Introduction

When using DSH to build agent workflows, interaction with the CORTEX task-pool server requires token authentication. Directly exposing the CORTEX command surface poses security risks. Cortex Harness Open provides an intermediate layer that forwards authenticated requests from the host-side DSH Web environment to the CORTEX server, while keeping the CORTEX kernel logic authoritative.

Positioning and Features

This is an open-source project that releases the CORTEX Harness protocol, architecture, and reference tools. Core features include:

  1. Publishing an installable DSH Web bridge.
  2. Adding a host-side /cortex command surface to DSH Web.
  3. Forwarding authenticated loopback requests to a running CORTEX task-pool server.
  4. Keeping CORTEX Kernel, leases, replay, receipts, and completion decisions authoritative on the CORTEX side.

Installation and Enablement

The plugin package name is cortex-dsh-web-command. The installation command is as follows:

dsh plugin --profile web add cortex-dsh-web-command

When installing from source, use an absolute path:

dsh plugin --profile web add file:/absolute/path/to/packages/dsh-web-cortex-command

Scenarios and Considerations

  • Permissions and Security: This plugin runs with the current DSH process permissions. Browser input never carries a CORTEX token.
  • Data Boundary: It does not include OB1 vault, private records, credentials, local databases, generated evidence, or internal runtime state.
  • Release Status: npm publishing and DSH catalog readback are independent release gates and should only be claimed when fresh evidence exists.

Summary

This plugin provides a reference implementation of the CORTEX Harness protocol for securely bridging a CORTEX server in a DSH Web environment.