dsh-risk-gate: A DeepSeek Harness Plugin for Semantic Auto-Grading and Progressive Authorization

The `dsh-risk-gate` plugin in DeepSeek Harness provides a local semantic analysis–based mechanism for operation tiers and progressive authorization. It classifies tool calls into safe, risky, and redline levels, then automatically enforces allow, ask, or deny actions without relying on external LLMs. It supports regular-expression checks for Bash commands, enables quiet automatic pass-through via configurable thresholds, and can override behavior for specific tools. This solution is well suited to quickly building a lightweight security control layer within the DSH ecosystem.