Bundledsh-guardianDangerous-operation policy, canonical output redaction, and security review for DeepSeek Harness.lonelymoon871