dsh-proof：DeepSeek Harness 插件

概览

dsh-proof

Independent read-only acceptance layer for DeepSeek Harness: spawns a read-only verifier before each top-level turn closes and steers gaps back into the agent.

社区 · Topic 自动分析 — 通过 GitHub dsh-plugin Topic 自动发现。静态检查在不执行第三方代码的前提下，验证了固定公开版本的根目录 bundle 契约与已提交文件；这不等于人工审核、安全审计、运行时冒烟测试、发布者身份验证或官方背书。

安装

从 GitHub 安装此组合包

CLI 会验证组合包、调用原生 DSH 安装，成功后才上报完成。

npx dshpub add EvilIrving/dsh-proof --ref 7e5fb648ac9361e6705b4e139dda9da8fdb5eaac

能力

它贡献了什么

HostCordis loadable未核对

Client / UIHost only未核对

Model tools未核对未核对

Profile state未核对未核对

README / ZH

插件文档

Independent read-only acceptance layer for the DeepSeek Harness.

LIMITATIONS

已知限制

- **Deny list must match the deployment's tools** — `tools.restrict` fails loud on unknown names, so a mismatched default blocks verifier startup. The exact mutating-tool set is deployment-specific and is resolved at first install. - **No evidence normalization** — the verifier gathers evidence itself; this plugin does not re-implement diff/test/typecheck/lint. A deployment wanting specific evidence channels should extend `verifierPrompt`. - **Best-effort spawn** — a provider that is absent or rejects the request degrades to a no-op (logged), rather than failing the user's turn.