dsh-policy-drift-proof
Run the following command in DeepSeek Harness:
dsh plugin install dongsheng123132/dsh-policy-drift-proof
Paste the following prompt into your AI chat to install this plugin:
To install this plugin in DeepSeek Harness, run the command: dsh plugin install dongsheng123132/dsh-policy-drift-proof. The source code repository is at: https://github.com/dongsheng123132/dsh-policy-drift-proof
About this plugin
In DeepSeek Harness environments, unintended drifts in policy configurations can pose security risks or operational inconsistencies. dsh-policy-drift-proof is a read-only, content-addressed evidence tool designed to detect such drifts. It pins baseline and observed policy snapshots via SHA-256 hashes and revisions, classifying differences automatically—whether they are weakening, tightening, exact, or unclassified. The tool generates concise reports containing only paths, classifications, and digests, never exposing sensitive policy values. With a verifier that avoids network calls or subprocesses, it ensures lightweight and secure operation. Ideal for administrators, security teams, and DevOps personnel, this plugin supports daily audits, compliance checks, and continuous monitoring to maintain policy consistency and stability.
Use Cases
- Monitor real-time drift in policy configurations
- Verify consistency of policies before and after deployment
- Generate policy difference reports for auditing
Best For
- System administrators responsible for policy management
- Engineers performing security audits
- DevOps teams maintaining infrastructure
Related Plugins
A network security red-team benchmark plugin for DeepSeek-V4.1/Flash featuring dual-layer kernel injection and zero-tool architecture for controlled model safety assessment.
A security red-team prompt plugin for DeepSeek-V4 that uses code-formal mapping and zero-trigger system prompts to enable unconditional output, intended for authorized testing and research only.
Adds an Auto approval mode on the official workspace-write sandbox, classifying semantic risks, asking when ambiguous, and denying destructive operations.
Undo/rollback system for DSH: config & plugin snapshots, one-click undo/redo/restore, message-level revert, secret masking, safe mode, and offline WebUI/GUI/CLI rescue tools for when DSH won't start.