Asuna486-desuwa/dsh-safety-net

README excerpt

dsh-safety-net Self-protection guardrails for the DeepSeek Harness (DSH). When an agent runs autonomously, a wrong write can silently destroy the harness itself — this plugin makes that damage impossible by default and reversible by command . 中文文档见 README.zh-CN.md · Chinese docs live in README.zh-CN.md Why this plugin exists DSH's own runtime state lives in plain files under /.dsh (profiles, session state, patches) and under the plugin data directory. An agent that misreads its sandbox boundaries can write / edit those files, corrupt the harness, and leave you unable to start DSH at all. dsh-safety-net is the seatbelt: it hard-blocks mutations on DSH critical assets, snapshots files before refusing, and keeps a CLI recovery channel that works even when the GUI is gone. The four guardrails 1. Protected-path guard (hard interception) fs/write-intent and fs/edit-intent waterfall listeners hard-block any mutation that targets a DSH critical path. Protected by default: Rule id Path dsh-home /.dsh (the DSH data root, $DSH HOME override) plugin-data /.claude/plugins/data/dsh-deepseek-dsh profile-manifest / profile-patch /.dsh/profiles (profile manifests & patches) session-state /.dsh/stat…

Category