dsh-license-obligation-proof: Evidence Generation Plugin for License Obligation Delivery Closed Loop

The `dsh-license-obligation-proof` plugin for DeepSeek Harness (DSH) is designed to generate and validate delivery evidence for compliant artifacts, filling the gap between scanning and proof of delivery. It focuses on offline, deterministic evidence generation and consistency validation, producing reports that include hashes and metadata, while explicitly indicating that exhaustive component-set coverage and legal compliance cannot be proven. The plugin does not perform scanning or legal interpretation and must be used in conjunction with the DSH environment.

Read More
dsh-license-guard: Dependency License Compliance Scanning

`dsh-license-guard` is a DeepSeek Harness plugin designed to address dependency license compliance issues. It scans `node_modules`, normalizes licenses to the SPDX format, and classifies them by category. Users can run a scan to review the license composition or, before publishing, use `license_check` to specify prohibited licenses (such as AGPL-3.0) and block them. The plugin includes a built-in default policy that permits permissive licenses by default and disallows strong copyleft licenses. As a pure Node.js implementation, it performs heuristic screening; legal review and appropriate runtime permissions should be considered.

Read More