Introduction

In the DSH workflow, when an agent says “looks good”, it does not equate to a verifiable judgment; a green lint result does not directly mean it is ready for release. falsify-dsh addresses this gap: it does not wrap the agent’s judgment as a second opinion, but packages the public Falsify CLI as a DSH tool, invoking python -m falsify, and then returns the receipt provided by the CLI.

What is it

One-line Summary

shi275773124/falsify-dsh is an adapter for DeepSeek Harness (DSH) to interface with the public Falsify CLI. Its output is a receipt of PASS / PASS_WITH_DEBT / BLOCK, rather than letting the agent provide the final conclusion.

Maintenance and License

  • Maintainer: shi275773124
  • License: MIT
  • Repository: https://github.com/shi275773124/falsify-dsh

Core Features

The plugin provides three tools, corresponding to the public Falsify CLI’s lint, review, and gate.

falsify_lint

Invokes:

python -m falsify lint

Returns:

  • L2_CLEAN / L2_DIRTY
  • Static tags
  • Blocker markers

This tool is positioned as a static check and does not replace a full review.

falsify_review

Invokes:

python -m falsify review --json

Returns:

  • PASS
  • PASS_WITH_DEBT
  • BLOCK

This is an epistemic document review.

falsify_gate

Invokes:

python -m falsify gate --json

It is used as a public gate receipt. production / quant will fail closed without the Pro adapter.

Scope of Judgment

The plugin is only responsible for:

  1. Providing paths
  2. Running python -m falsify
  3. Returning the receipt

The agent does not select the verdict. The adapter will not invent PASS on its own; if the CLI is missing, the result is CLI_ERROR, not a silent green.

Installation and Usage

Requirements

  • Public Falsify CLI: Python 3.12+
  • DSH Node: ^22.19.0 || >=24.0.0
  • Public Falsify CLI version: >=0.6.0

Installation Steps

First, install the public Falsify CLI:

pip install "falsify @ git+https://github.com/shi275773124/Falsify.git"

Then, add the plugin:

dsh plugin --profile web add "github:shi275773124/falsify-dsh#v0.1.0"

Finally, restart the profile:

dsh --profile web

Options

If the default python is not the interpreter where Falsify is installed, you can configure python / FALSIFY_PYTHON so that DSH calls the correct Python environment.

Typical Usage

After installation and enabling, you can directly tell the agent:

  • falsify this file
  • gate this PR

You can also invoke the tools directly:

falsify_lint
falsify_review
falsify_gate

Use Cases and Notes

Who is it for

Suitable for developers who want to call the public Falsify CLI within a DSH profile. It fits the following use cases:

  • Performing static checks on a single file
  • Performing epistemic review on documents
  • Generating gate receipts for PRs or files
  • Obtaining a clear receipt in an agent workflow instead of relying on free-text judgment

Runtime Permissions

The plugin runs as part of the DSH profile and inherits the permission environment of the current dsh process. Its specific behaviors include:

  • Spawning local Python processes: python -m falsify ...
  • Reading the subject file or a temporary copy
  • Writing a temporary JSON file for falsify_gate --json
  • Forwarding existing provider API keys in the environment
  • Not uploading the receipt
  • Not opening network sockets on its own
  • Not claiming production authority

Therefore, check the source code, dependencies, and license before installing.

Configuration

The following are the plugin-related configuration items and environment variables:

Configuration Item / Environment Variable Description
python / FALSIFY_PYTHON Specifies the interpreter capable of running python -m falsify
timeoutMs / FALSIFY_DSH_TIMEOUT_MS Timeout control
DEEPSEEK_API_KEY / OPENAI_API_KEY / ANTHROPIC_API_KEY Passed through to the public CLI for review
FALSIFY_PROVIDER / FALSIFY_MODEL / FALSIFY_BASE Optional defaults for the CLI

Review is BYOK. No Falsify cloud key.

Limitations

  • DSH is currently in developer preview and iterates quickly; compatibility-breaking changes may occur.
  • There is currently no frozen DSH SHA runtime proof; available are static contracts and wrapper tests.
  • production / quant gate BLOCK is expected behavior under the public CLI; Pro adapters are closed.
  • falsify_lint returning L2_CLEAN / L2_DIRTY is merely a static tag, not equivalent to a release judgment.
  • The adapter does not pretend a missing CLI is PASS; it returns CLI_ERROR when missing.

Conclusion

The value of falsify-dsh lies in putting the verdict back into the CLI: the agent can invoke it but cannot rewrite the receipt; the plugin is responsible for connecting the public Falsify CLI, not for making the final ruling on behalf of the user.

Repository: https://github.com/shi275773124/falsify-dsh
Directory page link: https://www.skillhub.cn/plugins/shi275773124/falsify-dsh (This URL comes from the plugin link, not directly appearing in the scraped content)