Introduction to the DSH Private Browsing Plugin
The dsh-private-browsing plugin provides an independent private chat page for the DeepSeek Harness (DSH) Web profile, supporting context isolation, audit logging, and reversible message exclusion. Licensed under the MIT License, it allows users to exclude selected messages from subsequent requests, but note that data is stored in plaintext and sent requests cannot be recalled. Once installed, it can be accessed via a pinned button, making it suitable for scenarios that require temporary conversations while retaining records.
Read Moredsh-pixel-office: DeepSeek Harness Digital Pixel-Style Workspace Theme
dsh-pixel-office is a pixel-art workspace plugin designed for the DeepSeek Harness (DSH) Web GUI. It replaces a plain list view with a top-down 6×4 pixel office, where each workstation represents a session. Core features include CRT monitors that embed real conversations, a schedule board with drag-and-drop workstation swapping, an archive drawer, and rich CRT-style animations. The plugin provides a dedicated settings panel and supports persistent workstation layouts. Installation requires adding a dependency and enforces the use of a dark theme, making it ideal for developers seeking an immersive, visually rich experience.
Read Moredsh-local-link: DeepSeek Harness Local LAN Access Plugin
`dsh-local-link` is a lightweight DSH plugin developed by donoteatme, designed to address the need for multi-device session viewing in Web mode. It requires no relay server or cloud service and enables devices on the same local area network to connect to the current session by scanning a QR code or using a one-time link. The plugin supports mobile devices and automatically switches to a responsive view when the viewport width is smaller than 834 CSS pixels. It is easy to set up and use, with a default invitation code that is valid for one-time use only, intended for trusted private networks.
Read Moredsh-windows-settlement-proof: Offline Content-Addressed Evidence for Windows Control Plane Changes
`dsh-windows-settlement-proof` is a DSH plugin for management security, designed to verify that Windows control-plane changes (such as services and scheduled tasks) have converged to their intended state. Through static evidence comparison and fixed hash locking, it provides secure convergence verification without executing any commands or reading sensitive business data. It operates with zero execution risk, outputting only public counts, boolean values, and SHA-256 digests, making it suitable for scenarios requiring strict auditing of change implementation.
Read Moredsh-vulnerability-remediation-proof: Offline Evidence Plugin for Patch Verification
`dsh-vulnerability-remediation-proof` is a plugin in the DSH ecosystem that provides an offline, deterministic method for patch verification. It does not perform scanning or installation; instead, it recomputes settlement verdicts from receipts using hashes and restricted metadata to prove a closed remediation loop. The tool is compatible with DeepSeek Harness 0.1.2-alpha.4 and Node.js 22. It uses the `verify` command to validate the provided evidence file and ensure that the patch meets zero-residual closure conditions, making it suitable for scenarios requiring strict audit and security compliance.
Read Moredsh-tool-surface-proof: Deployment-Level Evidence of Model-Visible Tool Surface Consistency
The DeepSeek Harness (DSH) plugin `dsh-tool-surface-proof` is designed to verify that deployment-specific tool architecture conforms to approved locks, ensuring the actually recorded model-visible surface matches the expected one. It supports offline content-addressed evidence generation and can detect drift, such as missing surfaces, permission mismatches, or schema changes. The plugin provides CLI subcommands for inspection and validation, without executing commands or capturing live runtime state, and its reports include only SHA-256 identities and counts, without exposing tool names or business content.
Read Moredsh-retention-settlement-proof: DeepSeek Harness Offline Retention Settlement Proof
`dsh-retention-settlement-proof` is an offline retention settlement evidence generation plugin for DeepSeek Harness. It consumes pre-recorded receipts to verify whether the subject is completely absent from surfaces such as `persistence-list` and `session-index`, thereby proving that the session has “lapsed.” The tool only generates a report containing hashes and verification results; it does not modify files or include sensitive information. It supports both CLI and MCP integration modes and is intended to address the challenge of programmatically verifying session deletion status.
Read Moredsh-reproducible-build-proof: Offline Build Consistency Verification
`dsh-reproducible-build-proof` is a DeepSeek Harness (DSH) plugin designed to help independent builders verify the byte-level consistency of outputs. It provides offline content-addressed proofs, ensuring the convergence of independent builds by verifying the consistency of inputs such as source revisions, recipes, parameters, and dependency sets. It supports various invocation methods, including CLI and MCP stdio, generating deterministic outputs with no runtime dependencies. Note that this plugin only verifies hash matching and does not execute builds or perform source authentication.
Read Moredsh-principal-binding-proof: Offline Proof of Anonymous Authority Binding Across DSH Execution Planes
`dsh-principal-binding-proof` is a security plugin for DeepSeek Harness (DSH) designed to verify identity consistency between the anonymous authority and the tenant within the execution chain. It detects anomalies such as authority swapping or cross-tenant confusion by inspecting data points such as hashes, versions, allowlists, and adjacency. Licensed under the MIT license, it must be installed and uses the `verify` command to perform offline validation of evidence files, making it suitable for scenarios that require auditing and ensuring the integrity of the evidence chain.
Read MoreDeepSeek Harness Plugin: dsh-policy-waiver-proof
The `dsh-policy-waiver-proof` plugin is designed to provide DeepSeek Harness (DSH) with an offline, deterministic evidence layer that verifies temporary policy waivers are strictly confined to their approved scope. It focuses on generating boundary proofs and managing lifecycle validity, ensuring that waivers remain valid within their authorized subject, scope, operation allowlist, and time window. It provides CLI and MCP stdio tools to perform rigorous validation of waiver continuity, constraint matching, and compensating controls. The plugin requires a Node.js 22+ environment and outputs only hashes and machine-readable decisions, without sensitive raw data, making it suitable for scenarios that demand strict compliance auditing.
Read Moredsh-license-obligation-proof: Evidence Generation Plugin for License Obligation Delivery Closed Loop
The `dsh-license-obligation-proof` plugin for DeepSeek Harness (DSH) is designed to generate and validate delivery evidence for compliant artifacts, filling the gap between scanning and proof of delivery. It focuses on offline, deterministic evidence generation and consistency validation, producing reports that include hashes and metadata, while explicitly indicating that exhaustive component-set coverage and legal compliance cannot be proven. The plugin does not perform scanning or legal interpretation and must be used in conjunction with the DSH environment.
Read MoreDSh Duty Separation Proof
`dsh-duty-separation-proof` is a post-hoc audit plugin in the DeepSeek Harness (DSH) ecosystem that aims to offline, deterministically prove whether a workflow complies with duty-separation policies. Built on a receipt chain, the tool verifies rules such as identity and hash binding, process ordering, mutually exclusive subjects, quorum, and receipt continuity, then generates a content-addressed compliance report. It does not support real-time control; it only provides static validation and evidence generation based on input data, without performing authorization or managing real-time state.
Read Moredsh-deployment-rollback-proof: Offline Verification of Deployment Rollback Convergence
Maintained by dongsheng123132, the DeepSeek Harness (DSH) Deployment Rollback Proof plugin is designed to generate offline, deterministic evidence that a deployment target has stopped serving a failed version and has converged to a known good state, without relying on real-time observation or performing an actual rollback. It validates hashed manifests and checks conditions such as coverage, continuous observation, RTO, and zero active failed replicas to produce a machine-readable verdict. The plugin supports three usage modes—command line, DSH integration, and MCP server—requires a Node.js 22+ environment, and rejects reports containing sensitive keys.
Read Moredsh-change-window-proof: Offline Deterministic Change-Window Evidence
`dsh-change-window-proof` is an offline, deterministic evidence-generation plugin for verifying that change settlement occurs strictly within declared maintenance windows. It supports use via DSH bundles, an MCP stdio server, a JavaScript API, and a CLI. The plugin provides maintenance-window validation, duration and truncation checks, binding validation, and SHA-256 chain validation, and generates content-hash-based verifiable reports. It does not perform change operations or query live infrastructure; instead, it audits change logs to ensure that changes strictly comply with time limits and policy requirements, serving as a critical component of the change-management evidence stack.
Read Moredsh-canary-decision-proof: An Evidence Generator for Offline Validation of Canary Decisions
`dsh-canary-decision-proof` is a controller-agnostic, offline evidence verification tool designed to substantiate the rationale for decisions in progressive delivery. It generates content-addressed reports by validating evidence integrity, computing deterministic metrics using positive fixed-point integer arithmetic, and following the precedence logic “invalid evidence → pause, metric failure → abort, otherwise → release.” This plugin does not perform rollouts; it only provides deterministic verification at the audit level, making it suitable for scenarios requiring strict compliance and review.
Read MoreDSH Build Hermeticity Proof
`dsh-build-hermeticity-proof` is a plugin in the DeepSeek Harness (DSH) ecosystem designed to provide an offline, hash-based deterministic evidence layer for verifying that a build process strictly adheres to declared boundaries. The plugin supports comprehensive boundary checks for file reads and writes, environment variables, network access, clock, and randomness. Installation requires Node.js 22+ and provides `inspect` and `verify` commands. **Note** that it does not execute builds or enforce sandboxing, nor does it prove reproducibility or detect undocumented access; it only verifies the internal integrity of receipts and policy compliance.
Read Moredsh-break-glass-settlement-proof: Offline Verification of Emergency Access Session Settlement Evidence
`dsh-break-glass-settlement-proof` is a DSH plugin maintained by dongsheng123132 that verifies settlement evidence for break-glass sessions offline. The plugin provides offline, deterministic evidence for inspecting session lifecycle, operational audit records, and permission revocation status. It only validates the provided settlement data and does not handle authentication or query real-time infrastructure. After installation, a CLI tool can be used to inspect and validate JSON files, making it suitable for security operations and compliance auditing scenarios.
Read Moredsh-attestation-proof: Offline Deterministic Release Proof for DeepSeek Harness
dsh-attestation-proof is a plugin for DeepSeek Harness (DSH) used to generate offline, deterministic release attestations. By verifying the consistency of a manifest with local identities and pinned keys, the plugin fills a gap in supply chain security verification. Its core features include offline verification, support for DSSE/in-toto statements, secure report generation, and strict filesystem restrictions. It provides two commands, inspect and verify, and outputs only JSON verdicts containing content without sensitive information, making it suitable for security audits and build quarantine scenarios in air-gapped environments.
Read MoreDSH Artifact Promotion Proof Plugin
`dsh-artifact-promotion-proof` is a security management plugin for DeepSeek Harness (DSH), designed to provide an offline, deterministic evidence layer that verifies the continuity of artifact hashes across the build, pre-release, and production promotion chain. The plugin does not rely on network access or runtime health checks and performs compliance validation solely through hash records, supporting zero-rebuild promotion and environment-bound checks. It exposes `inspect` and `verify` functions through CLI and MCP stdio interfaces, making it suitable for security and compliance audits. Installation must be performed via the DSH profile mechanism and requires Node.js 22 or later. The plugin runs in read-only mode, focuses on the integrity of structured hash records, and refuses to process secrets or raw log content.
Read Moredsh-access-review-proof: Offline Deterministic Verification of Access Review Evidence
`dsh-access-review-proof` is an offline deterministic evidence plugin maintained by dongsheng123132. It verifies whether Microsoft Entra access review evidence meets compliance and consistency requirements through strict checks such as timeline integrity, entitlement coverage, risk decisions, and reviewer independence. The tool is designed to address the difficulty of tracing UI state in automated workflows, ensuring that the review process satisfies specific logic and security rules at the data level and supports installation and use via DSH or MCP.
Read MoreDSH Fuel-and-Electricity Ledger: DeepSeek Harness Screen Recording Demo Plugin
This article introduces a DeepSeek Harness (DSH) plugin demo developed by Dongfang81, which visually compares the total cost of ownership between gasoline and electric vehicles. The plugin supports adjusting the time period and mileage over 3 to 10 years, uses local processing to generate an SVG animation of cost curves, and automatically narrates the results in voice-enabled browsers. It is ideal for developers creating screen-recorded demos or teaching examples, but please note that the preset parameters are for entertainment purposes only and do not constitute actual car-buying advice.
Read MoreIntroduction to the dsh-llama-model-manager Plugin
dsh-llama-model-manager is a DeepSeek Harness plugin designed specifically for the Windows environment, aimed at resolving the issues of cumbersome model switching, chaotic process management, and resource leaks during local deployment of large models. Through a fixed OpenAI-compatible gateway, it automatically manages the lifecycle of `llama-server`, including model loading, unloading, graceful shutdown, and VRAM release. It supports operations via a visual interface, provides process status monitoring and log viewing, and eliminates the need for frequent configuration changes, offering developers a stable and efficient local inference solution.
Read Moredsh-cache-safe-tool-result
The DeepSeek Harness (DSH) plugin is designed to address a vulnerability in DSH's implicit prompt caching. DSH's "in-place" truncation can invalidate tail content and trigger re-billing. The plugin ensures the integrity of cached prefixes by truncating results before they reach the conversation surface and preventing the rewriting of already delivered results. By using the `tools/post-execute` hook and the `toolResultPruner` service, it achieves a high cache hit rate, making it well suited for scenarios that require handling large tool results while maintaining cache validity.
Read Moredsh-workspace-enhancement: Unified Local and Remote Workspace Management
`dsh-workspace-enhancement` is a plugin for DeepSeek Harness (DSH) that unifies local and remote SSH workspaces in a single session. It leverages the `ssh2` library to enable remote file operations, terminal access, and cross-server command execution without modifying existing code. Core features include multi-workspace sessions, machine settings, remote approval gating, and session awareness. Installation requires DSH's `pnpm` supply chain, and remote approval gating for sensitive operations is disabled by default. The plugin addresses the context-switching pain points in development and operations scenarios, suitable for users managing local codebases and remote servers simultaneously.
Read MoreIntroduction to the DeepSeek Harness Plugin: dsh-message-push
The DeepSeek Harness (DSH) plugin `dsh-message-push` is designed to address monitoring challenges when multi-turn agent sessions are stopped in the background. As a pure push layer, it supports pushing messages via API to QQ, Telegram, Feishu, or WeChat when a task is completed, fails, is blocked, or requires approval. It includes a built-in deduplication mechanism and is responsible only for sending notifications; it does not participate in approval decisions or inject messages. Installation requires a pnpm environment, and configuration requires binding a target account. Other plugins can reuse its API to send notifications.
Read More