dsh-schema-migration-proof: Offline Content-Addressed Schema Migration Proof Generator
dsh-schema-migration-proof is a security plugin for DeepSeek Harness that generates and verifies deterministic evidence for schema migration offline. It supports validation of output determinism, idempotent reruns, reversible rollback, and explicit data-loss disclosure, without performing actual migrations. The plugin provides a fail-closed policy via CLI or MCP and is intended for scenarios requiring strict verification of migration evidence integrity and security. It requires DSH version >= 0.1.2-alpha.4.
Read MoreDSH-Capability-Receipt: DeepSeek Harness Skill Loading Receipt
`dsh-capability-receipt` is an MIT-licensed DSH plugin (v0.3.0, requires Node.js 22+), designed to verify whether the skills actually loaded by the DeepSeek Harness (DSH) runtime are consistent with trusted sources by generating content-addressed receipts. The plugin only observes target capabilities without executing their logic; its core mechanism hashes the valid instruction body and compares it against trusted fixed hashes or evidence inputs from the pack-agent lock. The plugin provides three DSH tools and two MCP proof tools, supporting receipt generation from standard sources or the pack-agent lock. It is recommended to install it in an isolated DSH profile for specific compatibility.
Read More