test(harness): probe live discovery in isolated sandboxes

docs/proposals/harness-contract.v1.schema.json

@@ -121,20 +121,50 @@
         "platform"
       ],
       "properties": {
-        "instruction": {"const": "declared"},
-        "skill": {"const": "declared"},
-        "hook": {"const": "declared"},
-        "mcp": {"const": "declared"},
-        "workspace": {"const": "declared"},
-        "session": {"const": "declared"},
-        "verification": {"const": "declared"},
-        "handoff": {"const": "declared"},
-        "reload": {"const": "declared"},
-        "telemetry": {"const": "declared"},
-        "platform": {"const": "declared"}
+        "instruction": {"$ref": "#/definitions/deep_probe_entry"},
+        "skill": {"$ref": "#/definitions/deep_probe_entry"},
+        "hook": {"$ref": "#/definitions/deep_probe_entry"},
+        "mcp": {"$ref": "#/definitions/deep_probe_entry"},
+        "workspace": {"$ref": "#/definitions/deep_probe_entry"},
+        "session": {"$ref": "#/definitions/deep_probe_entry"},
+        "verification": {"$ref": "#/definitions/deep_probe_entry"},
+        "handoff": {"$ref": "#/definitions/deep_probe_entry"},
+        "reload": {"$ref": "#/definitions/deep_probe_entry"},
+        "telemetry": {"$ref": "#/definitions/deep_probe_entry"},
+        "platform": {"$ref": "#/definitions/deep_probe_entry"}
       }
     }
   },
+  "definitions": {
+    "deep_probe_discovery": {
+      "$comment": "validate_fixture mirrors this contract because the bundled validator does not resolve $ref or oneOf.",
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["command", "args"],
+      "properties": {
+        "command": {"type": "string", "pattern": "^[A-Za-z0-9][A-Za-z0-9_.-]*$"},
+        "args": {
+          "type": "array",
+          "items": {"type": "string"}
+        }
+      }
+    },
+    "deep_probe_entry": {
+      "$comment": "validate_fixture mirrors this contract because the bundled validator does not resolve $ref or oneOf.",
+      "oneOf": [
+        {"const": "declared"},
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["state"],
+          "properties": {
+            "state": {"const": "declared"},
+            "discovery": {"$ref": "#/definitions/deep_probe_discovery"}
+          }
+        }
+      ]
+    }
+  },
   "allOf": [
     {
       "if": {"properties": {"harness": {"properties": {"surface": {"const": "cli"}}}}},

docs/research/fixtures/harness-contract.v1/codex-cli.json

@@ -15,5 +15,17 @@
     {"id": "telemetry", "claim": "Telemetry behavior was not probed.", "provenance": "unknown", "support_state": "unsupported", "implementation_layers": ["unknown"], "evidence": [{"kind": "probe_receipt", "reference": "probe_codex/.brigade/runs/20260718-044429-114cf3b9"}], "tested_version": "0.144.5", "platform": "linux", "scope": "unprobed"},
     {"id": "platform", "claim": "Codex CLI is documented for local desktop platforms.", "provenance": "documented", "support_state": "native", "implementation_layers": ["native"], "evidence": [{"kind": "vendor_documentation", "reference": "https://learn.chatgpt.com/docs/codex/cli"}], "tested_version": "0.144.5", "platform": "linux", "scope": "local"}
   ],
-  "deep_probes": {"instruction": "declared", "skill": "declared", "hook": "declared", "mcp": "declared", "workspace": "declared", "session": "declared", "verification": "declared", "handoff": "declared", "reload": "declared", "telemetry": "declared", "platform": "declared"}
+  "deep_probes": {
+    "instruction": {"state": "declared", "discovery": {"command": "codex", "args": ["--help"]}},
+    "skill": "declared",
+    "hook": "declared",
+    "mcp": "declared",
+    "workspace": "declared",
+    "session": "declared",
+    "verification": "declared",
+    "handoff": "declared",
+    "reload": "declared",
+    "telemetry": "declared",
+    "platform": "declared"
+  }
 }