dsh-riskproof
Provenance-aware execution and output security for DeepSeek Harness, with visible receipts and trusted declassification.
7 results
Provenance-aware execution and output security for DeepSeek Harness, with visible receipts and trusted declassification.
WebUI-managed encrypted credentials for DeepSeek Harness: one file, plaintext until a password is set, then AES-256-GCM ciphertext under an Argon2id-derived key with SHA3-256 fingerprints; per-request decryption, unlock lockout, leak-guard output redaction, and shipped-code integrity self-checks.
AI response quality review for DeepSeek Harness: audits each finished assistant turn with an independent reviewer model and steers the agent to fix unreasonable output (up to 2 review rounds).
Model-visible redaction plugin for DeepSeek Harness: redacts secrets from model input and output streams
Structured, machine-readable CI output for DeepSeek Harness (dsh): session event capture with JSON/NDJSON reports, JUnit XML, semantic exit codes, artifact collection and privacy redaction. Ships as a dsh profile bundle and a standalone CLI.
Content-addressed proof for body-free DSH tool-result custody stages
Indirect prompt-injection guard for DeepSeek Harness: taints tool output by origin and gates privileged tool calls that follow untrusted content