Harnessed: Independent Quality Verification

<SUBAGENT-STOP> This skill is for the main session agent only. Subagents (including QA evaluators) should not load or follow these instructions. </SUBAGENT-STOP>

Harnessed ensures that code you write is independently reviewed before being declared complete. Self-critique is useful for improving a draft, but it is not independent verification and it cannot replace the final QA and gate. Harnessed lowers self-evaluation bias and improves issue-finding rate; it does not claim perfect objectivity.

Detect Operating Mode

Detect Superpowers: Check if the session context contains references to Superpowers skills (e.g., superpowers: prefix in loaded skills), or if a superpowers plugin directory exists in the project. If Superpowers was loaded by a SessionStart hook, its instructions will already be in your context — look for mentions of "Superpowers" in your system instructions.

• Superpowers detected → Complementary Mode — SKIP harnessed:contract-writing; use Superpowers specs as acceptance criteria.
• Superpowers not detected → Standalone Mode — USE harnessed:contract-writing before any coding task.
• Superpowers detected but no specs available → Fall back to Standalone Mode.

Both modes USE harnessed:independent-qa after each coding round and harnessed:verification-gate before completion.

User Communication

Briefly inform the user at these moments:

• Before contract: "I'll draft acceptance criteria before coding."
• Before QA: "Running independent QA evaluation."
• During ITERATE: "QA found {N} issues — fixing them now."
• At completion: Use the verification-gate's presentation format.

Keep status messages to one sentence. Do not explain the Harnessed pipeline unless the user asks.

Task Size Routing

When in doubt, treat as Standard. It is always safer to over-verify than under-verify.

High-Risk Task Detection

Flag the task as high-risk if ANY of the following are true:

• touches authentication, authorization, secrets, credentials, cryptography, payments, privacy, permissions, data deletion, destructive migrations, infrastructure, or production configuration
• exposes a new public endpoint, external integration, or admin path
• user explicitly says the task is security-sensitive, compliance-sensitive, or release-blocking

High-risk tasks use the expanded QA path in harnessed:independent-qa: corroborating review, disagreement handling, and explicit human-review carry-through where needed.

Gitignore Setup

Before creating any .harnessed/ artifacts, check if .harnessed/ is already in the project's .gitignore. Only append if absent:

grep -qxF '.harnessed/' .gitignore 2>/dev/null || echo '.harnessed/' >> .gitignore

This is automatic, silent, and idempotent. Do not ask the user for permission. QA artifacts should never be committed.

Concurrent Session Detection

Before writing any artifacts, check for an active session lock:

1. If .harnessed/.lock exists, read its content (PID and timestamp)
2. Check if the PID is still running: kill -0 {PID} 2>/dev/null
3. If the process is alive: warn the user — "Another Harnessed session appears active (PID {PID}, started {timestamp}). Running concurrent sessions may corrupt QA artifacts. Continue anyway?" Wait for user confirmation.
4. If the process is dead (stale lock): remove the lock file silently and proceed
5. Write .harnessed/.lock with the current shell's PID ($$) and ISO 8601 timestamp

The lock file is advisory, not mandatory — it warns but does not block. Clean up the lock file when the task completes.

Artifact Lifecycle

When a new task begins, archive stale artifacts to prevent them from misleading the QA evaluator:

1. If .harnessed/contract.md exists from a previous task, rename it to .harnessed/archive/{timestamp}-contract.md
2. If .harnessed/qa-report.md exists, rename it to .harnessed/archive/{timestamp}-qa-report.md
3. If .harnessed/qa-report-secondary.md exists, rename it to .harnessed/archive/{timestamp}-qa-report-secondary.md
4. If .harnessed/qa-report-security.md exists, rename it to .harnessed/archive/{timestamp}-qa-report-security.md
5. If .harnessed/qa-report-tiebreak.md exists, rename it to .harnessed/archive/{timestamp}-qa-report-tiebreak.md
6. If .harnessed/qa-state.md exists, rename it to .harnessed/archive/{timestamp}-qa-state.md
7. If .harnessed/verification-summary.md exists, rename it to .harnessed/archive/{timestamp}-verification-summary.md

Use the format YYYYMMDD-HHMMSS for {timestamp}. Create .harnessed/archive/ if it does not exist. Do NOT archive .harnessed/failure-patterns.md.

Anti-Rationalization

<HARD-GATE> NON-NEGOTIABLE. Self-critique may improve a draft, but it never replaces independent verification.

User override: HARD-GATEs prevent agent rationalization, not explicit user instructions. If the user directly requests "skip QA for this task" or "treat this as micro", respect it. </HARD-GATE>

Quick Reference

Standalone Mode:
  Task → contract-writing → CODE → independent-qa → (fix loop) → verification-gate → Done

Complementary Mode (with Superpowers):
  Task → [Superpowers planning] → CODE → independent-qa → (fix loop) → verification-gate → Done

High-Risk Mode:
  Task → contract/spec → CODE → independent-qa (corroborating reviewers + possible tie-break) → verification-gate → Done

Micro Task:
  Task → CODE → verification-gate → Done