dsh-stack: Safety Guardrails for DeepSeek Harness’s Stacked PR
`dsh-stack` is a Cordis plugin for DeepSeek Harness designed to address the security risk of CI records becoming invalid when SHAs change during the rebasing of Stacked PRs. Through eight security checkpoints (such as environment validation, topology checks, and SHA binding verification), it enforces a full-lifecycle security policy from synchronization to merge cleanup, ensuring that the pre-merge test state is traceable and valid. As a complement to GitHub branch protection, the plugin supports custom test commands, while also noting that configuration changes may invalidate historical records.
Read Moredsh-stack: Reproducible DeepSeek Harness Environment Setup
`dsh-stack` is a plugin for DeepSeek Harness designed to address non-reproducible environments. By generating a JSON Stackfile that includes plugin order, versions, and configuration patches, it ensures a complete and portable environment context. The tool provides export, inspect, plan, and apply commands, supports secret placeholder management and checksum verification, and enables teams to review environment contracts before applying them, enhancing security.
Read More