ultimate-pi 0.18.1 → 0.19.0

package/.pi/extensions/harness-subagent-governance.ts

@@ -0,0 +1,8 @@
+/**
+ * @deprecated Use subagent-governance.ts — re-export for subprocess -e path stability.
+ */
+export {
+	default,
+	harnessSubagentGovernanceExtensionPath,
+	subagentGovernanceExtensionPath,
+} from "./subagent-governance.js";

package/.pi/extensions/harness-subagent-submit.ts

@@ -1,85 +1,42 @@
 /**
  * Subprocess-only harness submit tools — validate + write artifacts under run_dir.
- * Loaded via `pi --no-extensions -e harness-subagent-submit.ts` for harness agents.
+ * Prefer harness-subagent-governance.ts bundle (AGT + submit) for harness spawns.
  */
 
 import { join } from "node:path";
 import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
-import { Type } from "@sinclair/typebox";
-import { resolveGuardedRunDir } from "../lib/harness-subagent-submit-path.js";
-import { claimHarnessGovernanceLoad } from "./lib/extension-load-guard.js";
-import { getHarnessPackageRoot } from "./lib/harness-paths.js";
-import { evaluateHarnessSubagentToolCall } from "./lib/harness-subagent-policy.js";
+import { claimHarnessGovernanceLoad } from "../lib/extension-load-guard.js";
+import { evaluateAgtHarnessToolCall } from "../lib/harness-agt-tool-guard.js";
+import { getHarnessPackageRoot } from "../lib/harness-paths.js";
 import {
-	executeSubmitPipeline,
-	loadSubmitDocument,
-} from "./lib/harness-subagent-submit-pipeline.js";
-import { SUBMIT_TOOL_SPECS } from "./lib/harness-subagent-submit-registry.js";
+	isSubprocessHarnessSubmit,
+	registerHarnessSubagentSubmitTools,
+	resolveHarnessSubmitRunContext,
+} from "../lib/harness-subagent-submit-register.js";
 
 // @ts-expect-error pi extensions run as ESM
 const MODULE_URL = import.meta.url;
 
-const DocumentSchema = Type.Object(
-	{
-		document: Type.Optional(
-			Type.Record(Type.String(), Type.Unknown(), {
-				description:
-					"Artifact fields (deprecated when source_path is set; ADR 0043)",
-			}),
-		),
-		source_path: Type.Optional(
-			Type.String({
-				description:
-					"Relative path under run dir, e.g. artifacts/.draft/decomposition.yaml",
-			}),
-		),
-	},
-	{ additionalProperties: false },
-);
-
-function resolveRunContext(): {
-	projectRoot: string;
-	specsDir: string;
-	runId: string;
-	runDirEnv?: string;
-	agentId: string;
-} {
-	const projectRoot = process.env.HARNESS_PKG_ROOT ?? process.cwd();
-	const specsDir = join(projectRoot, ".pi", "harness", "specs");
-	const runId = process.env.HARNESS_RUN_ID?.trim() ?? "";
-	const runDirEnv = process.env.HARNESS_RUN_DIR?.trim();
-	const agentId = process.env.HARNESS_AGENT_ID?.trim() ?? "";
-	return { projectRoot, specsDir, runId, runDirEnv, agentId };
-}
-
-function isSubprocessHarness(): boolean {
-	return (
-		process.env.PI_HARNESS_SUBPROCESS === "1" &&
-		Boolean(process.env.HARNESS_RUN_ID?.trim())
-	);
-}
-
 export default function harnessSubagentSubmit(pi: ExtensionAPI) {
 	if (!claimHarnessGovernanceLoad("harness-subagent-submit", MODULE_URL))
 		return;
-	// Option A: only load submit tools in subprocess (`-e` bundle), not parent discovery.
 	if (process.env.PI_HARNESS_SUBPROCESS !== "1") {
 		return;
 	}
 
-	const _packageRoot = getHarnessPackageRoot(MODULE_URL);
+	const packageRoot = getHarnessPackageRoot(MODULE_URL);
+	registerHarnessSubagentSubmitTools(pi, packageRoot);
 
-	pi.on("tool_call", async (event) => {
+	pi.on("tool_call", async (event, ctx) => {
 		if (!event.toolName.startsWith("submit_")) return undefined;
-		const subprocessOk = isSubprocessHarness();
-		if (!subprocessOk) {
+		if (!isSubprocessHarnessSubmit()) {
 			return {
 				block: true,
 				reason:
 					"harness-subagent-submit: submit_* tools are only available in harness subagent subprocesses.",
 			};
 		}
-		const { agentId } = resolveRunContext();
+		const { agentId } = resolveHarnessSubmitRunContext(packageRoot);
 		if (!agentId) {
 			return {
 				block: true,
@@ -87,118 +44,32 @@ export default function harnessSubagentSubmit(pi: ExtensionAPI) {
 					"harness-subagent-submit: HARNESS_AGENT_ID is required for submit tools.",
 			};
 		}
-		const decision = evaluateHarnessSubagentToolCall(
-			event.toolName,
-			event.input as Record<string, unknown>,
-			agentId,
-		);
-		if (decision.action === "block") {
-			return { block: true, reason: decision.reason };
-		}
-		return undefined;
-	});
 
-	for (const spec of SUBMIT_TOOL_SPECS) {
-		pi.registerTool({
-			name: spec.toolName,
-			label: spec.toolName.replace(/^submit_/, "Submit "),
-			description: `Terminal harness artifact submit for ${spec.agents.join(", ")}. Call once with the full schema document before ending the turn.`,
-			parameters: DocumentSchema,
-			async execute(_id, params, _signal, _onUpdate, _ctx) {
-				if (!isSubprocessHarness()) {
-					return {
-						content: [
-							{
-								type: "text",
-								text: "submit tools require PI_HARNESS_SUBPROCESS and HARNESS_RUN_ID",
-							},
-						],
-						details: {},
-						isError: true,
-					};
-				}
-				const { projectRoot, specsDir, runId, runDirEnv, agentId } =
-					resolveRunContext();
-				if (!spec.agents.includes(agentId)) {
-					return {
-						content: [
-							{
-								type: "text",
-								text: `${spec.toolName} is not allowed for agent ${agentId}`,
-							},
-						],
-						details: { agentId, tool: spec.toolName },
-						isError: true,
-					};
-				}
-				const runResolved = await resolveGuardedRunDir({
-					projectRoot,
-					runId,
-					runDirEnv,
-				});
-				if (!runResolved.ok) {
-					return {
-						content: [{ type: "text", text: runResolved.error }],
-						details: {},
-						isError: true,
-					};
-				}
-				const loaded = await loadSubmitDocument({
-					projectRoot,
-					runDir: runResolved.runDir,
-					document: (params as { document?: Record<string, unknown> }).document,
-					source_path: (params as { source_path?: string }).source_path,
-				});
-				if (!loaded.ok) {
-					return {
-						content: [
-							{
-								type: "text",
-								text: `Validation failed:\n${loaded.validation_errors.join("\n")}`,
-							},
-						],
-						isError: true,
-						details: loaded,
-					};
-				}
-				const result = await executeSubmitPipeline({
-					projectRoot,
-					specsDir,
-					spec,
-					agentId,
-					document: loaded.document,
-					runId,
-					runDirEnv,
-				});
-				if (!result.ok) {
-					return {
-						content: [
-							{
-								type: "text",
-								text: `Validation failed:\n${(result.validation_errors ?? []).join("\n")}`,
-							},
-						],
-						isError: true,
-						details: result,
-					};
-				}
-				const lines = [`ok: wrote ${result.artifact_path}`];
-				if (result.lane_result?.messenger_posted) {
-					lines.push("messenger updated");
-				}
-				if (result.human_required) {
-					lines.push("human_required: parent must call ask_user");
-				}
-				return {
-					content: [{ type: "text", text: lines.join("\n") }],
-					details: result as unknown,
-				};
+		return evaluateAgtHarnessToolCall({
+			moduleUrl: MODULE_URL,
+			toolName: event.toolName,
+			toolInput: event.input as Record<string, unknown>,
+			policyState: {
+				phase:
+					(process.env.HARNESS_SUBAGENT_PHASE_HINT as
+						| "plan"
+						| "execute"
+						| "evaluate"
+						| "adversary"
+						| "merge") ?? "plan",
+				approvedPlan: true,
+				planId: null,
+				aborted: false,
+				budgetBypass: false,
 			},
+			entries: ctx.sessionManager.getEntries(),
+			sessionId: ctx.sessionManager.getSessionId(),
+			projectRoot: ctx.cwd,
 		});
-	}
+	});
 }
 
-/** Absolute path to the subprocess submit extension (Option A). */
+/** Absolute path to the subprocess submit extension (legacy standalone). */
 export function harnessSubagentSubmitExtensionPath(
 	packageRoot: string,
 ): string {

package/.pi/extensions/harness-subagents.ts

@@ -6,7 +6,7 @@
  */
 
 import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
-import { claimHarnessGovernanceLoad } from "./lib/extension-load-guard.js";
+import { claimHarnessGovernanceLoad } from "../lib/extension-load-guard.js";
 
 // @ts-expect-error pi extensions run as ESM
 const MODULE_URL = import.meta.url;
@@ -15,9 +15,9 @@ async function loadHarnessSubagents(): Promise<(pi: ExtensionAPI) => void> {
 	if (!claimHarnessGovernanceLoad("harness-subagents", MODULE_URL)) {
 		return () => {};
 	}
-	const { getHarnessPackageRoot } = await import("./lib/harness-paths.js");
+	const { getHarnessPackageRoot } = await import("../lib/harness-paths.js");
 	const { createHarnessSubagentsExtension } = await import(
-		"./lib/harness-subagents-bridge.js"
+		"../lib/harness-subagents-bridge.js"
 	);
 	return createHarnessSubagentsExtension(getHarnessPackageRoot(MODULE_URL));
 }

package/.pi/extensions/harness-telemetry.ts

@@ -9,12 +9,12 @@
 
 import { createHash } from "node:crypto";
 import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
-import { isHarnessProjectEnabled } from "../lib/harness-project-config.js";
 import {
 	captureHarnessEvent,
 	type HarnessPostHogEventName,
 	shutdownHarnessPostHog,
-} from "./lib/harness-posthog.js";
+} from "../lib/harness-posthog.js";
+import { isHarnessProjectEnabled } from "../lib/harness-project-config.js";
 
 type HarnessPhase = "plan" | "execute" | "evaluate" | "adversary" | "merge";
 

package/.pi/extensions/harness-web-tools.ts

@@ -4,13 +4,13 @@
 
 import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
 import { Type } from "@sinclair/typebox";
-import { claimHarnessGovernanceLoad } from "./lib/extension-load-guard.js";
+import { claimHarnessGovernanceLoad } from "../lib/extension-load-guard.js";
 import {
 	harnessWebContextLine,
 	readTextExcerpt,
 	runHarnessWeb,
 	summarizeSearchJson,
-} from "./lib/harness-web/run-cli.js";
+} from "../lib/harness-web/run-cli.js";
 
 // @ts-expect-error pi extensions run as ESM
 const MODULE_URL = import.meta.url;

package/.pi/extensions/policy-gate.ts

@@ -9,10 +9,8 @@
  */
 
 import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
-import {
-	evaluateContextModeMutation,
-	isMutatingBash,
-} from "../lib/harness-context-mode-policy.js";
+import { isHarnessAgtPolicyEnabled } from "../lib/agt/config.js";
+import { evaluateAgtHarnessToolCall } from "../lib/harness-agt-tool-guard.js";
 import { isHarnessProjectEnabled } from "../lib/harness-project-config.js";
 import {
 	extractWritePathFromToolInput,
@@ -32,7 +30,7 @@ import {
 	userVisiblePromptSlice,
 	validatePlanPacket,
 } from "../lib/harness-run-context.js";
-import { bootstrapHarnessSubprocessFromEnv } from "./lib/harness-subprocess-bootstrap.js";
+import { bootstrapHarnessSubprocessFromEnv } from "../lib/harness-subprocess-bootstrap.js";
 
 type HarnessPhase = "plan" | "execute" | "evaluate" | "adversary" | "merge";
 
@@ -61,6 +59,9 @@ const PHASE_ORDER: HarnessPhase[] = [
 	"merge",
 ];
 
+// @ts-expect-error pi extensions run as ESM
+const MODULE_URL = import.meta.url;
+
 const MUTATING_TOOLS = new Set(["write", "edit"]);
 
 function nowIso(): string {
@@ -250,6 +251,19 @@ export default function policyGate(pi: ExtensionAPI) {
 		const entries = ctx.sessionManager.getEntries();
 		const projectRoot = process.cwd();
 		const sessionId = ctx.sessionManager.getSessionId();
+
+		if (isHarnessAgtPolicyEnabled()) {
+			return evaluateAgtHarnessToolCall({
+				moduleUrl: MODULE_URL,
+				toolName: event.toolName,
+				toolInput: event.input as Record<string, unknown>,
+				policyState: state,
+				entries,
+				sessionId,
+				projectRoot,
+			});
+		}
+
 		const runCtx = getLatestRunContext(entries);
 
 		if (MUTATING_TOOLS.has(event.toolName)) {
@@ -274,6 +288,9 @@ export default function policyGate(pi: ExtensionAPI) {
 
 		if (event.toolName === "bash") {
 			const command = String(event.input.command ?? "");
+			const { isMutatingBash } = await import(
+				"../lib/harness-context-mode-policy.js"
+			);
 			if (!isMutatingBash(command)) return undefined;
 			if (state.aborted) {
 				return {
@@ -290,6 +307,9 @@ export default function policyGate(pi: ExtensionAPI) {
 			}
 		}
 
+		const { evaluateContextModeMutation } = await import(
+			"../lib/harness-context-mode-policy.js"
+		);
 		const ctxDecision = evaluateContextModeMutation(
 			event.toolName,
 			event.input as Record<string, unknown>,

package/.pi/extensions/sentrux-rules-sync.ts

@@ -4,8 +4,8 @@
 
 import { spawn } from "node:child_process";
 import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
+import { resolveHarnessScript } from "../lib/harness-paths.js";
 import { isHarnessProjectEnabled } from "../lib/harness-project-config.js";
-import { resolveHarnessScript } from "./lib/harness-paths.js";
 
 function resolveSyncScript(): string {
 	return resolveHarnessScript(

package/.pi/extensions/subagent-governance.ts

@@ -0,0 +1,92 @@
+/**
+ * Subprocess governance bundle: AGT policy on all tool_call + harness submit_* tools.
+ * Loaded via `pi --no-extensions -e subagent-governance.ts` for every subagent spawn.
+ */
+
+import { join } from "node:path";
+import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
+import {
+	getAgentKind,
+	harnessSubagentPhaseHint,
+} from "../lib/agents-policy.mjs";
+import { evaluateAgtToolCall } from "../lib/agt-tool-guard.js";
+import { claimSubagentGovernanceLoad } from "../lib/extension-load-guard.js";
+import { getHarnessPackageRoot } from "../lib/harness-paths.js";
+import { registerHarnessSubagentSubmitTools } from "../lib/harness-subagent-submit-register.js";
+
+// @ts-expect-error pi extensions run as ESM
+const MODULE_URL = import.meta.url;
+
+function policyStateFromEnv(packageRoot: string, projectRoot: string) {
+	const agentId = process.env.HARNESS_AGENT_ID?.trim() ?? "unknown";
+	const phase =
+		(process.env.HARNESS_SUBAGENT_PHASE_HINT?.trim() as
+			| "plan"
+			| "execute"
+			| "evaluate"
+			| "adversary"
+			| "merge") ??
+		(harnessSubagentPhaseHint(packageRoot, projectRoot, agentId) as
+			| "plan"
+			| "execute"
+			| "evaluate"
+			| "adversary"
+			| "merge"
+			| null) ??
+		"plan";
+	return {
+		phase,
+		approvedPlan: phase === "execute" || phase === "merge",
+		planId: process.env.HARNESS_PLAN_ID?.trim() || null,
+		aborted: false,
+		budgetBypass: false,
+	};
+}
+
+export function subagentGovernanceExtensionPath(packageRoot: string): string {
+	return join(packageRoot, ".pi", "extensions", "subagent-governance.ts");
+}
+
+/** @deprecated Use subagentGovernanceExtensionPath */
+export function harnessSubagentGovernanceExtensionPath(
+	packageRoot: string,
+): string {
+	return subagentGovernanceExtensionPath(packageRoot);
+}
+
+export default function subagentGovernance(pi: ExtensionAPI) {
+	if (!claimSubagentGovernanceLoad("subagent-governance", MODULE_URL)) return;
+	if (process.env.PI_HARNESS_SUBPROCESS !== "1") {
+		return;
+	}
+
+	const packageRoot = getHarnessPackageRoot(MODULE_URL);
+	const projectRoot = process.env.HARNESS_PROJECT_ROOT?.trim() || process.cwd();
+	const agentId = process.env.HARNESS_AGENT_ID?.trim() ?? "unknown";
+
+	if (agentId.startsWith("harness/")) {
+		registerHarnessSubagentSubmitTools(pi, packageRoot);
+		const kind = getAgentKind(packageRoot, projectRoot, agentId);
+		process.env.HARNESS_SUBAGENT_PHASE_HINT =
+			kind === "executor"
+				? "execute"
+				: kind === "evaluator"
+					? "evaluate"
+					: kind === "adversary"
+						? "adversary"
+						: "plan";
+	}
+
+	pi.on("tool_call", async (event, ctx) => {
+		const state = policyStateFromEnv(packageRoot, projectRoot);
+		return evaluateAgtToolCall({
+			moduleUrl: MODULE_URL,
+			toolName: event.toolName,
+			toolInput: (event.input ?? {}) as Record<string, unknown>,
+			policyState: state,
+			entries: ctx.sessionManager.getEntries(),
+			sessionId: ctx.sessionManager.getSessionId(),
+			projectRoot: ctx.cwd,
+		});
+	});
+}

package/.pi/extensions/trace-recorder.ts

@@ -10,6 +10,7 @@
 import { appendFile, mkdir, readFile, writeFile } from "node:fs/promises";
 import { join } from "node:path";
 import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
+import { captureHarnessEvent } from "../lib/harness-posthog.js";
 import { isHarnessProjectEnabled } from "../lib/harness-project-config.js";
 import {
 	getLatestRunContext,
@@ -20,7 +21,6 @@ import {
 	phaseTraceFileName,
 	saveRunContextToDisk,
 } from "../lib/harness-run-context.js";
-import { captureHarnessEvent } from "./lib/harness-posthog.js";
 
 interface ToolSpan {
 	tool_call_id: string;

package/.pi/extensions/{ultimate-pi-vcc.ts → vcc-compaction.ts}

@@ -11,7 +11,7 @@
 
 import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
 import registerVcc from "../../vendor/pi-vcc/index.js";
-import { claimExtensionLoad } from "./lib/extension-load-guard.js";
+import { claimExtensionLoad } from "../lib/extension-load-guard.js";
 
 // @ts-expect-error pi extensions run as ESM
 const MODULE_URL = import.meta.url;

package/.pi/harness/README.md

@@ -8,7 +8,7 @@ Phase 1–2 scaffold for the Pi harness runtime surfaces.
 - `debates/` - debate round artifacts and consensus packets.
 - `docs/adrs/` - team-shared Architectural Decision Records ([index](docs/adrs/README.md)).
 - `evals/smoke/` - deterministic fixtures (no CI LLM).
-- `evolution/` - self-healing rules + meta-optimizer (JSONL-first).
+- `evolution/` - self-healing rules and chaos drills (JSONL-first).
 - `corpus/` - ingest notes for graphify/raw sources.
 - `sentrux/` - `architecture.manifest.json` source for `.sentrux/rules.toml` ([ADR 0009](docs/adrs/0009-sentrux-rules-lifecycle.md)).
 
@@ -31,7 +31,11 @@ manifest (`package.json`).
 
 - `harness-run-context.ts` - active run + plan injection; short commands without run/plan args
 - `harness-live-widget.ts` - footer status (current/next phase + plain-language status hint; no run id in UI)
-- `policy-gate.ts` - phase state machine + plan-before-mutate enforcement
+- `policy-gate.ts` - phase state machine; tool allow/deny via AGT `PolicyEngine` (YAML under `.pi/harness/policies/`, see [ADR 0046](docs/adrs/0046-agt-policy-engine.md))
+- `subagent-governance.ts` (alias `harness-subagent-governance.ts`) - subprocess AGT + `submit_*` for all subagents
+- **Agent tool SSOT:** `.pi/harness/agents.policy.yaml` (package) and optional `<project>/.pi/agents.policy.yaml` — not agent `.md` frontmatter ([ADR 0049](docs/adrs/0049-agents-policy-manifest.md))
+- **Project AGT rules:** `<project>/.pi/policies/*.yaml` merged after package policies
+- `agt-prompt-guard.ts` / `agt-kill-switch.ts` - PromptDefense + kill switch ([ADR 0047](docs/adrs/0047-agt-layered-security.md))
 - `budget-guard.ts` - hard-stop token budget checks + budget exhausted artifacts
 - `trace-recorder.ts` - append-only run traces + HarnessRunRecord + compact index
 - `harness-telemetry.ts` - PostHog `harness_*` domain events (dual layer with `@posthog/pi`)

package/.pi/harness/agents.manifest.json

@@ -1,8 +1,9 @@
 {
 	"schema_version": "1.0.0",
 	"package": "ultimate-pi",
-	"package_version": "0.18.0",
-	"generated_at": "2026-05-23T19:00:12.987Z",
+	"package_version": "0.18.1",
+	"generated_at": "2026-05-24T19:33:40.491Z",
+	"policy_sha256": "4c1cf8f0377e70bbcd34eecc26a2e02717fea950af3898ef03ebbab9260dfd17",
 	"agents": {
 		"pi-pi/agent-expert": {
 			"path": ".pi/agents/pi-pi/agent-expert.md",
@@ -46,67 +47,63 @@
 		},
 		"harness/incident-recorder": {
 			"path": ".pi/agents/harness/incident-recorder.md",
-			"sha256": "d42fa45de1a2fe3842d075c6f319315266588942e314f1b650caabac39bdc29a"
-		},
-		"harness/meta-optimizer": {
-			"path": ".pi/agents/harness/meta-optimizer.md",
-			"sha256": "cbaab35367126796b7136389a02ab41b4fd1fe7098cf83be562d7b7493ccc297"
+			"sha256": "4efbdb9482b1038e2bd08cae9898aed9ef983903107ddab6c84d51436d5d3296"
 		},
 		"harness/sentrux-bootstrap": {
 			"path": ".pi/agents/harness/sentrux-bootstrap.md",
-			"sha256": "3a0b43b94386a7c541b8a806a37524a5e53f1c8049270db7a420680df5799eeb"
+			"sha256": "6132e83b400b6bc381841a09205eda00a2349ec127368f9d164631d73faadd1a"
 		},
 		"harness/sentrux-steward": {
 			"path": ".pi/agents/harness/sentrux-steward.md",
-			"sha256": "0e63175d817adc0d65876f5c24fb54e4882081caf939ff9c658afee51fc6889c"
+			"sha256": "d806cbf2c2e211c6b4c95e35893bc250c8a0fab6fae92190766eab16cd091d51"
 		},
 		"harness/trace-librarian": {
 			"path": ".pi/agents/harness/trace-librarian.md",
-			"sha256": "336b3f3f6141cef8750ab18d29bbe454caf26973830a86afe099d9e4ad8b0abe"
+			"sha256": "083ce6a3508bab2f5bc57e8ab13256c55fff58e0eac95cb6542bdd47fd02de65"
 		},
 		"harness/running/executor": {
 			"path": ".pi/agents/harness/running/executor.md",
-			"sha256": "a48c37b2922b98fe20156367ae8c8fe761ae139153d402035a5aa35c9a14f106"
+			"sha256": "219c9307567acc95a9c1b1340f899fac860406fb2c2e84f51b4a8c3ba3a0e2ec"
 		},
 		"harness/reviewing/adversary": {
 			"path": ".pi/agents/harness/reviewing/adversary.md",
-			"sha256": "697ee7c784e8eb30ce96f4f16e9bb5f9cdcaae76a4a7083ace2fe4272e6d732f"
+			"sha256": "01ae05b38943c1d1fea373701dc060cc3a3f5125f2a03af468a6a1a877f1c83c"
 		},
 		"harness/reviewing/evaluator": {
 			"path": ".pi/agents/harness/reviewing/evaluator.md",
-			"sha256": "587ae14d6e91fd8af2b2842f568b9a1fa0b1d84fa6e18b4bc21c0ba2a9e62218"
+			"sha256": "5d6d34654d5c223e5549de9b7b0277b4e28745b2409545ecf3034bd0789c3fa3"
 		},
 		"harness/reviewing/tie-breaker": {
 			"path": ".pi/agents/harness/reviewing/tie-breaker.md",
-			"sha256": "1c54c1c3274291dea1ea8826563a7ad4fe1d9c4302984e907bfcd22cfc4f5eba"
+			"sha256": "80312a10772fde4bccc294a4ba7c470bf46d3054207393d2af42af277e5edad6"
 		},
 		"harness/planning/decompose": {
 			"path": ".pi/agents/harness/planning/decompose.md",
-			"sha256": "734eaa1bc87c337f6582c8f1c97baabf51e807731ab3c075c8960a9d207145e2"
+			"sha256": "944c7221b7bf8e15cd8cf324c3d5ae135c643c6387d8f611cf9128f9ea922963"
 		},
 		"harness/planning/execution-plan-author": {
 			"path": ".pi/agents/harness/planning/execution-plan-author.md",
-			"sha256": "55ece0f1ee14abd17fe7b3e478b548240f637eacbfc2a34758e98d3878dc82fd"
+			"sha256": "3b83edca1eb393941e04213c5cabe0e4b180e52df59169ba24904341a369ead5"
 		},
 		"harness/planning/hypothesis-validator": {
 			"path": ".pi/agents/harness/planning/hypothesis-validator.md",
-			"sha256": "20411e5d734b14b05ae11153133089e044f46784e5b4741712f608665bbf4376"
+			"sha256": "ee68aa5c04b903320116cfa21cea8f130199fd21e1fd1a8a747830bf53920fdb"
 		},
 		"harness/planning/hypothesis": {
 			"path": ".pi/agents/harness/planning/hypothesis.md",
-			"sha256": "bbb91ac0de39c9de4bf388f0cf926151b6b6a7771d2a0d01d1009a1860daef77"
+			"sha256": "c974f5381aa562589942e8d52b48bdace6663e10caed6bf5f2fb9ce11d84b0bc"
 		},
 		"harness/planning/implementation-researcher": {
 			"path": ".pi/agents/harness/planning/implementation-researcher.md",
-			"sha256": "d1bbaaf1e67ad98350319f973062f01a25ca70874c99cb335c99bec866da1f6d"
+			"sha256": "8664ad35c63adcc3a6c52b84360d5e8217f9f581b0a9f23b565187a8f7c7bf22"
 		},
 		"harness/planning/plan-adversary": {
 			"path": ".pi/agents/harness/planning/plan-adversary.md",
-			"sha256": "d9a953c0f8f900dc9a95816ada401955dafade7bf5907406cbe3bf3ba760c469"
+			"sha256": "305cfa6cd0d4e6493a2dad2f01d8cb0b0dddc06df11f871746f6da7124c9d16b"
 		},
 		"harness/planning/plan-evaluator": {
 			"path": ".pi/agents/harness/planning/plan-evaluator.md",
-			"sha256": "825f296c487d6aeacad5d320e155a3f23d0db6dea822fccc99a1305941a43da2"
+			"sha256": "1a6f465f4d400bcf32b9e82a1032ae789354f264af31c8d358b2a0dde7df81bf"
 		},
 		"harness/planning/plan-synthesizer": {
 			"path": ".pi/agents/harness/planning/plan-synthesizer.md",
@@ -114,19 +111,19 @@
 		},
 		"harness/planning/planning-context": {
 			"path": ".pi/agents/harness/planning/planning-context.md",
-			"sha256": "96a51d1f2daafc9eaa8869a06ede9d04fc9e19076d58a81041e346e4c81c8b08"
+			"sha256": "4427e3c50fe0970a753df458ee41fde93b8c9d4ee7034c7541df7a97e978b17e"
 		},
 		"harness/planning/review-integrator": {
 			"path": ".pi/agents/harness/planning/review-integrator.md",
-			"sha256": "bba385463ca8833654cd0dc80f666344332293fe86d7420d2c36755a3f9e743a"
+			"sha256": "3f60c41768cad24150718b4a415b9636b0df6892195986a90fc77e2d0a6be537"
 		},
 		"harness/planning/sprint-contract-auditor": {
 			"path": ".pi/agents/harness/planning/sprint-contract-auditor.md",
-			"sha256": "2321298529f70d03798d23346231c4c43ad4b7490a43f291430ca65b3ef93757"
+			"sha256": "402c585168c5510b5f22837d2fb157726b928fa59108a8580437ac6ac08d04f5"
 		},
 		"harness/planning/stack-researcher": {
 			"path": ".pi/agents/harness/planning/stack-researcher.md",
-			"sha256": "ce546ef3aca19da7f334f07cef8f510b79068bffeb7f276c428f3e6236bbe96b"
+			"sha256": "641bcd714df327579ff28db04aeabf5d7ee5f36e333e5ae6971967c591863ca4"
 		}
 	}
 }