dsh-windows-readiness-proof: Verification of Readiness Evidence for Managed Windows Hosts
`dsh-windows-readiness-proof` is an MIT-licensed DSH plugin (requiring Node.js >= 22) used to verify whether sanitized and SHA-256-fixed Windows host observable evidence meets the prerequisites of the DeepSeek Harness. The plugin is positioned as an evidence verifier; it does not collect data nor perform remediation, but instead performs deterministic validation on existing evidence and generates audit artifacts. Its core functionality includes two CLI entry points, `inspect` (to view status) and `verify` (to execute validation and output results), as well as corresponding DSH/MCP tools. The plugin adopts a "Fail closed" strategy, failing for issues such as missing, expired, malformed, suspected sensitive information, or policy mismatches.
Read Moredsh-audit-bundle: Generating Content-Addressed Audit Indexes for DeepSeek Harness Evidence
The dsh-audit-bundle is an MIT-licensed plugin for DeepSeek Harness, designed to provide an independent evidence verification layer. It declares audit objects through explicit manifests, verifying whether specific subject IDs and revisions possess sufficient, type-compliant, and pinned JSON evidence from independent producers to cover the declared controls. The plugin performs fail-closed verification, rejecting missing, outdated, or invalid evidence as well as non-independent producers. Upon successful verification, it generates a content-addressed JSON index containing a Merkle root, ensuring auditability. The plugin exposes both DSH tools and MCP services, supporting inspect and verify operations, although the MCP
Read More