概览
dsh-approval-preflight
源码级技术说明Graph-first permission preflight for DeepSeek Harness: the model declares a computation graph whose nodes carry the semantic operation (download what to where, write what, delete what); the user approves nodes one by one in a side panel, one approval covers one successful execution, uncovered operations still use the native approval card, and every node keeps an audit trail of what actually ran. / 先交计算图、逐节点批准的审批预检：节点写清这件事的本质，用户按节点一次性批准，执行成功即消耗、失败可重试；未申报的操作仍走原生卡，节点内实际跑过什么留有审计痕迹。收起技术说明
Graph-first permission preflight for DeepSeek Harness: the model declares a computation graph whose nodes carry the semantic operation (download what to where, write what, delete what); the user approves nodes one by one in a side panel, one approval covers one successful execution, uncovered operations still use the native approval card, and every node keeps an audit trail of what actually ran. / 先交计算图、逐节点批准的审批预检：节点写清这件事的本质，用户按节点一次性批准，执行成功即消耗、失败可重试；未申报的操作仍走原生卡，节点内实际跑过什么留有审计痕迹。
README / ZH
插件文档
目录摘要
Graph-first permission preflight for DeepSeek Harness: the model declares a computation graph whose nodes carry the semantic operation (download what to where, write what, delete what); the user approves nodes one by one in a side panel, one approval covers one successful execution, uncovered operations still use the native approval card, and every node keeps an audit trail of what actually ran. / 先交计算图、逐节点批准的审批预检：节点写清这件事的本质，用户按节点一次性批准，执行成功即消耗、失败可重试；未申报的操作仍走原生卡，节点内实际跑过什么留有审计痕迹。
dsh.pub 核对固定版本的组合包契约、运行时事实与分发语义；完整 README 请查看源仓库。
在 GitHub 阅读完整 READMELIMITATIONS
已知限制
- **语义不可验证**：插件无法判断实际命令是否真的做了节点描述的事——这是信任边界。补偿手段是节点级审计痕迹（事后可核对）。 - **同一时刻只允许一个执行中节点**：代价是模型不能并行跑两个节点，换来干净的审计归属。 - **不自动放行 `terminal_*` 与 MCP 工具**：前者无法定义「一次调用」边界，后者无法归类。 - **不接管原生审批卡**：未申报的操作仍然弹原生卡，临时点的那一下只生效一次，不产生节点批准。 - 审计只记录工具调用摘要，不记录完整参数/输出。