dsh-stack: Safety Guardrails for DeepSeek Harness’s Stacked PR
`dsh-stack` is a Cordis plugin for DeepSeek Harness designed to address the security risk of CI records becoming invalid when SHAs change during the rebasing of Stacked PRs. Through eight security checkpoints (such as environment validation, topology checks, and SHA binding verification), it enforces a full-lifecycle security policy from synchronization to merge cleanup, ensuring that the pre-merge test state is traceable and valid. As a complement to GitHub branch protection, the plugin supports custom test commands, while also noting that configuration changes may invalidate historical records.
Read Moredsh-airbag: A Non-Intrusive Safety Guardrail for DeepSeek Harness
`dsh-airbag` is a non-invasive security plugin developed specifically for DeepSeek Harness (DSH), designed to intercept API key leakage. Its core features include: detecting and blocking (or redacting) pasted sensitive keys on the client side; intercepting key writes within model tool calls; providing an initial workspace security health check; and managing approval fatigue via a notification center. The plugin follows a privacy-first policy, ensuring plaintext keys are not written to disk or logs, and allows developers to customize interception rules through a configuration file.
Read Moredsh-automode: Adding an auto mode with deterministic guardrails to DeepSeek Harness
To enable an agent to execute tasks continuously, there are typically only two permission options available: using a conservative preset that halts for manual confirmation at every write operation, or switching directly to danger-full-access. While the latter is faster, it grants the agent unrestricted autonomy without any safeguards if issues arise. DeepSeek Harness (DSH) permission presets—read-only, workspace-write, and danger-full-access—exist at these two extremes, lacking a middle tier that is "loose but has gatekeepers for dangerous actions." The dsh-automode introduced below fills this gap: it is a DSH plugin that provides a Claude Code-style auto mode, allowing...
Read Moredsh-safety-net: Adding self-protection guardrails to DeepSeek Harness
dsh-safety-net is a self-protection plugin for DeepSeek Harness (DSH), designed to prevent agents from mistakenly modifying critical files that could lead to system crashes. Its core capabilities include hard-intercepting write or edit operations on protected paths, automatically backing up the original file to a specified directory prior to modification, and providing a suite of CLI self-recovery commands. By default, the plugin enables strict mode, declares a read-only sandbox policy, and issues alerts when the host sandbox configuration is deemed too loose. Users can install the plugin using `dsh plugin add`, which requires Node.js ≥ 20 and depends on specific libraries provided by the DSH host runtime. Typical usage includes checking status, manual backup, restoring specific backups, fixing missing files, and granting one-time write permissions. Built-in protected paths cannot be removed via configuration, while additional paths are only supported at runtime.
Read More