dsh-riskproof
See what your AI agent protected: session security receipts, visible data provenance, task boundaries, and tool identity checks for DeepSeek Harness.
9 results
See what your AI agent protected: session security receipts, visible data provenance, task boundaries, and tool identity checks for DeepSeek Harness.
Correctover runtime security for DeepSeek Harness (DSH): CCS 7-dimension verification, command-injection/SSRF/credential-exfil blocking, Ed25519 receipts, audit-first. Install with `dsh plugin add dsh-correctover`.
Observe-only hash-chained evidence receipts for DeepSeek Harness
Content-addressed receipts for skills actually loaded by DeepSeek Harness
Privacy-minimal provenance receipts for DeepSeek Harness workspace instructions
Ask DeepSeek to falsify a file or gate a PR. Receipt: PASS / PASS_WITH_DEBT / BLOCK. Adjudicator, not a second opinion. Green lint is not a ship.
AI Agent runtime authorization & evidence verification — tool-call GuardrailProvider, CCS 7-dimension verification standard, MCP/DSH security scanner, SSRF/command-injection/credential-exfil blocking with Ed25519 signed receipts.
DeepSeek Harness plugin: a citable append-only JSONL of filesystem touches — path, op, sha256 before and after — carrying no file contents
Durable agent-to-agent mailbox for DeepSeek Harness: any MCP client or DSH session can address any other. Threads, receipts, search, broadcast, edit/withdraw, reactions. Local-only, zero dependencies, secrets redacted on ingest.