dsh-project-guard

Overview

Consequence analysis for DeepSeek Harness: it says what an extra-permission call costs you — the device, your delegated authority, your wider interests. State-based, not guessed.

README / EN

Package documentation

Registry summary

Consequence analysis for DeepSeek Harness: it says what an extra-permission call costs you — the device, your delegated authority, your wider interests. State-based, not guessed.

dsh.pub verifies the pinned bundle contract, runtime facts, and distribution semantics. The complete README remains in the source repository.

Read the full README on GitHub

LIMITATIONS

Known limitations

- Judgement is rule matching over **command text plus collected state**, not a sandbox; obfuscated shell can slip past the rules. - Reads and network traffic are allowed by requirement, so it does **not** keep data from leaving the machine; it protects "the machine and other programs keep working" and what you are committed to in your name. - Tier 2/3 dimensions need outside knowledge and can only be hinted or flagged — deliberate honesty, not an omission. - Collectors only see locally observable state; balances, positions and quotas are reported as *not checked*. - The plugin hooks core pipelines (`tools/pre-execute`, `tools/post-execute`, `approval/request`); Harness breaking changes need follow-up. - Other policy plugins still apply: when this plugin allows a call it only **delegates** to the listeners behind it. ---

dsh-project-guard