Overview
dsh-approval-preflight
Graph-first permission preflight for DeepSeek Harness: the model declares a computation graph whose nodes carry the semantic operation (download what to where, write what, delete what); the user approves nodes one by one in a side panel, one approval covers one successful execution, uncovered operations still use the native approval card, and every node keeps an audit trail of what actually ran. / 先交计算图、逐节点批准的审批预检：节点写清这件事的本质，用户按节点一次性批准，执行成功即消耗、失败可重试；未申报的操作仍走原生卡，节点内实际跑过什么留有审计痕迹。
README / EN
Package documentation
Registry summary
Graph-first permission preflight for DeepSeek Harness: the model declares a computation graph whose nodes carry the semantic operation (download what to where, write what, delete what); the user approves nodes one by one in a side panel, one approval covers one successful execution, uncovered operations still use the native approval card, and every node keeps an audit trail of what actually ran. / 先交计算图、逐节点批准的审批预检：节点写清这件事的本质，用户按节点一次性批准，执行成功即消耗、失败可重试；未申报的操作仍走原生卡，节点内实际跑过什么留有审计痕迹。
dsh.pub verifies the pinned bundle contract, runtime facts, and distribution semantics. The complete README remains in the source repository.
Read the full README on GitHubLIMITATIONS
Known limitations
- **语义不可验证**：插件无法判断实际命令是否真的做了节点描述的事——这是信任边界。补偿手段是节点级审计痕迹（事后可核对）。 - **同一时刻只允许一个执行中节点**：代价是模型不能并行跑两个节点，换来干净的审计归属。 - **不自动放行 `terminal_*` 与 MCP 工具**：前者无法定义「一次调用」边界，后者无法归类。 - **不接管原生审批卡**：未申报的操作仍然弹原生卡，临时点的那一下只生效一次，不产生节点批准。 - 审计只记录工具调用摘要，不记录完整参数/输出。