tancheng33/dsh-egress-guard

README excerpt

dsh-egress-guard English 中文 A runtime security gate for DeepSeek Harness tool calls. Existing security plugins in the ecosystem scan configuration files before an agent runs. This one sits in the tool-execution pipeline and acts on the calls themselves: Rule Extension point What it does Egress allowlist tools/pre-execute Denies (or asks about) a call that names a network destination outside your allowlist — curl to a paste site, git push to an unknown remote, a fetch to an exfiltration endpoint. Secret redaction tools/post-execute Rewrites credentials out of a tool result before the model, the durable session log, or a Code Mode program can read them. Audit log both waterfalls Appends every decision — including the ones monitor mode only would have made — to a JSONL file. No fork, no patched loop: three listeners on documented extension points, disposed cleanly on unload. Install The bundle ships mode: monitor , so installing it cannot break a working setup : every rule is evaluated and audited, nothing is blocked or rewritten. Read the audit log for a day, then turn on enforcement in your profile's cordis.patch.yml : A patch replaces a row's whole config , so restate every key you…

Category