dsh-omp-advisor

LIMITATIONS

Known limitations

- Advisories render as ordinary plugin messages in the conversation (a dedicated advisory card is future work). - Restore points need a git worktree: non-git (and unborn-HEAD) workspaces are skipped, and sparse checkouts/submodules are out of scope for snapshots. A restore keeps files created after the point — deleting them is the model's deliberate judgment call, guided by the advisory. - Consuming `ctx.changeLedger` when dsh-turn-rewind is installed and session-state (seed-replay) rewind are future work. The gate's `ask` mode covers human-approval routing for finding-armed calls; general pattern-based risk approval (e.g. "ask before any `rm -rf`") is still future work. - No mutating-tool grants for advisors yet (oh-my-pi's WATCHDOG.yml roster). The two intervention layers — the pre-call **Tool gate** (refuse/hold a call) and opt-in **Blocker intervention** (cancel the running step) — are what exists today; full WATCHDOG grants remain targeted for a later release behind the DSH approval flow. - The gate is a **policy gate, not a sandbox**: it stops a call an advisor objected to, but an advisor is a model and can be wrong in both directions — it may fail to object, and enabling `nit` or `concern` as a gating severity will hold up ordinary work. `maxDenials` bounds the cost of a disagreement, not the quality of the judgment. - No in-session "advisors watching" badge yet; health is visible in the settings Monitor tab and — with dsh-better-sidebar installed — in the sidebar Advisors tab (status badge included). - Status panel polls every 5 s while the settings section is open (sidebar tab: 2 s while registered); no push yet. The activity ring is in-memory only (≤100 events, lost on restart) — monitoring, not audit. - Advisor memory (v0.7.0) still ahead: composing memory with restore points (rewind lessons) and the completion gate (compromise records), MCP connection pooling, a dedicated memory browser, and per-engine write confirmations. - Web profile UI; other profiles can still configure the namespace by hand.