Tasks: the harness's GitHub verbs

The last spec artifact: a DAG derived from the design and the testing plan. Each task names the testing-plan row that proves it.

Task list

• [x] 1. The client: seven methods on ghapi.GitHubClient (repository, create_pull, get_pull, commit_checks, merge_pull, review_threads, open_pulls_for_head), the branch, SHA and method checks, and the fake client's matching methods
  • Depends on: none
  • Requirements: R1.2–R1.8, R4.1, NFR
  • Test: T1, T7 (A1, A3), T8
• [x] 2. Core: core/github_ops.py (the eight operations, resolve_pull_request, the checks roll-up); cli_config.merge_on_approval, shared with the graph's notify hook; core.sessions.pull_request_ref made public
  • Depends on: 1
  • Requirements: R1.1–R1.9, R2.3, R4.1
  • Test: T2, T7 (A2, A4, A7)
• [x] 3. The surface: client.routing.harness_routed; the comment, ticket and pr commands; sessions link-pr --discover; CoreFacade, ManagerFacade, routes, MCP tools, and the OpenAPI contract
  • Depends on: 2
  • Requirements: R1.*, R2.1–R2.3, R3.1–R3.3, R4.1, R4.2
  • Test: T3, T4, T5, T7 (A5)
• [x] 4. The hook: hooks/the-loop-link-pr.py trigger-agnostic, running --discover; the hooks/hooks.json description
  • Depends on: 3
  • Requirements: R4.3, R4.4
  • Test: T6, T7 (A6)
• [x] 5. The documentation: docs/cli/commands/{comment,ticket,pr}.md and sessions.md; the skill (SKILL.md, reference/{automation,collaboration,workflow,reviewing}.md); the slash commands (work-on, execute-tasks, finish-tasks, create-ticket); the capability docs; decision-140 and its row
  • Depends on: 3, 4
  • Requirements: R5.1, R5.2
  • Test: T5, T11
• [x] 6. Verification and evidence: make check, evidence/{verification,self-review,security-review,documentation,reviewer-briefing}.md, and the PR
  • Depends on: 5
  • Requirements: all
  • Test: T11, T12