Introduction

In DeepSeek Harness (DSH), workspace instruction files affect the session. When a nested-workspace boundary or an instruction budget incident occurs, you need to first confirm which AGENTS.md / CLAUDE.md files actually entered a session, rather than relying solely on guessing.

dsh-instruction-audit is designed for this scenario, providing privacy-minimal receipts for DeepSeek Harness workspace instructions.

What is this

dsh-instruction-audit is an independent community bundle, not an official DeepSeek AI package. It observes the durable agent-instructions message source that Harness has already sent and records receipts based on that.

The repository address is https://github.com/1052326311/dsh-instruction-audit.

Core Features

  • Records receipts of workspace instruction files that DeepSeek Harness actually placed into a session.
  • Observes the durable agent-instructions message source.
  • Each receipt includes session id, event sequence/time, baseline flag, logical scope, display path, action, and producer-owned content digest.
  • Does not read instruction files, does not save instruction text, does not modify the workspace, and does not change prompt assembly.
  • No runtime npm dependencies, and uses the existing Cordis context provided by the active Harness process.
  • Can be used to audit which AGENTS.md / CLAUDE.md files affected the session, including during nested-workspace boundaries or instruction budget incidents.
  • Provides a CLI for reading receipts of a session.

Installation and Usage

The installation example provided by the repository is to pack first, then install the packed tarball to the web profile:

pnpm install
pnpm pack
dsh plugin --profile web add ./dsh-instruction-audit-0.1.1.tgz

By default, receipts are written to $DSH_HOME/instruction-audit/v1/. The filename is the SHA-256 hash of the session id; the session id is still saved in each JSONL receipt.

If you need to write receipts to a different directory, you can configure:

- id: instruction-audit
  config:
    receiptRoot: /absolute/path/to/receipts

Typical Usage

Reading receipts for a session:

dsh-instruction-audit --session session-123

Applicable Scenarios and Notes

Suitable for use in the following situations:

  1. Need to confirm which AGENTS.md / CLAUDE.md files actually took effect in a session.
  2. After a nested-workspace boundary or instruction budget incident occurs, need to view structured source records.
  3. Want to preserve minimal privacy evidence instead of retaining the instruction text.

Notes:

  • Receipts only prove that Harness recorded the structured source, not that the model followed the instructions.
  • producer-owned content digest does not constitute a security boundary.
  • --dump-config only proves that this layer can be composed.
  • It uses the existing Cordis context provided by the current Harness process; it is recommended to check the repository source code and the MIT license before installation.
  • Version 0.1.1 has been verified against DeepSeek Harness source revision 47f943859bef60e4160492346772ded9b24f765a.

Conclusion

If you need minimal trace evidence for DeepSeek Harness workspace instructions, dsh-instruction-audit provides a plugin entry point that does not read files, does not save instruction bodies, and allows querying receipts for a single session via CLI.

Repository address: https://github.com/1052326311/dsh-instruction-audit