Add agentic harness program

.github/CODEOWNERS

@@ -0,0 +1,18 @@
+# Harness and repository governance require human/admin review.
+/.github/                  @david-hoffman
+/.claude/                  @david-hoffman
+/AGENTS.md                 @david-hoffman
+/CLAUDE.md                 @david-hoffman
+/ARCHITECTURE.md           @david-hoffman
+/QUALITY_SCORE.md          @david-hoffman
+/docs/agent-harness/       @david-hoffman
+/docs/references/          @david-hoffman
+/docs/testing/             @david-hoffman
+/scripts/agent_harness/    @david-hoffman
+/setup.py                  @david-hoffman
+/setup.cfg                 @david-hoffman
+/requirements*.txt         @david-hoffman
+/environment.yml           @david-hoffman
+/conda.recipe/             @david-hoffman
+/versioneer.py             @david-hoffman
+/dphtools/_version.py      @david-hoffman

.github/ISSUE_TEMPLATE/agent_task.yml

@@ -0,0 +1,99 @@
+name: Agent task
+description: Scoped task for agent implementation.
+title: "[Agent] "
+labels:
+  - agent-ready
+body:
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem statement
+      description: What is wrong or missing?
+    validations:
+      required: true
+  - type: textarea
+    id: desired
+    attributes:
+      label: Desired behavior
+      description: What should be true after the change?
+    validations:
+      required: true
+  - type: textarea
+    id: out_of_scope
+    attributes:
+      label: Out of scope
+      description: What must not change?
+    validations:
+      required: true
+  - type: textarea
+    id: acceptance
+    attributes:
+      label: Acceptance criteria
+      description: List testable criteria.
+    validations:
+      required: true
+  - type: input
+    id: modules
+    attributes:
+      label: Affected modules
+      placeholder: "dphtools/utils/fitfuncs.py, tests/test_fitfuncs.py"
+    validations:
+      required: true
+  - type: dropdown
+    id: public_api
+    attributes:
+      label: Public API impact
+      options:
+        - "No public API change"
+        - "Public API behavior change"
+        - "New public API"
+        - "Unknown"
+    validations:
+      required: true
+  - type: textarea
+    id: scientific
+    attributes:
+      label: Hardware/scientific assumptions
+      description: State facts, assumptions, and guesses separately.
+    validations:
+      required: true
+  - type: textarea
+    id: data
+    attributes:
+      label: Data or fixture requirements
+      description: Include provenance, seeds, units, and checksums when relevant.
+    validations:
+      required: true
+  - type: textarea
+    id: tests
+    attributes:
+      label: Expected tests
+      description: What tests should prove the change?
+    validations:
+      required: true
+  - type: dropdown
+    id: risk
+    attributes:
+      label: Risk label
+      options:
+        - "risk:low"
+        - "risk:medium"
+        - "risk:high"
+    validations:
+      required: true
+  - type: textarea
+    id: downstream
+    attributes:
+      label: Downstream impact
+      description: Known consumers, notebooks, package users, or integrations.
+    validations:
+      required: true
+  - type: dropdown
+    id: approval
+    attributes:
+      label: Human approval required
+      options:
+        - "no"
+        - "yes"
+    validations:
+      required: true

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,38 @@
+name: Bug report
+description: Report a reproducible bug.
+title: "[Bug] "
+labels:
+  - agent-ready
+body:
+  - type: textarea
+    id: summary
+    attributes:
+      label: Summary
+    validations:
+      required: true
+  - type: textarea
+    id: reproduce
+    attributes:
+      label: Reproduction steps
+      description: Include exact commands, inputs, and versions.
+    validations:
+      required: true
+  - type: textarea
+    id: expected
+    attributes:
+      label: Expected behavior
+    validations:
+      required: true
+  - type: textarea
+    id: actual
+    attributes:
+      label: Actual behavior
+    validations:
+      required: true
+  - type: textarea
+    id: impact
+    attributes:
+      label: Scientific, numerical, or public API impact
+      description: State facts, assumptions, and guesses separately.
+    validations:
+      required: true

.github/ISSUE_TEMPLATE/release_checklist.yml

@@ -0,0 +1,34 @@
+name: Release checklist
+description: Track a release or publishing change.
+title: "[Release] "
+labels:
+  - area:release
+  - risk:high
+  - needs-human-decision
+body:
+  - type: textarea
+    id: scope
+    attributes:
+      label: Release scope
+    validations:
+      required: true
+  - type: textarea
+    id: artifacts
+    attributes:
+      label: Artifacts and targets
+      description: PyPI, Test PyPI, Anaconda, documentation, or other targets.
+    validations:
+      required: true
+  - type: textarea
+    id: dry_run
+    attributes:
+      label: Dry-run evidence
+      description: Package build, twine check, installed-artifact smoke, and staging publish evidence.
+    validations:
+      required: true
+  - type: textarea
+    id: approvals
+    attributes:
+      label: Human/admin approvals
+    validations:
+      required: true

.github/dependabot.yml

@@ -0,0 +1,17 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    labels:
+      - "area:ci"
+      - "agent-ready"
+
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    labels:
+      - "area:packaging"
+      - "agent-ready"

.github/pull_request_template.md

@@ -0,0 +1,47 @@
+## Linked issue
+Closes #
+
+## Change summary
+
+## Phase
+- [ ] Phase 0 harness bootstrap only
+- [ ] Phase 1 GitHub protection/configuration
+- [ ] Phase 2 clean-context enforcement
+- [ ] Phase 3 coverage ratchet
+- [ ] Phase 4 downstream/release hardening
+- [ ] Other: <explain>
+
+## Agent workflow evidence
+- [ ] Scout run metadata committed or not required for this phase
+- [ ] Red-test author run metadata committed or not required for this phase
+- [ ] Red tests failed on base commit or not required for this phase
+- [ ] Implementation run metadata committed or not required for this phase
+- [ ] Adversarial review run metadata committed or not required for this phase
+- [ ] Numerics review run metadata committed or not required
+- [ ] CI triage run metadata committed or not required
+
+## Tests and commands
+Paste exact commands and concise results. Do not paste huge logs.
+
+## Coverage
+- Line coverage before/after:
+- Branch coverage before/after:
+- Diff coverage:
+
+## Scientific, hardware, or numerical impact
+State facts, assumptions, and guesses separately.
+
+## Public API impact
+- [ ] No public API change
+- [ ] Public API change documented in design doc and changelog
+
+## Downstream impact
+- [ ] Not applicable
+- [ ] Downstream smoke run
+- [ ] Downstream impact documented
+
+## Release impact
+- [ ] No release impact
+- [ ] Release checklist required
+
+## Human/admin decisions needed