harnessed 4.1.3 → 4.3.0

package/dist/index.mjs

@@ -1,6 +1,6 @@
 // package.json
 var package_default = {
-  version: "4.1.3"};
+  version: "4.3.0"};
 
 // src/index.ts
 var VERSION = package_default.version;

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../package.json","../src/index.ts"],"names":[],"mappings":";AAAA,IAAA,eAAA,GAAA;AAAA,EAEE,OAAA,EAAW,OAgGb,CAAA;;;AC7FO,IAAM,UAAU,eAAA,CAAI","file":"index.mjs","sourcesContent":["{\n  \"name\": \"harnessed\",\n  \"version\": \"4.1.3\",\n  \"description\": \"AI coding harness package manager + composition orchestrator\",\n  \"type\": \"module\",\n  \"license\": \"Apache-2.0\",\n  \"author\": \"easyinplay\",\n  \"repository\": {\n    \"type\": \"git\",\n    \"url\": \"https://github.com/easyinplay/harnessed.git\"\n  },\n  \"homepage\": \"https://github.com/easyinplay/harnessed#readme\",\n  \"bugs\": \"https://github.com/easyinplay/harnessed/issues\",\n  \"keywords\": [\n    \"claude-code\",\n    \"ai-harness\",\n    \"package-manager\",\n    \"composition\",\n    \"skill-pack\",\n    \"mcp\",\n    \"orchestrator\"\n  ],\n  \"engines\": {\n    \"node\": \">=22.0.0\"\n  },\n  \"packageManager\": \"pnpm@10.12.0\",\n  \"bin\": {\n    \"harnessed\": \"./dist/cli.mjs\"\n  },\n  \"main\": \"./dist/index.mjs\",\n  \"types\": \"./dist/index.d.ts\",\n  \"exports\": {\n    \".\": {\n      \"types\": \"./dist/index.d.ts\",\n      \"import\": \"./dist/index.mjs\",\n      \"default\": \"./dist/index.mjs\"\n    },\n    \"./schemas\": {\n      \"types\": \"./dist/schemas/index.d.ts\",\n      \"import\": \"./dist/schemas/index.mjs\"\n    },\n    \"./package.json\": \"./package.json\"\n  },\n  \"files\": [\n    \"dist\",\n    \"manifests\",\n    \"messages\",\n    \"workflows\",\n    \"routing\",\n    \"config-templates\",\n    \"schemas\",\n    \"README.md\",\n    \"LICENSE\",\n    \"NOTICE\",\n    \"THIRD-PARTY-NOTICES.md\"\n  ],\n  \"scripts\": {\n    \"dev\": \"tsup --watch\",\n    \"build\": \"tsc --noEmit && tsup\",\n    \"build:schema\": \"node ./scripts/build-schema.mjs\",\n    \"validate:schema\": \"node ./scripts/validate-schema.mjs\",\n    \"typecheck\": \"tsc --noEmit\",\n    \"test\": \"vitest run --passWithNoTests\",\n    \"test:watch\": \"vitest\",\n    \"test:coverage\": \"vitest run --coverage --passWithNoTests\",\n    \"bench\": \"vitest bench --run\",\n    \"lint\": \"biome check .\",\n    \"lint:fix\": \"biome check --write .\",\n    \"format\": \"biome format --write .\"\n  },\n  \"dependencies\": {\n    \"@anthropic-ai/claude-agent-sdk\": \"0.3.142\",\n    \"@clack/prompts\": \"^0.10.1\",\n    \"@sinclair/typebox\": \"^0.34.49\",\n    \"ajv\": \"^8.20.0\",\n    \"ajv-errors\": \"^3.0.0\",\n    \"ajv-formats\": \"^3.0.1\",\n    \"commander\": \"^13.0.0\",\n    \"diff\": \"^9.0.0\",\n    \"expr-eval\": \"^2.0.2\",\n    \"picocolors\": \"^1.1.1\",\n    \"proper-lockfile\": \"^4.1.2\",\n    \"yaml\": \"^2.9.0\"\n  },\n  \"devDependencies\": {\n    \"@biomejs/biome\": \"^2.0.0\",\n    \"@types/node\": \"^22.10.0\",\n    \"@types/proper-lockfile\": \"^4.1.4\",\n    \"@vitest/coverage-v8\": \"^4.0.0\",\n    \"tsup\": \"^8.3.0\",\n    \"typescript\": \"^5.6.0\",\n    \"vitest\": \"^4.0.0\"\n  },\n  \"pnpm\": {\n    \"onlyBuiltDependencies\": [\n      \"esbuild\"\n    ]\n  }\n}\n","// Main library entry — re-exports public APIs.\n// phase 1.1 batch 1: skeleton only; schema validator wired in batch 2 (T3+).\n\nimport pkg from '../package.json' with { type: 'json' }\n\nexport const VERSION = pkg.version\n"]}
+{"version":3,"sources":["../package.json","../src/index.ts"],"names":[],"mappings":";AAAA,IAAA,eAAA,GAAA;AAAA,EAEE,OAAA,EAAW,OAgGb,CAAA;;;AC7FO,IAAM,UAAU,eAAA,CAAI","file":"index.mjs","sourcesContent":["{\n  \"name\": \"harnessed\",\n  \"version\": \"4.3.0\",\n  \"description\": \"AI coding harness package manager + composition orchestrator\",\n  \"type\": \"module\",\n  \"license\": \"Apache-2.0\",\n  \"author\": \"easyinplay\",\n  \"repository\": {\n    \"type\": \"git\",\n    \"url\": \"https://github.com/easyinplay/harnessed.git\"\n  },\n  \"homepage\": \"https://github.com/easyinplay/harnessed#readme\",\n  \"bugs\": \"https://github.com/easyinplay/harnessed/issues\",\n  \"keywords\": [\n    \"claude-code\",\n    \"ai-harness\",\n    \"package-manager\",\n    \"composition\",\n    \"skill-pack\",\n    \"mcp\",\n    \"orchestrator\"\n  ],\n  \"engines\": {\n    \"node\": \">=22.0.0\"\n  },\n  \"packageManager\": \"pnpm@10.12.0\",\n  \"bin\": {\n    \"harnessed\": \"./dist/cli.mjs\"\n  },\n  \"main\": \"./dist/index.mjs\",\n  \"types\": \"./dist/index.d.ts\",\n  \"exports\": {\n    \".\": {\n      \"types\": \"./dist/index.d.ts\",\n      \"import\": \"./dist/index.mjs\",\n      \"default\": \"./dist/index.mjs\"\n    },\n    \"./schemas\": {\n      \"types\": \"./dist/schemas/index.d.ts\",\n      \"import\": \"./dist/schemas/index.mjs\"\n    },\n    \"./package.json\": \"./package.json\"\n  },\n  \"files\": [\n    \"dist\",\n    \"manifests\",\n    \"messages\",\n    \"workflows\",\n    \"routing\",\n    \"config-templates\",\n    \"schemas\",\n    \"README.md\",\n    \"LICENSE\",\n    \"NOTICE\",\n    \"THIRD-PARTY-NOTICES.md\"\n  ],\n  \"scripts\": {\n    \"dev\": \"tsup --watch\",\n    \"build\": \"tsc --noEmit && tsup\",\n    \"build:schema\": \"node ./scripts/build-schema.mjs\",\n    \"validate:schema\": \"node ./scripts/validate-schema.mjs\",\n    \"typecheck\": \"tsc --noEmit\",\n    \"test\": \"vitest run --passWithNoTests\",\n    \"test:watch\": \"vitest\",\n    \"test:coverage\": \"vitest run --coverage --passWithNoTests\",\n    \"bench\": \"vitest bench --run\",\n    \"lint\": \"biome check .\",\n    \"lint:fix\": \"biome check --write .\",\n    \"format\": \"biome format --write .\"\n  },\n  \"dependencies\": {\n    \"@anthropic-ai/claude-agent-sdk\": \"0.3.142\",\n    \"@clack/prompts\": \"^0.10.1\",\n    \"@sinclair/typebox\": \"^0.34.49\",\n    \"ajv\": \"^8.20.0\",\n    \"ajv-errors\": \"^3.0.0\",\n    \"ajv-formats\": \"^3.0.1\",\n    \"commander\": \"^13.0.0\",\n    \"diff\": \"^9.0.0\",\n    \"expr-eval\": \"^2.0.2\",\n    \"picocolors\": \"^1.1.1\",\n    \"proper-lockfile\": \"^4.1.2\",\n    \"yaml\": \"^2.9.0\"\n  },\n  \"devDependencies\": {\n    \"@biomejs/biome\": \"^2.0.0\",\n    \"@types/node\": \"^22.10.0\",\n    \"@types/proper-lockfile\": \"^4.1.4\",\n    \"@vitest/coverage-v8\": \"^4.0.0\",\n    \"tsup\": \"^8.3.0\",\n    \"typescript\": \"^5.6.0\",\n    \"vitest\": \"^4.0.0\"\n  },\n  \"pnpm\": {\n    \"onlyBuiltDependencies\": [\n      \"esbuild\"\n    ]\n  }\n}\n","// Main library entry — re-exports public APIs.\n// phase 1.1 batch 1: skeleton only; schema validator wired in batch 2 (T3+).\n\nimport pkg from '../package.json' with { type: 'json' }\n\nexport const VERSION = pkg.version\n"]}

package/manifests/skill-packs/gsd.yaml

@@ -3,14 +3,14 @@ apiVersion: harnessed/v1
 kind: Manifest
 metadata:
   name: gsd
-  display_name: GSD (Get Shit Done)
+  display_name: GSD Core (Git. Ship. Done.)
   description: Project-manager orchestrator providing /gsd-* discuss-plan-execute-verify workflow.
   upstream:
-    source: get-shit-done-cc
-    homepage: https://github.com/gsd-build/get-shit-done
-    repository: https://github.com/gsd-build/get-shit-done.git
+    source: "@opengsd/gsd-core"
+    homepage: https://github.com/open-gsd/gsd-core
+    repository: https://github.com/open-gsd/gsd-core.git
     license: MIT
-    notice: GSD by gsd-build (TACHES), used as orchestration layer in harnessed plan-feature workflow.
+    notice: GSD Core (Git. Ship. Done.) by open-gsd, used as orchestration layer in harnessed plan-feature workflow.
 spec:
   type: cli-npm
   component_type: command
@@ -18,20 +18,20 @@ spec:
   install_type: npm
   install:
     method: npm-cli
-    cmd: "npx --yes get-shit-done-cc@^1.41.0 install"
-    npm_version: ^1.41.0
-    idempotent_check: "test -d ~/.claude/skills/gsd"
+    cmd: "npx --yes @opengsd/gsd-core@latest --claude --global"
+    npm_version: ^1.4.1
+    idempotent_check: "test -d ~/.claude/skills/gsd-plan-phase"
   verify:
-    cmd: "npx --yes get-shit-done-cc@^1.41.0 --version"
+    cmd: "test -f ~/.claude/skills/gsd-plan-phase/SKILL.md"
     timeout_ms: 10000
   uninstall:
-    cmd: "rm -rf ~/.claude/skills/gsd"
+    cmd: "npx --yes @opengsd/gsd-core@latest --uninstall --claude"
     cleanup_paths:
-      - ~/.claude/skills/gsd
+      - ~/.claude/skills/gsd-plan-phase
   upstream_health:
-    stability: beta
-    last_check: "2026-05-11"
-    last_known_good_version: 1.41.2
+    stability: stable
+    last_check: "2026-06-09"
+    last_known_good_version: 1.4.1
     fallback_action: warn
   signed_by: easyinplay
   platforms:

package/manifests/skill-packs/gstack.yaml

@@ -19,7 +19,7 @@ spec:
   install:
     method: git-clone-with-setup
     cmd: "git clone https://github.com/garrytan/gstack.git ~/.claude/skills/gstack && cd ~/.claude/skills/gstack && bash ./setup.sh"
-    git_ref: 74895062fb8a3acbf9f66cd088a83359aaaa56cd
+    git_ref: 1626d4857bfe30da2690dd6a3217961934aa3192
     idempotent_check: "test -d ~/.claude/skills/gstack/.git"
   verify:
     cmd: "test -f ~/.claude/skills/gstack/skills/office-hours.md"
@@ -30,8 +30,8 @@ spec:
       - ~/.claude/skills/gstack
   upstream_health:
     stability: stable
-    last_check: "2026-05-11"
-    last_known_good_version: main-269-commits
+    last_check: "2026-06-09"
+    last_known_good_version: 1.52.1.0
     fallback_action: warn
   signed_by: easyinplay
   platforms:

package/manifests/skill-packs/mattpocock-skills.yaml

@@ -33,7 +33,7 @@ spec:
       - ~/.claude/skills/mattpocock-skills
   upstream_health:
     stability: stable
-    last_check: "2026-05-11"
+    last_check: "2026-06-09"
     last_known_good_version: main-76-commits
     fallback_action: warn
   signed_by: easyinplay

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "harnessed",
-  "version": "4.1.3",
+  "version": "4.3.0",
   "description": "AI coding harness package manager + composition orchestrator",
   "type": "module",
   "license": "Apache-2.0",

package/workflows/capabilities.yaml

@@ -977,6 +977,72 @@ capabilities:
     fires_when:
       - subtask.bug_root_cause_unknown == true
 
+  spec:
+    impl: gstack
+    install_type: user-skill
+    skill_dir: gstack
+    cmd: /spec
+    since: v5.1
+    category: tool-slash-cmd
+    description: 5-stage spec → GitHub issue → 可选 agent 生成
+    fires_when:
+      - phase.stage == 'plan' AND phase.needs_spec_to_issues == true
+
+  skillify:
+    impl: gstack
+    install_type: user-skill
+    skill_dir: gstack
+    cmd: /skillify
+    since: v5.1
+    category: tool-slash-cmd
+    description: 把现有流程蒸馏成新 gstack skill
+    fires_when:
+      - user.explicit_signal includes 'skillify'
+
+  pair-agent:
+    impl: gstack
+    install_type: user-skill
+    skill_dir: gstack
+    cmd: /pair-agent
+    since: v5.1
+    category: tool-slash-cmd
+    description: 远程 agent 配对 + ngrok tunnel
+    fires_when:
+      - user.explicit_signal includes 'pair agent'
+
+  scrape:
+    impl: gstack
+    install_type: user-skill
+    skill_dir: gstack
+    cmd: /scrape
+    since: v5.1
+    category: tool-slash-cmd
+    description: 批量页面抓取
+    fires_when:
+      - user.explicit_signal includes 'scrape'
+
+  benchmark-models:
+    impl: gstack
+    install_type: user-skill
+    skill_dir: gstack
+    cmd: /benchmark-models
+    since: v5.1
+    category: tool-slash-cmd
+    description: 跨模型基准对比 (Claude/GPT/Gemini)
+    fires_when:
+      - user.explicit_signal includes 'benchmark models'
+
+  landing-report:
+    impl: gstack
+    install_type: user-skill
+    skill_dir: gstack
+    cmd: /landing-report
+    since: v5.1
+    category: tool-slash-cmd
+    description: post-landing 落地报告
+    fires_when:
+      - phase.stage == 'verify' AND phase.needs_landing_report == true
+
   # ============================================================================
   # Bucket 8 — Supplementary v3 NEW (2 entry)
   # ============================================================================
@@ -1003,17 +1069,171 @@ capabilities:
       - subtask.needs_google_workspace == true
 
   # ============================================================================
-  # Bucket 9 — gsd-research-phase v3 NEW (W2 SHIPPED per CONTEXT D-08 + D-12)
+  # Bucket 9 — GSD research/explore (v3 gsd-research-phase → v4.2 gsd-explore remap)
   # ============================================================================
+  #
+  # GSD Core 1.4.1 (open-gsd/gsd-core rename) dropped the standalone
+  # `gsd-research-phase` skill; closest surviving analog is `gsd-explore`
+  # (codebase + multi-source exploration). Entry is orphan (no workflow.yaml
+  # template interpolates it), so remap is a pure skill_dir/cmd swap.
 
-  gsd-research-phase:
+  gsd-explore:
     impl: gsd
     install_type: user-skill
-    skill_dir: gsd-research-phase
-    cmd: /gsd-research-phase
+    skill_dir: gsd-explore
+    cmd: /gsd-explore
     since: v3.0
     category: tool-slash-cmd
-    description: GSD research-phase (Wave A 多 source 调研, sister D-08 cite Phase v3 W2 SHIPPED)
+    description: GSD explore (codebase + 多 source 调研, GSD Core 1.4.1 successor to dropped gsd-research-phase)
     fires_when:
       - phase.stage == 'research'
       - phase.requires_multi_source_research == true
+
+  # ============================================================================
+  # Bucket 10 — GSD Core 1.4.1 additive rewire (v5.1 Upstream Re-sync)
+  # ============================================================================
+  #
+  # @opengsd/gsd-core 1.4.1 (get-shit-done-cc → @opengsd/gsd-core rename) reorganized
+  # its skill surface. These 12 additive entries describe the new upstream entry points
+  # so workflow.yaml templates + judgments gates can reference them. All mirror the
+  # gsd-discuss-phase shape verbatim (impl: gsd / install_type: user-skill /
+  # category: tool-slash-cmd / skill_dir == cmd basename). skill_dir verified on disk
+  # at ~/.claude/skills/<skill_dir>/ (2026-06-09).
+  #
+  # KEYSTONE: gsd-execute-phase is deliberately NOT wired — the execute mechanism stays
+  # harnessed self-owned (CC-native spawn + ralph-loop + v4.2 checkpoint ledger).
+  #
+  # 4 design-contract phase skills (spec/ui/secure/ai-integration) pair with sister
+  # judgments triggers in workflows/judgments/stage-phase-gate.yaml.
+
+  gsd-spec-phase:
+    impl: gsd
+    install_type: user-skill
+    skill_dir: gsd-spec-phase
+    cmd: /gsd-spec-phase
+    since: v5.1
+    category: tool-slash-cmd
+    description: GSD spec-phase SDD spec lock (sister judgments/stage-phase-gate.yaml)
+    fires_when:
+      - phase.stage == 'plan' and phase.requires_spec == true
+
+  gsd-ui-phase:
+    impl: gsd
+    install_type: user-skill
+    skill_dir: gsd-ui-phase
+    cmd: /gsd-ui-phase
+    since: v5.1
+    category: tool-slash-cmd
+    description: GSD ui-phase UI design contract (sister judgments/stage-phase-gate.yaml)
+    fires_when:
+      - phase.has_ui_changes == true
+
+  gsd-secure-phase:
+    impl: gsd
+    install_type: user-skill
+    skill_dir: gsd-secure-phase
+    cmd: /gsd-secure-phase
+    since: v5.1
+    category: tool-slash-cmd
+    description: GSD secure-phase security threat-model gate (sister judgments/stage-phase-gate.yaml)
+    fires_when:
+      - phase.has_auth_or_secrets == true
+
+  gsd-ai-integration-phase:
+    impl: gsd
+    install_type: user-skill
+    skill_dir: gsd-ai-integration-phase
+    cmd: /gsd-ai-integration-phase
+    since: v5.1
+    category: tool-slash-cmd
+    description: GSD ai-integration-phase AI-SPEC design contract (sister judgments/stage-phase-gate.yaml)
+    fires_when:
+      - phase.builds_ai_system == true
+
+  gsd-ingest-docs:
+    impl: gsd
+    install_type: user-skill
+    skill_dir: gsd-ingest-docs
+    cmd: /gsd-ingest-docs
+    since: v5.1
+    category: tool-slash-cmd
+    description: GSD ingest-docs bootstrap .planning from existing docs (cc-handoff Ideation→Onboarding)
+    fires_when:
+      - phase.type == 'onboarding'
+
+  gsd-new-project:
+    impl: gsd
+    install_type: user-skill
+    skill_dir: gsd-new-project
+    cmd: /gsd-new-project
+    since: v5.1
+    category: tool-slash-cmd
+    description: GSD new-project greenfield project init
+    fires_when:
+      - phase.type == 'new_project'
+
+  gsd-new-milestone:
+    impl: gsd
+    install_type: user-skill
+    skill_dir: gsd-new-milestone
+    cmd: /gsd-new-milestone
+    since: v5.1
+    category: tool-slash-cmd
+    description: GSD new-milestone brownfield milestone start
+    fires_when:
+      - phase.type == 'new_milestone'
+
+  gsd-extract-learnings:
+    impl: gsd
+    install_type: user-skill
+    skill_dir: gsd-extract-learnings
+    cmd: /gsd-extract-learnings
+    since: v5.1
+    category: tool-slash-cmd
+    description: GSD extract-learnings 提取 decisions/lessons from completed phase
+    fires_when:
+      - phase.is_milestone_close == true
+
+  gsd-audit-milestone:
+    impl: gsd
+    install_type: user-skill
+    skill_dir: gsd-audit-milestone
+    cmd: /gsd-audit-milestone
+    since: v5.1
+    category: tool-slash-cmd
+    description: GSD audit-milestone milestone completion audit
+    fires_when:
+      - phase.is_milestone_close == true
+
+  gsd-complete-milestone:
+    impl: gsd
+    install_type: user-skill
+    skill_dir: gsd-complete-milestone
+    cmd: /gsd-complete-milestone
+    since: v5.1
+    category: tool-slash-cmd
+    description: GSD complete-milestone archive completed milestone
+    fires_when:
+      - phase.is_milestone_close == true
+
+  gsd-milestone-summary:
+    impl: gsd
+    install_type: user-skill
+    skill_dir: gsd-milestone-summary
+    cmd: /gsd-milestone-summary
+    since: v5.1
+    category: tool-slash-cmd
+    description: GSD milestone-summary milestone summary
+    fires_when:
+      - phase.is_milestone_close == true
+
+  gsd-docs-update:
+    impl: gsd
+    install_type: user-skill
+    skill_dir: gsd-docs-update
+    cmd: /gsd-docs-update
+    since: v5.1
+    category: tool-slash-cmd
+    description: GSD docs-update post-ship doc update
+    fires_when:
+      - phase.needs_doc_update == true

package/workflows/judgments/stage-phase-gate.yaml

@@ -0,0 +1,42 @@
+# workflows/judgments/stage-phase-gate.yaml
+# Stage/condition-gated design-contract 判据 — GSD Core 1.4.1 (v5.1 Upstream Re-sync)
+# Pairs with: GSD design-contract phase skills (spec / ui / secure / ai-integration)
+#
+# Parallel to phase-gate.yaml (gsd-discuss-phase). The 4 design-contract phase skills
+# fire on stage/condition predicates and invoke their sister capabilities.yaml entries
+# (fires_when string matches the capabilities.yaml expression verbatim).
+
+schema_version: harnessed.judgment.v1
+
+triggers:
+  gsd-spec-phase:
+    description: |
+      GSD /gsd-spec-phase — SDD spec lock. Fires at plan stage when the phase
+      requires a spec design contract before execution.
+    fires_when: "phase.stage == 'plan' and phase.requires_spec == true"
+    invokes:
+      - capability: gsd-spec-phase
+
+  gsd-ui-phase:
+    description: |
+      GSD /gsd-ui-phase — UI design contract. Fires when the phase introduces
+      UI changes needing a design system / layout contract.
+    fires_when: "phase.has_ui_changes == true"
+    invokes:
+      - capability: gsd-ui-phase
+
+  gsd-secure-phase:
+    description: |
+      GSD /gsd-secure-phase — security threat-model gate. Fires when the phase
+      touches auth or secrets and needs a threat-model design contract.
+    fires_when: "phase.has_auth_or_secrets == true"
+    invokes:
+      - capability: gsd-secure-phase
+
+  gsd-ai-integration-phase:
+    description: |
+      GSD /gsd-ai-integration-phase — AI-SPEC design contract. Fires when the
+      phase builds an AI system needing an AI-SPEC.md design contract.
+    fires_when: "phase.builds_ai_system == true"
+    invokes:
+      - capability: gsd-ai-integration-phase

package/workflows/verify/code-review/workflow.yaml

@@ -28,3 +28,6 @@ phases:
     model: sonnet
     parallelism: judgments.parallelism-gate.subagent-default.fires
     max_iterations: '{{ defaults.ralph_max_iterations.verify-code-review.01-code-review }}'
+    # D2-followup (ADR-0033): declare report artifact so the evidence guard is real
+    # (verified, not none_declared) — proves the multi-agent code-review actually ran.
+    artifacts_expected: [code-review-report.md]

package/workflows/verify/design/workflow.yaml

@@ -30,3 +30,6 @@ phases:
     model: sonnet
     gate: judgments.stage-routing.verify-design-changes.fires
     max_iterations: 3
+    # D2-followup (ADR-0033): declare report artifact so the evidence guard is real
+    # (verified, not none_declared) — proves the design-review consistency pass actually ran.
+    artifacts_expected: [design-review-report.md]

package/workflows/verify/multispec/workflow.yaml

@@ -48,6 +48,10 @@ phases:
     max_iterations: 1
     # v3.8.0 P1 — Pattern C team create is THE archetypical Agent Teams phase; full 3-RULES inject.
     injects_rules: [escalation, transparent-skip, agent-teams-prevention]
+    # D2-followup (ADR-0033): declare report artifact so the evidence guard is real
+    # (verified, not none_declared) — the 4-specialist team's cross-questioned findings
+    # land in one aggregated multi-dimensional review report (proves the team review ran).
+    artifacts_expected: [multispec-review-report.md]
 
   - id: 02-team-cleanup
     name: Agent Team cleanup (shutdown_request + TeamDelete 防呆清单)

package/workflows/verify/paranoid/workflow.yaml

@@ -27,3 +27,6 @@ phases:
     model: opus
     gate: judgments.stage-routing.verify-paranoid-critical.fires
     max_iterations: '{{ defaults.ralph_max_iterations.verify-paranoid.01-review }}'
+    # D2-followup (ADR-0033): declare report artifact so the evidence guard is real
+    # (verified, not none_declared) — proves the Paranoid Staff Engineer review actually ran.
+    artifacts_expected: [paranoid-review-report.md]

package/workflows/verify/qa/workflow.yaml

@@ -28,3 +28,6 @@ phases:
     model: sonnet
     gate: judgments.stage-routing.verify-qa-ui.fires
     max_iterations: 3
+    # D2-followup (ADR-0033): declare report artifact so the evidence guard is real
+    # (verified, not none_declared) — proves the end-to-end QA pass actually ran.
+    artifacts_expected: [qa-report.md]

package/workflows/verify/security/workflow.yaml

@@ -28,3 +28,6 @@ phases:
     model: opus
     gate: judgments.stage-routing.verify-security-secrets.fires
     max_iterations: 3
+    # D2-followup (ADR-0033): declare report artifact so the evidence guard is real
+    # (verified, not none_declared) — proves the CSO OWASP/secrets audit actually ran.
+    artifacts_expected: [security-audit-report.md]