概览
dsh-risk-gate
dsh-risk-gate is an automatically discovered DeepSeek Harness plugin bundle.
README / ZH
插件文档
目录摘要
dsh-risk-gate is an automatically discovered DeepSeek Harness plugin bundle.
dsh.pub 核对固定版本的组合包契约、运行时事实与分发语义；完整 README 请查看源仓库。
在 GitHub 阅读完整 READMELIMITATIONS
已知限制
- Shell inspection is regex-based (no full shell parsing): designed to be conservative (false positives over misses), but a determined prompt can still smuggle commands through obfuscation. It is a **safety gate, not a sandbox** — pair with `dsh-permission-rules` / sandbox executors for defense in depth. - Learning state is in-memory only (no persistence across restarts yet). - Approval UI is channel-provided; headless with no answerer fails closed (deny).