harness-mint

The one write-capable skill in the plugin. Every other skill is pure-read. This one calls metaharness new, which writes a new directory tree.

Safety (load-bearing)

1. Dry-run by default. Without --confirm, the script prints what it would do and exits 0 without touching disk.
2. Refuses project root. If --target resolves to the current working directory OR any path inside it, the script errors out with exit 2. Target must be an absolute path OUTSIDE the calling repo (default is a fresh /tmp/ruflo-mint-<ts>-<name>/ dir).
3. Refuses existing target. Won't overwrite — must scaffold into a non-existent dir.
4. Subprocess + 60s timeout. No library import, no in-process execution. The mint stays sandboxed from ruflo's runtime.

Algorithm