dsh-auto-approval-frame

Four-tier interception and audit frame for DeepSeek Harness: deterministic facts and editable rules (deny / ask / AI / allow), AI review, human approval, automatic masking of secrets in tool results with a local reversible token vault, and every event in a hash-chained, day-segmented audit store