dsh-schema-migration-proof: Offline Content-Addressed Schema Migration Proof Generator

dsh-schema-migration-proof is a security plugin for DeepSeek Harness that generates and verifies deterministic evidence for schema migration offline. It supports validation of output determinism, idempotent reruns, reversible rollback, and explicit data-loss disclosure, without performing actual migrations. The plugin provides a fail-closed policy via CLI or MCP and is intended for scenarios requiring strict verification of migration evidence integrity and security. It requires DSH version >= 0.1.2-alpha.4.