Barricade: A Destructive-Command Interception Gate for Coding Agents

Barricade is an open-source destructive command interception gate for DeepSeek Harness (DSH) by JohnXu22786. Released under the MIT license, it identifies high-risk operations such as `rm -rf` and `git reset --hard` through semantic-level parsing, requiring manual confirmation before execution to prevent accidental data loss. Operating without a sandbox, its core capabilities include parsing complex commands (such as those containing escape characters or subshells) using a POSIX lexical analyzer, and it features 41 built-in rules covering dangerous operations like Git and rm. It offers three decision modes—lenient, balanced, and strict—and supports interactive confirmation as well as audit logs in JSONL format. Barricade can be used as a DSH plugin or a standalone CLI tool.