dsh-auto-approval: A Guardian-Style Auto-Approval Plugin for DeepSeek Harness

The `dsh-auto-approval` plugin adds a Guardian mode to DeepSeek Harness (DSH) by using an LLM subagent to assess risk and validate local state before operations. Its core features include session analysis, local filesystem validation, and a four-field adjudication mechanism designed to automatically allow low-risk actions and only prompt for confirmation when the outcome is uncertain. After installation, users must restart DSH and enable the feature via the interface or configuration. It supports a fail-closed security design. When using it, note that the model must support Function Calling, and because the adjudication tool can read absolute paths, it should not be enabled on shared machines.