DeepSeek Harness Plugin: dsh-policy-waiver-proof

The `dsh-policy-waiver-proof` plugin is designed to provide DeepSeek Harness (DSH) with an offline, deterministic evidence layer that verifies temporary policy waivers are strictly confined to their approved scope. It focuses on generating boundary proofs and managing lifecycle validity, ensuring that waivers remain valid within their authorized subject, scope, operation allowlist, and time window. It provides CLI and MCP stdio tools to perform rigorous validation of waiver continuity, constraint matching, and compensating controls. The plugin requires a Node.js 22+ environment and outputs only hashes and machine-readable decisions, without sensitive raw data, making it suitable for scenarios that demand strict compliance auditing.