DeepSeek Harness Plugins · admin-security
Plugins that extend DeepSeek Harness (DSH) with vision, workflows, memory, web tools and more.
A commitment-based write gate for DeepSeek Harness that enforces operator-authored constraints via deterministic and semantic tiers before any tool call executes, logging every violation.
Unattended full-access window for DeepSeek Harness: one-command no-approval sandbox with auto-expiry, catastrophic-command tripwire, and completion notifications.
Provides DSH commands to remove project registrations and delete persisted sessions, with a Web UI management panel and confirmation dialogs for destructive actions.
Adds a login gate to dsh-web with multi-user management, scrypt-hashed encrypted storage, brute-force protection, and session isolation as a pure Cordis plugin.
Zero-dependency login authentication for DeepSeek Harness Web GUI, supporting password, Solana/EVM wallet, and generic OAuth 2.0 login with unified session management and revocation.
dsh-compact-after-task is a DeepSeek Harness admin-security plugin for post-task compaction.
Shared policy contract for governance Phase 1-2: defines policy schema, preset base classes, and MCP init defaults for unified consumption by other plugins without tool interception.
Out-of-process recovery console for DeepSeek Harness: probes failures in isolated temp homes, finds verified minimal Bundle-removal plans, and gates recovery on confirmed evidence.
Transparent API key rotation, pre-emptive rate-limiting, and cross-provider failover engine for DeepSeek Harness, ensuring stable high-throughput agent workflows.
Layered permission gate that intercepts tool calls and MCP services in Claw sessions, with approval flow, skill denylists, and audit log export.
Read-only session plugin for DeepSeek Harness: no workspace, no shell or write tools, with per-call file access control and a permanent structural lock.
Dependency supply-chain hygiene audit for dsh plugins, verifying peer resolvability, dist-tag consistency, version drift, licenses, non-registry sources, and staleness.