dsh-dlp: DeepSeek Harness Data Loss Prevention Plugin

`dsh-dlp` is a Data Loss Prevention plugin for DeepSeek Harness, designed to intercept credential requests, redact sensitive information, and limit potential risks. Its core features include unconditionally denying access to credential files, redacting tool results and telemetry, detecting payment card numbers and invisible characters, and detecting tool-call rewriting. The plugin offers Low, Medium, and High aggressiveness levels and supports audit logging and pre-write confirmation. Installation is simple and requires configuring key files and redaction toggles. Note that the plugin runs in-process, intercepts only model tool requests, cannot prevent already-running code, and may be bypassed.

Read More