zob-harness 0.1.0

package/.pi/factories/project-dna/schemas/project-fingerprint.schema.json

@@ -0,0 +1,28 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://zob.local/schemas/project-fingerprint.v1.json",
+  "title": "ProjectDNA Project Fingerprint",
+  "type": "object",
+  "additionalProperties": true,
+  "required": ["schema", "source_id", "files_scanned", "files_skipped", "languages", "generated_at", "secret_scan"],
+  "properties": {
+    "schema": { "const": "zob.project-fingerprint.v1" },
+    "source_id": { "type": "string" },
+    "root_hash": { "type": "string" },
+    "files_scanned": { "type": "integer", "minimum": 0 },
+    "files_skipped": { "type": "integer", "minimum": 0 },
+    "languages": { "type": "object", "additionalProperties": { "type": "integer", "minimum": 0 } },
+    "package_managers": { "type": "array", "items": { "type": "string" } },
+    "frameworks_detected": { "type": "array", "items": { "type": "string" } },
+    "secret_scan": {
+      "type": "object",
+      "required": ["forbidden_paths_skipped", "secret_like_artifacts_included"],
+      "properties": {
+        "forbidden_paths_skipped": { "type": "boolean" },
+        "secret_like_artifacts_included": { "const": false },
+        "skipped_patterns": { "type": "array", "items": { "type": "string" } }
+      }
+    },
+    "generated_at": { "type": "string" }
+  }
+}

package/.pi/factories/project-dna/schemas/query-steward-report.schema.json

@@ -0,0 +1,52 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://zob.local/project-dna/query-steward-report.schema.json",
+  "type": "object",
+  "required": ["schema", "scan_dir", "query_hash", "raw_query_persisted", "intent", "controlled_expansion", "loading_rules", "safety"],
+  "properties": {
+    "schema": { "const": "zob.project-dna-query-steward-report.v1" },
+    "scan_dir": { "type": "string" },
+    "query_hash": { "type": "string" },
+    "raw_query_persisted": { "const": false },
+    "intent": {
+      "type": "object",
+      "required": ["id", "confidence"],
+      "properties": {
+        "id": { "type": "string" },
+        "confidence": { "enum": ["low", "medium", "high"] },
+        "golden_case_id": { "type": ["string", "null"] }
+      }
+    },
+    "controlled_expansion": {
+      "type": "object",
+      "required": ["stored_raw_terms", "term_hashes", "term_count"],
+      "properties": {
+        "stored_raw_terms": { "const": false },
+        "term_hashes": { "type": "array", "items": { "type": "string" } },
+        "term_count": { "type": "integer", "minimum": 0 }
+      }
+    },
+    "expected_patterns": { "type": "array", "items": { "type": "string" } },
+    "expected_file_hints": { "type": "array", "items": { "type": "string" } },
+    "loading_rules": {
+      "type": "object",
+      "required": ["bounded_context_only", "citation_required", "agent_loads_entire_project", "writeback_policy"],
+      "properties": {
+        "bounded_context_only": { "const": true },
+        "citation_required": { "const": true },
+        "agent_loads_entire_project": { "const": false },
+        "writeback_policy": { "const": "proposal_only" }
+      }
+    },
+    "safety": {
+      "type": "object",
+      "required": ["source_project_modified", "knowledge_backend_write_enabled", "durable_promotion_allowed"],
+      "properties": {
+        "source_project_modified": { "const": false },
+        "knowledge_backend_write_enabled": { "const": false },
+        "durable_promotion_allowed": { "const": false }
+      }
+    }
+  },
+  "additionalProperties": true
+}

package/.pi/factories/project-dna/smoke-manifest.json

@@ -0,0 +1,27 @@
+{
+  "factory": "project-dna",
+  "description": "Smoke manifest for the P0 ProjectDNA scaffold. Uses the local plan document as the approved input artifact; does not scan an external project.",
+  "items": [
+    {
+      "id": "project-dna-plan-smoke",
+      "path": "docs/ZOB_PROJECT_DNA_CODE_KNOWLEDGE_GRAPH_PLAN.md",
+      "metadata": {
+        "source": "local-plan-doc",
+        "execution_posture": "scaffold_validation_only",
+        "expected_signals": [
+          "code-first project truth",
+          "neutral sample quarantine",
+          "code knowledge graph",
+          "capsules with citations",
+          "prior wiki/retrieval inspiration without direct wiki-only reuse"
+        ]
+      }
+    }
+  ],
+  "expectedArtifacts": [
+    "project-dna-summary.json",
+    "project-dna-context-pack.json",
+    "project-dna-readiness.json",
+    "project-dna-capsules.md"
+  ]
+}

package/.pi/factories/roadmap-smoke-lots/batch-manifest.json

@@ -0,0 +1,49 @@
+{
+  "factory": "roadmap-smoke-lots",
+  "description": "Batch manifest for parent-owned roadmap lot planning across safe local documentation inputs. Batch remains gated by pilot proof, persisted oracle review, and explicit concurrency cap.",
+  "items": [
+    {
+      "id": "roadmap-main-batch",
+      "path": "docs/ROADMAP.md",
+      "metadata": { "source": "local-roadmap", "batch": true }
+    },
+    {
+      "id": "roadmap-lots-batch",
+      "path": "docs/ROADMAP_FACTORY_LOTS.md",
+      "metadata": { "source": "local-roadmap", "batch": true }
+    },
+    {
+      "id": "operating-model-batch",
+      "path": "docs/OPERATING_MODEL.md",
+      "metadata": { "source": "local-doc", "batch": true }
+    },
+    {
+      "id": "architecture-batch",
+      "path": "docs/ARCHITECTURE.md",
+      "metadata": { "source": "local-doc", "batch": true }
+    },
+    {
+      "id": "factory-plan-batch",
+      "path": "docs/AGENTIC_ENGINEERING_SOFTWARE_FACTORY_PLAN.md",
+      "metadata": { "source": "local-doc", "batch": true }
+    },
+    {
+      "id": "software-factory-mode-batch",
+      "path": "docs/ZOB_SOFTWARE_FACTORY_MODE.md",
+      "metadata": { "source": "local-doc", "batch": true }
+    },
+    {
+      "id": "rules-system-batch",
+      "path": "docs/ZOB_RULES_SYSTEM.md",
+      "metadata": { "source": "local-doc", "batch": true }
+    }
+  ],
+  "expectedArtifacts": [
+    "patterns.canonical.json",
+    "risks.canonical.json",
+    "workflow-rules.md",
+    "agent-instructions.md",
+    "quality-gates.json",
+    "dashboard-summary.md"
+  ]
+}

package/.pi/factories/roadmap-smoke-lots/factory.json

@@ -0,0 +1,89 @@
+{
+  "name": "roadmap-smoke-lots",
+  "version": "0.1.0",
+  "description": "Turn docs/ROADMAP.md into parent-owned, smoke-first execution lots with explicit blockers and oracle gates.",
+  "defaultMode": "smoke",
+  "requiredStages": [
+    "manifest_loaded",
+    "agentic_plan_written",
+    "item_processed",
+    "patterns_canonicalized",
+    "risks_canonicalized",
+    "quality_gates_written",
+    "validation",
+    "sentinel"
+  ],
+  "expectedArtifacts": [
+    "patterns.canonical.json",
+    "risks.canonical.json",
+    "workflow-rules.md",
+    "agent-instructions.md",
+    "quality-gates.json",
+    "dashboard-summary.md"
+  ],
+  "stages": [
+    {
+      "name": "map-roadmap-items",
+      "type": "map",
+      "agent": "explore",
+      "outputContract": "explore.v1",
+      "requiredTools": ["read", "grep", "find", "ls"],
+      "expectedOutcome": "Extract unchecked roadmap items, prerequisites, blockers, and smoke-first lot candidates from one roadmap artifact.",
+      "promptTemplate": "Analyze roadmap item {item.id} at {item.path}. Map unchecked roadmap work into smoke-first lots. Separate safe-now slices from blocked batch/router/daemon/browser/write-adapter work. Return literal_request, actual_need, success_looks_like, files, answer, gaps, next_steps, evidence, risks/blockers, compliance, and deliverable_delivered.",
+      "mustDo": [
+        "Read the roadmap artifact before conclusions.",
+        "Cite roadmap sections and unchecked items as evidence.",
+        "Prefer smoke-first lots with deterministic validation artifacts."
+      ],
+      "mustNotDo": [
+        "No edits.",
+        "No secrets.",
+        "No destructive commands.",
+        "No daemon, pilot, batch, model-router, or browser/write-adapter execution."
+      ],
+      "context": "Factory {factory.name} run {run.id}; map stage for {item.id} at {item.path}. Outputs directory: {outputs.dir}."
+    },
+    {
+      "name": "reduce-prioritize-lots",
+      "type": "reduce",
+      "agent": "synthesis",
+      "outputContract": "synthesis.v1",
+      "requiredTools": ["read", "grep", "find", "ls"],
+      "expectedOutcome": "Prioritize roadmap lots into an execution queue with prerequisites, oracle gates, and blocked items.",
+      "promptTemplate": "Synthesize roadmap lot map outputs for factory {factory.name} run {run.id}. Read outputs from {outputs.dir}. Produce consensus, conflicts, missing_evidence, recommended_next_action, tasks_to_rerun, evidence, risks/blockers, compliance, and deliverable_delivered. Prioritize safe smoke-first lots before gated pilot/batch/router/daemon work.",
+      "mustDo": [
+        "Keep parent-owned preflight and oracle gates explicit.",
+        "Mark blocked prerequisites clearly.",
+        "Recommend the next single smoke slice only."
+      ],
+      "mustNotDo": [
+        "No edits outside the run directory.",
+        "No invented evidence.",
+        "No secrets.",
+        "No autonomy, daemon, pilot, batch, or router activation."
+      ],
+      "context": "Factory {factory.name} reduce stage for run {run.id}."
+    },
+    {
+      "name": "validate-roadmap-lots",
+      "type": "validate",
+      "agent": "oracle-merge",
+      "outputContract": "oracle-merge.v1",
+      "requiredTools": ["read", "grep", "find", "ls"],
+      "expectedOutcome": "Validate roadmap factory outputs and produce PASS/FAIL/WARN with no_ship decision.",
+      "promptTemplate": "Validate factory {factory.name} run {run.id}. Check manifest, outputs, checkpoints, validation.json, final-report.md, telemetry.json, and DONE.sentinel under {run.dir}. Return verdict, confidence, no_ship, blockers, notes, evidence, merged_lanes, risks/blockers, compliance, and deliverable_delivered.",
+      "mustDo": [
+        "Fail if sentinel or validation evidence is missing.",
+        "Warn if blocked roadmap items are treated as ready-to-run.",
+        "Cite exact artifact paths."
+      ],
+      "mustNotDo": [
+        "No patches.",
+        "No commits.",
+        "No secrets.",
+        "No daemon, pilot, batch, model-router, or browser/write-adapter execution."
+      ],
+      "context": "Factory {factory.name} validation stage for run {run.id}."
+    }
+  ]
+}

package/.pi/factories/roadmap-smoke-lots/pilot-manifest.json

@@ -0,0 +1,50 @@
+{
+  "factory": "roadmap-smoke-lots",
+  "description": "Pilot manifest for parent-owned roadmap lot planning across safe local documentation inputs. Pilot remains gated by registered smoke proof and persisted oracle review.",
+  "items": [
+    {
+      "id": "roadmap-main-pilot",
+      "path": "docs/ROADMAP.md",
+      "metadata": {
+        "source": "local-roadmap",
+        "pilot": true,
+        "focus": "active roadmap objectives and blocked autonomy themes"
+      }
+    },
+    {
+      "id": "roadmap-lots-pilot",
+      "path": "docs/ROADMAP_FACTORY_LOTS.md",
+      "metadata": {
+        "source": "local-roadmap",
+        "pilot": true,
+        "focus": "factory lot sequencing and gate evidence"
+      }
+    },
+    {
+      "id": "operating-model-pilot",
+      "path": "docs/OPERATING_MODEL.md",
+      "metadata": {
+        "source": "local-doc",
+        "pilot": true,
+        "focus": "operating model constraints and escalation gates"
+      }
+    },
+    {
+      "id": "architecture-pilot",
+      "path": "docs/ARCHITECTURE.md",
+      "metadata": {
+        "source": "local-doc",
+        "pilot": true,
+        "focus": "architecture boundaries for multi-agent roadmap work"
+      }
+    }
+  ],
+  "expectedArtifacts": [
+    "patterns.canonical.json",
+    "risks.canonical.json",
+    "workflow-rules.md",
+    "agent-instructions.md",
+    "quality-gates.json",
+    "dashboard-summary.md"
+  ]
+}

package/.pi/factories/roadmap-smoke-lots/smoke-manifest.json

@@ -0,0 +1,35 @@
+{
+  "factory": "roadmap-smoke-lots",
+  "description": "Smoke manifest that treats docs/ROADMAP.md as the single source for smoke-first ZOB execution lots.",
+  "items": [
+    {
+      "id": "roadmap-main",
+      "path": "docs/ROADMAP.md",
+      "metadata": {
+        "source": "local-roadmap",
+        "safe_now_themes": [
+          "v1.4 budget preflight dry-run",
+          "v1.1 delegation chronicle state smoke",
+          "v1.4 stop-condition advisory smoke",
+          "v1.2 factory state-event smoke",
+          "v1.8 read-only factory templates"
+        ],
+        "blocked_themes": [
+          "batch without budget",
+          "always-on daemon",
+          "model-router activation",
+          "browser/write adapters without approval",
+          "networked coms or peer chatroom"
+        ]
+      }
+    }
+  ],
+  "expectedArtifacts": [
+    "patterns.canonical.json",
+    "risks.canonical.json",
+    "workflow-rules.md",
+    "agent-instructions.md",
+    "quality-gates.json",
+    "dashboard-summary.md"
+  ]
+}

package/.pi/git-policy.json

@@ -0,0 +1,120 @@
+{
+  "schema": "zob.git-policy.v1",
+  "defaults": {
+    "autocommit": "off",
+    "autopush": "off"
+  },
+  "commandSurface": {
+    "explicitOnly": true,
+    "allowedCommands": [
+      "/zcommit status [paths/globs...]",
+      "/zcommit plan [paths/globs...]",
+      "/zcommit adopt <paths...>",
+      "/zcommit commit [paths/globs...]",
+      "/zcommit push",
+      "/zcommit autocommit on",
+      "/zcommit autocommit off",
+      "/zcommit autopush on",
+      "/zcommit autopush off"
+    ],
+    "aliasesAllowed": false,
+    "directGitCommitPushTagAllowed": false,
+    "agentExecutableTools": ["zob_zcommit_run"]
+  },
+  "authorization": {
+    "baseline": "no commit, tag, or push unless explicitly requested by the user or enabled through /zcommit autocommit/autopush for the current repo/session scope",
+    "autocommitRequires": [
+      "autocommit is on for the current repo/session scope",
+      "policy loads successfully",
+      "safe workspace dirty files exist after forbidden-path filtering",
+      "no forbidden paths are already staged",
+      "Conventional Commit message generation succeeds",
+      "no explicit no-ship blocker is present"
+    ],
+    "autopushRequires": [
+      "autopush is on for the current repo/session scope or /zcommit push is explicitly requested",
+      "commit was created through /zcommit commit",
+      "target remote and branch are allowed",
+      "last /zcommit commit is still HEAD",
+      "no no-ship blocker is present"
+    ]
+  },
+  "commitMessage": {
+    "format": "conventional-commits",
+    "required": true,
+    "allowedTypes": [
+      "feat",
+      "fix",
+      "docs",
+      "test",
+      "refactor",
+      "chore",
+      "ci",
+      "build",
+      "perf",
+      "revert"
+    ],
+    "requireImperativeSummary": true,
+    "includeValidationEvidenceWhenUseful": true
+  },
+  "validation": {
+    "mode": "advisory",
+    "runBeforeCommit": true,
+    "requiredBeforeCommit": false,
+    "requiredBeforePush": false,
+    "recordCommandsAndResults": true,
+    "allowExplicitException": true
+  },
+  "fileSelection": {
+    "strategy": "workspace_filtered",
+    "onlyAgentOwnedFiles": false,
+    "excludeUnrelatedDirtyFiles": false,
+    "bulkStageAllAllowed": true,
+    "forbiddenPaths": [
+      ".env",
+      ".env.*",
+      "~/.ssh",
+      "~/.aws",
+      "~/.gnupg",
+      "*.pem",
+      "*.key",
+      "node_modules/",
+      "dist/",
+      "build/",
+      "reports/",
+      ".pi/sessions/",
+      ".pi/agent-sessions/",
+      ".pi/tmp/",
+      ".pi/logs/",
+      ".pi/coms/",
+      ".pi/context/",
+      ".pi/goal-rooms/",
+      ".pi/workspace-claims/",
+      ".pi/worker-pools/",
+      ".pi/merge-queue/"
+    ]
+  },
+  "remotes": {
+    "allowed": ["origin"],
+    "default": "origin"
+  },
+  "branches": {
+    "allowedPatterns": [
+      "main",
+      "master",
+      "develop",
+      "feature/*",
+      "fix/*",
+      "docs/*",
+      "chore/*",
+      "zob/*"
+    ],
+    "protectedDirectPushRequiresExplicitUserApproval": ["main", "master"]
+  },
+  "push": {
+    "forcePushAllowed": false,
+    "tagsAllowed": false,
+    "pushAllAllowed": false,
+    "setUpstreamAllowedOnlyWhenExplicit": true
+  }
+}

package/.pi/mission-control/zob_coms_transport.json

@@ -0,0 +1,64 @@
+{
+  "schema": "zob.coms-transport-policy.v1",
+  "name": "zob_coms_transport",
+  "p0Status": "required_local_for_agentic_workflow",
+  "mode": "required_local",
+  "agenticWorkflowsRequireLive": true,
+  "breakGlassApprovalRequired": true,
+  "enabled": true,
+  "localDispatchEnabled": true,
+  "networkEnabled": false,
+  "globalActivation": false,
+  "dispatchAllowed": true,
+  "canonicalLedger": ".pi/coms/messages.jsonl",
+  "statusLedger": ".pi/coms/status.jsonl",
+  "bodyPolicy": "hash_only",
+  "heartbeat": {
+    "enabled": true,
+    "intervalMs": 10000,
+    "staleAfterMs": 30000,
+    "offlineAfterMs": 60000,
+    "stalePeerCountsAsCompletion": false,
+    "stalePeerStatus": "not_completion_evidence"
+  },
+  "responseCapture": {
+    "enabled": true,
+    "storeBodies": false,
+    "storeOutputHashOnly": true,
+    "artifactRefsAllowed": true
+  },
+  "transcriptCapture": {
+    "enabled": false,
+    "mode": "off",
+    "artifactRoot": "reports/coms-captures",
+    "artifactRefsOnlyInLedger": true,
+    "persistBodiesInComsLedger": false,
+    "redactionRequired": true,
+    "retentionClass": "short",
+    "maxArtifactBytes": 32768,
+    "redactionProfile": "zob-default-v1"
+  },
+  "commandPolicy": {
+    "proposalOnly": true,
+    "directWorkerWrites": false,
+    "requiresParentApproval": true
+  },
+  "legacy": {
+    "appendOnlySendEnabled": false,
+    "breakGlassLedgerOnlyRequiresApproval": true
+  },
+  "p1Candidates": [
+    "local socket or named pipe registry",
+    "heartbeat and stale/offline detection",
+    "response capture with outputHash/artifactRef only",
+    "bounded long await with stop-condition mapping"
+  ],
+  "p2NetworkPolicyRequired": true,
+  "noShipConditions": [
+    "raw prompt/output bodies in ZOB ledgers",
+    "free worker-to-worker chat",
+    "network transport without auth/locality policy",
+    "stale/offline peer counted as successful completion",
+    "dashboard direct worker writes"
+  ]
+}