dsh-upstream-model-audit
dsh plugin: shows the model name the upstream actually reported for each assistant step, backfilling pi-ai replay metadata from a non-invasive fetch observer when the adapter omits it
456 results
dsh plugin: shows the model name the upstream actually reported for each assistant step, backfilling pi-ai replay metadata from a non-invasive fetch observer when the adapter omits it
Managed secret store for DSH Desktop. Operator-owned keys, injected into the assistant's shell as $DSH_* variables, with a settings-page panel and three operator-controlled access modes.
Cloudflare Access JWT verification and remote DSH privileged authorization
A Manual approval permission preset for DeepSeek Harness: every tool call is confirmed by the user, with the tool name, every argument, and an optional feedback message carried into the tool result.
Render settled ```mermaid fences in the dsh Web GUI chat as SVG diagrams, with strict security and a safe code-block fallback.
DSH 插件:AI学习 —— 会话输入区的四入口学习插件(初始预设 / 收集提炼 / 关联升级 / 沉淀复用),把「收集→提炼→关联→升级→沉淀→复用」方法论做成有交互引导、预设管理、知识审核入库与体系体检的运行时能力。
DSH 规则执行引擎 v3:容器解析 AGENTS.md + 理解器 + 匹配机 + 执行框架
macOS Keychain credentials provider for DeepSeek Harness (dsh) — refs and records both stored in the login keychain, never in a plaintext file
DSH 局域网密码门禁:手机/平板输密钥直连 3080,内置 randomUUID polyfill 与移动端登录页。
Reproducible DeepSeek Harness environments in one portable, secret-safe Stackfile
Dependency-installation guard for DeepSeek Harness: classifies package-manager commands as ALLOW, ASK, or BLOCK before execution.
Static security audit for dynamic Cordis plugins in DeepSeek Harness (DSH): rule-based source scanning, risk reports injected into tool results, and user-approval escalation before activating high-risk plugin packages.
Read-side SIEM forwarder for DeepSeek Harness: normalises session activity to OCSF and ships it
Data-loss-prevention plugin for DeepSeek Harness: a non-configurable tool guard floor, tool-result redaction, and fail-closed telemetry redaction
Pre-write reuse firewall for DeepSeek Harness: before the agent writes a new helper/service, surface the existing implementations that already cover that intent. Deterministic retrieval (no LLM) backed by the Auto_code_audit capability channel.
Egress policy for DeepSeek Harness: a host allowlist on web_fetch and web_search enforced at connect time, audit-mode by default, with OCSF Network Activity records
订阅审计
Agent 专用的 DSH 插件检索、审计、安装与验证工具桥;不提供可视化市场界面。
Offline content-addressed evidence that an approved Windows control-plane change settled across required surfaces
Offline content-addressed proof that a temporary policy waiver stayed within approved bounds
Offline DSSE/in-toto attestation evidence for DeepSeek Harness releases
Offline content-addressed proof for supplied credential-retirement closure
Installing-time safety gate for the DSH plugin market — scans npm / GitHub plugins before the market executes them. · DSH 插件市场安装安全检查:安装前自动检测三方插件风险,安全直接放行,有风险弹窗由你决定。
Preset-agnostic global tool masking for DeepSeek Harness — presentation-layer filtering plus execution-layer guard veto, with a WebUI editor and self-protection gate.