fix(harness): 5 improvements from full QA session

- resume-verify: add bypassPermissions rule for sub-agents
- resume-verify: add Korean report language requirement
- resume-verify: add Step 0 GitHub account pre-flight check
- visual-qa-pdf: replace macOS-incompatible strings+grep with node
- component-checks: add dead code detection (Step 6.5)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: kilhyeonjun

.claude/harness-log.md

@@ -247,3 +247,37 @@
 ### Principles Reinforced
 - Context Hygiene: New principle — prevents 1000+ line inline reads that degrade main agent quality
 - Manual→Skill Automation: Internal jargon found manually → content rule #9 automates detection
+
+## 2026-03-30 — Session: Full QA Flow + Harness Improve
+
+### Full QA Results
+- Build: PASS (40 pages, 1.57s)
+- PDF: PASS (7 files)
+- Content: PASS (7/7 checks — ko/en sync, schema, data quality)
+- Components: PASS (9/9 — props, a11y, base path, TypeScript 0 errors)
+- Visual QA: PASS (11/11 routes 200, HR 2p, ATS 3p)
+- ATS: 96/100 (ATS-Ready) — after "Leveraged" → "Integrated" fix
+- Quality: 88/100 (Strong)
+- Auto-fixed: 4 items (AI slop 1, dead code 3)
+
+### Discoveries
+1. **Sub-agent permission failure (2x repeated)**: content-verifier, visual-qa agents couldn't run Bash without `bypassPermissions`
+2. **Visual QA agent Bash still denied with bypassPermissions**: qa-tester agent type has stricter restrictions — fallback to main agent inline
+3. **macOS `strings` + Korean grep incompatible**: `grep -cP '[\xEA-\xED]'` returns 0 on macOS — node-based alternative needed
+4. **Dead code 3건 미감지**: awards prop/TrophyIcon import (ResumeSkills), features variable (PortfolioPrintTemplate) — previous sessions didn't catch
+5. **User correction**: Reports must be in Korean for user readability
+
+### Applied Improvements
+
+| File | Change |
+|------|--------|
+| `resume-verify/SKILL.md` | Added sub-agent `bypassPermissions` rule + inline fallback |
+| `resume-verify/SKILL.md` | Added Korean report language rule |
+| `resume-verify/SKILL.md` | Added Step 0: Pre-flight GitHub account check |
+| `visual-qa-pdf.md` | Korean/English text extraction: `strings+grep` → `node` (macOS compatible) |
+| `component-checks.md` | Added Step 6.5: Dead code detection via `astro check` unused hints |
+
+### Principles Reinforced
+- Manual→Skill Automation: Sub-agent permission failure (2x) → bypassPermissions rule automated
+- Manual→Skill Automation: Dead code found manually (3x) → astro check unused detection added
+- Feedback Loop: macOS tool failure → node-based cross-platform alternative

.claude/skills/resume-verify/SKILL.md

@@ -31,9 +31,21 @@ Unified verification orchestrator with **feedback loop**. Determines scope from
 - Pass 3 (Re-verify): Re-run only FAIL items from Pass 1
 - Max 2 fix iterations. If issues persist after 2 → report, don't loop forever
 - **Context hygiene**: Visual QA (2c), ATS scoring (2d), and quality audit (2e) MUST be delegated to sub-agents. Main orchestrator receives score + issue list only, never raw file contents or screenshots. Build (Step 1) and content sync (2a) can run inline.
+- **Sub-agent permissions**: All sub-agents that run bash/node commands MUST use `mode: "bypassPermissions"`. If sub-agent still fails on Bash, run dynamic checks (curl, node) inline in main agent.
+- **Report language**: All report descriptions, issue explanations, and action items MUST be in Korean. Technical terms (PASS/FAIL, file paths, scores) can stay in English.
 
 ## Execution Flow
 
+### Step 0: Pre-flight
+
+```bash
+# GitHub account check (prevent push 403 errors)
+current=$(gh auth status 2>&1 | grep "Logged in" | head -1)
+if ! echo "$current" | grep -q "kilhyeonjun"; then
+  gh auth switch --user kilhyeonjun
+fi
+```
+
 ### Step 1: Build (always — blocking)
 
 ```bash

.claude/skills/resume-verify/references/component-checks.md

@@ -76,6 +76,17 @@ npx astro check 2>&1 | tail -20
 
 0 errors → PASS, errors present → FAIL + report error content.
 
+## Step 6.5: Dead Code Detection
+
+After structural changes (field removal, rename, feature migration), check for unused variables/imports:
+
+```bash
+npx astro check 2>&1 | grep -i "unused\|never read\|declared but"
+```
+
+Any TS hints about unused variables → auto-fix (remove) unless confirmed intentional.
+Common patterns: removed props still in `interface Props`, removed feature's variable still declared, orphaned icon imports.
+
 ## Step 7: Generate Report
 
 ```markdown

.claude/skills/resume-verify/references/visual-qa-pdf.md

@@ -104,23 +104,23 @@ Note: This check applies to both base resume PDFs and JD-specific PDFs (same tem
 ## Step 5: PDF Text Extraction Verification
 
 ```bash
-# Verify Korean text extraction from PDFs
+# Verify Korean text extraction from PDFs (node-based — macOS grep -P incompatible)
 for pdf in dist/pdf/resume-hr-ko.pdf dist/pdf/resume-ats-ko.pdf; do
-  KOREAN_COUNT=$(strings "$pdf" | grep -cP '[\x{AC00}-\x{D7AF}]' 2>/dev/null || echo "0")
+  KOREAN_COUNT=$(node -e "const fs=require('fs');const t=fs.readFileSync('$pdf','latin1');const m=t.match(/[\uAC00-\uD7AF]/g);console.log(m?m.length:0)")
   if [ "$KOREAN_COUNT" -lt 10 ]; then
-    echo "FAIL: $pdf — Korean text not extractable (font embedding issue)"
+    echo "FAIL: $pdf — Korean text not extractable (font embedding issue) — $KOREAN_COUNT segments"
   else
     echo "PASS: $pdf — $KOREAN_COUNT Korean text segments found"
   fi
 done
 
 # Verify English text extraction
 for pdf in dist/pdf/resume-hr-en.pdf dist/pdf/resume-ats-en.pdf; do
-  HAS_NAME=$(strings "$pdf" | grep -c "Engineer" || echo "0")
+  HAS_NAME=$(node -e "const fs=require('fs');const t=fs.readFileSync('$pdf','utf8');console.log((t.match(/Engineer/g)||[]).length)")
   if [ "$HAS_NAME" -lt 1 ]; then
     echo "FAIL: $pdf — English text not extractable"
   else
-    echo "PASS: $pdf — English text verified"
+    echo "PASS: $pdf — English text verified ($HAS_NAME matches)"
   fi
 done
 ```