DeepSeek Harness Plugin: dsh-jev-guard

dsh-jev-guard is a security plugin for DeepSeek Harness (DSH), designed to prevent agents from accidentally deleting or overwriting user data. It uses L0 static hard rules and the TypeSafe Jev model to perform a three-stage evaluation—hard rules, pre-filtering, and semantic judgment—before Shell command execution. Based on the evaluation, the system returns one of four states: allow, revise, block, or escalate, providing interception, rewriting, or human confirmation capabilities. The plugin supports WSL/Linux and Windows; after installation, it can be debugged and monitored via CLI, and it adopts a fail-open design to ensure system availability.