dsh-schema-migration-proof

After a DeepSeek Harness schema migration ships, teams often lack an offline, reproducible evidence trail to prove the migration behaved as intended. dsh-schema-migration-proof closes that gap: it never executes a migration or touches data bodies. Instead it performs a content-addressed audit of pinned migration fixture envelopes and produces a structured pass or fail verdict, turning the audit itself into a deliverable.

The plugin scores five core checks: output determinism under fixed-fixture reruns, idempotency, reversible-rollback proof, required-invariant verification, and per-field lossy-loss disclosure for lossy migrations. Any invariant that is missing, failed, or unobserved fails closed. A lossy fixture must enumerate every disclosed loss field or the verdict is fail. The manifest carries only stable IDs and SHA-256 digests; body, payload, secret, credential, prompt, and message-shaped fields are rejected outright, ensuring the evidence package cannot introduce sensitive content.

Security and compliance teams, ops leads, and DSH administrators who must produce migration audit reports or hand evidence packages to external auditors without touching production data are the primary audience. If you already run dsh-recovery-proof for restore drills and dsh-surface-contract-proof for contract comparison, this plugin completes the migration-evidence side of the triad.