FrameEvidence: Bounded Figma Read-Only Design Evidence for DeepSeek Harness

FrameEvidence is a read-only Figma plugin for DeepSeek Harness, designed to address the context bloat and credential exposure risks faced by agents when retrieving design data. It provides two core tools, `figma_inspect` and `figma_render`: the former returns a bounded node tree, while the latter provides a temporary rendering URL, thereby controlling data scale without exposing the Figma PAT. The plugin strictly adheres to security boundaries: credentials are read solely via host environment variables, writing to Figma is prohibited, redirects are rejected, and API responses are limited by both byte size and node count. Installation requires meeting Node.js version requirements and pinning to a specific commit via the DSH command. Users must create a Figma PAT with read-only permissions and configure environment variables.