.set(key, pathText(entry.pathBytes));
+      }
+    }
+  }
+  const membership = [...membershipPaths]
+    .sort(([left], [right]) => Buffer.compare(Buffer.from(left, 'base64'), Buffer.from(right, 'base64')))
+    .map(([key, path]) => ({ key, path, membershipOnly: true }));
+  const fixedKeys = new Set([...fixed, ...membership].map(item => item.key));
   const fixtureEntries = new Map();
   for (const sourceTree of [baseTree, candidateTree]) {
     for (const [key, entry] of sourceTree) {
@@ -220,7 +240,7 @@ function trustSurfacePaths(baseTree, candidateTree) {
   const fixtures = [...fixtureEntries]
     .sort(([left], [right]) => Buffer.compare(Buffer.from(left, 'base64'), Buffer.from(right, 'base64')))
     .map(([key, path]) => ({ key, path }));
-  return [...fixed, ...fixtures];
+  return [...fixed, ...membership, ...fixtures];
 }
 
 function documentPath(pathBytes) {
@@ -278,7 +298,7 @@ function checkConfiguredPaths(baseTree, candidateTree, config) {
         const after = candidateMembers.get(key) || null;
         const entry = before || after;
         const sameRegularMode = regularBlob(before) && regularBlob(after) && before.mode === after.mode;
-        const revised = kind === 'governed' && sameRegularMode && before.oid !== after.oid;
+        const revised = sameRegularMode && before.oid !== after.oid;
         const identityPreserved = sameRegularMode && before.oid === after.oid;
         const memberPath = pathText(entry.pathBytes);
         details.push({
@@ -286,10 +306,12 @@ function checkConfiguredPaths(baseTree, candidateTree, config) {
           ...(glob ? { pattern: record.path } : {}),
           path: memberPath,
           ...(memberPath === null ? { pathBase64: key } : {}),
-          state: revised ? 'revised' : identityPreserved ? 'pass' : 'review_required',
+          state: kind === 'derived' ? 'pass' : revised ? 'revised' : identityPreserved ? 'pass' : 'review_required',
           base: identity(before),
           candidate: identity(after),
-          ...(revised ? { reason: 'Content revisions are tracked by Git identity but are not semantically validated by the guard.' } : {})
+          ...(kind === 'derived' && !sameIdentity(before, after)
+            ? { reason: 'Generated-view changes are left to ordinary regenerate-equals CI.' }
+            : revised ? { reason: 'Content revisions are tracked by Git identity but are not semantically validated by the guard.' } : {})
         });
       }
     }
@@ -373,10 +395,11 @@ function run(argv) {
     report.policyPreservation.state = [report.policyPreservation.governed, report.policyPreservation.derived, report.policyPreservation.configuredPaths]
       .some(item => item.state !== 'pass') ? 'review_required' : 'pass';
 
-    report.trustSurface.paths = trustSurfacePaths(baseTree, candidateTree).map(({ key, path }) => {
+    report.trustSurface.paths = trustSurfacePaths(baseTree, candidateTree).map(({ key, path, membershipOnly }) => {
       const before = baseTree.get(key);
       const after = candidateTree.get(key);
-      return { path, ...(path === null ? { pathBase64: key } : {}), base: identity(before), candidate: identity(after), changed: !sameIdentity(before, after) };
+      const changed = membershipOnly ? !sameMembership(before, after) : !sameIdentity(before, after);
+      return { path, ...(path === null ? { pathBase64: key } : {}), base: identity(before), candidate: identity(after), changed };
     });
     report.trustSurface.changed = report.trustSurface.paths.filter(item => item.changed);
     report.trustSurface.state = report.trustSurface.changed.length ? 'review_required' : 'pass';