dsh-proof

Overview

Independent read-only acceptance layer for DeepSeek Harness: spawns a read-only verifier before each top-level turn closes and steers gaps back into the agent.

Community · Topic auto-analysis — Automatically discovered through the dsh-plugin GitHub Topic. Static checks verified a pinned public root bundle contract and committed files without executing third-party code. This is not a human review, security audit, runtime smoke test, publisher identity check, or official endorsement.

Install

Install this bundle from GitHub

The CLI validates the bundle, invokes native DSH, then reports completion.

npx dshpub add EvilIrving/dsh-proof --ref 7e5fb648ac9361e6705b4e139dda9da8fdb5eaac

Capabilities

What it contributes

HostCordis loadableNot inspected

Client / UIHost onlyNot inspected

Model toolsNot inspectedNot inspected

Profile stateNot inspectedNot inspected

README / EN

Package documentation

Independent read-only acceptance layer for the DeepSeek Harness.

LIMITATIONS

Known limitations

- **Deny list must match the deployment's tools** — `tools.restrict` fails loud on unknown names, so a mismatched default blocks verifier startup. The exact mutating-tool set is deployment-specific and is resolved at first install. - **No evidence normalization** — the verifier gathers evidence itself; this plugin does not re-implement diff/test/typecheck/lint. A deployment wanting specific evidence channels should extend `verifierPrompt`. - **Best-effort spawn** — a provider that is absent or rejects the request degrades to a no-op (logged), rather than failing the user's turn.