dsh-audit-bundle: Generating Content-Addressed Audit Indexes for DeepSeek Harness Evidence

The dsh-audit-bundle is an MIT-licensed plugin for DeepSeek Harness, designed to provide an independent evidence verification layer. It declares audit objects through explicit manifests, verifying whether specific subject IDs and revisions possess sufficient, type-compliant, and pinned JSON evidence from independent producers to cover the declared controls. The plugin performs fail-closed verification, rejecting missing, outdated, or invalid evidence as well as non-independent producers. Upon successful verification, it generates a content-addressed JSON index containing a Merkle root, ensuring auditability. The plugin exposes both DSH tools and MCP services, supporting inspect and verify operations, although the MCP