dsh-windows-settlement-proof: Offline Content-Addressed Evidence for Windows Control Plane Changes
`dsh-windows-settlement-proof` is a DSH plugin for management security, designed to verify that Windows control-plane changes (such as services and scheduled tasks) have converged to their intended state. Through static evidence comparison and fixed hash locking, it provides secure convergence verification without executing any commands or reading sensitive business data. It operates with zero execution risk, outputting only public counts, boolean values, and SHA-256 digests, making it suitable for scenarios requiring strict auditing of change implementation.
Read Moredsh-change-window-proof: Offline Deterministic Change-Window Evidence
`dsh-change-window-proof` is an offline, deterministic evidence-generation plugin for verifying that change settlement occurs strictly within declared maintenance windows. It supports use via DSH bundles, an MCP stdio server, a JavaScript API, and a CLI. The plugin provides maintenance-window validation, duration and truncation checks, binding validation, and SHA-256 chain validation, and generates content-hash-based verifiable reports. It does not perform change operations or query live infrastructure; instead, it audits change logs to ensure that changes strictly comply with time limits and policy requirements, serving as a critical component of the change-management evidence stack.
Read More