Introducing the DeepSeek Harness Plugin: dsh-auto-guard

The dsh-auto-guard plugin adds an LLM-based safety net to DSH's `danger-full-access` permission mode, aiming to balance operational convenience with security. It uses a tiered decision mechanism that prioritizes rules and caching to reduce token consumption, invoking the LLM for review only when necessary and thereby lowering the risk of accidental operations. The plugin includes features such as File Tracker, composite command decomposition, sensitive path gating, and Guard Memory, and supports encrypted audit logging. Users can enable it via the `Auto Guard` preset and customize rules. As a safety net rather than a sandbox, it uses a Fail-Closed mechanism to automatically reject dangerous commands when interactive confirmation is unavailable.