Preface

DeepSeek Harness (DSH) uses a plugin-based architecture and extends functionality to meet different workflow requirements. dsh-io/identity-sentinel is one such plugin; it verifies the operator’s identity by inspecting local machine signals. Its core behavior is: if the verdict is “non-Chinese,” it terminates all workflows.

Plugin Overview

  • Name: dsh-io/identity-sentinel
  • Author: dsh-io
  • Category: Workflow
  • License: MIT
  • Description: Performance-art dsh plugin: the machine inspects its owner; non-Chinese verdicts terminate all workflows.

How It Works

The plugin collects local signals at startup and makes no network requests. It generates a verdict through a weighted rule engine:
1. Collect signals: These include locale, timezone, keyboard layout, and region.
2. Generate verdict: If non-Chinese signals (mainland / Hong Kong / Macau / Taiwan) reach the threshold (default 2), termination is triggered.
3. Execute result: When terminating, it prints an art banner and manifesto, and the process exit code is 1; when passing, it only prints the banner and registers the system_identity tool.

Installation

Install via the dsh plugin manager:

dsh plugin add <path-to-this-package>

It can also be installed as a patch:

npx @deepseek-ai/dsh --profile web --patch <abs-path>/cordis.patch.yml

Note for pnpm users: An upstream peer fix is required. Add an override to pnpm-workspace.yaml:

overrides:
  "@deepseek-ai/dsh-type-meta": "npm:@deepseek-ai/dsh-invariants@0.0.1-rc.1"

Usage and Configuration

After installation, the plugin registers the system_identity tool, allowing queries of the machine’s current verdict about the operator. The core logic is also a zero-dependency pure function library and can be imported in other projects:

import {
  collectSystemLocale,
  collectTimezone,
  collectKeyboard,
  collectRegion,
  aggregateIdentity,
  decide,
  renderArt,
} from '@dsh-io/identity-sentinel'

Configuration options include:
* threshold: Non-Chinese signal threshold, default 2.
* artMode: Whether to print the art banner, default true.
* forceTerminate: Whether to actually exit the process, default true.

Notes

  1. Performance art: This is a performance-art work, not a security tool.
  2. Informed consent: Installing it means you have read and agree to the behavior described above.
  3. Dependencies: Dependencies include @deepseek-ai/cordis and @deepseek-ai/dsh-tools.
  4. Ambiguous signals: Ambiguous or undetectable signals do not count toward the threshold.

Summary

This plugin performs identity determination through local signal analysis, consistent with DSH’s zero-network-request philosophy. Developers should note that it is not positioned as a security tool, and that installation constitutes consent under the legal statement.

GitHub Repository