概览
dsh-safe-workflow
Task contracts, approval gates, checkpoints, verification evidence, and best-effort rollback for DeepSeek Harness
README / ZH
插件文档
目录摘要
Task contracts, approval gates, checkpoints, verification evidence, and best-effort rollback for DeepSeek Harness
dsh.pub 核对固定版本的组合包契约、运行时事实与分发语义；完整 README 请查看源仓库。
在 GitHub 阅读完整 READMELIMITATIONS
已知限制
This is a workflow guard, not a process sandbox. A plugin runs in the host process and has the host's permissions. The first version provides policy, evidence, and best-effort file snapshots; it does not promise atomic rollback of arbitrary shell side effects, network operations, databases, or files that were not included in a checkpoint. For production use, review the source, pin the plugin version or commit, keep `.dsh-safe-workflow` out of sensitive repositories if needed, and run it with DSH's normal sandbox and approval layers enabled.