dsh-policy-waiver-proof

In DeepSeek Harness workflows, temporary policy waivers let tools operate under bounded conditions, yet after a waiver is issued there is often no offline, reproducible way to prove that every recorded invocation actually stayed within the approved subject, revision, scope, action allowlist, time window, and use-limit budget, with compensating controls still fresh.

dsh-policy-waiver-proof fills that gap as a deterministic evidence layer. It reads a single explicit JSON manifest and verifies each recorded use for contiguity, presence inside the waiver window, full binding match, adherence to maxUses, ordering before any revocation or closure, and currency of compensating controls. A single violation yields a breached verdict; missing or stale evidence is never silently inferred. Reports carry only hashes, counts, booleans, hash-transformed public bounded IDs, and machine-readable verdicts, while raw business bodies and secret-shaped material are rejected outright. The plugin exposes two tools, inspect and verify; the verify artifact is named after the SHA-256 of its canonical byte stream, created exclusively and confirmed by read-back, with zero network access and no runtime dependencies.

It is built for teams that must audit the full lifecycle of a temporary policy exception. After dsh-tool-policy evaluates pre-execution rules, dsh-policy-drift-proof detects configuration drift, and dsh-decision-effect-proof reconciles decisions with effects, this plugin closes the loop by confirming that every use before revocation or expiry remained inside its approved boundary, and that denied attempts were disclosed without consuming the approved quota.