dsh-windows-settlement-proof
Run the following command in DeepSeek Harness:
dsh plugin install dongsheng123132/dsh-windows-settlement-proof
Paste the following prompt into your AI chat to install this plugin:
Run dsh plugin install dongsheng123132/dsh-windows-settlement-proof inside DeepSeek Harness to install this plugin; the full source repository is at https://github.com/dongsheng123132/dsh-windows-settlement-proof .
About this plugin
Once a Windows control-plane change is approved, teams often face an evidence gap: the ticket says done, yet no independent, offline artefact proves that the Service Control Manager, Task Scheduler, Event Log, and policy projections have all actually converged. dsh-windows-settlement-proof fills that gap without executing a single system command, reading any service definition, task XML, or business payload. It simply compares redacted receipts against a fixed hash lock, chronology, freshness, and restart-epoch policy, then emits one content-addressed settlement report.
The workflow centres on two tools: dsh_windows_settlement_inspect for inline, read-only metadata inspection, and dsh_windows_settlement_verify to validate a workspace-relative manifest and write a single report beneath an explicit artifact directory. Both are also exposed over MCP without filesystem side-effects, and the CLI returns exit codes 0, 1, and 2 for settled, unsettled, and invalid-input verdicts respectively.
It is built for platform-engineering, security-compliance, and change-management teams that need an independent, tamper-evident convergence artefact in their audit chain, and for any operator who wants maximum audit coverage with minimum privileges.
Use Cases
- Proving a closed change ticket actually settled across all Windows control-plane surfaces
- Verifying services, scheduled tasks, and policies survived a required restart epoch during audit
- Compliance checks demanding read-only, offline comparison of redacted receipts across multiple surfaces
Best For
- Platform engineering teams
- Security compliance and change management leads
- Ops engineers who need maximum audit coverage with minimum privileges
Related Plugins
Adds an Auto approval mode on the official workspace-write sandbox, classifying semantic risks, asking when ambiguous, and denying destructive operations.
Undo/rollback system for DSH: config & plugin snapshots, one-click undo/redo/restore, message-level revert, secret masking, safe mode, and offline WebUI/GUI/CLI rescue tools for when DSH won't start.
Packages all 87 SKILL.md files from upstream reverse-skill as a DeepSeek Harness plugin that auto-registers them for authorized reverse engineering, penetration testing, and security research.
Dockyard DSH is a native DeepSeek Harness plugin that unifies official OAuth/client sessions for Codex, Antigravity, Grok, Claude, and Cursor, providing account pool, model catalog, and quota status.