dsh-action-ledger

DSH sessions accumulate a stream of discrete machine facts around every tool call—the request, the approval state, the result—yet none of that forms a single human-readable timeline. AgentFuse answers whether a call may proceed; dsh-action-ledger answers which lifecycle states DSH durably recorded around that call. It is a read-only projection layered over existing DSH session facts, introducing no new standalone event types and requiring no patching of the generated event catalog.

The projected ledger unfolds in deterministic order: requested, approval-requested, approved or denied, completed or failed. Output is strictly bounded, raw tool arguments are never copied into the ledger, no tool dispatch is triggered, and no source mutation occurs. When a lifecycle node is absent from DSH facts, the ledger does not fabricate it; it only presents the nodes DSH actually recorded and makes no inferences beyond those facts.

It is built for engineers who build or debug agent workflows on DSH and need to audit the full approval-and-execution trail of a tool call, or replay what actually happened rather than what was merely permitted. It is not a replacement for DSH session persistence and not an authorization system; it is a faithful, bounded mirror of the facts already on record.