harnessed 2.0.1 → 3.0.1

package/workflows/verify/security/workflow.yaml

@@ -0,0 +1,31 @@
+# workflows/verify/security/workflow.yaml — Phase v3.0-3.4 W0 T3.4.W0.13b
+#
+# Stage ④.e verify sub-workflow — gstack /cso 安全审查 OWASP/auth/secrets
+# (has_auth_or_secrets 触发, 可选 conditional, sister ~/.claude/CLAUDE.md "可选 /cso" verbatim)。
+#
+# Sister refs:
+#   - ~/.claude/CLAUDE.md "Verify 阶段 — 可选 /cso" 章节
+#   - workflows/judgments/stage-routing.yaml verify-security-secrets trigger (has_auth_or_secrets)
+#   - workflows/capabilities.yaml — gstack-cso (Bucket 3 治理关卡, impl: gstack, cmd: /cso)
+#   - workflows/verify-work/workflow.yaml v2 SHIPPED phase 06-cso-conditional sister pattern
+#   - .planning/phase-v3.0-3.2/RESEARCH-workflows.md § Area 2 verify/security example verbatim
+
+schema_version: harnessed.workflow.v3
+workflow: verify-security
+description: |
+  Stage ④.e gstack /cso 安全审查 OWASP/auth/secrets (has_auth_or_secrets 触发, 可选 conditional)。
+  Gate: judgments.stage-routing.verify-security-secrets.fires (phase.has_auth_or_secrets == true)
+  — security-critical PR fire only (auth / session / credentials / api keys / SQL / OWASP top 10);
+  普通 PR 应 skip — gstack /cso 是高成本 Paranoid CSO 视角重武器。
+
+disciplines_applied: [karpathy, output-style, language, operational, priority, protocols]
+tools_available: [gstack-cso]
+
+phases:
+  - id: 01-cso
+    name: gstack-cso (安全审查 OWASP/auth/secrets — has_auth_or_secrets 触发)
+    upstream: gstack
+    capability: '{{ capabilities.gstack-cso.cmd }}'
+    model: opus
+    gate: judgments.stage-routing.verify-security-secrets.fires
+    max_iterations: 3

package/workflows/verify/simplify/SKILL.md

@@ -0,0 +1,67 @@
+---
+name: verify-simplify
+description: |
+  Stage ④.g verify sub-workflow — code-simplifier 末尾串行 (移除重复 / 多余逻辑,
+  sister ~/.claude/CLAUDE.md "Verify 阶段 — 末尾 code-simplifier" verbatim)。
+  schema_version: harnessed.workflow.v3 with disciplines_applied (6 default) + tools_available
+  (code-simplifier) + 1 phase (gate ref is_final_step 末尾串行)。
+  Triggered by harnessed CLI `harnessed verify-simplify --phase <num>` or slash command
+  `/verify-simplify` after `harnessed setup`.
+trigger_phrases:
+  - "verify simplify"
+  - "code simplify"
+  - "代码简化"
+  - "移除重复逻辑"
+  - "跑 verify-simplify"
+---
+
+# verify-simplify workflow (v3)
+
+## Overview
+
+1-phase sub-workflow mapping CLAUDE.md "Verify 阶段 — 末尾 code-simplifier" onto harnessed
+runtime (Phase v3.0-3.4 W0.13d — D-04 Stage ④ Verify 7 sub + Pattern A sub-workflow ship)。
+
+| phase | id | upstream | model | capability | gate |
+| ----- | -- | -------- | ----- | ---------- | ---- |
+| 1 | `01-simplify` | mattpocock-skills | sonnet | `{{ capabilities.code-simplifier.cmd }}` | `judgments.stage-routing.verify-simplify-tail.fires` |
+
+Per-phase config loads from `workflows/verify/simplify/workflow.yaml`; engine 4-level gate
+resolver evaluates `phase.is_final_step == true` via expr-eval — true 则 invoke
+`/code-simplifier` (移除重复 / 多余逻辑), false 则 skip。verify 链末尾步骤,
+sister verify-work v2 phase 08-code-simplifier verbatim 位置。
+
+## Capability refs
+
+Sister `workflows/capabilities.yaml` entries:
+- `code-simplifier` — Bucket 1 mattpocock 高频招式 (impl: mattpocock-skills,
+  cmd: /code-simplifier, fires_when: stage=='verify' AND is_final_step)
+
+## Gate ref
+
+Sister `workflows/judgments/stage-routing.yaml`:
+- `verify-simplify-tail.fires` — `phase.stage == 'verify' and phase.is_final_step == true`
+
+## Routing rules
+
+- ✅ **触发**: verify chain 末尾步骤 (所有其他 verify sub 已 ship, 准备 code 简化收尾)
+- ❌ **跳过**: verify chain 中间步骤 (避免过早简化干扰后续 review)
+
+## CLI invocation
+
+```bash
+# Dry-run preview — arbitrate-only, never spawns SDK.
+harnessed verify-simplify --phase <num> --dry-run --non-interactive
+
+# Apply path — real SDK spawn (gate eval true 时).
+harnessed verify-simplify --phase <num> --apply
+```
+
+## References
+
+- D-04 Stage ④ Verify 7 sub 分解
+- ~/.claude/CLAUDE.md "Verify 阶段 — 末尾 code-simplifier" verbatim
+- workflows/capabilities.yaml — code-simplifier
+- workflows/judgments/stage-routing.yaml — verify-simplify-tail trigger
+- workflows/defaults.yaml — ralph_max_iterations.verify-simplify.* values (W2.2 backfill)
+- workflows/verify-work/workflow.yaml v2 SHIPPED phase 08-code-simplifier sister verbatim

package/workflows/verify/simplify/workflow.yaml

@@ -0,0 +1,31 @@
+# workflows/verify/simplify/workflow.yaml — Phase v3.0-3.4 W0 T3.4.W0.13d
+#
+# Stage ④.g verify sub-workflow — code-simplifier 末尾串行 (移除重复 / 多余逻辑)
+# (sister ~/.claude/CLAUDE.md "Verify 阶段 — 末尾 code-simplifier" verbatim)。
+#
+# Sister refs:
+#   - ~/.claude/CLAUDE.md "Verify 阶段 — code-simplifier 末尾串行" 章节
+#   - workflows/judgments/stage-routing.yaml verify-simplify-tail trigger (is_final_step)
+#   - workflows/capabilities.yaml — code-simplifier (Bucket 1 mattpocock, fires_when stage=='verify' AND is_final_step)
+#   - workflows/verify-work/workflow.yaml v2 SHIPPED phase 08-code-simplifier sister pattern
+#   - .planning/phase-v3.0-3.2/RESEARCH-workflows.md § Area 2 verify/simplify example verbatim
+
+schema_version: harnessed.workflow.v3
+workflow: verify-simplify
+description: |
+  Stage ④.g code-simplifier 末尾串行 (移除重复 / 多余逻辑, sister CLAUDE.md "Verify 阶段
+  — 末尾 code-simplifier" verbatim)。fires_when phase.stage == 'verify' AND phase.is_final_step
+  == true (sister capabilities.yaml code-simplifier entry + stage-routing.verify-simplify-tail
+  trigger)。
+
+disciplines_applied: [karpathy, output-style, language, operational, priority, protocols]
+tools_available: [code-simplifier]
+
+phases:
+  - id: 01-simplify
+    name: code-simplifier (末尾串行 — 移除重复 / 多余逻辑)
+    upstream: mattpocock-skills
+    capability: '{{ capabilities.code-simplifier.cmd }}'
+    model: sonnet
+    gate: judgments.stage-routing.verify-simplify-tail.fires
+    max_iterations: '{{ defaults.ralph_max_iterations.verify-simplify.01-simplify }}'