dsh-egress-guard
Local, zero-network, fail-closed secret preflight for DeepSeek Harness model requests.
428 results
Local, zero-network, fail-closed secret preflight for DeepSeek Harness model requests.
Codex-inspired managed approval for DeepSeek Harness: risk-based MCP review, one-time grants, explicit denials, and human fallback on reviewer failure.
DeepSeek bills peak hours at 2x, and peak is 09-12 and 14-18 Beijing time. npx dsh-lean audit shows what your session paid and what it costs off-peak. DeepSeek 峰时按 2 倍计费,峰时正好是上班时间。
Agent governance suite for DeepSeek Harness (enterprise companion): policy-based tool gating (allow/deny/ask), structured JSONL audit trail, and per-agent token quotas against the host token meter — state under $DSH_HOME/gov
DSH-Plugin: structural observability layer — real tool/skill usage recording (tools/result), skill-catalog audit, and a watchdog with health/error events. No model self-reporting.
Project DeepSeek Harness tool, approval, and result facts into a bounded action lifecycle ledger.
DSH 危险命令守卫:通过 tools/pre-execute 门禁拦截 bash/pwsh 高危命令(rm -rf /、mkfs、dd 写设备、管道执行脚本、git push --force 等),支持分级策略(极高危始终拒绝 / 中危跟随全局 deny/ask/log)、用户自定义规则与白名单。
通用 HR 算薪 MCP 服务:本地化法定社保/公积金/个税计算引擎 + 通用表头适配 + 企业配置 + 安全绩效公式求值(PII 不出机)
DeepSeek Harness plugin: plants a canary string in model-visible context and denies any tool argument or outbound URL that echoes it back
Password-gated Sudo access permission mode for DeepSeek Harness
DeepSeek Harness 工具调用安全守卫插件:规则引擎拦截 + 路径白名单 + 敏感文件黑名单 + 人工审批 + 审计日志 + 侧边面板
A DeepSeek Harness Web plugin for inspecting redacted LLM HTTP request and response traces.
Configurable auto-approval for DeepSeek Harness: intercepts approval/request and answers allowed-once/rejected by policy (allow-all / allowlist / deny-always), with a full audit log — so the human is only asked when the policy says so.
DSH 权限预设 workspace-write++:工作区内写文件,可在设置里配置放行 Git Bash / PowerShell 等进程沙箱(修复 Windows ACL 下 MSYS 内存映射错误)。
Secure credential vault for DeepSeek Harness: store GitHub/npm/API tokens (secrets never leave the host), run gh/npm/npx/node/git with the token injected in the environment, and manage tokens from a Settings page.
Agent 专用的 DSH 插件检索、审计、安装与验证工具桥;不提供可视化市场界面。
Record and compare project development environments without storing secret values.
🛡️ DeepSeek Harness 高级安全认证网关:支持 Argon2id 密码、CSRF 保护、账户锁定、IP 访问控制、审计日志、会话管理、TOTP 两步验证及 WebAuthn/通行密钥预备。零配置启动,即装即用。
DSH (DeepSeek Harness) plugin that bundles the battle-tested 'safe plugin installation' skill: audit candidates, install one at a time, verify through five levels, and uninstall cleanly. Built from a real beginner's painful install journey.
Container-isolated backend for the DeepSeek Harness code-execution seam: Code Mode programs run in a fresh container with no network, a read-only rootfs, and kernel-enforced memory, CPU, and pid ceilings
文本脱敏:把文本中的邮箱/手机号/身份证/银行卡/IP/密钥等敏感信息替换为掩码,分享前保护隐私
Egress policy for DeepSeek Harness: a host allowlist on web_fetch and web_search enforced at connect time, audit-mode by default, with OCSF Network Activity records
Evidence-first inspection, compatibility verification, and quarantine tooling for DeepSeek Harness plugins.
北极星 (Polaris):通用能力聚合与择优进化层——异构嗅探、双轨竞技场、SLSA 出处、不可变索引与语义调度。