MkaliezZ/dsh-agentfuse-plugin

README 摘要

dsh-agentfuse AgentFuse is a fail-closed pre-dispatch policy boundary for AI agent tools, ported from the DHMS AgentFuse Python project to a DeepSeek Harness (DSH) guard plugin. Every model-directed tool call flows through the DSH tools/pre-execute waterfall. AgentFuse evaluates it against a deterministic denylist → allowlist → default policy, fails closed on block , and appends a durable agentfuse/decision session event carrying the canonical evidence — reason code, policy id, and a canonical arguments hash, never raw arguments . What it is / is not AgentFuse owns only the deterministic allow block decision and its evidence. It is not a process sandbox, malware detector, intrinsic danger classifier, or universal interceptor. Risk classification, approval, dispatch, and physical execution remain the integrating runtime's responsibility — the same boundary the Python dhms agentfuse documents. Config Policy resolution order (fixed, deterministic): 1. denyTools match → block ( explicit denylist ) 2. configured allowTools without the name → block ( not allowlisted ) 3. configured allowTools containing the name → allow ( allowed ) 4. defaultAction → allow / block ( allowed / policy deni…

分类