AuraxM/dsh-plugin-confirm-check

README 摘要

dsh-plugin-confirm-check Confirm Mode for the DeepSeek Harness (dsh): task-level permission instead of per-file gating. Before starting work that can permanently change something (code edits, config writes, git commits, installs, deletions, ...), the agent files one complete permission application - a short description of what it is about to do, which code paths it touches, and which mutating capabilities it needs. After the user approves, everything inside that direction runs uninterrupted. A background observer only compares later actions with the grant and reports drift through the system prompt. Nothing is ever blocked: Confirm Mode trusts the model and controls the overall direction, it does not gate individual operations. What needs an application Action Needs application Read files, glob/grep, web search No Write plans/notes/documents (.md/.txt/.log/.plan/.notes/.adoc/.rst/.org) No Edit code/config files (write/edit of anything else) Yes Mutating commands (git commit/push, npm install, deletions, ...) Yes Read-only commands (git status/log/diff, ls, Get- , ...) No Drift = a mutating action outside the declared direction (a write outside the declared paths, or a mutating comm…

分类