shuxue6662-a11y/dsh-risk-guard

README 摘要

dsh-risk-guard Zero-interruption audit + fuse blocking for DeepSeek Harness (dsh). Tested against dsh 0.1.0-rc.6 (npm next tag). dsh is in developer preview and ships compatibility-breaking changes; keep the @deepseek-ai/ versions of your host and this plugin aligned (see Troubleshooting). What it does dsh-risk-guard is a silent flight recorder + insurance fuse for your agent. It never adds approval dialogs, never changes your permission preset, and never touches the sandbox. It: 1. Records every tool call (name, redacted arguments, success/failure, risk tags, explainable risk score) into local JSONL files. 2. Scores risk deterministically — no LLM calls, no extra API cost. Rules cover destructive deletes, credential reads, network egress, writes outside the workspace, dependency installs, and heavy builds; a cumulative bonus catches rapid repeats and consecutive high-risk calls. 3. Blocks only irreversible catastrophes with a monotonic fuse guard: protected-path deletion, disk wipe/format, force-push to protected branches, and network commands referencing credential files. A blocked call fails with a clear reason; you can disable the fuse entirely. 4. Renders an operation bill wit…

分类