dsh-action-outbox: Batch Review of DeepSeek Harness Tool Side Effects
`dsh-action-outbox` is a batch review inbox plugin for DeepSeek Harness, designed to address the irreversibility of external write operations performed by agents. It allows users to locally stage tool calls before executing tool side effects, enabling full inspection, editing, and review via a Web interface. Staged calls are submitted for execution only after explicit approval. Core features include a visualized inbox, parameter editing and substitution, fault-tolerant handling, and persistent recovery across restarts. By configuring `cordis.patch.yml`, it implements zero-target dispatch, TOCTOU protection, and restart re-authorization security semantics, ensuring the rigor and revocability of agent operations.
Read Moredsh-action-outbox: Auditable, Persistent Inbox for DSH Tool Side Effects
When running an agent using DeepSeek Harness (DSH), local code changes can be reverted via worktree and file checkpoints. However, agent actions affecting the external world lack a corresponding "undo" mechanism: once an issue comment, an email, a deployment, or a payment is sent, it cannot be undone. The Cordis paper underlying DSH proposes two solutions for this boundary: buffering output until commit, or defining domain-specific compensation logic. The `dsh-action-outbox` plugin implements the former approach—it does not actually invoke the target tools during the staging phase but submits them all at once after manual review and approval, avoiding the misconception that unrelated external systems share an atomic transaction. The following sections introduce the plugin's positioning, usage, and configuration.
Read More