DSH Build Hermeticity Proof

`dsh-build-hermeticity-proof` is a plugin in the DeepSeek Harness (DSH) ecosystem designed to provide an offline, hash-based deterministic evidence layer for verifying that a build process strictly adheres to declared boundaries. The plugin supports comprehensive boundary checks for file reads and writes, environment variables, network access, clock, and randomness. Installation requires Node.js 22+ and provides `inspect` and `verify` commands. **Note** that it does not execute builds or enforce sandboxing, nor does it prove reproducibility or detect undocumented access; it only verifies the internal integrity of receipts and policy compliance.