harness:fleet-command

Phases:

• select: Determine which fleet members are installed, probe each one's queue depth through its own gate-free report-only path rather than reimplementing its selection and never through a gated dry-run path that would fire that member's own CONFIRM during selection, record a member with no gate-free path as queue-depth-unknown and carry it to the confirm round instead of guessing, drop empty-queue fleets as unscheduled rather than running them, derive the wave assignment from the fixed dependency shape with the CI trust gate first and ideation in its own wave ahead of intake and the independent quality sweeps parallel alongside intake and the land stage terminal so that no wave contains a dependency edge, apply the fleet cap structurally so the trust gate and the terminal lander are never shed, build the contention map over the four collision classes and the derived merge-order plan it implies, detect the run-level forks worth surfacing including an untrustworthy CI signal read from the CI member's own queue probe, and degrade the DAG to the members actually present while recording every member that is missing
• confirm: Present the wave DAG, the fleet selection with its probed queue depths and its unknown-depth fleets and its unscheduled empty-queue fleets and everything the cap shed with the structural reason that shed it, the global budget of slots and the per-fleet sub-cap of 2 and one pass per fleet and the fleet cap and the wall-clock, the contention map with its serialization and merge-order consequences, and the detected forks with recommended defaults — including the CI trust fork whose options are to run the CI member alone this session or proceed with every downstream verdict labelled degraded or trim the fleets that lean hardest on the CI signal — together in one surface for a single run-plan authorization in which the human approves or trims fleets or re-tunes the budget once and trimming re-derives the DAG; this phase does not run at all under report-only
• dispatch: Schedule one worktree-isolated lane per scheduled fleet wave by wave, each lane running the real member skill rather than a reimplementation of it and each dispatched with an explicit --concurrency set to its allocation from the global pool because that flag is the only seam the global cap has and a lane launched without it silently reverts to the member's own single-fleet default, admitting a lane to its fan-out phase only as a global slot frees and never co-scheduling a serialized pair and shedding rather than deferring any lane whose deferral would reach the terminal lander's wave, presenting each wave's ready fleets' own CONFIRM gates together in one batched round verbatim and unmodified, parking a lane that hits an unforeseen run-level fork while the other lanes continue, and comparing elapsed time against the wall-clock deadline at each wave boundary before scheduling the next wave so budget exhaustion stops new scheduling without killing in-flight lanes
• verify: Confirm each lane from its emitted artifacts rather than its self-report — the terminal artifact exists in the form that member's contract specifies, per-item verdicts are present with the references they were drawn from and those references are independently spot-checked, and nothing was merged outside a human-authorized land inside the land member's own gate which is checked directly against every branch and PR the lanes touched — while staying within allocation is reported honestly as a dispatch-time-enforced property recorded as an assumption rather than as a verified check because no artifact records a lane's peak concurrency, and all-OS CI is recorded as not-applicable at this tier with its reason and never dropped silently
• report: Emit one consolidated dashboard carrying a per-lane row with its wave and verdict and emissions and slot usage and parked forks, the cross-fleet-deduped filing list in which one defect raised by several sweeps becomes one row citing every lane that raised it, the recommended merge order with its regeneration sequence as advice rather than an action, the run's budget accounting, everything the budget shed named with its reason, and an assumptions-made note; never merge and never authorize a land