dsh-vulnerability-remediation-proof: Offline Evidence Plugin for Patch Verification

`dsh-vulnerability-remediation-proof` is a plugin in the DSH ecosystem that provides an offline, deterministic method for patch verification. It does not perform scanning or installation; instead, it recomputes settlement verdicts from receipts using hashes and restricted metadata to prove a closed remediation loop. The tool is compatible with DeepSeek Harness 0.1.2-alpha.4 and Node.js 22. It uses the `verify` command to validate the provided evidence file and ensure that the patch meets zero-residual closure conditions, making it suitable for scenarios requiring strict audit and security compliance.

Read More