DeepSeek Harness Permissions Rule Engine: dsh-permissions

dsh-permissions is a rule engine plugin for DeepSeek Harness that enables fine-grained security control. It supports four priority levels, layered global and workspace scopes, and rule management through a visual editor. Core features include wildcard matching for file paths, interception by command prefix, and general permission hard-deny mechanisms. All rules are persisted and injected into system prompts, with built-in safe defaults protecting sensitive directories and commands. The plugin is designed to narrow the sandbox scope and provide low-cost, fine-grained policy management.