dsh-release-proof: Generating Reproducible Multi-Source Release Evidence for DeepSeek Harness

`dsh-release-proof` is an official Codex plugin and standalone stdio MCP server for DeepSeek Harness, designed to provide reproducible multi-source release evidence. It downloads all images from an explicit release manifest, verifies HTTP status, length, SHA-256, and version, and generates content-addressed JSON evidence files. The tool supports DSH tool invocation, MCP interfaces, and CLI commands, requires Node.js 22 or higher, and is licensed under MIT. Its security boundaries are strict, allowing only anonymous HTTP(S), prohibiting credentials or custom headers, limiting concurrency and response size, and evidence files contain no timestamps to ensure byte-level consistency. Notably, it only validates the expected values declared in the manifest and does not verify the publisher.