onlyqzq/dsh-riskproof

README excerpt

RiskProof Provenance-aware execution security for DeepSeek Harness. Track where tool inputs came from. Detect risky cross-tool data flows. Stop sensitive side effects before execution. English · 简体中文 What RiskProof answers Most tool-permission plugins answer one question: is this tool allowed? RiskProof answers a different one: Where did the data in this tool call come from, what did it flow through, and where is it about to go? A single tool call is usually safe. The composition is not. Why RiskProof Permission rules RiskProof Is this tool allowed? Where did this data come from? Single call Cross-tool flow Tool name Provenance + taint Static rule Stateful attack chain Permission decision Evidence-backed execution decision RiskProof is a layer over the DSH Tool Runtime, not another Agent Runtime. It never re-implements tool dispatch, approval, or lifecycle — it observes and decides. Quick Start The package declares a DSH bundle, so plugin add composes its riskproof row automatically. No second install or manual row is required. The schema defaults are safe; RiskProof silently tracks context and only asks or blocks when a risky cross-tool flow appears. To tune it, override the bundl…

Category