dsh-principal-binding-proof

In multi-tenant DSH deployments, a subtle risk lurks: some link in the execution chain quietly swaps its authority identity or tenant attribution while auditors remain unaware. dsh-principal-binding-proof addresses exactly this gap. It provides offline, content-addressed binding evidence across the full chain from principal through session, agent, tool call, runtime, to artifact, answering one precise question: does every redacted execution surface claim the same authority, tenant, and revision?

It validates explicitly recorded hashes, key epochs, issuer allowlists, validity windows, revocation status, chain adjacency, and unique acyclic ordering. It detects authority swaps, cross-tenant confusion, stale identities, broken or mis-typed bindings, unauthorized issuers, and terminal artifact mismatches. Importantly, it performs no authentication, authorization, or signature verification; it reads no credentials or business payloads and executes no commands. It does exactly one thing: verifies binding-chain integrity.

It is well suited to security and compliance teams that must audit identity-binding integrity across DSH execution chains, particularly in multi-tenant environments where every link must prove consistent authority claims. The plugin exposes dsh_principal_binding_inspect and dsh_principal_binding_verify as local checking tools. Workspace verification accepts only relative, non-symlink paths and emits a deterministic content-addressed report under an explicit artifactDir, followed by SHA-256 read-back verification.