dsh-smart-approval

In DeepSeek Harness, the approval pipeline traditionally couples sandbox access with the review mechanism: you either allow everything or route every request to a human. dsh-smart-approval decouples the two. DSH continues to own Read Only, Workspace Write, and Full access, while this plugin adds an independent Automatic Review selector beside Workspace Write, so you can tune the review strategy without touching the sandbox.

The plugin offers three review modes. Manual approval routes every request to a human. Smart approval, the recommended default for new sessions, lets safe requests pass automatically, escalates high-risk or uncertain ones to a human, and rejects clearly malicious ones. Unattended mode allows safe requests and rejects everything else. The design is fail-closed by principle: the review layer only narrows permissions, never expands them, and never promotes a session to Full access. Switching modes or adjusting access takes effect on the next approval request with no DSH restart required.

This plugin is well suited for developers and operators who run automated workflows but still want a safety net: everyday operations stay unobstructed, high-risk actions still get human oversight, and unattended or CI environments benefit from a predictable, deny-by-default policy.