CG-agent-harness Project Guidance

Read the smallest current source set below before substantive work. Code and config outrank copied snapshots. This skill is repository guidance for agents editing the tree — not a runtime /api/skills plugin, and not authorization to push, merge, or release.

1. Truth order (always)

1. Code under src/
2. assets/config.default.yaml (every tunable; no hardcoded tunables elsewhere)
3. INVARIANTS.md
4. AGENTS.md
5. README.md (then SECURITY.md as needed)

If prose and code disagree, code wins — fix the doc in the same change set when you touch the behavior.

2. Architecture map

Entry	Implementation
cgagentharness serve	src/server (axum, bind 127.0.0.1 only)
cgagentharness agentic <action>	src/agentic, spawned only via src/shim
Exit codes	0 ok, 2 failed, 3 env/config, 4 write refused
Home	~/.CGagentHarness / CGAGENTHARNESS_HOME
Allowed writes	Home directory, or pipeline clones under data/agentic/workspaces
Console asset	assets/static/harness.html (CSRF placeholders contractual)
Sync vs detached agent	/api/agent/run and /api/agent/jobs both via prepare_run

This is not CyClaw. Harness has its own persona and structured-memory surfaces; no external-corpus RAG, LangGraph I1–I5, or CyClaw triple-gate topology. Preserve harness posture: I6 isolation, guard chain, write gates, clone jail, judged-before-land, approval binding, secrets redaction, detached-run gates.

3. Task → sources

Task	Read first
Shim / I6 / ACTIONS whitelist	src/shim, INVARIANTS.md I6, tests/invariant_guard.rs
HTTP guards / headers / CSRF	src/server/guards.rs, headers.rs, tests/auth_guards.rs, tests/security_headers.rs
Write / publish path	src/agentic/writer.rs, write-gate sections of INVARIANTS.md, tests/real_repo_loop.rs
Clone jail / sandbox	src/agentic/workspace.rs, src/agentic/executor/sandbox.rs, tests/agentic_foundations.rs
Config defaults / gates	assets/config.default.yaml, shipped_config_enforces_accounts_tls_and_keeps_execution_gates_closed
Routes / console listing	src/server/routes/mod.rs (REGISTERED_PATHS), views.rs
Install / local verify	scripts/verify-local.sh, scripts/smoke-ollama.sh, README.md, docs/INSTALL.md, docs/MODELS.md
Packaging / release	scripts/package-release.sh, docs/RELEASING.md, docs/DESKTOP.md

Core paths always require an invariant statement in the PR body when touched: src/shim, src/server/guards.rs, src/server/headers.rs, src/agentic/writer.rs, src/agentic/executor/sandbox.rs, src/agentic/workspace.rs, assets/config.default.yaml.

4. Which skill to load

Skill	Load when
cgagentharness-project-guidance	Start of substantive repository work (this file)
fable-protocol	Evidence-first discipline before costly code/security/CI/GitHub claims
cgagentharness-invariant-guard	Before merging core-path security diffs; first gate of a harness security review. Manual-only: disable-model-invocation: true, so ask the operator to run /cgagentharness-invariant-guard rather than self-loading it
cgagentharness-gotchas	Install/verify, desktop packaging, Chrome acceptance CI, clippy fights, write-gate debugging, "hangs" / false greens
cgagentharness-write-policy-redteam	Hardening or changing writer, write gates, git approval, shim argv encoding, or clone jail
cgagentharness-config-guard	Before merging assets/config.default.yaml changes; when asked to check config
verification-specialist	Adversarial independent verify of a supplied change (try to break it; no project mutation)
cgagentharness-runtime-invariant-check	Report-only walkthrough of the runtime invariants before pushing a core-path PR
dep-sync	Fix (or, report-only, list) Cargo, toolchain, deny and CI drift against origin/main
run-cg-agent-harness, doc-sync, cgagentharness-otel-hardening	Operator-only: ask the operator to type them
cgagentharness-optimize	Focused improvement scans that may open a draft PR

cgagentharness-verify and cgagentharness-release exist only under .codex/skills/; Claude Code has no copy.

5. Quality bar (do not invent a lower one)

• cargo fmt --all -- --check
• cargo clippy --all-targets --all-features -- -D warnings
• cargo test --all-targets (keys blank): CI only; locally, targeted tests
• cargo deny check
• New routes → REGISTERED_PATHS (+ console views if listed)
• New shim actions → shim::ACTIONS + CLI dispatch + invariant whitelist together
• Draft PRs, driver-prefixed branches (claude/, codex/, grok/, kimi/, agent/), scripts/check-pr-template.sh, one concern each

6. Authorization boundary

Loading or completing this skill does not grant push, merge, release, or gate-arming rights. Preserve any narrower authorization the operator already gave for the same task. Never expose secrets. Prefer draft PRs until evidence is complete.

7. STOP

Sources refreshed for this task. Proceed to the task-specific skill in section 4 or to the requested engineering work, without expanding scope.